$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/ced1d856-48cb-491b-a1ab-adf22d3bad75.roa File: ced1d856-48cb-491b-a1ab-adf22d3bad75.roa (raw, json) Hash identifier: XW491A/mhE8HUKk7XDDqlilmwVBxgLyMZKtKeVyMa2w= Subject key identifier: 4A:5E:E4:67:24:EB:CB:88:9C:AC:E5:42:37:D0:24:B9:38:EC:49:07 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 6C44891E96C0E4A0D9624C843237BBEE2AFC9445 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/ced1d856-48cb-491b-a1ab-adf22d3bad75.roa Signing time: Sat 31 May 2025 00:10:03 +0000 ROA not before: Sat 31 May 2025 00:10:03 +0000 ROA not after: Sat 05 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 76.223.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:44:89:1e:96:c0:e4:a0:d9:62:4c:84:32:37:bb:ee:2a:fc:94:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: May 31 00:10:03 2025 GMT Not After : Jul 5 23:59:59 2025 GMT Subject: serialNumber=1ed5de5630a789a7719986e00f252d94ed6c5e690fe781bd33f42fef5071abdc, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a0:12:1e:a1:51:02:81:35:47:18:d1:27:3b: 6d:80:36:02:39:d8:7c:11:6b:d5:30:3c:ab:f6:6a: 81:4e:6a:0f:d4:d9:ea:00:9f:3e:bb:ab:fb:04:f6: ba:b9:e6:c2:e6:96:e3:46:52:39:89:27:73:af:d2: a7:fa:5e:f6:ad:a7:67:a0:41:16:97:b2:c6:0f:ae: 9d:ab:ac:7d:f2:c4:a7:4d:83:f7:fc:40:1e:9e:9c: dd:a1:35:70:9c:82:cf:78:05:f9:64:3f:7a:c8:31: 23:6d:b3:5f:1f:ba:17:94:d9:1b:fe:a1:89:55:0e: 82:e2:a1:ba:5f:75:58:2c:de:e3:ea:f8:2c:0f:98: 85:79:ab:93:f6:a9:65:c6:59:c5:47:f8:b0:19:9c: 0b:b6:c9:6e:48:0f:ec:0b:9f:09:f3:07:93:2f:15: ab:ad:df:92:09:8f:b8:90:91:ca:f2:0f:38:6c:c2: 95:da:bb:28:12:e3:59:8d:07:22:c7:fd:a9:35:8f: 0f:58:df:d5:58:2d:9c:ff:55:20:ed:e5:30:06:2f: a4:77:12:f7:ed:d3:b9:7c:20:b9:a6:43:ba:ce:18: 4b:8a:5c:3e:f9:72:7e:f4:8d:66:f2:f1:fd:3a:76: 6d:fb:69:41:8c:a5:d8:e9:db:53:a8:f6:f9:db:38: 8d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:5E:E4:67:24:EB:CB:88:9C:AC:E5:42:37:D0:24:B9:38:EC:49:07 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/ced1d856-48cb-491b-a1ab-adf22d3bad75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.223.176.0/20 Signature Algorithm: sha256WithRSAEncryption 06:c9:7f:94:bf:ce:b9:f8:7c:6f:48:9c:ad:3d:ee:55:32:82: 98:58:52:c9:5a:fd:d5:29:81:2b:64:5b:cb:06:ae:4c:8f:cc: 3d:cf:81:55:ce:8b:e7:4e:22:45:1e:d2:88:da:4a:9f:30:93: 70:71:3a:e5:9d:c4:9e:61:b6:76:71:47:ff:05:6e:49:c4:eb: 28:90:89:a9:6b:44:01:df:dc:cd:0c:51:44:8e:cc:dd:8f:3b: 5e:94:3e:70:cd:4a:d3:14:da:7d:0e:8d:8b:7b:c1:b2:55:91: 29:3e:c2:e0:d9:80:c6:81:e8:94:db:08:1c:28:ea:b5:38:c2: 75:b2:6f:b7:4d:2e:a6:24:f5:9d:0c:8c:af:7a:f7:9b:f8:79: db:b6:45:d3:48:c7:c6:54:e1:fe:c3:e6:14:84:d7:f1:32:fc: 61:b6:0b:df:57:a9:ff:66:7f:15:8c:73:95:88:1c:1d:d9:5a: a0:22:d5:8d:f5:ff:81:bb:c0:11:ba:a7:20:46:29:29:d0:a9: 0b:d4:e4:ec:f4:f0:53:5f:6c:8c:dd:fa:59:34:09:2b:3f:93: dc:83:47:0d:0e:14:7a:9b:e0:8e:9b:07:d9:0d:4f:52:b9:8c: d3:95:89:c1:b6:1e:0b:a5:3d:69:45:5f:a1:4d:77:18:73:0e: 16:bb:f5:16 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbESJHpbA5KDZYkyEMje77ir8lEUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNTMxMDAxMDAzWhcNMjUwNzA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AxZWQ1ZGU1NjMwYTc4OWE3NzE5OTg2ZTAwZjI1MmQ5NGVk NmM1ZTY5MGZlNzgxYmQzM2Y0MmZlZjUwNzFhYmRjMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGoBIeoVECgTVHGNEnO22ANgI52HwRa9UwPKv2aoFOag/U 2eoAnz67q/sE9rq55sLmluNGUjmJJ3Ov0qf6Xvatp2egQRaXssYPrp2rrH3yxKdN g/f8QB6enN2hNXCcgs94BflkP3rIMSNts18fuheU2Rv+oYlVDoLiobpfdVgs3uPq +CwPmIV5q5P2qWXGWcVH+LAZnAu2yW5ID+wLnwnzB5MvFaut35IJj7iQkcryDzhs wpXauygS41mNByLH/ak1jw9Y39VYLZz/VSDt5TAGL6R3Evft07l8ILmmQ7rOGEuK XD75cn70jWby8f06dm37aUGMpdjp21Oo9vnbOI2NAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUSl7kZyTry4icrOVCN9AkuTjsSQcwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2NlZDFkODU2LTQ4Y2ItNDkxYi1hMWFiLWFkZjIyZDNiYWQ3NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBARM37AwDQYJKoZIhvcNAQELBQADggEBAAbJf5S/zrn4fG9InK097lUygphY Usla/dUpgStkW8sGrkyPzD3PgVXOi+dOIkUe0ojaSp8wk3BxOuWdxJ5htnZxR/8F bknE6yiQialrRAHf3M0MUUSOzN2PO16UPnDNStMU2n0OjYt7wbJVkSk+wuDZgMaB 6JTbCBwo6rU4wnWyb7dNLqYk9Z0MjK9695v4edu2RdNIx8ZU4f7D5hSE1/Ey/GG2 C99Xqf9mfxWMc5WIHB3ZWqAi1Y31/4G7wBG6pyBGKSnQqQvU5Oz08FNfbIzd+lk0 CSs/k9yDRw0OFHqb4I6bB9kNT1K5jNOVicG2HgulPWlFX6FNdxhzDha79RY= -----END CERTIFICATE-----Generated at Fri Jun 6 18:17:25 2025 by rpki-client