$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3754532b-2417-490e-8cb4-26b8fc034925.roa File: 3754532b-2417-490e-8cb4-26b8fc034925.roa (raw, json) Hash identifier: LaCFQT3hp0VN7lIeCc8hJuUevjzDMaq2Pgl5edF9q5U= Subject key identifier: 30:22:73:BD:34:5C:A6:B8:8E:C7:AE:BB:68:F5:8E:B1:C6:97:D2:C3 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 62E3A077DABA7ADCD1B3190C16BF50C6DE081FF0 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3754532b-2417-490e-8cb4-26b8fc034925.roa Signing time: Wed 25 Jun 2025 00:00:06 +0000 ROA not before: Wed 25 Jun 2025 00:00:06 +0000 ROA not after: Wed 30 Jul 2025 23:59:59 +0000 asID: 8987 IP address blocks: 23.249.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:e3:a0:77:da:ba:7a:dc:d1:b3:19:0c:16:bf:50:c6:de:08:1f:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Jun 25 00:00:06 2025 GMT Not After : Jul 30 23:59:59 2025 GMT Subject: serialNumber=5f10e8a59ebcf3e79222f54c941df81700654f9f502ae7313cdbd8cd75cb537a, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b2:f9:1c:5a:82:60:be:fc:47:bc:d9:68:a4: e7:ab:a8:81:27:ba:ca:dd:e0:04:f8:1d:a6:19:a3: dd:cf:b0:67:b0:30:d8:08:92:d6:09:d4:45:32:bd: f9:91:49:51:e1:d5:67:da:2d:74:5b:c0:d8:7d:98: 62:83:17:4b:cc:23:5b:9b:b5:cd:71:2f:68:cd:06: 29:8f:24:6d:1d:a8:e4:e7:e4:fc:1f:b2:a8:2f:13: 77:78:3d:7e:d6:a2:81:97:c1:a2:23:50:e5:e9:c9: b8:ef:5d:14:02:50:08:54:56:76:b3:ce:17:04:43: 01:64:cc:44:32:00:65:97:d2:9f:79:ef:b5:36:61: 8d:98:d6:21:df:3c:4f:57:e2:e4:fa:47:84:4e:b0: bb:6e:bc:8f:65:0d:c9:e3:7a:76:67:b6:ee:09:f6: 0f:e5:3f:20:ab:c2:bb:b5:a1:46:7a:3b:d7:a1:12: ca:b4:74:db:0e:e3:5f:23:d5:3c:7b:b5:c7:d5:de: 6a:9e:98:4e:be:3f:b7:58:38:1a:2b:f9:81:f0:a9: 5e:d5:19:cf:4b:9c:da:f1:3f:79:cd:f4:dd:b7:53: 4a:2e:0f:9d:82:7e:5d:fb:2b:1f:35:ad:8e:64:51: 49:1b:81:5d:32:e0:30:b3:df:62:17:97:da:31:d6: 24:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:22:73:BD:34:5C:A6:B8:8E:C7:AE:BB:68:F5:8E:B1:C6:97:D2:C3 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3754532b-2417-490e-8cb4-26b8fc034925.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.212.0/24 Signature Algorithm: sha256WithRSAEncryption 38:f0:fc:e7:a0:64:85:a2:a6:36:e5:af:c3:0d:a1:97:e9:53: 41:cb:4a:15:bc:8f:40:aa:72:c9:ed:11:86:11:50:dc:e3:60: cc:c8:14:23:96:73:2f:7f:58:f0:70:e4:db:03:a7:97:da:cd: f9:92:16:27:a4:da:b0:97:04:47:97:39:5b:73:58:7f:5b:1d: ce:64:83:72:60:92:4e:3b:71:54:09:ab:33:43:e4:4c:0a:6e: 78:c0:7a:b2:bf:62:f6:bd:ab:87:10:77:c5:19:4f:be:42:05: c7:b7:d4:3b:6a:99:16:b8:07:a9:30:39:dc:f7:24:ae:c3:49: c0:c5:17:18:45:b7:dd:9c:80:87:d8:bd:e1:cb:e0:4b:5a:7b: 4e:7a:1d:5b:fc:0b:0a:33:d6:53:67:e5:52:51:ef:87:c1:03: 8c:04:63:8e:47:c7:42:29:e4:c3:1c:1f:f3:1d:7a:e3:19:2a: 62:1c:e1:b8:96:de:df:10:ac:b0:d3:d9:3b:b0:1b:83:5c:c7: 0d:34:90:db:d3:ee:75:65:5d:f7:5d:6c:31:25:72:95:45:87: 47:b2:40:cb:e4:ae:ed:7f:ba:1f:9d:16:f7:56:5a:b8:13:1a: 55:1f:e9:c4:77:23:9e:be:9c:59:36:7a:16:f3:f7:d0:e7:a4: fd:11:fc:75 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYuOgd9q6etzRsxkMFr9Qxt4IH/AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNjI1MDAwMDA2WhcNMjUwNzMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZjEwZThhNTllYmNmM2U3OTIyMmY1NGM5NDFkZjgxNzAw NjU0ZjlmNTAyYWU3MzEzY2RiZDhjZDc1Y2I1MzdhMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCVsvkcWoJgvvxHvNlopOerqIEnusrd4AT4HaYZo93PsGew MNgIktYJ1EUyvfmRSVHh1WfaLXRbwNh9mGKDF0vMI1ubtc1xL2jNBimPJG0dqOTn 5PwfsqgvE3d4PX7WooGXwaIjUOXpybjvXRQCUAhUVnazzhcEQwFkzEQyAGWX0p95 77U2YY2Y1iHfPE9X4uT6R4ROsLtuvI9lDcnjenZntu4J9g/lPyCrwru1oUZ6O9eh Esq0dNsO418j1Tx7tcfV3mqemE6+P7dYOBor+YHwqV7VGc9LnNrxP3nN9N23U0ou D52Cfl37Kx81rY5kUUkbgV0y4DCz32IXl9ox1iRtAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUMCJzvTRcpriOx667aPWOscaX0sMwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzM3NTQ1MzJiLTI0MTctNDkwZS04Y2I0LTI2YjhmYzAzNDkyNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX+dQwDQYJKoZIhvcNAQELBQADggEBADjw/OegZIWipjblr8MNoZfpU0HL ShW8j0CqcsntEYYRUNzjYMzIFCOWcy9/WPBw5NsDp5fazfmSFiek2rCXBEeXOVtz WH9bHc5kg3Jgkk47cVQJqzND5EwKbnjAerK/Yva9q4cQd8UZT75CBce31DtqmRa4 B6kwOdz3JK7DScDFFxhFt92cgIfYveHL4Etae056HVv8Cwoz1lNn5VJR74fBA4wE Y45Hx0Ip5MMcH/MdeuMZKmIc4biW3t8QrLDT2TuwG4Ncxw00kNvT7nVlXfddbDEl cpVFh0eyQMvkru1/uh+dFvdWWrgTGlUf6cR3I56+nFk2ehbz99DnpP0R/HU= -----END CERTIFICATE-----Generated at Tue Jul 1 00:29:28 2025 by rpki-client