$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3f672c72-4d5f-408a-8326-7e62adbed891.roa File: 3f672c72-4d5f-408a-8326-7e62adbed891.roa (raw, json) Hash identifier: SAtSv3gcH23muHizqvffxV/1Wc5WrJt1WNsJSnokAsI= Subject key identifier: 4B:9E:67:74:84:E6:8E:E6:08:08:C8:4F:CC:12:5E:E3:0D:62:20:A7 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 77C00E7B55A97DEA1AB2B360B2285EDD91C50AC4 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3f672c72-4d5f-408a-8326-7e62adbed891.roa Signing time: Fri 15 Aug 2025 00:20:03 +0000 ROA not before: Fri 15 Aug 2025 00:20:03 +0000 ROA not after: Fri 19 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 23.249.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:c0:0e:7b:55:a9:7d:ea:1a:b2:b3:60:b2:28:5e:dd:91:c5:0a:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Aug 15 00:20:03 2025 GMT Not After : Sep 19 23:59:59 2025 GMT Subject: serialNumber=de7e07c7d1497527bef1f4d9320f1baaea9f9edb3f38ccd055342f69e5c497d9, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:27:58:90:51:1f:22:85:f6:45:3b:2d:0b:42: 47:06:29:76:4d:ad:84:18:7e:26:bf:10:a2:6b:a2: 42:4c:4a:5f:24:61:44:dd:15:0e:40:b4:d3:6d:ae: 75:50:70:9a:64:fd:5c:da:f1:41:c8:2a:dc:5c:c6: ac:9b:f7:ad:2f:12:31:c7:b9:ce:e5:5b:af:b2:ee: 33:bd:4e:fb:85:d1:83:70:2a:13:4d:c3:7f:d4:48: ed:4c:31:39:d4:c8:b0:d4:fb:aa:e4:16:c4:cf:6e: f3:05:97:52:86:95:ac:8d:00:49:9e:ee:19:6d:c1: 8a:3a:65:f0:e9:cc:ea:c2:bb:6c:07:fb:b1:a3:ea: b8:91:c1:14:f6:57:d3:34:9a:3b:55:9c:56:b6:3b: ee:32:dd:11:eb:d1:53:aa:ec:78:e5:7a:7b:3e:ae: b0:e2:70:e4:37:af:db:09:8e:a2:31:f5:10:96:b9: 1a:d9:5c:18:ee:72:fc:c8:3a:35:2a:fc:b0:1b:bd: 36:94:fd:f4:ea:4e:75:7f:85:6d:88:48:b6:81:73: 07:44:22:df:0c:0a:f8:61:a1:71:d9:04:9f:f7:94: bb:c9:45:a5:22:b8:72:ad:8d:42:af:8e:22:1b:de: 9c:08:60:56:da:12:65:6b:f8:ea:1a:41:99:02:ce: 67:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:9E:67:74:84:E6:8E:E6:08:08:C8:4F:CC:12:5E:E3:0D:62:20:A7 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3f672c72-4d5f-408a-8326-7e62adbed891.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.221.0/24 Signature Algorithm: sha256WithRSAEncryption 37:5f:df:ab:1a:75:d5:87:f3:0d:8b:39:ab:f7:4f:c2:de:b9: d9:39:29:0d:76:40:32:f0:42:dd:11:67:75:d0:73:1a:fa:cf: b3:37:66:0b:d4:a9:c1:94:b6:f9:07:de:cf:86:95:f2:7f:da: 17:33:99:80:56:9e:98:d3:b9:55:75:64:2d:a3:4e:7d:a8:04: f9:bb:70:b0:32:5c:1e:c3:05:8d:99:40:b2:69:fe:c7:61:f2: 94:29:89:4e:7a:b3:8e:fa:13:5c:1f:6a:00:c8:d3:8a:8a:a7: 1e:84:1f:a4:28:a1:fc:f0:3d:d1:dd:26:ac:61:70:4b:b9:e2: 97:e6:f2:ec:fd:7f:62:a5:fa:c0:e2:b7:ed:bf:63:f3:99:f0: a7:69:c3:45:8b:58:d8:e7:7e:b7:6f:4e:f4:b7:ce:3a:f4:83: 14:11:f7:43:bf:20:64:6a:d7:60:3b:34:1c:aa:c8:23:89:e9: 95:ee:87:ff:5e:16:27:65:af:d9:8a:18:36:3e:aa:dd:88:ca: 72:25:37:94:84:50:13:ee:5d:ed:0f:25:28:e0:97:ce:e4:25: 3c:d2:a4:91:f3:7b:37:3f:81:58:e5:5b:f2:b5:58:ce:e9:13: 72:de:20:4f:1e:5c:31:a0:1b:7a:4d:29:7a:4d:31:98:ae:be: 49:76:bb:94 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUd8AOe1WpfeoasrNgsihe3ZHFCsQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwODE1MDAyMDAzWhcNMjUwOTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BkZTdlMDdjN2QxNDk3NTI3YmVmMWY0ZDkzMjBmMWJhYWVh OWY5ZWRiM2YzOGNjZDA1NTM0MmY2OWU1YzQ5N2Q5MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCKJ1iQUR8ihfZFOy0LQkcGKXZNrYQYfia/EKJrokJMSl8k YUTdFQ5AtNNtrnVQcJpk/Vza8UHIKtxcxqyb960vEjHHuc7lW6+y7jO9TvuF0YNw KhNNw3/USO1MMTnUyLDU+6rkFsTPbvMFl1KGlayNAEme7hltwYo6ZfDpzOrCu2wH +7Gj6riRwRT2V9M0mjtVnFa2O+4y3RHr0VOq7Hjlens+rrDicOQ3r9sJjqIx9RCW uRrZXBjucvzIOjUq/LAbvTaU/fTqTnV/hW2ISLaBcwdEIt8MCvhhoXHZBJ/3lLvJ RaUiuHKtjUKvjiIb3pwIYFbaEmVr+OoaQZkCzmcDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUS55ndITmjuYICMhPzBJe4w1iIKcwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzNmNjcyYzcyLTRkNWYtNDA4YS04MzI2LTdlNjJhZGJlZDg5MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX+d0wDQYJKoZIhvcNAQELBQADggEBADdf36saddWH8w2LOav3T8Leudk5 KQ12QDLwQt0RZ3XQcxr6z7M3ZgvUqcGUtvkH3s+GlfJ/2hczmYBWnpjTuVV1ZC2j Tn2oBPm7cLAyXB7DBY2ZQLJp/sdh8pQpiU56s476E1wfagDI04qKpx6EH6Qoofzw PdHdJqxhcEu54pfm8uz9f2Kl+sDit+2/Y/OZ8Kdpw0WLWNjnfrdvTvS3zjr0gxQR 90O/IGRq12A7NByqyCOJ6ZXuh/9eFidlr9mKGDY+qt2IynIlN5SEUBPuXe0PJSjg l87kJTzSpJHzezc/gVjlW/K1WM7pE3LeIE8eXDGgG3pNKXpNMZiuvkl2u5Q= -----END CERTIFICATE-----Generated at Sat Aug 23 08:29:52 2025 by rpki-client