$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/c9752aac-8490-485f-92b7-6a6ba02b76d5.roa File: c9752aac-8490-485f-92b7-6a6ba02b76d5.roa (raw, json) Hash identifier: UTfUQTjJCNToU6jANrjEk4moTonghiH8QS0czI2EfzY= Subject key identifier: E6:D4:1A:0B:D0:FA:16:80:07:6C:58:88:09:5C:6F:55:5E:28:AE:06 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 42A0FB248BD0EC9A7ECDBEAA606BD6B029A1036C Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/c9752aac-8490-485f-92b7-6a6ba02b76d5.roa Signing time: Wed 09 Jul 2025 00:10:03 +0000 ROA not before: Wed 09 Jul 2025 00:10:03 +0000 ROA not after: Wed 13 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 199.127.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:a0:fb:24:8b:d0:ec:9a:7e:cd:be:aa:60:6b:d6:b0:29:a1:03:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Jul 9 00:10:03 2025 GMT Not After : Aug 13 23:59:59 2025 GMT Subject: serialNumber=1787a2219c681f4fcd5d8a4b13ca46e46f0840eaf2ff89abd16ed4108a6d4c16, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ed:57:78:d7:2e:f0:c5:b8:ec:cf:7a:37:fd: ad:8c:5b:43:2b:6c:9e:61:83:1f:8d:66:99:1e:2a: 68:db:f8:a3:d2:58:3e:41:6b:fd:14:08:a5:02:13: b0:93:bf:90:ca:da:16:70:92:8d:2b:8b:de:fd:9d: fd:96:c6:4a:39:a0:54:1c:0a:f4:52:22:67:aa:45: d8:7c:1a:9c:d3:5d:96:3e:60:2d:3c:57:5f:bf:e2: 25:6e:eb:83:48:0d:68:b8:56:4b:ff:f7:e9:a5:75: 71:a5:9d:a5:f6:34:eb:d6:84:fd:4d:16:6a:54:c9: 2a:7f:4c:8d:96:66:56:05:e3:ee:92:2a:8c:85:2f: 8a:93:1c:90:17:6c:90:d9:db:06:b2:c8:cd:84:61: 4d:b7:65:23:a3:0e:59:95:4f:de:b6:5a:cb:b1:98: b9:3d:34:be:50:eb:fb:fe:40:bd:96:c2:86:09:1b: 82:bb:51:4e:59:ba:8d:92:46:a4:9f:c0:96:f0:26: d5:90:cb:dc:77:24:17:e0:78:48:2a:e3:32:d5:e2: e5:76:eb:f0:b0:cd:12:0f:54:46:d8:df:48:1a:f5: 34:99:9f:74:1c:ec:ee:ce:b8:13:bb:ef:d6:f6:ab: 41:d1:e9:ac:83:03:5d:71:42:f3:0a:8e:27:91:79: 5f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:D4:1A:0B:D0:FA:16:80:07:6C:58:88:09:5C:6F:55:5E:28:AE:06 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/c9752aac-8490-485f-92b7-6a6ba02b76d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 199.127.232.0/22 Signature Algorithm: sha256WithRSAEncryption 4e:71:11:39:26:5c:da:cb:b4:33:8e:af:c0:58:fe:03:93:19: 73:f1:d1:0f:54:69:f3:cd:81:2f:0f:e2:cb:96:a9:b1:9c:a0: 0e:c8:3e:1d:e6:a7:55:81:b5:51:10:d8:df:08:b2:75:b5:4d: 2d:5e:f9:89:71:90:55:41:56:37:82:0a:50:2d:f3:4a:48:7c: 13:82:93:84:f7:b1:19:2d:e8:f5:a6:e2:7d:cc:ac:b2:68:29: 24:aa:c4:de:2c:59:e3:01:fb:c8:9b:7a:28:da:0d:db:0c:63: 16:83:70:fd:ec:ec:3b:6c:9b:14:74:f8:5d:c5:57:53:82:fb: f9:69:3d:e5:f5:17:92:37:04:40:01:2f:ea:df:56:b9:41:00: e8:59:1c:56:5d:a5:4b:69:8a:c3:45:ec:8e:12:b1:a2:2d:0e: c5:ef:58:0f:f4:78:cf:2b:53:a6:43:d5:50:6c:82:e2:89:16: 4f:e9:9f:ab:69:73:56:2c:16:07:1f:af:01:92:da:b6:12:0b: bf:10:6c:dd:0f:2e:d9:9f:f6:20:46:70:d7:0c:cd:7d:6f:f6: b7:ab:c6:ce:c4:33:df:bf:7c:81:b7:9d:f5:66:ec:c5:07:59: 89:c0:68:7b:45:8a:66:a8:b1:e4:61:f2:61:25:7e:99:32:fc: a9:1a:77:e5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQqD7JIvQ7Jp+zb6qYGvWsCmhA2wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNzA5MDAxMDAzWhcNMjUwODEzMjM1OTU5 WjB6MUkwRwYDVQQFE0AxNzg3YTIyMTljNjgxZjRmY2Q1ZDhhNGIxM2NhNDZlNDZm MDg0MGVhZjJmZjg5YWJkMTZlZDQxMDhhNmQ0YzE2MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDH7Vd41y7wxbjsz3o3/a2MW0MrbJ5hgx+NZpkeKmjb+KPS WD5Ba/0UCKUCE7CTv5DK2hZwko0ri979nf2Wxko5oFQcCvRSImeqRdh8GpzTXZY+ YC08V1+/4iVu64NIDWi4Vkv/9+mldXGlnaX2NOvWhP1NFmpUySp/TI2WZlYF4+6S KoyFL4qTHJAXbJDZ2wayyM2EYU23ZSOjDlmVT962WsuxmLk9NL5Q6/v+QL2WwoYJ G4K7UU5Zuo2SRqSfwJbwJtWQy9x3JBfgeEgq4zLV4uV26/CwzRIPVEbY30ga9TSZ n3Qc7O7OuBO779b2q0HR6ayDA11xQvMKjieReV9nAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5tQaC9D6FoAHbFiICVxvVV4orgYwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2M5NzUyYWFjLTg0OTAtNDg1Zi05MmI3LTZhNmJhMDJiNzZkNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALHf+gwDQYJKoZIhvcNAQELBQADggEBAE5xETkmXNrLtDOOr8BY/gOTGXPx 0Q9UafPNgS8P4suWqbGcoA7IPh3mp1WBtVEQ2N8IsnW1TS1e+YlxkFVBVjeCClAt 80pIfBOCk4T3sRkt6PWm4n3MrLJoKSSqxN4sWeMB+8ibeijaDdsMYxaDcP3s7Dts mxR0+F3FV1OC+/lpPeX1F5I3BEABL+rfVrlBAOhZHFZdpUtpisNF7I4SsaItDsXv WA/0eM8rU6ZD1VBsguKJFk/pn6tpc1YsFgcfrwGS2rYSC78QbN0PLtmf9iBGcNcM zX1v9rerxs7EM9+/fIG3nfVm7MUHWYnAaHtFimaoseRh8mElfpky/Kkad+U= -----END CERTIFICATE-----Generated at Tue Jul 22 11:49:52 2025 by rpki-client