$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/addfda24-421e-4b45-80e1-dd5a255777c5.roa File: addfda24-421e-4b45-80e1-dd5a255777c5.roa (raw, json) Hash identifier: uA6d03G2JKmINjt6UFwjmL4uBPXxFyF9bV+fCNcx78A= Subject key identifier: 9D:E3:C4:FB:92:66:6E:1D:F1:75:E8:49:3C:3A:85:AD:70:70:08:E2 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 4C2A1E0779045AABE98172BE119B51CE6159CA47 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/addfda24-421e-4b45-80e1-dd5a255777c5.roa Signing time: Mon 21 Jul 2025 15:21:17 +0000 ROA not before: Mon 21 Jul 2025 15:21:17 +0000 ROA not after: Mon 25 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.251.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:2a:1e:07:79:04:5a:ab:e9:81:72:be:11:9b:51:ce:61:59:ca:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Jul 21 15:21:17 2025 GMT Not After : Aug 25 23:59:59 2025 GMT Subject: serialNumber=05536d9075a5edac683a38c26e17f5fea9f57efcdbb8952ef298f129fd094619, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ca:d7:0c:a6:c5:0f:37:97:e2:62:27:25:42: a0:79:fe:d1:09:dc:51:52:ed:61:1f:0a:39:76:16: 84:a3:26:38:c7:64:f7:19:17:b5:1b:1f:f0:1f:d9: 4c:87:2e:38:1c:ec:81:b7:8f:01:c8:ff:37:f9:16: 79:34:c9:43:ca:ff:68:76:20:24:6b:5b:b2:1a:c0: 0c:7f:1d:74:70:cb:b0:9b:16:de:0e:2a:58:a9:bb: 9f:6a:37:2e:eb:84:60:a3:81:b6:1e:5f:81:7b:32: 66:c4:dd:64:86:1b:21:3c:9d:b9:0d:92:53:51:d5: e3:58:dc:64:5c:f8:b3:6b:2b:d1:af:3e:a3:8d:a3: 9f:9e:8f:23:ca:b0:5d:9b:d5:d7:b0:a7:79:a4:a4: 8f:5f:41:c7:7b:a0:62:d4:7b:ba:d2:cf:44:c9:34: f8:b4:58:6b:5b:27:f4:95:bf:3a:8b:c8:ef:63:02: e5:60:84:b3:6a:ca:ab:1f:a2:61:67:60:8d:8e:d3: 6c:5f:ce:fb:14:7b:9b:3d:29:27:ac:cd:20:c7:9f: f5:3d:6f:00:44:dc:08:5b:1e:3d:f5:30:63:b4:14: f9:8b:9c:68:4b:e1:6f:8b:29:f7:2b:7d:cb:25:e9: 4f:1a:2c:2f:07:df:9d:73:83:9f:32:d9:77:5d:05: cc:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:E3:C4:FB:92:66:6E:1D:F1:75:E8:49:3C:3A:85:AD:70:70:08:E2 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/addfda24-421e-4b45-80e1-dd5a255777c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.251.228.0/22 Signature Algorithm: sha256WithRSAEncryption 42:96:6b:bd:f6:e5:0c:16:b6:e3:10:b2:00:f4:73:7f:80:ea: c3:54:00:42:0f:31:03:15:30:75:9e:ad:e0:75:ae:4a:7a:7a: 26:43:37:74:77:29:32:68:ae:38:41:b7:db:80:c9:2f:21:35: f2:be:8c:af:50:5c:26:49:99:53:bf:00:a8:8e:bd:88:e6:d2: e7:4c:94:f4:43:b8:0e:9e:73:64:a9:03:b5:91:b0:b0:51:55: 49:05:b6:21:6c:f2:3d:30:1b:ec:0c:9c:74:66:1c:3b:3f:5c: ba:f4:af:d0:63:53:be:31:8f:60:d5:4c:0b:59:48:9d:72:a2: 1c:23:e5:1a:81:95:47:1b:12:26:af:ef:8b:96:2e:7d:a1:db: b4:ba:fc:ff:89:e8:09:e5:30:5c:65:65:d0:e7:db:15:be:31: 86:6b:cc:9c:d6:c8:60:1b:e1:f1:99:35:81:36:22:c1:00:1c: 8d:a2:d3:ef:1d:c1:be:14:44:c0:9c:26:c1:ef:d0:ce:fe:62: 85:1c:11:63:a3:ca:6f:87:1d:57:7a:2b:0c:29:33:0b:45:cb: 91:78:c5:f4:6d:af:53:77:5b:4d:6f:1a:0c:7f:d8:95:b0:dc: 93:0b:ff:fa:d7:0a:6b:b1:68:42:db:d9:08:4b:49:5d:2f:86: 10:cb:a4:60 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTCoeB3kEWqvpgXK+EZtRzmFZykcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNzIxMTUyMTE3WhcNMjUwODI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AwNTUzNmQ5MDc1YTVlZGFjNjgzYTM4YzI2ZTE3ZjVmZWE5 ZjU3ZWZjZGJiODk1MmVmMjk4ZjEyOWZkMDk0NjE5MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCVytcMpsUPN5fiYiclQqB5/tEJ3FFS7WEfCjl2FoSjJjjH ZPcZF7UbH/Af2UyHLjgc7IG3jwHI/zf5Fnk0yUPK/2h2ICRrW7IawAx/HXRwy7Cb Ft4OKlipu59qNy7rhGCjgbYeX4F7MmbE3WSGGyE8nbkNklNR1eNY3GRc+LNrK9Gv PqONo5+ejyPKsF2b1dewp3mkpI9fQcd7oGLUe7rSz0TJNPi0WGtbJ/SVvzqLyO9j AuVghLNqyqsfomFnYI2O02xfzvsUe5s9KSeszSDHn/U9bwBE3AhbHj31MGO0FPmL nGhL4W+LKfcrfcsl6U8aLC8H351zg58y2XddBczJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUnePE+5Jmbh3xdehJPDqFrXBwCOIwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2FkZGZkYTI0LTQyMWUtNGI0NS04MGUxLWRkNWEyNTU3NzdjNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIX++QwDQYJKoZIhvcNAQELBQADggEBAEKWa7325QwWtuMQsgD0c3+A6sNU AEIPMQMVMHWereB1rkp6eiZDN3R3KTJorjhBt9uAyS8hNfK+jK9QXCZJmVO/AKiO vYjm0udMlPRDuA6ec2SpA7WRsLBRVUkFtiFs8j0wG+wMnHRmHDs/XLr0r9BjU74x j2DVTAtZSJ1yohwj5RqBlUcbEiav74uWLn2h27S6/P+J6AnlMFxlZdDn2xW+MYZr zJzWyGAb4fGZNYE2IsEAHI2i0+8dwb4URMCcJsHv0M7+YoUcEWOjym+HHVd6Kwwp MwtFy5F4xfRtr1N3W01vGgx/2JWw3JML//rXCmuxaELb2QhLSV0vhhDLpGA= -----END CERTIFICATE-----Generated at Tue Jul 22 11:46:06 2025 by rpki-client