$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/e41ada77-fa4f-4da3-a532-14382438f575.roa File: e41ada77-fa4f-4da3-a532-14382438f575.roa (raw, json) Hash identifier: VA1UKITWDb7g+4VriXNeWeVknsDBiGQZeF1dRciKuvM= Subject key identifier: 16:2F:A5:14:32:BB:1B:66:5D:C5:2C:46:42:E7:B5:A7:3D:8B:72:09 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 50338E16EC6B1C69190C7ABA6430B54D05E03E8D Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/e41ada77-fa4f-4da3-a532-14382438f575.roa Signing time: Mon 21 Jul 2025 15:20:11 +0000 ROA not before: Mon 21 Jul 2025 15:20:11 +0000 ROA not after: Mon 25 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 76.223.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:33:8e:16:ec:6b:1c:69:19:0c:7a:ba:64:30:b5:4d:05:e0:3e:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Jul 21 15:20:11 2025 GMT Not After : Aug 25 23:59:59 2025 GMT Subject: serialNumber=e88a4ad42c07a7d6e31f5ac8e3d2416968f4e328e059cfb8655cdba43d77d7c1, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:25:42:b5:5d:7c:62:85:de:9e:85:a4:68:19: 6a:53:90:86:97:a2:ad:f8:7c:b0:df:ca:1f:ce:a8: 83:d0:23:09:fc:6b:88:1b:fc:17:aa:d6:e8:64:c8: 15:e9:ce:6f:fb:77:b8:dc:62:41:dc:3b:99:e8:6d: bd:8e:65:29:7c:be:a3:aa:ef:fc:68:d2:ce:32:97: 4b:8e:a0:c7:a9:2c:e7:d8:84:88:90:88:8c:0c:93: 28:a7:6b:f2:ea:a9:c2:bc:e8:d0:84:19:f6:a1:dc: f4:61:b5:56:51:02:72:a0:6c:86:66:c7:5a:33:13: 82:2c:78:8e:a3:06:ad:6b:83:82:de:e8:ce:1e:ae: d1:0f:a6:a4:60:a5:be:d8:9d:98:29:0e:94:59:d5: 3e:1f:bd:97:61:56:45:a9:9b:5d:e5:6a:1f:ba:4a: c2:6e:9c:52:5e:93:e4:bf:7b:ca:a4:e8:9b:93:78: 04:d5:8a:eb:da:d6:8a:74:59:b0:38:71:ac:67:8e: f6:11:2c:7e:0b:ad:8d:0f:b9:42:34:a5:07:98:07: a1:c5:32:bf:56:36:93:bb:49:19:3f:9b:2f:25:69: e7:ac:c0:f6:0f:30:f0:f4:6b:b3:6e:df:44:12:a6: 5d:87:e3:72:fd:cf:09:82:02:71:7f:69:0f:9e:b3: e4:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:2F:A5:14:32:BB:1B:66:5D:C5:2C:46:42:E7:B5:A7:3D:8B:72:09 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/e41ada77-fa4f-4da3-a532-14382438f575.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.223.191.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:48:f6:da:d9:24:16:d1:d8:37:8d:9f:33:33:5f:2c:18:8e: ef:2e:d2:fb:e9:d5:d1:a6:e1:23:60:67:78:a0:e5:a7:c0:d7: 44:70:a0:0e:de:e3:ed:a3:5c:b0:91:ca:38:77:4f:23:44:94: 0e:75:50:56:fd:60:46:4e:8c:f8:73:cc:fb:1a:8b:56:6d:64: e4:75:76:77:93:5c:42:b3:aa:3c:40:f3:44:a9:27:4f:fe:e7: d0:45:4f:4a:81:8b:7f:7f:a6:57:4a:d0:d0:89:9c:7e:ec:cf: 59:60:ac:74:d2:58:db:9e:bf:ae:a8:6d:4c:31:b1:49:77:52: e8:cd:fb:e5:6f:41:a0:89:66:9f:32:ff:eb:b5:23:b9:a5:99: 61:9a:42:5b:0d:24:c8:74:1a:5e:5b:90:63:cb:47:35:f2:49: 2d:90:bc:be:5c:a1:ed:45:fd:91:fa:72:62:0c:af:d8:3b:92: 3c:eb:bc:02:05:bb:a4:54:63:b2:74:37:38:81:67:44:f2:68: ba:15:94:2f:ab:ad:09:fb:1a:4d:d9:59:c3:65:14:5f:57:aa: d3:fd:48:c0:39:19:1e:5c:27:c4:bc:18:0f:27:c2:55:c5:9e: a6:22:a4:a2:a8:d7:1f:74:da:ed:d7:12:2a:d0:09:2d:1a:8e: 84:67:37:91 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUDOOFuxrHGkZDHq6ZDC1TQXgPo0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNzIxMTUyMDExWhcNMjUwODI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BlODhhNGFkNDJjMDdhN2Q2ZTMxZjVhYzhlM2QyNDE2OTY4 ZjRlMzI4ZTA1OWNmYjg2NTVjZGJhNDNkNzdkN2MxMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCNJUK1XXxihd6ehaRoGWpTkIaXoq34fLDfyh/OqIPQIwn8 a4gb/Beq1uhkyBXpzm/7d7jcYkHcO5nobb2OZSl8vqOq7/xo0s4yl0uOoMepLOfY hIiQiIwMkyina/LqqcK86NCEGfah3PRhtVZRAnKgbIZmx1ozE4IseI6jBq1rg4Le 6M4ertEPpqRgpb7YnZgpDpRZ1T4fvZdhVkWpm13lah+6SsJunFJek+S/e8qk6JuT eATViuva1op0WbA4caxnjvYRLH4LrY0PuUI0pQeYB6HFMr9WNpO7SRk/my8laees wPYPMPD0a7Nu30QSpl2H43L9zwmCAnF/aQ+es+R1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUFi+lFDK7G2ZdxSxGQue1pz2LcgkwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2U0MWFkYTc3LWZhNGYtNGRhMy1hNTMyLTE0MzgyNDM4ZjU3NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABM378wDQYJKoZIhvcNAQELBQADggEBAExI9trZJBbR2DeNnzMzXywYju8u 0vvp1dGm4SNgZ3ig5afA10RwoA7e4+2jXLCRyjh3TyNElA51UFb9YEZOjPhzzPsa i1ZtZOR1dneTXEKzqjxA80SpJ0/+59BFT0qBi39/pldK0NCJnH7sz1lgrHTSWNue v66obUwxsUl3UujN++VvQaCJZp8y/+u1I7mlmWGaQlsNJMh0Gl5bkGPLRzXySS2Q vL5coe1F/ZH6cmIMr9g7kjzrvAIFu6RUY7J0NziBZ0TyaLoVlC+rrQn7Gk3ZWcNl FF9XqtP9SMA5GR5cJ8S8GA8nwlXFnqYipKKo1x902u3XEirQCS0ajoRnN5E= -----END CERTIFICATE-----Generated at Tue Jul 22 11:53:09 2025 by rpki-client