$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/be6d27bc-a56d-4dce-b2c2-5a756eca4157.roa File: be6d27bc-a56d-4dce-b2c2-5a756eca4157.roa (raw, json) Hash identifier: MAVXZhvE+WD60bibpgzWgGTW6BGMJ9DtJy5Zfz5N19M= Subject key identifier: 97:C0:27:E1:AE:8A:47:83:3E:AF:30:EE:F4:ED:8C:FE:06:58:77:FD Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 7C01A495C9A0D4464AF204380DA2E50ED693A9FA Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/be6d27bc-a56d-4dce-b2c2-5a756eca4157.roa Signing time: Tue 08 Jul 2025 00:10:11 +0000 ROA not before: Tue 08 Jul 2025 00:10:11 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.249.210.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:01:a4:95:c9:a0:d4:46:4a:f2:04:38:0d:a2:e5:0e:d6:93:a9:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Jul 8 00:10:11 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=12e89e746681b67a83ce908e42498e30cec3daffbc2385bafd1dcb596b67ca02, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c2:84:d1:71:6e:84:ca:1e:db:8f:b2:42:d4: 63:01:60:e4:08:e0:a1:4d:c0:2d:9b:a9:7c:b5:fa: 54:a7:6a:28:60:6d:e6:54:8e:32:f5:d1:10:fc:26: ff:fb:8d:60:ee:7d:ea:bd:8a:38:00:10:e7:34:a1: d9:d5:a0:8d:e3:17:8c:50:09:9e:5d:28:da:9e:fc: 49:0a:67:6a:f3:50:6a:af:14:d6:f6:56:fe:6a:36: cf:45:a8:8b:c5:15:f5:eb:85:f6:48:41:04:d8:f1: 46:53:a6:1a:25:10:b6:77:21:48:c9:d5:ac:9a:dc: 6f:de:03:34:bf:6e:1e:a6:3f:63:5a:63:37:97:cc: a8:50:8b:fe:23:85:12:46:94:f2:cb:43:43:01:a2: 66:c6:01:64:c4:d6:d3:78:8c:1b:ab:bf:99:cd:41: 31:e6:ee:e7:ff:41:ab:7b:36:86:0a:74:e5:26:49: 61:0d:de:bc:db:8b:c2:8f:d9:9e:ab:b3:f9:6e:08: d3:0d:49:91:7d:db:e5:2d:bb:ec:4e:26:61:1b:a9: 6e:19:2c:00:28:28:17:5c:77:d6:77:0d:84:01:bc: 85:41:ed:29:15:f7:bf:ab:e9:fd:57:d5:07:c7:ae: c1:bc:e9:dc:3d:04:40:2c:ab:7c:29:14:e8:77:b1: 05:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:C0:27:E1:AE:8A:47:83:3E:AF:30:EE:F4:ED:8C:FE:06:58:77:FD X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/be6d27bc-a56d-4dce-b2c2-5a756eca4157.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.210.0/23 Signature Algorithm: sha256WithRSAEncryption 4a:6d:a7:08:03:90:af:aa:4b:55:98:e2:4c:33:21:23:b2:53: 2a:aa:29:4f:dd:f3:85:30:25:92:06:92:d7:50:a4:49:69:d9: 57:52:b4:2c:a5:7c:79:5a:b9:13:55:ff:6c:58:e4:85:b4:90: c2:b1:f8:6e:20:7c:b6:b3:a4:e4:d6:02:e9:61:3a:ae:6b:59: 0b:fa:c4:3e:da:f9:4c:b4:7a:72:f2:54:1f:ab:8c:4d:d4:06: f8:d9:be:b8:ba:cf:9d:6e:b3:1d:24:92:59:51:c6:df:54:65: 76:b5:18:0a:cf:3d:d4:49:14:ef:99:ce:d5:bc:a6:73:56:b4: 28:ec:39:cf:84:a9:0f:49:a8:44:82:d8:63:2e:63:03:72:69: af:41:01:36:23:94:37:8b:75:1f:12:1e:1e:92:93:40:e3:71: e9:6d:8e:ae:6e:29:c2:82:6c:ca:62:84:4c:d2:43:7d:7f:69: 35:92:57:83:ed:0e:81:33:14:e2:ef:c1:42:42:21:e8:90:2a: 8f:3f:94:b5:1e:83:5f:7e:df:a5:1a:6f:cd:f8:b8:11:8d:16: a6:17:8c:bb:0d:3c:9e:ed:e6:ee:17:c3:66:cb:bd:ba:7b:12: 60:d2:9e:34:31:06:96:f3:cd:94:3e:f3:f8:f8:56:98:4e:ab: 99:5e:0d:13 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfAGklcmg1EZK8gQ4DaLlDtaTqfowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNzA4MDAxMDExWhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0AxMmU4OWU3NDY2ODFiNjdhODNjZTkwOGU0MjQ5OGUzMGNl YzNkYWZmYmMyMzg1YmFmZDFkY2I1OTZiNjdjYTAyMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQClwoTRcW6Eyh7bj7JC1GMBYOQI4KFNwC2bqXy1+lSnaihg beZUjjL10RD8Jv/7jWDufeq9ijgAEOc0odnVoI3jF4xQCZ5dKNqe/EkKZ2rzUGqv FNb2Vv5qNs9FqIvFFfXrhfZIQQTY8UZTpholELZ3IUjJ1aya3G/eAzS/bh6mP2Na YzeXzKhQi/4jhRJGlPLLQ0MBombGAWTE1tN4jBurv5nNQTHm7uf/Qat7NoYKdOUm SWEN3rzbi8KP2Z6rs/luCNMNSZF92+Utu+xOJmEbqW4ZLAAoKBdcd9Z3DYQBvIVB 7SkV97+r6f1X1QfHrsG86dw9BEAsq3wpFOh3sQWBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUl8An4a6KR4M+rzDu9O2M/gZYd/0wHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2JlNmQyN2JjLWE1NmQtNGRjZS1iMmMyLTVhNzU2ZWNhNDE1Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEX+dIwDQYJKoZIhvcNAQELBQADggEBAEptpwgDkK+qS1WY4kwzISOyUyqq KU/d84UwJZIGktdQpElp2VdStCylfHlauRNV/2xY5IW0kMKx+G4gfLazpOTWAulh Oq5rWQv6xD7a+Uy0enLyVB+rjE3UBvjZvri6z51usx0kkllRxt9UZXa1GArPPdRJ FO+ZztW8pnNWtCjsOc+EqQ9JqESC2GMuYwNyaa9BATYjlDeLdR8SHh6Sk0Djcelt jq5uKcKCbMpihEzSQ31/aTWSV4PtDoEzFOLvwUJCIeiQKo8/lLUeg19+36Uab834 uBGNFqYXjLsNPJ7t5u4Xw2bLvbp7EmDSnjQxBpbzzZQ+8/j4VphOq5leDRM= -----END CERTIFICATE-----Generated at Fri Jul 25 18:19:51 2025 by rpki-client