$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/dce2db93-8fb7-42b9-be56-23f46b5bf4e0.roa File: dce2db93-8fb7-42b9-be56-23f46b5bf4e0.roa (raw, json) Hash identifier: 5YPV5ziTyRK4o9laYhVJJPYjt219sexnsVw2D405j7g= Subject key identifier: CF:85:B4:10:21:65:48:4A:6B:07:D8:61:0E:CC:62:77:55:5B:AF:80 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 732608803500C39ACDC1262652E02A6B96A829DC Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/dce2db93-8fb7-42b9-be56-23f46b5bf4e0.roa Signing time: Mon 21 Jul 2025 15:20:10 +0000 ROA not before: Mon 21 Jul 2025 15:20:10 +0000 ROA not after: Mon 25 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 76.223.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:26:08:80:35:00:c3:9a:cd:c1:26:26:52:e0:2a:6b:96:a8:29:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Jul 21 15:20:10 2025 GMT Not After : Aug 25 23:59:59 2025 GMT Subject: serialNumber=a6944793ee2de82d3f367b1d719870c4a89ede54c84a07130a93be5b5739b94b, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d8:71:7a:27:ef:8f:60:a3:9d:75:73:16:52: b5:e1:1b:1c:e0:45:3f:0e:e1:ee:ce:58:28:79:1c: 26:72:04:74:b0:80:b0:f7:7b:f2:31:60:d4:0a:d3: 75:2e:6d:9c:d6:e7:1d:c3:44:60:85:9b:30:c9:c2: 39:96:3a:63:d0:16:0b:7a:da:16:f1:c1:f2:57:31: 96:07:7f:76:ce:02:fd:5e:40:0c:86:dd:fa:dd:27: 4b:d4:8e:e2:1a:01:92:9d:5d:09:88:fe:9d:e0:87: fe:24:85:cb:33:86:02:9c:d8:33:ac:60:bb:9b:c8: 5a:fe:9c:83:07:7a:48:0b:b4:35:43:62:0f:5f:2c: 29:6f:33:85:f3:d7:1f:3d:a0:15:7e:6c:db:f6:4e: d2:96:02:0b:32:9a:e5:15:35:a9:6d:8e:59:09:eb: a0:14:5e:28:b7:59:97:ad:d5:63:bf:ea:9b:58:a9: b7:de:ab:fa:b6:f4:df:72:0a:41:88:d5:e2:4a:84: c7:27:b7:43:0d:35:d6:6f:2d:f0:87:41:ea:72:d8: f2:d5:e9:7b:d4:27:d3:e4:16:98:01:d1:0e:c1:0c: e1:6f:8d:20:ed:7f:fe:06:ae:f3:be:61:7b:b3:60: 43:92:70:0b:aa:e6:9c:3d:8a:22:b2:b9:33:96:86: a1:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:85:B4:10:21:65:48:4A:6B:07:D8:61:0E:CC:62:77:55:5B:AF:80 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/dce2db93-8fb7-42b9-be56-23f46b5bf4e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.223.189.0/24 Signature Algorithm: sha256WithRSAEncryption 32:50:5a:b4:17:18:fc:f7:c5:8c:c1:3f:2a:69:a5:ae:3b:64: b7:67:e4:cf:82:db:85:ed:91:55:fe:83:8d:40:34:25:e5:85: f3:c3:57:53:e0:39:d0:09:2f:28:c5:cd:4f:96:8f:77:11:55: cb:3b:81:e9:76:cb:e1:10:8b:94:e9:be:16:41:59:9e:67:6b: 26:71:8f:ef:27:50:2e:5b:13:e1:e1:0c:05:7d:88:a0:12:af: 6e:b5:78:e8:32:b2:36:57:2d:77:06:32:47:2b:84:c7:85:37: 3b:a1:8d:e9:f5:fd:c3:e9:20:a3:01:65:5d:f1:7d:fb:ea:5a: 3c:0d:e1:08:be:cc:86:7a:e1:cb:4d:6e:ae:83:c5:05:bb:f8: a2:64:df:9d:94:30:06:2c:bc:d7:7b:32:9a:4f:c0:2e:9e:93: 74:6b:42:24:7f:c3:f0:91:e0:7c:6f:95:6c:56:38:b2:0d:55: 5a:6d:e6:b8:03:18:6a:bb:4d:42:2d:5d:2a:ff:4f:7f:fc:c8: 57:6c:56:ba:5d:af:ed:e0:8c:b0:55:f3:ff:da:cf:28:59:43: 0c:c3:90:f2:d4:96:b6:c4:7c:fa:8f:cf:6f:3f:b5:cb:a6:7a: 71:4c:4e:a2:f4:40:f0:ff:41:f0:f4:c0:cf:e4:29:f1:6c:6b: 6f:d5:f2:f3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcyYIgDUAw5rNwSYmUuAqa5aoKdwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNzIxMTUyMDEwWhcNMjUwODI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BhNjk0NDc5M2VlMmRlODJkM2YzNjdiMWQ3MTk4NzBjNGE4 OWVkZTU0Yzg0YTA3MTMwYTkzYmU1YjU3MzliOTRiMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCW2HF6J++PYKOddXMWUrXhGxzgRT8O4e7OWCh5HCZyBHSw gLD3e/IxYNQK03UubZzW5x3DRGCFmzDJwjmWOmPQFgt62hbxwfJXMZYHf3bOAv1e QAyG3frdJ0vUjuIaAZKdXQmI/p3gh/4khcszhgKc2DOsYLubyFr+nIMHekgLtDVD Yg9fLClvM4Xz1x89oBV+bNv2TtKWAgsymuUVNaltjlkJ66AUXii3WZet1WO/6ptY qbfeq/q29N9yCkGI1eJKhMcnt0MNNdZvLfCHQepy2PLV6XvUJ9PkFpgB0Q7BDOFv jSDtf/4GrvO+YXuzYEOScAuq5pw9iiKyuTOWhqH7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUz4W0ECFlSEprB9hhDsxid1Vbr4AwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2RjZTJkYjkzLThmYjctNDJiOS1iZTU2LTIzZjQ2YjViZjRlMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABM370wDQYJKoZIhvcNAQELBQADggEBADJQWrQXGPz3xYzBPypppa47ZLdn 5M+C24XtkVX+g41ANCXlhfPDV1PgOdAJLyjFzU+Wj3cRVcs7gel2y+EQi5TpvhZB WZ5nayZxj+8nUC5bE+HhDAV9iKASr261eOgysjZXLXcGMkcrhMeFNzuhjen1/cPp IKMBZV3xffvqWjwN4Qi+zIZ64ctNbq6DxQW7+KJk352UMAYsvNd7MppPwC6ek3Rr QiR/w/CR4HxvlWxWOLINVVpt5rgDGGq7TUItXSr/T3/8yFdsVrpdr+3gjLBV8//a zyhZQwzDkPLUlrbEfPqPz28/tcumenFMTqL0QPD/QfD0wM/kKfFsa2/V8vM= -----END CERTIFICATE-----Generated at Tue Jul 22 11:47:43 2025 by rpki-client