$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/fc93e1d0-44ff-4b2f-962d-d91a8964a4bf.roa File: fc93e1d0-44ff-4b2f-962d-d91a8964a4bf.roa (raw, json) Hash identifier: yrAHL0RlHNlf2OZ7r7juB4S8Vl99Izr2jXb9YavZ9YA= Subject key identifier: 3F:85:58:1E:F6:76:83:99:7A:D6:50:4D:99:0F:77:D8:6A:D1:73:99 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 593400C691CB5C968056694D24008F6B4F2DBBAC Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/fc93e1d0-44ff-4b2f-962d-d91a8964a4bf.roa Signing time: Tue 08 Jul 2025 00:10:25 +0000 ROA not before: Tue 08 Jul 2025 00:10:25 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 69.169.230.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:34:00:c6:91:cb:5c:96:80:56:69:4d:24:00:8f:6b:4f:2d:bb:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Jul 8 00:10:25 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=4fe335a38ed8dbd37aba90ed6a2208c31174236980756af7babb57dc2166403a, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:03:0c:ce:2f:69:a9:bc:90:ea:98:49:66:1e: 5d:a7:ac:36:b8:71:d8:74:b4:27:f2:f0:a5:26:18: 06:9a:83:56:a3:83:98:6d:31:51:1c:2f:ae:07:a5: c2:de:9e:17:90:74:bb:9d:ba:c8:ae:f6:a3:27:88: 24:f1:7a:45:72:7f:79:e2:73:54:1d:0f:f4:2b:96: f2:f2:e8:d7:f6:76:43:01:33:07:20:1d:1b:77:ae: 97:3f:07:dd:94:e3:a0:fe:00:9b:55:66:da:b3:f0: 3f:e5:82:a5:96:b1:f5:2a:f4:6d:b9:75:1c:b4:35: 70:13:a9:4e:e1:74:71:85:d5:88:07:dc:ae:26:38: fd:71:79:23:44:51:cb:2e:99:dc:a7:d1:f8:9f:da: 74:80:fd:37:97:89:dc:67:80:a8:e3:58:c9:3d:7f: c4:4a:43:23:77:bd:ee:fc:70:da:de:c2:a5:7b:81: ae:71:c9:4f:72:04:ef:c5:02:6e:fa:9e:17:67:1d: 01:72:d1:e2:96:48:e5:82:2f:1e:c0:44:60:24:d1: bc:35:3c:b0:28:68:4d:95:15:b7:53:22:a1:ae:eb: c7:b2:91:93:2b:fb:9a:db:85:80:61:fb:5f:41:18: 53:a0:82:e1:5f:c0:8b:ed:f9:25:b7:21:17:c3:1f: 02:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:85:58:1E:F6:76:83:99:7A:D6:50:4D:99:0F:77:D8:6A:D1:73:99 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/fc93e1d0-44ff-4b2f-962d-d91a8964a4bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 69.169.230.0/23 Signature Algorithm: sha256WithRSAEncryption 24:33:0a:a0:42:e0:d6:3e:de:9e:64:d4:16:3c:6a:66:94:1a: b0:c3:70:12:7e:0b:6c:c0:c7:25:ab:dd:90:3d:39:7d:e3:49: d1:2e:4e:db:14:21:ae:e8:93:9c:a2:65:ec:5a:fd:86:85:a7: 8d:35:12:bc:ef:15:4f:bc:fe:64:5e:c9:5d:6f:2a:e6:c1:cd: 1f:a2:e5:dc:39:f6:44:7c:45:c9:d1:96:a2:32:8b:38:13:5f: f6:5b:ca:b9:4d:88:e7:b6:bf:5b:8e:52:0f:e7:56:31:12:15: 17:a6:d7:1a:85:3d:4c:5d:aa:62:4b:6f:e0:4e:e0:2f:3a:78: 3a:d9:47:ac:ce:f6:af:ed:3e:db:f9:6d:19:0e:b6:0e:21:44: 00:b6:cf:ae:49:51:2a:de:8a:2d:f0:15:1b:b3:36:80:b4:05: f8:62:c1:24:57:4f:ec:d2:cd:17:58:29:d8:41:71:ba:e8:af: ed:2e:2c:f7:3d:43:cc:ce:76:d9:ab:5a:11:65:5f:16:28:1f: 51:17:9f:aa:fd:70:c0:37:46:77:ec:a9:18:81:30:2a:b3:24: b9:a4:ab:c1:62:a0:d6:ea:e2:a3:ec:2a:34:57:87:38:22:31: a2:d2:59:db:59:c2:c2:9c:dd:ec:3a:34:05:e7:21:a4:3f:46: cd:96:e6:24 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWTQAxpHLXJaAVmlNJACPa08tu6wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNzA4MDAxMDI1WhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZmUzMzVhMzhlZDhkYmQzN2FiYTkwZWQ2YTIyMDhjMzEx NzQyMzY5ODA3NTZhZjdiYWJiNTdkYzIxNjY0MDNhMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5AwzOL2mpvJDqmElmHl2nrDa4cdh0tCfy8KUmGAaag1aj g5htMVEcL64HpcLenheQdLudusiu9qMniCTxekVyf3nic1QdD/QrlvLy6Nf2dkMB MwcgHRt3rpc/B92U46D+AJtVZtqz8D/lgqWWsfUq9G25dRy0NXATqU7hdHGF1YgH 3K4mOP1xeSNEUcsumdyn0fif2nSA/TeXidxngKjjWMk9f8RKQyN3ve78cNrewqV7 ga5xyU9yBO/FAm76nhdnHQFy0eKWSOWCLx7ARGAk0bw1PLAoaE2VFbdTIqGu68ey kZMr+5rbhYBh+19BGFOgguFfwIvt+SW3IRfDHwKDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUP4VYHvZ2g5l61lBNmQ932GrRc5kwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2ZjOTNlMWQwLTQ0ZmYtNGIyZi05NjJkLWQ5MWE4OTY0YTRiZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFFqeYwDQYJKoZIhvcNAQELBQADggEBACQzCqBC4NY+3p5k1BY8amaUGrDD cBJ+C2zAxyWr3ZA9OX3jSdEuTtsUIa7ok5yiZexa/YaFp401ErzvFU+8/mReyV1v KubBzR+i5dw59kR8RcnRlqIyizgTX/ZbyrlNiOe2v1uOUg/nVjESFRem1xqFPUxd qmJLb+BO4C86eDrZR6zO9q/tPtv5bRkOtg4hRAC2z65JUSreii3wFRuzNoC0Bfhi wSRXT+zSzRdYKdhBcbror+0uLPc9Q8zOdtmrWhFlXxYoH1EXn6r9cMA3RnfsqRiB MCqzJLmkq8FioNbq4qPsKjRXhzgiMaLSWdtZwsKc3ew6NAXnIaQ/Rs2W5iQ= -----END CERTIFICATE-----Generated at Tue Jul 22 11:46:07 2025 by rpki-client