$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b63fd343-5e29-48fc-84c9-2d11751d74e8.roa File: b63fd343-5e29-48fc-84c9-2d11751d74e8.roa (raw, json) Hash identifier: IqQ8uPpXcYFTbTWrBFkP5mmWfqto/GYx55pQuF/XrtU= Subject key identifier: 68:F9:E6:AB:6A:05:83:73:52:E4:ED:E4:0B:56:73:8A:EB:69:C6:75 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 22AC5102B4267F0F7AB071BD830DAC0FC19885BE Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b63fd343-5e29-48fc-84c9-2d11751d74e8.roa Signing time: Mon 19 May 2025 15:10:36 +0000 ROA not before: Mon 19 May 2025 15:10:36 +0000 ROA not after: Mon 23 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 69.169.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:ac:51:02:b4:26:7f:0f:7a:b0:71:bd:83:0d:ac:0f:c1:98:85:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: May 19 15:10:36 2025 GMT Not After : Jun 23 23:59:59 2025 GMT Subject: serialNumber=fc7211dae4787354f945c59c9e6b8e2c7cfb727c2c595f7c392e541a7a88de13, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8a:d7:32:4e:cb:25:b6:0c:ac:47:a9:29:13: b7:d3:1a:e0:1e:7a:44:1c:34:00:89:28:eb:83:dc: a4:ac:b7:a9:b0:1c:19:ad:3c:be:57:e6:96:0b:2f: 07:dd:58:9a:e9:02:57:ca:63:90:e7:f7:43:80:73: 29:2b:bc:c2:9e:ad:cb:a6:6a:ad:b5:b8:c1:9b:15: bf:70:90:b7:d0:86:b6:c7:13:a1:39:54:9a:97:21: 89:fd:27:e7:65:9a:46:02:3f:51:e3:aa:a1:1e:67: 0e:1a:dc:e0:83:90:e1:2a:fa:94:b9:f9:08:a4:47: 1f:87:85:a2:ba:b2:7e:c9:a9:6f:37:57:d4:4c:8b: 57:44:47:bd:39:56:35:52:75:ce:c7:45:09:fc:84: ad:2d:4f:0c:6f:b5:f8:0e:c4:b4:64:a8:26:ef:47: 78:51:8b:df:72:e7:3f:d7:dd:9c:4f:55:03:27:34: b9:f0:1b:45:7b:22:1c:4c:a0:c9:bf:2f:99:a8:dd: 51:85:b3:80:9a:6f:af:88:04:f3:d4:08:ef:35:30: f0:f8:90:26:f1:2f:09:eb:e7:e4:ce:ac:d7:21:01: bc:38:a2:09:07:d7:ff:1b:57:68:e9:67:68:36:49: c7:d8:f9:8a:53:16:2c:27:63:2e:65:c2:7d:f7:74: 45:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F9:E6:AB:6A:05:83:73:52:E4:ED:E4:0B:56:73:8A:EB:69:C6:75 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b63fd343-5e29-48fc-84c9-2d11751d74e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 69.169.238.0/23 Signature Algorithm: sha256WithRSAEncryption 74:75:67:56:4f:69:26:4d:95:bc:90:69:cf:16:4a:c3:a0:30: dd:e6:63:87:53:e9:9b:31:f7:fd:9a:d6:9e:c0:2c:62:0b:62: 91:e3:9f:42:ff:5b:44:66:b2:9b:19:4b:79:02:b3:ad:60:fe: 00:33:9d:f9:88:2a:9a:9a:6f:07:ec:30:79:93:30:a7:49:4a: 1b:33:26:a0:fb:7c:d9:a0:ef:37:98:51:13:aa:2b:1a:72:01: 7b:a6:73:5e:0c:bc:71:bd:84:7c:b7:0a:d8:e1:c2:f9:de:b5: 66:1f:20:29:cd:b8:ed:fd:9d:42:08:cc:89:71:d4:73:a2:09: 49:0b:f4:0f:c2:85:5e:49:4c:6c:f8:9f:c5:a4:a5:42:87:ee: d1:f8:e7:c9:7a:9a:a6:0a:d3:5b:fd:78:74:0d:f7:72:ee:51: 2b:3e:1b:9d:44:ac:10:44:85:86:8a:1e:13:a2:c6:df:8a:47: 8c:46:a2:03:3a:1a:70:7e:9c:82:6d:af:f3:21:d8:7b:aa:f1: ac:fd:98:af:24:19:0e:69:28:72:cf:7f:ba:67:9e:26:7f:3f: b9:cd:b7:f7:5e:36:fa:e1:32:16:03:9a:40:4e:2c:7e:68:98: 22:51:ee:55:55:ad:18:8d:df:51:5c:20:06:65:92:1c:b9:a3: 09:e0:be:0b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIqxRArQmfw96sHG9gw2sD8GYhb4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNTE5MTUxMDM2WhcNMjUwNjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BmYzcyMTFkYWU0Nzg3MzU0Zjk0NWM1OWM5ZTZiOGUyYzdj ZmI3MjdjMmM1OTVmN2MzOTJlNTQxYTdhODhkZTEzMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9itcyTssltgysR6kpE7fTGuAeekQcNACJKOuD3KSst6mw HBmtPL5X5pYLLwfdWJrpAlfKY5Dn90OAcykrvMKercumaq21uMGbFb9wkLfQhrbH E6E5VJqXIYn9J+dlmkYCP1HjqqEeZw4a3OCDkOEq+pS5+QikRx+HhaK6sn7JqW83 V9RMi1dER705VjVSdc7HRQn8hK0tTwxvtfgOxLRkqCbvR3hRi99y5z/X3ZxPVQMn NLnwG0V7IhxMoMm/L5mo3VGFs4Cab6+IBPPUCO81MPD4kCbxLwnr5+TOrNchAbw4 ogkH1/8bV2jpZ2g2ScfY+YpTFiwnYy5lwn33dEVZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUaPnmq2oFg3NS5O3kC1ZziutpxnUwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2I2M2ZkMzQzLTVlMjktNDhmYy04NGM5LTJkMTE3NTFkNzRlOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFFqe4wDQYJKoZIhvcNAQELBQADggEBAHR1Z1ZPaSZNlbyQac8WSsOgMN3m Y4dT6Zsx9/2a1p7ALGILYpHjn0L/W0RmspsZS3kCs61g/gAznfmIKpqabwfsMHmT MKdJShszJqD7fNmg7zeYUROqKxpyAXumc14MvHG9hHy3CtjhwvnetWYfICnNuO39 nUIIzIlx1HOiCUkL9A/ChV5JTGz4n8WkpUKH7tH458l6mqYK01v9eHQN93LuUSs+ G51ErBBEhYaKHhOixt+KR4xGogM6GnB+nIJtr/Mh2Huq8az9mK8kGQ5pKHLPf7pn niZ/P7nNt/deNvrhMhYDmkBOLH5omCJR7lVVrRiN31FcIAZlkhy5owngvgs= -----END CERTIFICATE-----Generated at Fri Jun 6 18:17:37 2025 by rpki-client