$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/e7138651-9d24-41c2-8af2-d0a2f7645ca5.roa File: e7138651-9d24-41c2-8af2-d0a2f7645ca5.roa (raw, json) Hash identifier: X3M9CsDIAIKzFHh0msIi90rz8yClhjtxc3QPYwlMJ8Q= Subject key identifier: 57:69:E4:81:86:98:4A:FB:11:87:70:3E:EA:75:86:46:12:93:2E:73 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 17748B721B479E91D0940175DBF3D47215242676 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/e7138651-9d24-41c2-8af2-d0a2f7645ca5.roa Signing time: Sat 30 Aug 2025 00:00:01 +0000 ROA not before: Sat 30 Aug 2025 00:00:01 +0000 ROA not after: Sat 04 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 216.221.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:74:8b:72:1b:47:9e:91:d0:94:01:75:db:f3:d4:72:15:24:26:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Aug 30 00:00:01 2025 GMT Not After : Oct 4 23:59:59 2025 GMT Subject: serialNumber=5f8279444e168ce91227f22ab57207de34a43beb56ffb367347ffd5d38f41d1c, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:de:74:5a:c8:f1:bf:35:21:1b:af:62:72:e1: c0:36:15:85:6d:ac:42:13:07:7d:64:a7:81:b2:a3: 7c:49:6a:2a:72:a5:29:3e:89:2d:26:74:00:ba:60: 0c:ad:e0:91:1a:f3:db:c6:a9:49:06:8f:4a:d2:a1: 0d:c8:08:db:b9:15:80:5f:70:66:39:59:d1:15:bb: db:1f:43:6c:e8:76:f5:ca:c7:e2:c3:90:85:03:3a: 9f:36:92:fb:f1:d7:76:3b:74:6b:d6:57:e2:89:f9: 57:4a:ae:02:0e:af:e1:30:92:b6:e2:01:af:68:12: b3:58:9b:ee:e2:40:3b:81:3e:e5:35:55:bd:6f:64: dd:42:8e:c0:07:7e:e8:ae:03:9a:25:bf:68:a1:06: e4:0c:4d:a9:d6:c6:83:4e:57:3d:8a:ae:65:02:74: 7f:15:e2:5b:ac:ce:a3:b2:55:71:67:88:cd:4a:91: 1f:d2:b4:7f:ca:28:60:bf:62:27:7c:05:f7:cc:ce: 90:ae:fc:9a:29:c9:9b:01:43:81:88:13:57:3f:1c: de:3c:4d:bd:e0:6b:16:64:e7:54:42:7e:f5:4d:4e: bb:37:cb:bd:a1:b9:ed:d5:d0:fb:f5:90:1a:ca:19: 91:cf:ed:b3:8f:23:03:1e:03:27:1e:52:2b:4a:65: 57:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:69:E4:81:86:98:4A:FB:11:87:70:3E:EA:75:86:46:12:93:2E:73 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/e7138651-9d24-41c2-8af2-d0a2f7645ca5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.221.163.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:6a:dc:4f:a4:a9:88:19:e7:5e:9f:6b:fc:f7:32:a3:62:f6: 4a:8a:8e:de:81:58:4c:38:21:f8:6d:5d:3e:e1:f7:69:33:d7: 72:34:39:88:2c:24:15:b4:e6:e0:2a:82:59:4e:bd:b0:04:bf: 02:18:10:bf:e9:49:79:c6:22:da:de:e4:b5:5f:e4:f0:44:2d: e2:2d:e7:bf:3e:8d:d7:95:a5:70:ef:85:c7:d3:39:6d:94:75: 18:cc:4f:2c:84:3b:04:08:3f:7c:89:5f:ef:e6:39:3f:7e:35: b6:3a:7d:c3:4a:76:98:65:49:80:b1:13:07:b9:1e:75:40:21: 20:4c:ff:72:9e:e3:44:9d:78:73:1c:98:9c:9b:0d:69:da:4f: e7:52:65:a7:ce:d7:bc:d2:dd:11:3f:0f:bc:55:90:19:96:64: c4:e9:58:96:22:be:81:4a:53:fa:f8:75:60:cb:fc:6f:58:29: d8:85:f3:36:94:bb:64:5d:f2:e6:e6:0d:4e:ac:f0:b9:0e:dc: 3e:39:3e:ee:50:31:b5:8e:b7:1e:88:6a:cb:e2:e8:95:1e:7c: 40:76:00:72:35:93:c1:02:50:9d:0e:c6:7e:a2:9d:1a:7e:a6: 7e:e5:28:9f:66:ff:24:85:1f:34:c0:fb:b6:35:5b:bd:fd:78: ef:04:7b:2f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUF3SLchtHnpHQlAF12/PUchUkJnYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwODMwMDAwMDAxWhcNMjUxMDA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZjgyNzk0NDRlMTY4Y2U5MTIyN2YyMmFiNTcyMDdkZTM0 YTQzYmViNTZmZmIzNjczNDdmZmQ1ZDM4ZjQxZDFjMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCK3nRayPG/NSEbr2Jy4cA2FYVtrEITB31kp4Gyo3xJaipy pSk+iS0mdAC6YAyt4JEa89vGqUkGj0rSoQ3ICNu5FYBfcGY5WdEVu9sfQ2zodvXK x+LDkIUDOp82kvvx13Y7dGvWV+KJ+VdKrgIOr+EwkrbiAa9oErNYm+7iQDuBPuU1 Vb1vZN1CjsAHfuiuA5olv2ihBuQMTanWxoNOVz2KrmUCdH8V4luszqOyVXFniM1K kR/StH/KKGC/Yid8BffMzpCu/JopyZsBQ4GIE1c/HN48Tb3gaxZk51RCfvVNTrs3 y72hue3V0Pv1kBrKGZHP7bOPIwMeAyceUitKZVd5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUV2nkgYaYSvsRh3A+6nWGRhKTLnMwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2U3MTM4NjUxLTlkMjQtNDFjMi04YWYyLWQwYTJmNzY0NWNhNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADY3aMwDQYJKoZIhvcNAQELBQADggEBAFtq3E+kqYgZ516fa/z3MqNi9kqK jt6BWEw4IfhtXT7h92kz13I0OYgsJBW05uAqgllOvbAEvwIYEL/pSXnGItre5LVf 5PBELeIt578+jdeVpXDvhcfTOW2UdRjMTyyEOwQIP3yJX+/mOT9+NbY6fcNKdphl SYCxEwe5HnVAISBM/3Ke40SdeHMcmJybDWnaT+dSZafO17zS3RE/D7xVkBmWZMTp WJYivoFKU/r4dWDL/G9YKdiF8zaUu2Rd8ubmDU6s8LkO3D45Pu5QMbWOtx6Iasvi 6JUefEB2AHI1k8ECUJ0Oxn6inRp+pn7lKJ9m/ySFHzTA+7Y1W739eO8Eey8= -----END CERTIFICATE-----Generated at Sun Sep 7 16:14:34 2025 by rpki-client