$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/de5759b0-8ae0-4c75-8bc6-1760901356b2.roa File: de5759b0-8ae0-4c75-8bc6-1760901356b2.roa (raw, json) Hash identifier: Y6TbnbWLJ0xvqTIF/YtDDL1RsQ5PI6nWCtjnDGPMEj4= Subject key identifier: 81:AF:54:34:EF:FF:8A:F5:2B:6C:E9:4B:F3:F7:C0:47:86:04:3B:E9 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 217246751EF5B5C251F14CAB8C8809560DD956D6 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/de5759b0-8ae0-4c75-8bc6-1760901356b2.roa Signing time: Mon 30 Jun 2025 15:40:23 +0000 ROA not before: Mon 30 Jun 2025 15:40:23 +0000 ROA not after: Mon 04 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 205.251.244.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:72:46:75:1e:f5:b5:c2:51:f1:4c:ab:8c:88:09:56:0d:d9:56:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Jun 30 15:40:23 2025 GMT Not After : Aug 4 23:59:59 2025 GMT Subject: serialNumber=7dd21b0127a2e17a73a258c7aed8bd15cd447b1b9a5712be9b34e6e272fd3ba7, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:44:77:c3:20:77:b8:a1:4a:5f:00:8b:c9:0d: 0f:65:07:ee:ea:e7:45:ab:77:ce:bd:5a:42:a1:a9: 55:29:a2:e3:5b:9b:72:d6:fc:99:c1:98:60:ef:6d: 1f:50:dc:6b:2a:ba:62:37:d0:65:5e:33:51:19:8f: e6:c9:dd:d1:2f:0c:3c:03:59:52:65:a4:a0:6c:22: d8:4b:d7:22:31:d2:6a:6e:07:a2:8b:e2:f9:20:b0: 8a:ce:38:27:db:c3:fa:8a:22:d1:df:d2:43:4b:21: f3:a9:3c:e8:ad:63:1b:41:85:c5:2f:d7:51:20:8d: d4:a7:0b:61:1c:19:7f:f7:7e:f6:dc:46:3a:6c:f3: cb:30:e6:ca:f4:98:92:5e:36:8a:bd:9e:ba:ac:21: 18:af:ac:ad:94:a0:68:4b:c2:7c:21:55:83:e9:78: 2f:42:ff:f2:35:67:1c:41:d2:86:3e:04:8b:44:83: c8:5a:1e:d9:5b:ca:a2:2e:78:c9:dd:82:21:fe:32: eb:da:4b:35:ba:e0:2a:da:1a:ce:4c:e6:95:12:ab: 7f:98:6c:7f:13:38:41:90:03:32:ce:74:e1:34:d8: 59:2c:7f:ba:51:fc:b1:b3:2b:c5:c1:f3:af:35:21: a4:a8:83:a5:8c:1d:88:aa:37:c5:70:2b:fc:ae:8b: 05:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:AF:54:34:EF:FF:8A:F5:2B:6C:E9:4B:F3:F7:C0:47:86:04:3B:E9 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/de5759b0-8ae0-4c75-8bc6-1760901356b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 205.251.244.0/23 Signature Algorithm: sha256WithRSAEncryption 52:f9:ef:8f:44:ec:3d:d2:23:04:c5:ab:18:18:91:ab:af:92: 0d:a4:ce:f1:5f:cb:8b:21:6a:f1:55:fd:cd:85:1d:77:24:49: 83:43:a7:c0:e4:67:52:89:84:12:70:d8:7b:c1:56:20:54:90: 22:f7:5f:a2:10:31:98:d0:a9:5f:4e:a5:93:5e:c9:b7:0d:4a: 57:36:ca:4b:3c:06:26:b7:00:55:b4:da:3e:9a:75:51:20:d4: 78:83:1d:0c:ac:67:0e:7e:be:f0:89:1e:5c:2e:f8:68:bf:03: 5a:b6:68:94:6a:d1:a3:d9:99:d4:47:27:bf:a5:1f:f0:f6:aa: 37:4c:23:97:e5:e9:05:4a:0c:2d:e4:51:b2:74:ab:36:65:df: ea:ae:94:9b:7f:d2:76:ac:a7:cb:44:2c:6a:bb:78:e9:d5:4e: 10:c9:92:2b:c7:2f:f2:89:6a:f7:68:df:d2:8f:d5:98:a5:da: df:23:cb:6f:40:76:d6:ea:4c:6c:4f:d4:82:1e:51:30:f1:fc: f6:f0:29:79:43:49:86:a0:fa:bd:0a:e1:f9:41:bd:a9:62:48: 1a:af:db:e3:b8:e8:09:05:98:d2:82:69:e9:c4:b4:8e:6f:58: 6b:77:e7:28:48:65:ee:91:a7:7f:a4:35:61:c9:ce:04:a7:7f: 4f:77:78:a3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIXJGdR71tcJR8UyrjIgJVg3ZVtYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUwNjMwMTU0MDIzWhcNMjUwODA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZGQyMWIwMTI3YTJlMTdhNzNhMjU4YzdhZWQ4YmQxNWNk NDQ3YjFiOWE1NzEyYmU5YjM0ZTZlMjcyZmQzYmE3MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrRHfDIHe4oUpfAIvJDQ9lB+7q50Wrd869WkKhqVUpouNb m3LW/JnBmGDvbR9Q3GsqumI30GVeM1EZj+bJ3dEvDDwDWVJlpKBsIthL1yIx0mpu B6KL4vkgsIrOOCfbw/qKItHf0kNLIfOpPOitYxtBhcUv11EgjdSnC2EcGX/3fvbc Rjps88sw5sr0mJJeNoq9nrqsIRivrK2UoGhLwnwhVYPpeC9C//I1ZxxB0oY+BItE g8haHtlbyqIueMndgiH+MuvaSzW64CraGs5M5pUSq3+YbH8TOEGQAzLOdOE02Fks f7pR/LGzK8XB8681IaSog6WMHYiqN8VwK/yuiwW7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUga9UNO//ivUrbOlL8/fAR4YEO+kwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2RlNTc1OWIwLThhZTAtNGM3NS04YmM2LTE3NjA5MDEzNTZiMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHN+/QwDQYJKoZIhvcNAQELBQADggEBAFL5749E7D3SIwTFqxgYkauvkg2k zvFfy4shavFV/c2FHXckSYNDp8DkZ1KJhBJw2HvBViBUkCL3X6IQMZjQqV9OpZNe ybcNSlc2yks8Bia3AFW02j6adVEg1HiDHQysZw5+vvCJHlwu+Gi/A1q2aJRq0aPZ mdRHJ7+lH/D2qjdMI5fl6QVKDC3kUbJ0qzZl3+qulJt/0nasp8tELGq7eOnVThDJ kivHL/KJavdo39KP1Zil2t8jy29AdtbqTGxP1IIeUTDx/PbwKXlDSYag+r0K4flB valiSBqv2+O46AkFmNKCaenEtI5vWGt35yhIZe6Rp3+kNWHJzgSnf093eKM= -----END CERTIFICATE-----Generated at Tue Jul 22 04:32:10 2025 by rpki-client