$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3200cf8e-c64b-4110-8ccd-4128ae231d47.roa File: 3200cf8e-c64b-4110-8ccd-4128ae231d47.roa (raw, json) Hash identifier: F5CwwP+WeDZDh/5JdFWbyBQzZF9ZjngEpqRPswv3kBo= Subject key identifier: 21:7F:70:AC:6D:57:A9:9C:19:A2:FD:C4:E6:85:4F:1B:2C:FA:D3:81 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 608EB70AA4509B73F0430D363CA127D565B6C911 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3200cf8e-c64b-4110-8ccd-4128ae231d47.roa Signing time: Mon 19 May 2025 15:10:37 +0000 ROA not before: Mon 19 May 2025 15:10:37 +0000 ROA not after: Mon 23 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 69.169.224.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:8e:b7:0a:a4:50:9b:73:f0:43:0d:36:3c:a1:27:d5:65:b6:c9:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: May 19 15:10:37 2025 GMT Not After : Jun 23 23:59:59 2025 GMT Subject: serialNumber=fe9c0ba5ee4208c23ceb48bc329c9f2193ac66946235e75a7ea440b00592bc41, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8e:9f:b0:4b:83:ba:de:69:73:cb:de:2d:1e: 53:21:f0:67:d2:ba:11:11:92:ce:26:7c:c6:b4:5d: eb:9d:89:4a:d6:e4:35:80:a7:21:84:57:a0:3b:8e: 60:38:75:9b:62:5e:98:50:65:07:ad:f7:57:fa:d0: a9:db:cc:bf:43:94:23:c8:82:12:6b:e1:ac:26:14: d5:53:6b:53:75:98:57:4f:d0:81:39:92:98:e1:c2: 92:b3:d1:82:ca:2b:1c:49:22:ae:ab:d2:a5:5b:1a: e6:37:04:c3:80:b8:b1:f0:03:6b:8b:1e:80:33:30: 3a:5a:e9:1a:cf:48:51:f4:eb:15:f2:fa:bc:5a:b5: 9b:de:a5:9e:c8:51:5a:b7:cc:32:8c:92:af:9c:dc: a3:d0:aa:7f:72:8f:6f:3a:39:5d:6e:d7:cf:d3:3c: 8a:70:59:6a:9c:b2:b4:68:99:3f:79:6a:78:c0:0b: aa:a5:08:5a:ba:f9:0b:ef:c8:63:72:81:26:be:89: 2b:4d:1c:93:d8:f3:f1:47:e1:dc:9c:32:2d:ee:19: c7:51:ad:c0:84:59:4e:93:f5:9d:18:f1:3d:a7:6c: e1:3c:58:9f:67:d4:f4:eb:c4:cd:4f:d5:8c:32:41: 27:58:77:bd:f5:52:f1:f8:33:67:5c:e4:ac:96:23: f3:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:7F:70:AC:6D:57:A9:9C:19:A2:FD:C4:E6:85:4F:1B:2C:FA:D3:81 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3200cf8e-c64b-4110-8ccd-4128ae231d47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 69.169.224.0/23 Signature Algorithm: sha256WithRSAEncryption 02:97:28:bb:fc:ac:15:b8:78:65:2b:7d:9b:dc:83:a9:8c:95: 84:05:c3:f9:df:44:66:73:7c:eb:03:9a:e6:79:34:e3:cc:80: f8:cb:c0:60:87:bd:00:1a:62:7d:70:8d:b4:cd:7f:63:d6:80: 63:91:38:3a:c5:6f:5e:ac:3b:c6:d7:1f:36:11:3a:af:e7:af: 76:86:a8:6e:c5:29:e8:73:1b:3b:6b:12:e1:30:2a:3e:03:fb: d0:af:31:d7:8a:a5:7f:ca:4a:e4:cf:93:14:1c:a7:d9:2c:0f: b1:91:8f:8b:94:f9:1f:b0:76:43:73:88:48:d2:ec:86:c8:9d: 16:db:ea:d1:9e:38:18:35:b9:12:d4:8f:b9:b7:a6:37:94:e8: 2c:ff:a7:8a:9c:72:6f:fe:4a:2f:7b:16:76:0f:ed:a0:2e:f2: 06:a9:be:e2:4a:85:ea:5b:bb:08:ed:d9:6f:00:1c:af:b9:cc: cc:f0:3e:9c:ab:4e:69:35:a7:91:8e:cc:ea:a8:40:53:7e:4a: 45:a3:c8:5b:42:d7:32:a9:ae:c3:81:b5:6d:64:71:53:86:a4: 69:85:2f:49:61:40:14:c8:62:81:e0:ae:c3:58:d7:dc:92:2d: c6:c4:2b:6c:7f:6d:1a:60:c4:2b:d3:a2:a0:e7:73:fa:92:51: c7:d0:f8:fe -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYI63CqRQm3PwQw02PKEn1WW2yREwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNTE5MTUxMDM3WhcNMjUwNjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BmZTljMGJhNWVlNDIwOGMyM2NlYjQ4YmMzMjljOWYyMTkz YWM2Njk0NjIzNWU3NWE3ZWE0NDBiMDA1OTJiYzQxMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJjp+wS4O63mlzy94tHlMh8GfSuhERks4mfMa0XeudiUrW 5DWApyGEV6A7jmA4dZtiXphQZQet91f60KnbzL9DlCPIghJr4awmFNVTa1N1mFdP 0IE5kpjhwpKz0YLKKxxJIq6r0qVbGuY3BMOAuLHwA2uLHoAzMDpa6RrPSFH06xXy +rxatZvepZ7IUVq3zDKMkq+c3KPQqn9yj286OV1u18/TPIpwWWqcsrRomT95anjA C6qlCFq6+QvvyGNygSa+iStNHJPY8/FH4dycMi3uGcdRrcCEWU6T9Z0Y8T2nbOE8 WJ9n1PTrxM1P1YwyQSdYd731UvH4M2dc5KyWI/NJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUIX9wrG1XqZwZov3E5oVPGyz604EwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzMyMDBjZjhlLWM2NGItNDExMC04Y2NkLTQxMjhhZTIzMWQ0Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFFqeAwDQYJKoZIhvcNAQELBQADggEBAAKXKLv8rBW4eGUrfZvcg6mMlYQF w/nfRGZzfOsDmuZ5NOPMgPjLwGCHvQAaYn1wjbTNf2PWgGORODrFb16sO8bXHzYR Oq/nr3aGqG7FKehzGztrEuEwKj4D+9CvMdeKpX/KSuTPkxQcp9ksD7GRj4uU+R+w dkNziEjS7IbInRbb6tGeOBg1uRLUj7m3pjeU6Cz/p4qccm/+Si97FnYP7aAu8gap vuJKhepbuwjt2W8AHK+5zMzwPpyrTmk1p5GOzOqoQFN+SkWjyFtC1zKprsOBtW1k cVOGpGmFL0lhQBTIYoHgrsNY19ySLcbEK2x/bRpgxCvToqDnc/qSUcfQ+P4= -----END CERTIFICATE-----Generated at Wed Jun 4 10:58:14 2025 by rpki-client