$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3ad2ae9c-d505-4b53-8a03-c0034602d40e.roa File: 3ad2ae9c-d505-4b53-8a03-c0034602d40e.roa (raw, json) Hash identifier: qFn3y9Z5xOddVDm1HstN5tDJzFQG5bV9L0cMOnRqSyw= Subject key identifier: 54:E9:59:6D:15:39:63:3E:CD:19:42:D6:D6:19:9C:51:DD:51:CE:68 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 673CAF8402FD1296A74A77A8DA6FD3FC27F994C3 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3ad2ae9c-d505-4b53-8a03-c0034602d40e.roa Signing time: Wed 25 Jun 2025 00:00:41 +0000 ROA not before: Wed 25 Jun 2025 00:00:41 +0000 ROA not after: Wed 30 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.251.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:3c:af:84:02:fd:12:96:a7:4a:77:a8:da:6f:d3:fc:27:f9:94:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Jun 25 00:00:41 2025 GMT Not After : Jul 30 23:59:59 2025 GMT Subject: serialNumber=bbfcc07678f914cc4efe243b30adf3498d28319022474d13cb79b1710b82cb85, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:12:c8:c1:1e:f2:ed:69:62:b5:ed:f1:76:65: 9f:e4:8f:72:8a:76:99:e7:4d:40:43:f3:42:94:6f: 55:40:a4:89:be:7e:b6:04:79:07:c1:e5:ac:c7:25: 1d:82:ae:8d:3e:58:98:92:1b:e1:3c:8d:c5:48:0a: 5b:3c:8f:f4:d2:4d:ed:ab:ad:45:24:63:e6:c7:f3: 1f:73:9a:46:f4:a6:21:99:d4:05:b4:10:d7:13:1e: 4c:e5:ff:ef:63:9e:ed:9b:32:a7:7c:33:a1:23:a9: 54:ac:f9:51:46:b7:fe:5d:0f:1e:4b:31:6b:78:12: 73:1d:0e:5d:7e:1f:7b:5b:52:77:b5:2f:cd:7d:95: b4:b0:f3:ad:56:86:94:6d:00:ce:6d:79:14:e7:4d: 00:38:b3:fb:2b:23:ee:45:e0:0d:00:fc:9f:b8:3a: 83:21:ae:fe:90:11:e1:1a:eb:56:ad:c1:12:90:7a: fd:bf:2b:a5:4a:ed:c8:32:59:dc:d8:b4:60:1e:7d: c8:f5:b2:83:d8:78:40:c9:23:c7:29:25:12:77:98: 8b:90:7f:0c:fd:66:af:0b:5d:c4:9a:54:63:cb:94: 9a:d0:aa:9e:35:3f:13:26:5d:09:86:76:0b:4b:2a: fa:1f:d4:88:32:de:a4:e3:67:eb:b4:1c:ea:ea:89: ed:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:E9:59:6D:15:39:63:3E:CD:19:42:D6:D6:19:9C:51:DD:51:CE:68 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3ad2ae9c-d505-4b53-8a03-c0034602d40e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.251.224.0/24 Signature Algorithm: sha256WithRSAEncryption 10:a1:6a:e5:f2:43:a3:40:c9:c0:92:f2:b5:db:88:1c:11:14: 2d:14:44:c7:b8:5d:e6:70:ee:75:6d:ea:a3:22:db:66:e8:5d: 04:e2:e2:d9:06:9a:34:d6:21:7b:0d:4e:42:51:49:de:dc:d1: 96:c8:b5:e1:2c:ce:b4:cc:78:00:ce:e6:b4:c9:2d:43:92:a1: 5c:31:80:64:65:58:c8:cf:02:96:db:bb:c5:ae:2a:a2:30:e9: 3d:ba:25:44:4f:f5:3e:94:5f:5e:72:50:f3:93:12:ea:3e:dc: 6b:08:5d:f0:70:4f:53:fc:84:f5:8d:76:57:c2:cb:22:0c:57: 02:e1:84:43:cf:2a:02:ca:89:be:1d:b7:bc:e9:03:40:c3:23: f9:35:3f:8a:20:90:5f:81:30:fd:c1:32:22:59:29:04:8e:95: 2c:bd:21:ae:2d:1a:03:a0:2f:5c:bf:8a:ba:d9:dc:44:d8:ff: 2a:e4:22:50:3b:8f:13:3f:4f:2c:84:3b:ff:eb:87:e1:b3:79: 9c:c7:cf:e8:bf:ef:9a:97:b8:75:9d:34:0c:82:c2:1d:ec:e2: a2:85:4b:72:c3:c6:14:89:19:54:08:8f:be:95:de:f9:1f:2a: 36:3f:fd:47:31:f3:03:95:07:ad:a0:40:c9:32:33:53:41:b4: 20:f7:27:a6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZzyvhAL9EpanSneo2m/T/Cf5lMMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNjI1MDAwMDQxWhcNMjUwNzMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BiYmZjYzA3Njc4ZjkxNGNjNGVmZTI0M2IzMGFkZjM0OThk MjgzMTkwMjI0NzRkMTNjYjc5YjE3MTBiODJjYjg1MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDSEsjBHvLtaWK17fF2ZZ/kj3KKdpnnTUBD80KUb1VApIm+ frYEeQfB5azHJR2Cro0+WJiSG+E8jcVICls8j/TSTe2rrUUkY+bH8x9zmkb0piGZ 1AW0ENcTHkzl/+9jnu2bMqd8M6EjqVSs+VFGt/5dDx5LMWt4EnMdDl1+H3tbUne1 L819lbSw861WhpRtAM5teRTnTQA4s/srI+5F4A0A/J+4OoMhrv6QEeEa61atwRKQ ev2/K6VK7cgyWdzYtGAefcj1soPYeEDJI8cpJRJ3mIuQfwz9Zq8LXcSaVGPLlJrQ qp41PxMmXQmGdgtLKvof1Igy3qTjZ+u0HOrqie3BAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUVOlZbRU5Yz7NGULW1hmcUd1RzmgwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzNhZDJhZTljLWQ1MDUtNGI1My04YTAzLWMwMDM0NjAyZDQwZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX++AwDQYJKoZIhvcNAQELBQADggEBABChauXyQ6NAycCS8rXbiBwRFC0U RMe4XeZw7nVt6qMi22boXQTi4tkGmjTWIXsNTkJRSd7c0ZbIteEszrTMeADO5rTJ LUOSoVwxgGRlWMjPApbbu8WuKqIw6T26JURP9T6UX15yUPOTEuo+3GsIXfBwT1P8 hPWNdlfCyyIMVwLhhEPPKgLKib4dt7zpA0DDI/k1P4ogkF+BMP3BMiJZKQSOlSy9 Ia4tGgOgL1y/irrZ3ETY/yrkIlA7jxM/TyyEO//rh+GzeZzHz+i/75qXuHWdNAyC wh3s4qKFS3LDxhSJGVQIj76V3vkfKjY//Ucx8wOVB62gQMkyM1NBtCD3J6Y= -----END CERTIFICATE-----Generated at Sun Jun 29 04:32:40 2025 by rpki-client