$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/58f9ffe5-09fd-40ac-8ea4-fe1f8d01d875.roa File: 58f9ffe5-09fd-40ac-8ea4-fe1f8d01d875.roa (raw, json) Hash identifier: tvOlff98Z/+MMAAT+btJazb4ZVMhH7EphcHVHtHI2rs= Subject key identifier: 55:2F:63:F7:A3:1E:C2:4D:02:C5:23:C4:38:FF:67:B6:F1:AE:BD:7E Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 45C3D62DB7FF85B85DCD81E020AD4DC88BC5D061 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/58f9ffe5-09fd-40ac-8ea4-fe1f8d01d875.roa Signing time: Mon 19 May 2025 15:10:40 +0000 ROA not before: Mon 19 May 2025 15:10:40 +0000 ROA not after: Mon 23 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 69.169.232.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:c3:d6:2d:b7:ff:85:b8:5d:cd:81:e0:20:ad:4d:c8:8b:c5:d0:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: May 19 15:10:40 2025 GMT Not After : Jun 23 23:59:59 2025 GMT Subject: serialNumber=43d003eb04d79c7384143a7c1e6eb39a420ac5a4843ed2f7444cf7a89d94cf91, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8a:92:3f:af:af:cc:2f:fe:f2:d9:7f:2b:66: c5:7b:90:85:71:7e:c8:a9:36:f6:37:a8:46:d9:b6: eb:0f:22:4e:c7:bc:d9:a6:80:e0:f7:d2:84:3b:19: 82:57:8b:91:b1:24:0f:75:ff:23:e2:c4:45:0e:ac: ba:21:4d:3a:8a:37:eb:9a:cf:aa:49:15:0d:35:5b: 75:36:c0:df:4a:64:0f:5c:26:4f:d1:c8:30:9b:83: 0d:ee:ec:10:c7:1b:d1:be:62:fd:b4:33:c0:b8:5c: ed:be:c5:5c:47:f6:a6:14:14:12:18:5d:6e:b7:1b: 6c:c1:0a:2c:9a:d6:04:88:66:00:56:c8:88:3e:81: 20:06:b4:bd:59:50:75:5b:4b:a8:a2:83:c0:0f:3c: c8:78:24:52:56:38:64:13:4a:94:b1:54:fc:c5:14: 53:5e:33:76:c3:09:ad:5a:4d:07:05:3c:1e:8c:40: 85:fa:5b:a2:cd:b1:f6:e3:5e:17:4a:b2:93:11:13: f3:10:7b:68:f3:69:8a:7a:c8:b6:5f:00:61:5b:41: 23:cf:39:9a:18:75:0f:38:69:b0:e7:26:e1:ad:ca: b0:c9:80:e2:de:51:21:80:f6:1b:42:fa:03:14:23: d1:47:26:a4:56:46:ca:17:b7:c2:ec:4f:44:36:ca: 92:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:2F:63:F7:A3:1E:C2:4D:02:C5:23:C4:38:FF:67:B6:F1:AE:BD:7E X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/58f9ffe5-09fd-40ac-8ea4-fe1f8d01d875.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 69.169.232.0/23 Signature Algorithm: sha256WithRSAEncryption 18:df:07:8e:4e:c1:e9:ac:3f:94:5b:ef:4c:90:ed:72:e4:be: c7:72:67:b9:24:96:5e:a6:63:d0:c7:94:25:04:da:12:2b:00: 99:79:31:f1:52:85:8d:a8:c9:e4:c9:71:cf:a5:63:0c:03:b4: 69:cb:b2:6a:1d:14:6f:10:56:8a:2a:78:08:3a:8f:f2:15:b8: fd:0a:60:e3:67:df:7c:87:27:a4:2d:2d:96:31:56:b0:6c:d0: 08:fd:ef:34:e8:d0:e8:b9:f6:8c:c9:10:c8:bb:90:9e:30:eb: 8a:23:08:35:6f:0e:e6:27:22:2c:50:ea:71:ed:2d:c5:c6:ca: d4:39:84:10:3e:aa:4d:5b:11:cf:fe:95:60:fc:56:46:68:51: 91:e3:7d:b8:fa:fd:18:45:79:93:ae:52:ec:6d:83:f1:a9:d4: 9c:b7:db:20:2f:cf:df:fd:30:eb:47:83:09:53:e1:95:db:f3: 1b:09:2d:39:10:5d:39:d7:04:64:f9:50:37:f9:b1:b1:4e:a4: 57:9d:bb:e0:73:a6:d4:fe:fb:15:75:34:fa:28:18:ee:33:0e: 18:d9:a7:4d:9a:80:b4:15:29:88:88:87:35:ff:62:0a:88:d2: ea:45:74:03:f1:35:8a:e7:6f:f7:2e:16:89:66:59:90:c7:f0: 11:53:e4:62 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURcPWLbf/hbhdzYHgIK1NyIvF0GEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNTE5MTUxMDQwWhcNMjUwNjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A0M2QwMDNlYjA0ZDc5YzczODQxNDNhN2MxZTZlYjM5YTQy MGFjNWE0ODQzZWQyZjc0NDRjZjdhODlkOTRjZjkxMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHipI/r6/ML/7y2X8rZsV7kIVxfsipNvY3qEbZtusPIk7H vNmmgOD30oQ7GYJXi5GxJA91/yPixEUOrLohTTqKN+uaz6pJFQ01W3U2wN9KZA9c Jk/RyDCbgw3u7BDHG9G+Yv20M8C4XO2+xVxH9qYUFBIYXW63G2zBCiya1gSIZgBW yIg+gSAGtL1ZUHVbS6iig8APPMh4JFJWOGQTSpSxVPzFFFNeM3bDCa1aTQcFPB6M QIX6W6LNsfbjXhdKspMRE/MQe2jzaYp6yLZfAGFbQSPPOZoYdQ84abDnJuGtyrDJ gOLeUSGA9htC+gMUI9FHJqRWRsoXt8LsT0Q2ypKtAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUVS9j96Mewk0CxSPEOP9ntvGuvX4wHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzU4ZjlmZmU1LTA5ZmQtNDBhYy04ZWE0LWZlMWY4ZDAxZDg3NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFFqegwDQYJKoZIhvcNAQELBQADggEBABjfB45OwemsP5Rb70yQ7XLkvsdy Z7kkll6mY9DHlCUE2hIrAJl5MfFShY2oyeTJcc+lYwwDtGnLsmodFG8QVooqeAg6 j/IVuP0KYONn33yHJ6QtLZYxVrBs0Aj97zTo0Oi59ozJEMi7kJ4w64ojCDVvDuYn IixQ6nHtLcXGytQ5hBA+qk1bEc/+lWD8VkZoUZHjfbj6/RhFeZOuUuxtg/Gp1Jy3 2yAvz9/9MOtHgwlT4ZXb8xsJLTkQXTnXBGT5UDf5sbFOpFedu+BzptT++xV1NPoo GO4zDhjZp02agLQVKYiIhzX/YgqI0upFdAPxNYrnb/cuFolmWZDH8BFT5GI= -----END CERTIFICATE-----Generated at Sat Jun 7 05:01:07 2025 by rpki-client