$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/feb848d0-befe-434e-8b06-9622757cd5f5.roa File: feb848d0-befe-434e-8b06-9622757cd5f5.roa (raw, json) Hash identifier: YGYND0PqP3nWAppUD/p4R8bCdnu2iTybt9EmstDfYNY= Subject key identifier: 1C:DE:BE:C1:A4:D2:0C:44:58:B8:D1:62:CA:F3:22:A0:9D:BA:5B:4C Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 7DF4BBAA6B04D6DA873DAA9D3778513E3B5EFE6D Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/feb848d0-befe-434e-8b06-9622757cd5f5.roa Signing time: Mon 19 May 2025 15:10:41 +0000 ROA not before: Mon 19 May 2025 15:10:41 +0000 ROA not after: Mon 23 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 76.223.180.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:f4:bb:aa:6b:04:d6:da:87:3d:aa:9d:37:78:51:3e:3b:5e:fe:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: May 19 15:10:41 2025 GMT Not After : Jun 23 23:59:59 2025 GMT Subject: serialNumber=cc9d93ae8b087a2a3a19b0c3d802efe9b223c98e0cc069930c42dd41d720d0ce, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:40:d4:fa:9e:cf:4b:39:86:d2:1b:8f:e1:2e: 05:14:85:86:85:fb:e0:24:45:6f:bd:5b:04:33:81: 00:49:3a:2e:44:2b:1e:65:1e:b1:82:79:65:14:6d: dc:a6:27:0a:4b:68:95:1f:0e:ea:0c:aa:08:ad:37: 34:70:8b:1f:59:00:0b:07:b0:14:55:eb:12:9c:d4: e2:ef:bd:d3:e8:83:11:1c:a7:5c:a2:2b:fe:56:d6: ff:be:63:dc:de:c0:28:1b:9c:20:6f:85:1d:35:15: 28:fc:18:68:44:b9:db:7c:07:2b:b8:fe:b4:72:e2: f9:9a:04:41:2b:ea:cb:e7:28:ff:28:bd:fb:62:fd: ca:e2:1a:f2:d2:41:6d:d4:36:69:3d:cb:78:2d:8f: b6:a5:15:e5:e1:ff:25:04:aa:55:e0:8e:5d:36:e7: 7f:b3:36:81:00:ba:4e:52:c9:cd:a0:fc:06:d9:2d: 9f:36:75:6b:b3:d4:a6:b0:e2:39:33:90:9e:a9:90: c4:78:ab:88:11:f6:9f:f7:30:f6:06:b3:4d:fe:e9: 9f:ad:7f:7e:eb:8d:92:1e:67:2e:e6:10:0b:29:cb: 14:83:12:be:f7:ed:09:43:6f:76:43:91:6f:43:04: 08:29:53:24:a9:b9:e5:b0:fa:0c:79:df:74:d5:67: d9:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:DE:BE:C1:A4:D2:0C:44:58:B8:D1:62:CA:F3:22:A0:9D:BA:5B:4C X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/feb848d0-befe-434e-8b06-9622757cd5f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.223.180.0/23 Signature Algorithm: sha256WithRSAEncryption 1f:a6:da:e4:a7:bd:b2:4d:46:f0:a7:ab:c9:d9:d3:01:f5:2e: 1c:fb:3e:aa:25:25:11:36:03:41:86:40:e8:a5:63:f3:f1:a1: 7c:47:25:5e:aa:7b:88:4e:85:59:8c:37:0e:9a:bf:18:1b:7f: 95:ea:01:a0:ef:d4:be:30:7a:ba:30:e3:b6:2f:15:59:bf:79: 24:d1:2c:a2:ab:b7:ed:69:3d:53:89:6a:3d:0e:e4:af:2f:d4: 5d:eb:d2:15:d3:f8:4a:21:d7:fd:1c:5d:10:b2:f1:4d:02:4b: 21:31:ff:40:84:e0:27:dc:5d:5f:eb:dc:27:77:7e:43:bc:97: 09:95:22:e2:14:cc:23:bc:2a:1d:7a:40:e1:c1:a1:36:1a:0b: c5:7c:88:f8:18:38:ec:9b:08:97:c2:50:61:55:14:a4:54:8a: c1:60:62:2e:a1:3c:e3:91:32:f2:f5:82:5a:84:b0:0a:3a:4f: 24:cd:53:f5:03:79:ac:3a:f4:ef:f0:99:d1:ad:bb:53:33:3e: b4:0f:bb:ae:59:56:cd:ef:69:63:2e:8c:d5:48:ed:cb:d7:8c: b3:8c:12:74:e8:80:90:03:4a:b9:92:7e:b9:83:89:f8:1a:d9: 09:02:29:28:7a:fc:63:5e:b2:9b:1c:94:ab:3e:e3:bf:e8:02: c1:8f:f9:80 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUffS7qmsE1tqHPaqdN3hRPjte/m0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNTE5MTUxMDQxWhcNMjUwNjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BjYzlkOTNhZThiMDg3YTJhM2ExOWIwYzNkODAyZWZlOWIy MjNjOThlMGNjMDY5OTMwYzQyZGQ0MWQ3MjBkMGNlMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDSQNT6ns9LOYbSG4/hLgUUhYaF++AkRW+9WwQzgQBJOi5E Kx5lHrGCeWUUbdymJwpLaJUfDuoMqgitNzRwix9ZAAsHsBRV6xKc1OLvvdPogxEc p1yiK/5W1v++Y9zewCgbnCBvhR01FSj8GGhEudt8Byu4/rRy4vmaBEEr6svnKP8o vfti/criGvLSQW3UNmk9y3gtj7alFeXh/yUEqlXgjl0253+zNoEAuk5Syc2g/AbZ LZ82dWuz1Kaw4jkzkJ6pkMR4q4gR9p/3MPYGs03+6Z+tf37rjZIeZy7mEAspyxSD Er737QlDb3ZDkW9DBAgpUySpueWw+gx533TVZ9npAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUHN6+waTSDERYuNFiyvMioJ26W0wwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2ZlYjg0OGQwLWJlZmUtNDM0ZS04YjA2LTk2MjI3NTdjZDVmNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFM37QwDQYJKoZIhvcNAQELBQADggEBAB+m2uSnvbJNRvCnq8nZ0wH1Lhz7 PqolJRE2A0GGQOilY/PxoXxHJV6qe4hOhVmMNw6avxgbf5XqAaDv1L4werow47Yv FVm/eSTRLKKrt+1pPVOJaj0O5K8v1F3r0hXT+Eoh1/0cXRCy8U0CSyEx/0CE4Cfc XV/r3Cd3fkO8lwmVIuIUzCO8Kh16QOHBoTYaC8V8iPgYOOybCJfCUGFVFKRUisFg Yi6hPOORMvL1glqEsAo6TyTNU/UDeaw69O/wmdGtu1MzPrQPu65ZVs3vaWMujNVI 7cvXjLOMEnTogJADSrmSfrmDifga2QkCKSh6/GNespsclKs+47/oAsGP+YA= -----END CERTIFICATE-----Generated at Sat Jun 7 04:11:58 2025 by rpki-client