$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/69808968-e51a-4b2b-8f4b-0add7a4dda5d.roa File: 69808968-e51a-4b2b-8f4b-0add7a4dda5d.roa (raw, json) Hash identifier: 6ZtZO5m9hRanOMIQaDKdzfzEEou6JF3Pb+OevMV85PU= Subject key identifier: DE:6E:CA:83:37:5F:24:47:68:A0:B2:38:9C:3D:5B:4C:88:39:52:0E Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 219077A618B056B464D082D3C1DEBACDAE62B33B Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/69808968-e51a-4b2b-8f4b-0add7a4dda5d.roa Signing time: Fri 15 Aug 2025 00:21:40 +0000 ROA not before: Fri 15 Aug 2025 00:21:40 +0000 ROA not after: Fri 19 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 76.223.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:90:77:a6:18:b0:56:b4:64:d0:82:d3:c1:de:ba:cd:ae:62:b3:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Aug 15 00:21:40 2025 GMT Not After : Sep 19 23:59:59 2025 GMT Subject: serialNumber=59d09541a203f2b7c87dfe3a3e4c4be868061dfd3c09a55f8742d2708bdb8f89, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ab:97:ff:c6:84:0c:db:4c:e9:79:41:ae:e9: e7:b4:ce:e9:16:07:d9:58:66:45:23:de:cf:6a:f8: 48:d8:91:49:8b:70:6d:71:32:92:9d:29:05:60:e0: 3e:d8:44:28:23:8a:fb:bc:dd:69:22:6c:0c:86:6f: 1b:91:69:ad:47:d8:50:d8:7f:c9:e5:e3:8b:65:1b: bd:6c:14:7a:3b:95:92:7b:44:63:6c:76:93:8d:49: dc:9f:b4:82:c7:5c:43:63:f9:20:62:2e:ff:aa:e8: aa:e8:2a:4d:04:4d:52:b8:68:4e:fb:9f:b8:c1:c7: 46:7a:a0:06:3a:2e:6b:b0:da:3c:79:88:93:06:c0: e3:bd:60:92:45:8a:30:b0:12:23:1b:9d:b7:85:ca: 03:f7:69:7a:d2:f4:7b:8e:ea:0f:0f:c2:36:af:a1: 3f:a8:d2:9c:d3:f7:25:3b:91:11:11:e5:87:02:4a: c0:f1:84:21:1f:2d:3c:43:8f:83:da:ee:3d:06:3e: cb:95:c4:df:55:ce:71:43:a1:79:6d:8f:1b:2b:5c: 68:41:43:70:14:7c:e3:92:8a:43:22:6c:43:6c:ea: e2:85:ae:83:55:89:d9:29:c9:eb:5c:a0:74:ab:a0: 44:38:ce:ea:94:51:e4:31:d2:e4:e0:5f:7c:28:b9: 4d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:6E:CA:83:37:5F:24:47:68:A0:B2:38:9C:3D:5B:4C:88:39:52:0E X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/69808968-e51a-4b2b-8f4b-0add7a4dda5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.223.176.0/24 Signature Algorithm: sha256WithRSAEncryption 13:cf:3e:07:a7:3a:13:65:ab:f7:6a:d4:4a:f3:80:84:ae:78: 72:ab:d4:0b:28:81:e9:b6:21:2d:04:a0:92:83:4b:bb:e8:8a: 47:39:0c:ce:5a:02:e0:bd:89:99:e8:e9:91:e6:ae:d6:b6:57: 5c:5b:b0:85:71:d2:cb:61:4a:cd:18:d0:a7:77:d8:97:ea:51: 39:c0:e4:90:e4:bb:6c:ce:c9:34:99:03:f7:31:da:c3:d2:09: 6d:3c:32:fe:9c:4e:98:87:f8:2d:e7:0b:d1:b8:d3:55:7f:4f: 87:a1:1c:24:35:53:15:72:86:87:e1:0b:fd:cf:43:38:86:7b: 04:c4:4b:0d:f6:02:f5:81:ad:99:29:9e:08:c6:cb:1f:9d:c8: 1b:5c:15:ba:98:dc:77:75:cc:88:c7:ed:3b:44:b8:ef:a8:b1: 11:b5:b3:45:9a:ed:52:0a:c7:25:c6:cb:d5:9f:55:07:0e:78: 70:bb:25:69:9a:3f:17:fc:a5:75:e5:d1:39:6f:a3:39:77:9f: 2c:1a:96:a7:b6:d4:2f:9a:8d:e7:cb:c8:54:da:25:ac:06:d1: 18:51:38:e3:0e:b9:0d:39:84:8e:6b:33:da:14:f3:f4:fe:1c: d2:2a:04:f0:dd:54:ef:c4:fb:2d:89:87:8f:64:93:54:94:48: fa:f8:8c:0d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIZB3phiwVrRk0ILTwd66za5iszswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwODE1MDAyMTQwWhcNMjUwOTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A1OWQwOTU0MWEyMDNmMmI3Yzg3ZGZlM2EzZTRjNGJlODY4 MDYxZGZkM2MwOWE1NWY4NzQyZDI3MDhiZGI4Zjg5MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/q5f/xoQM20zpeUGu6ee0zukWB9lYZkUj3s9q+EjYkUmL cG1xMpKdKQVg4D7YRCgjivu83WkibAyGbxuRaa1H2FDYf8nl44tlG71sFHo7lZJ7 RGNsdpONSdyftILHXENj+SBiLv+q6KroKk0ETVK4aE77n7jBx0Z6oAY6Lmuw2jx5 iJMGwOO9YJJFijCwEiMbnbeFygP3aXrS9HuO6g8PwjavoT+o0pzT9yU7kRER5YcC SsDxhCEfLTxDj4Pa7j0GPsuVxN9VznFDoXltjxsrXGhBQ3AUfOOSikMibENs6uKF roNVidkpyetcoHSroEQ4zuqUUeQx0uTgX3wouU2VAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU3m7KgzdfJEdooLI4nD1bTIg5Ug4wHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzY5ODA4OTY4LWU1MWEtNGIyYi04ZjRiLTBhZGQ3YTRkZGE1ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABM37AwDQYJKoZIhvcNAQELBQADggEBABPPPgenOhNlq/dq1ErzgISueHKr 1Asogem2IS0EoJKDS7voikc5DM5aAuC9iZno6ZHmrta2V1xbsIVx0sthSs0Y0Kd3 2JfqUTnA5JDku2zOyTSZA/cx2sPSCW08Mv6cTpiH+C3nC9G401V/T4ehHCQ1UxVy hofhC/3PQziGewTESw32AvWBrZkpngjGyx+dyBtcFbqY3Hd1zIjH7TtEuO+osRG1 s0Wa7VIKxyXGy9WfVQcOeHC7JWmaPxf8pXXl0Tlvozl3nywalqe21C+ajefLyFTa JawG0RhROOMOuQ05hI5rM9oU8/T+HNIqBPDdVO/E+y2Jh49kk1SUSPr4jA0= -----END CERTIFICATE-----Generated at Wed Aug 20 10:44:40 2025 by rpki-client