$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/ced1d856-48cb-491b-a1ab-adf22d3bad75.roa File: ced1d856-48cb-491b-a1ab-adf22d3bad75.roa (raw, json) Hash identifier: JzWFcIh27PMOQswwosQViapCDHBI6lOhCRFb3jCxnA8= Subject key identifier: 02:58:E0:3B:CF:03:96:2C:77:0F:0D:D0:3F:7F:5C:0D:5D:AD:9C:0C Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 41817511FEE25B9C48B419F85761D6255F52211A Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/ced1d856-48cb-491b-a1ab-adf22d3bad75.roa Signing time: Wed 27 Aug 2025 00:10:32 +0000 ROA not before: Wed 27 Aug 2025 00:10:32 +0000 ROA not after: Wed 01 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 76.223.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:81:75:11:fe:e2:5b:9c:48:b4:19:f8:57:61:d6:25:5f:52:21:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Aug 27 00:10:32 2025 GMT Not After : Oct 1 23:59:59 2025 GMT Subject: serialNumber=42698bfd62ca1bf1d9d7f4e12da091cec3250e4d48a7aa70e8e2b94dba2482a3, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f1:3d:eb:aa:f5:fe:02:a4:a3:ae:6e:24:e7: b9:5e:3d:4f:63:4b:64:e1:48:d1:f8:58:56:c9:6b: c3:cd:8a:83:15:ef:a2:3b:95:9d:e5:3c:2d:32:d4: 5c:ec:5c:af:97:c7:8d:73:d6:1c:8c:1a:1a:a8:3e: 16:f5:4a:66:82:40:03:d4:db:d2:b1:4d:f7:e7:30: 97:3e:4a:cf:ee:89:6a:70:74:8d:00:89:2e:5d:81: 2a:4c:a1:38:d5:76:7f:6f:8b:3a:9e:3f:8e:59:71: ec:a2:59:06:3d:5d:bb:f4:86:31:13:ea:fc:b3:8e: 66:a3:71:01:52:fa:25:9a:0c:f1:26:33:96:06:f6: 4e:9b:d1:80:65:8d:15:9d:a6:45:0d:2f:79:74:7c: c1:1b:aa:b7:72:d2:31:c7:a7:1c:52:92:0b:44:9e: 3b:85:f0:53:bd:fa:a8:68:55:94:c6:23:30:97:fa: 14:bc:2a:b1:99:ee:e1:3f:d3:37:53:f2:3b:1a:63: a9:b2:ad:28:80:b7:18:84:a5:02:61:cd:42:65:0f: 8d:e0:ca:5e:81:9d:3b:71:f6:63:7d:87:11:60:dc: 13:bf:3b:b7:78:0c:78:b1:f8:b7:22:e2:ce:2c:26: 39:5c:a7:6d:88:d4:ac:6d:c8:ff:65:b5:e5:76:c2: 72:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:58:E0:3B:CF:03:96:2C:77:0F:0D:D0:3F:7F:5C:0D:5D:AD:9C:0C X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/ced1d856-48cb-491b-a1ab-adf22d3bad75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.223.176.0/20 Signature Algorithm: sha256WithRSAEncryption 75:46:16:c7:cf:1b:59:62:2a:6a:d1:fb:1f:92:f8:dc:c1:4d: 5d:d1:66:92:c1:8f:66:ea:94:25:5d:91:f9:0f:f5:24:cf:7d: 0a:e6:43:c5:35:d2:89:fa:87:de:a7:08:4b:b9:0b:97:b2:af: 77:a4:5d:f1:3a:b8:b4:2f:d9:32:82:89:91:6c:a6:c8:29:7e: 49:0f:be:6b:58:97:61:05:3f:c5:6a:89:12:03:16:f1:6e:f5: 3a:b0:87:be:15:fd:7b:b0:86:92:e9:03:1b:6c:e2:de:fd:a1: b3:d1:01:cd:ed:97:34:ef:ac:d4:88:56:87:a5:7a:ed:a6:df: c0:5c:b9:14:41:29:34:98:61:d5:97:ce:e3:fc:f6:dc:ce:0c: 4b:53:17:26:c0:a3:9f:7e:27:ab:a6:a6:5a:af:e4:d6:92:27: b2:b1:b4:ae:80:6d:00:d1:0d:b9:6a:61:39:09:75:cf:9d:4a: 36:7d:a9:a5:da:91:c2:1f:27:84:2d:70:63:29:b8:86:c2:98: 57:5f:ad:a0:d3:3e:3c:a2:7e:4f:ef:7e:6f:72:bc:fc:af:5b: 54:10:99:07:26:73:5d:94:ce:96:8c:82:c1:ca:4e:da:07:19: 16:4b:14:ee:44:93:db:2e:c3:33:c7:bf:70:2c:29:3e:26:92: 99:33:39:e7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQYF1Ef7iW5xItBn4V2HWJV9SIRowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwODI3MDAxMDMyWhcNMjUxMDAxMjM1OTU5 WjB6MUkwRwYDVQQFE0A0MjY5OGJmZDYyY2ExYmYxZDlkN2Y0ZTEyZGEwOTFjZWMz MjUwZTRkNDhhN2FhNzBlOGUyYjk0ZGJhMjQ4MmEzMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCw8T3rqvX+AqSjrm4k57lePU9jS2ThSNH4WFbJa8PNioMV 76I7lZ3lPC0y1FzsXK+Xx41z1hyMGhqoPhb1SmaCQAPU29KxTffnMJc+Ss/uiWpw dI0AiS5dgSpMoTjVdn9vizqeP45ZceyiWQY9Xbv0hjET6vyzjmajcQFS+iWaDPEm M5YG9k6b0YBljRWdpkUNL3l0fMEbqrdy0jHHpxxSkgtEnjuF8FO9+qhoVZTGIzCX +hS8KrGZ7uE/0zdT8jsaY6myrSiAtxiEpQJhzUJlD43gyl6BnTtx9mN9hxFg3BO/ O7d4DHix+Lci4s4sJjlcp22I1KxtyP9lteV2wnI1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUAljgO88Dlix3Dw3QP39cDV2tnAwwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2NlZDFkODU2LTQ4Y2ItNDkxYi1hMWFiLWFkZjIyZDNiYWQ3NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBARM37AwDQYJKoZIhvcNAQELBQADggEBAHVGFsfPG1liKmrR+x+S+NzBTV3R ZpLBj2bqlCVdkfkP9STPfQrmQ8U10on6h96nCEu5C5eyr3ekXfE6uLQv2TKCiZFs psgpfkkPvmtYl2EFP8VqiRIDFvFu9Tqwh74V/XuwhpLpAxts4t79obPRAc3tlzTv rNSIVoeleu2m38BcuRRBKTSYYdWXzuP89tzODEtTFybAo59+J6umplqv5NaSJ7Kx tK6AbQDRDblqYTkJdc+dSjZ9qaXakcIfJ4QtcGMpuIbCmFdfraDTPjyifk/vfm9y vPyvW1QQmQcmc12UzpaMgsHKTtoHGRZLFO5Ek9suwzPHv3AsKT4mkpkzOec= -----END CERTIFICATE-----Generated at Sun Sep 7 16:24:43 2025 by rpki-client