$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/32fde2e1-3674-4a8c-9968-42521c781b0a.roa File: 32fde2e1-3674-4a8c-9968-42521c781b0a.roa (raw, json) Hash identifier: 83wr6NC6/8/+Om1iT3o8+z4GDe8AhJMO0PC4zrxgKOc= Subject key identifier: 02:56:42:A9:7A:35:6D:B5:D1:E8:79:29:17:BA:62:3E:C3:A0:F3:5F Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 4D8FC5E25F1D6EF46E946B65D1884B6BA025BB0E Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/32fde2e1-3674-4a8c-9968-42521c781b0a.roa Signing time: Fri 15 Aug 2025 00:20:55 +0000 ROA not before: Fri 15 Aug 2025 00:20:55 +0000 ROA not after: Fri 19 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.251.238.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:8f:c5:e2:5f:1d:6e:f4:6e:94:6b:65:d1:88:4b:6b:a0:25:bb:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Aug 15 00:20:55 2025 GMT Not After : Sep 19 23:59:59 2025 GMT Subject: serialNumber=fdb30322b153ce528cc1fcaec73704e83f279937d9cbe88c4524830bb9bb2a13, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ca:c3:8c:47:20:33:70:12:d9:4c:ae:19:71: 32:2e:b1:ba:4a:25:b1:da:03:c7:33:8f:20:3a:d4: 5a:be:33:74:bf:02:a1:d4:42:88:76:4d:b4:ef:fa: 89:d6:eb:ea:3c:e3:20:cc:09:10:7f:78:2b:8c:8f: 99:86:09:f3:64:c0:33:1d:ce:48:fd:5a:39:c1:ee: 20:f3:98:16:1c:c9:02:36:c1:53:97:db:ce:57:7e: 7e:56:aa:ba:85:41:79:75:fc:5d:fc:61:b5:10:22: e1:a7:03:90:28:88:57:be:6e:51:27:dd:7c:ea:bf: 1d:e9:b2:51:34:19:42:91:3e:8c:77:8d:6b:33:bb: fc:f6:3f:03:58:16:d7:05:db:75:be:01:af:e4:1c: bd:cd:db:ec:fa:3c:cc:ab:b7:f6:e5:cd:16:87:3b: 16:de:74:3e:f3:f3:62:35:f2:11:42:a8:92:c0:b4: 15:c0:65:80:c3:36:59:91:a8:32:0f:38:3e:1e:43: ea:e6:89:e2:de:71:5f:95:60:4f:a9:40:dd:93:98: 64:87:7e:13:fa:29:2e:4d:9c:07:53:08:e2:ba:b1: 10:01:ac:a7:50:84:35:01:3f:6c:86:91:83:62:ba: b4:8d:4e:9a:9c:4f:ac:15:f2:35:0e:66:c5:cf:30: 55:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:56:42:A9:7A:35:6D:B5:D1:E8:79:29:17:BA:62:3E:C3:A0:F3:5F X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/32fde2e1-3674-4a8c-9968-42521c781b0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.251.238.0/23 Signature Algorithm: sha256WithRSAEncryption 0f:a7:98:63:fa:29:11:9d:87:4d:a1:d6:59:3d:ff:07:11:1c: c7:02:07:03:19:71:34:ae:80:77:d8:6d:b0:0f:3a:a3:6e:f3: 2c:bd:0d:2b:85:47:83:24:b0:86:77:bb:d3:1a:95:e4:13:c3: b1:47:9d:f7:c6:41:ae:4d:9b:1b:95:b1:28:d0:4c:eb:0c:27: 84:8d:90:15:7b:61:0b:6e:39:1e:3f:1e:21:01:b0:d4:60:55: 60:ae:57:3f:b1:0d:9c:c4:bc:a1:b1:1d:27:60:21:20:6d:5d: 93:17:65:88:33:98:1b:63:75:9f:6a:c7:74:11:f0:63:3e:00: 47:c9:aa:2a:f1:ec:25:fe:53:6d:cf:53:e0:05:7e:0e:29:cb: 65:5c:0d:5c:1e:07:ab:40:8b:b5:05:5f:5b:2b:19:11:b1:31: b9:4e:39:e5:75:99:fb:95:0f:e8:ee:33:42:34:02:01:42:63: cf:17:67:a7:96:c0:dc:6f:18:e0:61:85:ec:b2:af:0f:29:84: 27:93:95:7a:47:4d:b5:16:ab:85:ec:01:43:cd:05:21:9e:db: 60:1c:b3:47:9c:0c:80:cb:27:6a:b9:b6:a2:78:a3:9b:57:cf: 8c:6d:53:eb:f4:f8:7e:20:dc:0d:63:cd:b5:69:55:00:51:37: df:db:66:86 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTY/F4l8dbvRulGtl0YhLa6Aluw4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwODE1MDAyMDU1WhcNMjUwOTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BmZGIzMDMyMmIxNTNjZTUyOGNjMWZjYWVjNzM3MDRlODNm Mjc5OTM3ZDljYmU4OGM0NTI0ODMwYmI5YmIyYTEzMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrysOMRyAzcBLZTK4ZcTIusbpKJbHaA8czjyA61Fq+M3S/ AqHUQoh2TbTv+onW6+o84yDMCRB/eCuMj5mGCfNkwDMdzkj9WjnB7iDzmBYcyQI2 wVOX285Xfn5WqrqFQXl1/F38YbUQIuGnA5AoiFe+blEn3Xzqvx3pslE0GUKRPox3 jWszu/z2PwNYFtcF23W+Aa/kHL3N2+z6PMyrt/blzRaHOxbedD7z82I18hFCqJLA tBXAZYDDNlmRqDIPOD4eQ+rmieLecV+VYE+pQN2TmGSHfhP6KS5NnAdTCOK6sRAB rKdQhDUBP2yGkYNiurSNTpqcT6wV8jUOZsXPMFUPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUAlZCqXo1bbXR6HkpF7piPsOg818wHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzMyZmRlMmUxLTM2NzQtNGE4Yy05OTY4LTQyNTIxYzc4MWIwYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEX++4wDQYJKoZIhvcNAQELBQADggEBAA+nmGP6KRGdh02h1lk9/wcRHMcC BwMZcTSugHfYbbAPOqNu8yy9DSuFR4MksIZ3u9MaleQTw7FHnffGQa5NmxuVsSjQ TOsMJ4SNkBV7YQtuOR4/HiEBsNRgVWCuVz+xDZzEvKGxHSdgISBtXZMXZYgzmBtj dZ9qx3QR8GM+AEfJqirx7CX+U23PU+AFfg4py2VcDVweB6tAi7UFX1srGRGxMblO OeV1mfuVD+juM0I0AgFCY88XZ6eWwNxvGOBhheyyrw8phCeTlXpHTbUWq4XsAUPN BSGe22Acs0ecDIDLJ2q5tqJ4o5tXz4xtU+v0+H4g3A1jzbVpVQBRN9/bZoY= -----END CERTIFICATE-----Generated at Wed Aug 20 10:42:54 2025 by rpki-client