$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/d5bcdba4-b39f-49d7-81da-145442d6f180.roa File: d5bcdba4-b39f-49d7-81da-145442d6f180.roa (raw, json) Hash identifier: u0hPmmT6CbvkOBFASMtN24wcv13jlqOTejPT1ep28mk= Subject key identifier: 7E:05:68:08:4D:C4:AF:5A:DC:85:5E:C8:4B:85:2B:70:CE:80:39:76 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 09BD12CCC3275A93DAA0FC9F7B4EC7AB2820ED72 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/d5bcdba4-b39f-49d7-81da-145442d6f180.roa Signing time: Sat 31 May 2025 00:10:14 +0000 ROA not before: Sat 31 May 2025 00:10:14 +0000 ROA not after: Sat 05 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 76.223.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:bd:12:cc:c3:27:5a:93:da:a0:fc:9f:7b:4e:c7:ab:28:20:ed:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: May 31 00:10:14 2025 GMT Not After : Jul 5 23:59:59 2025 GMT Subject: serialNumber=7e30891b044bb6838756410092eb0e84918bc4128e4eed47a1ae271fbfa3ab21, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2c:88:ff:9c:1a:93:d4:3d:a9:01:65:d7:1f: 28:43:f0:33:ed:ed:f5:04:71:af:a7:2d:fb:4a:91: 19:e2:2f:55:24:aa:fc:96:c1:c1:f7:8a:99:e3:ce: 7d:8a:fb:f7:cb:ac:18:d9:c7:4a:74:e3:59:93:ba: f7:6b:a8:36:a0:2e:65:e9:bb:74:ab:8a:de:9d:77: 1f:60:6e:a0:a9:04:ae:47:c7:e4:78:18:10:83:9f: 84:84:43:52:86:68:37:c7:8c:e4:39:0b:b0:7c:cb: a9:ac:cc:ba:ce:29:e9:1f:ec:d1:40:90:80:70:b9: b0:13:86:fd:88:2d:5e:fd:16:c1:96:1e:b4:25:a7: 02:54:4d:8c:7d:97:49:ed:cb:a4:5c:69:48:ef:b7: cb:84:36:89:f1:b9:4f:62:5d:fb:33:fd:67:0c:48: 81:3e:30:56:45:ff:97:47:d5:88:04:7c:f3:ad:93: 66:ea:a8:23:bb:25:eb:51:b8:26:99:ff:10:15:ec: 99:1e:2b:d1:d2:0a:ca:61:bf:6a:b9:65:a6:76:e6: 9d:8f:f7:96:1f:b5:19:ed:2d:68:39:b1:04:73:df: b4:c3:c9:7e:07:c1:b7:9c:e1:94:2b:03:e5:da:2d: a3:86:2f:44:3b:03:62:2b:aa:07:6c:5b:5d:e5:e4: af:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:05:68:08:4D:C4:AF:5A:DC:85:5E:C8:4B:85:2B:70:CE:80:39:76 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/d5bcdba4-b39f-49d7-81da-145442d6f180.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.223.177.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:99:d4:6f:91:c9:52:41:c5:9a:a2:89:29:34:14:6b:a4:95: ea:63:56:8b:6a:df:c6:e9:ec:02:20:77:05:36:3a:7f:d9:63: 65:df:f9:11:a7:7b:6b:1c:e7:eb:dc:10:84:e5:17:84:41:a9: 21:38:a4:34:30:81:16:4a:1b:7d:46:2f:f2:00:48:aa:29:76: 2f:98:f1:4f:37:9f:b1:af:8c:e1:f2:85:f2:07:7d:f4:a3:7c: 76:69:93:41:7f:cf:82:b3:9a:f4:d0:95:03:51:67:93:fc:ae: 4c:1e:5d:73:1f:8a:44:63:8f:46:70:e1:8e:f3:59:2c:9c:3a: 6a:ba:e2:f6:06:9d:06:04:28:a9:90:e1:54:8a:99:13:f6:f2: 0b:8f:75:a6:3c:79:45:91:9e:4d:f8:75:6d:83:2d:fa:eb:88: 67:7a:82:7e:ea:cf:ea:72:88:fd:98:c9:ff:c3:18:88:28:eb: db:bd:0d:a7:ea:e9:6a:9c:b2:00:1c:65:61:ac:89:04:58:40: 51:8d:87:d0:8c:8a:08:85:0a:67:36:21:fc:e4:8e:8f:84:3c: ec:18:7c:29:fd:84:69:a5:95:bb:5e:1e:dd:ed:d6:89:a1:41: 56:14:05:f1:6e:80:41:bc:bf:d2:89:0c:3b:e0:6d:6e:0c:bb: 7a:e7:10:20 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCb0SzMMnWpPaoPyfe07Hqygg7XIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNTMxMDAxMDE0WhcNMjUwNzA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZTMwODkxYjA0NGJiNjgzODc1NjQxMDA5MmViMGU4NDkx OGJjNDEyOGU0ZWVkNDdhMWFlMjcxZmJmYTNhYjIxMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBLIj/nBqT1D2pAWXXHyhD8DPt7fUEca+nLftKkRniL1Uk qvyWwcH3ipnjzn2K+/fLrBjZx0p041mTuvdrqDagLmXpu3Srit6ddx9gbqCpBK5H x+R4GBCDn4SEQ1KGaDfHjOQ5C7B8y6mszLrOKekf7NFAkIBwubAThv2ILV79FsGW HrQlpwJUTYx9l0nty6RcaUjvt8uENonxuU9iXfsz/WcMSIE+MFZF/5dH1YgEfPOt k2bqqCO7JetRuCaZ/xAV7JkeK9HSCsphv2q5ZaZ25p2P95YftRntLWg5sQRz37TD yX4Hwbec4ZQrA+XaLaOGL0Q7A2IrqgdsW13l5K/LAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUfgVoCE3Er1rchV7IS4UrcM6AOXYwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2Q1YmNkYmE0LWIzOWYtNDlkNy04MWRhLTE0NTQ0MmQ2ZjE4MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABM37EwDQYJKoZIhvcNAQELBQADggEBAG6Z1G+RyVJBxZqiiSk0FGuklepj Votq38bp7AIgdwU2On/ZY2Xf+RGne2sc5+vcEITlF4RBqSE4pDQwgRZKG31GL/IA SKopdi+Y8U83n7GvjOHyhfIHffSjfHZpk0F/z4KzmvTQlQNRZ5P8rkweXXMfikRj j0Zw4Y7zWSycOmq64vYGnQYEKKmQ4VSKmRP28guPdaY8eUWRnk34dW2DLfrriGd6 gn7qz+pyiP2Yyf/DGIgo69u9Dafq6WqcsgAcZWGsiQRYQFGNh9CMigiFCmc2Ifzk jo+EPOwYfCn9hGmllbteHt3t1omhQVYUBfFugEG8v9KJDDvgbW4Mu3rnECA= -----END CERTIFICATE-----Generated at Wed Jun 4 10:41:18 2025 by rpki-client