$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3754532b-2417-490e-8cb4-26b8fc034925.roa File: 3754532b-2417-490e-8cb4-26b8fc034925.roa (raw, json) Hash identifier: Q3DSLFthB84Gv+TV1Raz+wyFsZPGPlwEWYCKJh7tngI= Subject key identifier: C0:67:E6:1E:7B:5C:80:5B:5F:4E:90:7E:14:86:5D:0A:CA:E6:B9:96 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 630AD53F459F920644193480ED5E13D6B03163E5 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3754532b-2417-490e-8cb4-26b8fc034925.roa Signing time: Fri 15 Aug 2025 00:20:08 +0000 ROA not before: Fri 15 Aug 2025 00:20:08 +0000 ROA not after: Fri 19 Sep 2025 23:59:59 +0000 asID: 8987 IP address blocks: 23.249.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:0a:d5:3f:45:9f:92:06:44:19:34:80:ed:5e:13:d6:b0:31:63:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Aug 15 00:20:08 2025 GMT Not After : Sep 19 23:59:59 2025 GMT Subject: serialNumber=1d432dfe0f10c67325aa10aac90bddd24126b6beb530edeb36c7c22cd205c5a3, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:23:f9:71:9c:ba:d2:3d:72:d0:0d:d1:dc:c1: 43:8b:95:0a:ca:17:52:9f:9d:46:43:6f:68:ca:0f: 69:66:76:a8:e1:c4:44:4b:c5:21:be:94:90:e1:01: 8e:2f:ed:93:24:ad:79:5a:f8:1e:ef:bd:e6:ea:f8: e9:c0:28:73:37:08:a0:d1:7a:71:6f:d0:c7:63:32: 73:55:37:e6:4e:b7:f8:1c:3d:9c:79:bf:0d:4c:41: 72:aa:75:6f:75:9f:7d:20:dc:17:12:63:41:36:96: 68:8c:f6:b4:b0:ca:93:b7:6f:79:e5:3e:9d:e4:4c: a2:df:88:d4:5b:2b:ec:0d:2f:c0:fb:75:7a:d2:55: b8:8e:4d:d9:e1:c8:01:06:91:9f:8f:d2:d9:5d:ca: e1:d9:2a:08:97:33:01:93:3e:ba:ee:8c:79:79:6f: ca:28:72:7f:be:f9:a2:26:47:d2:a3:46:93:13:f6: a7:81:2b:86:2a:67:3c:11:b4:58:a0:83:d0:3c:80: 29:4c:ba:57:17:26:88:ab:99:25:6e:81:fd:98:6b: 46:9d:f8:42:41:58:db:72:1c:23:24:e6:64:2e:5d: 5e:90:d3:8d:08:94:65:3e:e1:cc:e3:d9:17:82:18: 42:e9:4a:3f:e1:b0:fa:93:ef:c8:1d:8e:d5:47:3d: 73:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:67:E6:1E:7B:5C:80:5B:5F:4E:90:7E:14:86:5D:0A:CA:E6:B9:96 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3754532b-2417-490e-8cb4-26b8fc034925.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.212.0/24 Signature Algorithm: sha256WithRSAEncryption 69:45:9b:13:d7:de:aa:b7:63:b6:21:ae:38:88:e3:76:65:de: 4d:35:56:23:7d:d2:45:47:92:b9:50:e9:2f:d7:ec:4f:87:5c: 12:94:3c:c7:33:fd:1f:76:31:cf:7d:3f:b6:10:6c:be:72:81: e4:30:a7:86:67:ff:ad:e0:9d:7f:f0:4f:e1:d2:74:d0:e6:b0: 14:34:fa:04:43:01:0f:e7:01:8a:de:1d:c9:bd:ab:cd:cf:d2: f7:0f:73:cc:2b:3a:f4:b2:c4:f8:a6:80:3d:02:17:b0:66:f3: ef:68:4e:25:37:26:3b:21:2e:7d:82:2a:f8:a4:68:80:37:83: f4:57:13:ce:43:b7:5d:35:3e:18:03:9a:15:8a:c8:e7:8a:77: 88:41:f7:0d:3e:08:4a:d4:f3:c2:32:34:5a:6b:6d:98:30:6a: 44:7d:9e:79:5a:11:bf:82:21:d1:f2:fc:ef:c0:27:b1:02:72: 3b:4f:23:53:6d:60:dc:5f:47:f8:da:0b:7b:e8:43:8b:de:9d: bc:8c:8b:b0:84:65:25:41:e2:04:78:b4:ca:12:cb:74:1c:1b: be:db:e6:81:46:85:6d:ab:56:ae:b8:b8:5e:83:2c:d5:a8:29: 07:ad:17:16:1f:d5:71:df:d9:83:96:9a:37:24:b2:dd:17:09: 0b:cf:17:92 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYwrVP0WfkgZEGTSA7V4T1rAxY+UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwODE1MDAyMDA4WhcNMjUwOTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0AxZDQzMmRmZTBmMTBjNjczMjVhYTEwYWFjOTBiZGRkMjQx MjZiNmJlYjUzMGVkZWIzNmM3YzIyY2QyMDVjNWEzMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJI/lxnLrSPXLQDdHcwUOLlQrKF1KfnUZDb2jKD2lmdqjh xERLxSG+lJDhAY4v7ZMkrXla+B7vvebq+OnAKHM3CKDRenFv0MdjMnNVN+ZOt/gc PZx5vw1MQXKqdW91n30g3BcSY0E2lmiM9rSwypO3b3nlPp3kTKLfiNRbK+wNL8D7 dXrSVbiOTdnhyAEGkZ+P0tldyuHZKgiXMwGTPrrujHl5b8oocn+++aImR9KjRpMT 9qeBK4YqZzwRtFigg9A8gClMulcXJoirmSVugf2Ya0ad+EJBWNtyHCMk5mQuXV6Q 040IlGU+4czj2ReCGELpSj/hsPqT78gdjtVHPXM7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUwGfmHntcgFtfTpB+FIZdCsrmuZYwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzM3NTQ1MzJiLTI0MTctNDkwZS04Y2I0LTI2YjhmYzAzNDkyNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX+dQwDQYJKoZIhvcNAQELBQADggEBAGlFmxPX3qq3Y7YhrjiI43Zl3k01 ViN90kVHkrlQ6S/X7E+HXBKUPMcz/R92Mc99P7YQbL5ygeQwp4Zn/63gnX/wT+HS dNDmsBQ0+gRDAQ/nAYreHcm9q83P0vcPc8wrOvSyxPimgD0CF7Bm8+9oTiU3Jjsh Ln2CKvikaIA3g/RXE85Dt101PhgDmhWKyOeKd4hB9w0+CErU88IyNFprbZgwakR9 nnlaEb+CIdHy/O/AJ7ECcjtPI1NtYNxfR/jaC3voQ4venbyMi7CEZSVB4gR4tMoS y3QcG77b5oFGhW2rVq64uF6DLNWoKQetFxYf1XHf2YOWmjckst0XCQvPF5I= -----END CERTIFICATE-----Generated at Sat Aug 23 14:08:23 2025 by rpki-client