$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/e7138651-9d24-41c2-8af2-d0a2f7645ca5.roa File: e7138651-9d24-41c2-8af2-d0a2f7645ca5.roa (raw, json) Hash identifier: jUmf8JrpMm1fiLFFWDwJBOOXe9VYJoogeYwPSi883bY= Subject key identifier: 9C:72:71:57:70:1F:C6:11:7B:AE:78:90:7E:F3:1E:68:F8:8E:23:8D Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 4ED99CC0675797FB304F8B3101DCF30BE8C9CDA6 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/e7138651-9d24-41c2-8af2-d0a2f7645ca5.roa Signing time: Fri 11 Jul 2025 00:00:03 +0000 ROA not before: Fri 11 Jul 2025 00:00:03 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 216.221.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:d9:9c:c0:67:57:97:fb:30:4f:8b:31:01:dc:f3:0b:e8:c9:cd:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Jul 11 00:00:03 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=df243a8f8c61a6605a95743817919863dd80d639a3516d27631a757ffd874124, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a4:4d:d6:73:50:33:98:f9:74:2e:d4:b4:45: 60:07:02:f0:01:87:32:95:ba:05:7a:63:09:aa:e9: 96:e0:01:4a:1f:e6:30:db:5b:cc:a3:d4:e8:ca:6d: b1:56:bf:3e:fb:81:8a:ec:12:f0:39:94:90:ab:28: 73:e0:e3:3a:6d:4f:26:a1:5b:25:90:8e:d3:ae:85: 28:c6:7d:15:0c:2a:45:b3:7d:99:ed:37:b8:f7:e7: dc:85:2e:f3:55:cd:6d:73:bf:2a:85:bb:c6:48:7c: b5:5c:44:1a:cd:0e:71:1c:ab:29:8c:e7:f9:ea:fd: 00:30:0f:43:c6:2b:11:3e:13:53:f3:12:d8:47:82: e1:8b:df:fd:da:b6:30:12:66:23:61:cb:af:7e:98: a7:f4:47:fb:28:1f:20:e2:f3:82:6b:f6:7c:1a:2b: ca:06:fd:57:42:00:6e:b5:e0:ab:3a:41:6a:9d:82: 2d:ef:29:8a:d2:bb:c4:b4:c8:e7:c5:01:ea:9b:18: 59:ec:3d:04:a5:3f:54:e3:93:67:2e:e8:71:96:e4: c8:fa:e4:2b:ae:ed:8d:21:2f:19:e5:71:a0:64:14: 05:86:f5:af:b9:1d:98:4c:89:1e:41:71:bb:70:25: cf:d8:3d:43:a2:ab:82:54:20:e5:49:f5:0c:60:cd: 48:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:72:71:57:70:1F:C6:11:7B:AE:78:90:7E:F3:1E:68:F8:8E:23:8D X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/e7138651-9d24-41c2-8af2-d0a2f7645ca5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.221.163.0/24 Signature Algorithm: sha256WithRSAEncryption 10:f9:d6:78:36:65:0c:2a:76:2a:c0:34:fa:94:0f:df:0a:d6: 52:a4:c2:2b:69:00:1a:db:10:61:b5:e1:2c:fc:90:ac:b8:eb: 66:83:89:92:4b:6b:ae:15:ad:ea:9b:41:15:5b:a1:b8:a6:a4: 16:de:9a:25:58:2c:32:a3:18:37:32:18:e5:5b:ae:23:1c:c1: cd:4c:0d:7e:98:36:dc:1b:f9:21:4f:4d:52:0f:a9:11:e3:f0: 12:f7:0d:01:71:05:17:4e:d5:ee:78:d6:41:0a:ac:f4:2b:6a: 30:b6:8b:01:67:4b:99:51:95:de:44:2b:c3:8a:f2:c8:6f:64: c2:ec:93:32:d6:e6:63:10:59:4e:f9:c2:57:d9:d8:e5:2f:57: f6:15:a8:78:85:e8:4b:ef:b7:9e:fe:7a:f2:77:39:03:3c:f2: a1:92:43:bc:be:dc:5c:b1:ce:10:ff:70:be:aa:f0:e8:04:c4: b0:6f:32:d6:58:c4:ee:82:44:85:d0:84:d6:f3:87:ee:54:34: 35:3c:80:a9:74:39:01:9f:30:bc:0a:b2:8e:17:10:08:78:59: 5f:20:1e:a3:9b:e6:79:7d:55:de:7f:ab:8e:aa:54:e2:9f:64: 28:ee:46:25:52:fe:d2:d1:80:75:84:c1:9c:77:35:a9:a6:1f: 6b:3a:99:8c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTtmcwGdXl/swT4sxAdzzC+jJzaYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNzExMDAwMDAzWhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0BkZjI0M2E4ZjhjNjFhNjYwNWE5NTc0MzgxNzkxOTg2M2Rk ODBkNjM5YTM1MTZkMjc2MzFhNzU3ZmZkODc0MTI0MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2pE3Wc1AzmPl0LtS0RWAHAvABhzKVugV6Ywmq6ZbgAUof 5jDbW8yj1OjKbbFWvz77gYrsEvA5lJCrKHPg4zptTyahWyWQjtOuhSjGfRUMKkWz fZntN7j359yFLvNVzW1zvyqFu8ZIfLVcRBrNDnEcqymM5/nq/QAwD0PGKxE+E1Pz EthHguGL3/3atjASZiNhy69+mKf0R/soHyDi84Jr9nwaK8oG/VdCAG614Ks6QWqd gi3vKYrSu8S0yOfFAeqbGFnsPQSlP1Tjk2cu6HGW5Mj65Cuu7Y0hLxnlcaBkFAWG 9a+5HZhMiR5BcbtwJc/YPUOiq4JUIOVJ9QxgzUgTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUnHJxV3AfxhF7rniQfvMeaPiOI40wHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2U3MTM4NjUxLTlkMjQtNDFjMi04YWYyLWQwYTJmNzY0NWNhNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADY3aMwDQYJKoZIhvcNAQELBQADggEBABD51ng2ZQwqdirANPqUD98K1lKk witpABrbEGG14Sz8kKy462aDiZJLa64VreqbQRVbobimpBbemiVYLDKjGDcyGOVb riMcwc1MDX6YNtwb+SFPTVIPqRHj8BL3DQFxBRdO1e541kEKrPQrajC2iwFnS5lR ld5EK8OK8shvZMLskzLW5mMQWU75wlfZ2OUvV/YVqHiF6Evvt57+evJ3OQM88qGS Q7y+3FyxzhD/cL6q8OgExLBvMtZYxO6CRIXQhNbzh+5UNDU8gKl0OQGfMLwKso4X EAh4WV8gHqOb5nl9Vd5/q46qVOKfZCjuRiVS/tLRgHWEwZx3NammH2s6mYw= -----END CERTIFICATE-----Generated at Tue Jul 22 11:47:54 2025 by rpki-client