$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/ced1d856-48cb-491b-a1ab-adf22d3bad75.roa File: ced1d856-48cb-491b-a1ab-adf22d3bad75.roa (raw, json) Hash identifier: ug3qjT3TVVbgt8cxnxsZcAz98rh4xU+kQaW1EfNkMrc= Subject key identifier: 91:34:43:27:66:04:A6:FF:99:13:7B:25:9E:7F:1A:E3:01:FD:E2:90 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 6FFB2DD3D06DF329F3B89EB0790299165F7C8E61 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/ced1d856-48cb-491b-a1ab-adf22d3bad75.roa Signing time: Mon 21 Jul 2025 15:20:07 +0000 ROA not before: Mon 21 Jul 2025 15:20:07 +0000 ROA not after: Mon 25 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 76.223.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:fb:2d:d3:d0:6d:f3:29:f3:b8:9e:b0:79:02:99:16:5f:7c:8e:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Jul 21 15:20:07 2025 GMT Not After : Aug 25 23:59:59 2025 GMT Subject: serialNumber=5612bcc09e244bf813c1a5ec9fdce790c79769f7817b9c50225fc4a3cb9d470b, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:eb:28:bc:85:47:7f:b5:e2:06:69:54:4e:62: ea:e3:a6:ce:92:d4:fd:28:d6:a8:b3:b9:ba:a6:24: 6d:a9:a7:4e:c3:fc:a5:d8:be:1f:b0:ca:d9:ca:cf: ef:86:ed:0c:6a:39:77:43:fd:8a:63:91:c1:f5:de: 5c:32:dc:3f:63:ba:2f:ae:f3:8a:77:89:df:0b:fa: eb:cf:50:4b:d1:9a:d9:e6:60:43:0d:c3:92:06:b6: a5:e3:c4:90:40:7f:19:89:5c:48:5a:3a:68:e5:74: f0:b1:67:e1:61:90:47:12:9e:30:9a:0c:eb:f0:4a: a3:9d:c2:51:5f:99:de:9c:fd:1a:b9:1e:dd:0a:da: 2a:8b:22:82:58:4a:45:5e:ee:64:4c:21:b9:3f:90: 2e:78:e6:a4:32:ad:26:7c:62:78:35:db:dc:0b:80: c9:6c:cf:13:06:5b:e3:3a:06:85:f8:b9:c4:2f:93: 5f:46:e0:51:c1:20:f4:b0:b1:40:16:59:25:1f:cd: fb:e7:f4:6b:90:7e:0d:3d:e1:c6:e8:b5:dd:2d:2d: ea:87:1a:f9:49:bb:c6:db:5d:36:e2:77:fd:ce:65: 40:64:be:25:c2:e7:a6:a7:77:c0:34:b3:c2:be:46: 60:df:3d:b2:2c:d1:ec:2f:06:d4:a5:52:75:3e:e8: 53:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:34:43:27:66:04:A6:FF:99:13:7B:25:9E:7F:1A:E3:01:FD:E2:90 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/ced1d856-48cb-491b-a1ab-adf22d3bad75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.223.176.0/20 Signature Algorithm: sha256WithRSAEncryption 52:87:7f:42:a9:f3:76:3b:c3:15:27:6a:cd:d2:6e:5e:5d:66: ef:06:38:58:d0:8a:66:3d:85:ff:ed:0d:b5:4f:62:77:b9:b2: dc:8a:3d:10:95:14:c9:fb:b9:6a:4c:78:51:6c:c0:4b:ef:aa: c7:4c:f3:e6:eb:61:89:ff:78:29:7d:7e:1f:87:a2:1b:e3:66: 84:87:df:46:d1:f2:45:33:c4:46:db:b6:c8:ed:0f:87:30:fb: eb:a1:54:96:11:5f:82:4d:58:d2:03:0f:40:cd:83:fc:1e:fb: 31:22:83:41:56:71:10:1f:8b:5d:8d:2b:4d:6f:87:5d:76:69: 65:ac:d0:dd:85:72:54:a7:26:64:3d:e3:77:67:64:14:9e:b5: 1d:4d:c1:11:0a:2b:9d:4c:c9:67:b9:37:e9:09:45:fe:22:36: 58:9e:a4:66:b8:4e:ba:c3:32:5e:d5:1b:07:e8:e5:d0:bc:d1: fb:55:5f:13:5d:c1:59:c2:4d:4f:68:5f:98:08:7d:86:41:d3: ee:21:46:4e:9c:6c:95:56:4c:76:3a:94:61:07:41:1b:31:83: 64:63:21:2f:e4:83:49:98:3f:df:0a:c3:95:d1:00:82:8d:a2: 8c:9b:0e:ab:95:83:31:72:a1:a0:ea:91:f3:bf:07:5e:58:12: 7f:01:58:b1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUb/st09Bt8ynzuJ6weQKZFl98jmEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNzIxMTUyMDA3WhcNMjUwODI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A1NjEyYmNjMDllMjQ0YmY4MTNjMWE1ZWM5ZmRjZTc5MGM3 OTc2OWY3ODE3YjljNTAyMjVmYzRhM2NiOWQ0NzBiMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCg6yi8hUd/teIGaVROYurjps6S1P0o1qizubqmJG2pp07D /KXYvh+wytnKz++G7QxqOXdD/YpjkcH13lwy3D9jui+u84p3id8L+uvPUEvRmtnm YEMNw5IGtqXjxJBAfxmJXEhaOmjldPCxZ+FhkEcSnjCaDOvwSqOdwlFfmd6c/Rq5 Ht0K2iqLIoJYSkVe7mRMIbk/kC545qQyrSZ8Yng129wLgMlszxMGW+M6BoX4ucQv k19G4FHBIPSwsUAWWSUfzfvn9GuQfg094cbotd0tLeqHGvlJu8bbXTbid/3OZUBk viXC56and8A0s8K+RmDfPbIs0ewvBtSlUnU+6FMxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUkTRDJ2YEpv+ZE3slnn8a4wH94pAwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2NlZDFkODU2LTQ4Y2ItNDkxYi1hMWFiLWFkZjIyZDNiYWQ3NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBARM37AwDQYJKoZIhvcNAQELBQADggEBAFKHf0Kp83Y7wxUnas3Sbl5dZu8G OFjQimY9hf/tDbVPYne5styKPRCVFMn7uWpMeFFswEvvqsdM8+brYYn/eCl9fh+H ohvjZoSH30bR8kUzxEbbtsjtD4cw++uhVJYRX4JNWNIDD0DNg/we+zEig0FWcRAf i12NK01vh112aWWs0N2FclSnJmQ943dnZBSetR1NwREKK51MyWe5N+kJRf4iNlie pGa4TrrDMl7VGwfo5dC80ftVXxNdwVnCTU9oX5gIfYZB0+4hRk6cbJVWTHY6lGEH QRsxg2RjIS/kg0mYP98Kw5XRAIKNooybDquVgzFyoaDqkfO/B15YEn8BWLE= -----END CERTIFICATE-----Generated at Tue Jul 22 11:52:09 2025 by rpki-client