$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3f672c72-4d5f-408a-8326-7e62adbed891.roa File: 3f672c72-4d5f-408a-8326-7e62adbed891.roa (raw, json) Hash identifier: RxyvSKgJVVvShazsllFCAlMqwy+4q+e9G8Twrqo/PJw= Subject key identifier: 84:96:32:21:AA:27:BF:73:E3:6F:4E:A7:0E:14:9C:EB:E9:E2:E2:7E Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 33AAC77B328DAA4E93A8D105BB5016D66CD6AAB5 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3f672c72-4d5f-408a-8326-7e62adbed891.roa Signing time: Wed 25 Jun 2025 00:00:01 +0000 ROA not before: Wed 25 Jun 2025 00:00:01 +0000 ROA not after: Wed 30 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 23.249.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:aa:c7:7b:32:8d:aa:4e:93:a8:d1:05:bb:50:16:d6:6c:d6:aa:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Jun 25 00:00:01 2025 GMT Not After : Jul 30 23:59:59 2025 GMT Subject: serialNumber=eb382001a5d123fe181b4d18cc35d57dcf2651f92a357548415480817031561c, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1c:21:eb:fb:db:18:b8:ba:66:f2:31:46:a5: 0a:4c:e8:6c:bc:01:44:cc:2d:d9:80:d3:64:fe:e3: 2c:17:b9:3a:db:48:b5:0d:52:0a:b9:fd:32:37:b8: 36:05:85:30:02:cd:12:5d:f2:2e:7f:ce:fb:eb:d1: b2:d8:f5:75:df:78:34:0e:b1:2b:48:87:a5:06:ff: 7a:de:d2:0b:df:f3:a5:54:4c:47:13:0c:78:10:c7: b6:fc:ac:96:69:b9:c2:cb:80:10:60:60:21:8f:df: 45:18:71:b3:15:f4:ff:e8:04:60:37:70:b7:75:07: 2c:16:f9:b4:34:07:6e:9e:f2:ee:d6:46:bb:73:44: 7b:7d:af:94:95:08:f1:ae:f5:76:c6:6e:77:7f:a9: 4a:de:25:80:d6:c8:a0:25:93:27:96:e2:36:1f:e3: 7d:7e:3f:21:ac:e4:69:46:d6:7a:6e:0c:b0:af:c2: 30:e2:b3:11:25:d1:a7:55:a7:af:7a:b3:9b:48:ca: b7:ea:25:3c:2e:a3:51:8e:6b:98:44:63:24:d6:cf: 26:91:e8:c4:b4:77:16:63:bc:60:d0:df:e2:2b:03: 73:95:17:cf:a9:ab:f8:b5:97:fd:53:60:e7:35:ef: f9:a5:0e:54:8f:1d:e6:e5:cf:75:60:4a:6f:ff:44: 9a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:96:32:21:AA:27:BF:73:E3:6F:4E:A7:0E:14:9C:EB:E9:E2:E2:7E X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3f672c72-4d5f-408a-8326-7e62adbed891.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.221.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:27:ae:95:d4:f9:2d:fa:19:cd:87:ea:67:3a:a4:31:c4:5a: cd:76:06:fe:72:53:5a:dc:f5:bd:81:7f:75:85:0f:78:36:48: f1:da:4e:05:4c:63:2a:56:d1:36:c9:0e:76:78:80:22:dd:91: 8b:38:d2:3c:b8:17:51:d9:37:f0:1f:90:03:7c:f7:e1:ce:04: 34:5c:f3:6a:1c:d4:3c:3b:f7:f6:0a:58:ce:1b:c2:4d:4e:98: 4a:7d:4c:94:3d:af:e5:73:54:69:85:5b:e2:e9:03:97:7e:9d: 40:31:a4:f8:37:48:b8:62:4b:c6:3f:30:20:92:ac:dc:c1:ca: 9e:40:e8:60:14:94:f8:ea:e5:44:d7:3a:13:7a:94:33:91:73: 03:5b:54:13:4b:7b:f5:4e:ca:4d:8c:17:12:5b:dc:0a:4b:31: af:2f:cd:2f:30:72:e2:66:39:a0:f4:31:a5:49:5d:e5:8e:0e: 84:e8:40:50:78:fb:e4:1d:8f:a4:34:3b:4a:f0:55:25:4f:d3: f1:5a:57:37:5c:8d:6e:5f:cd:b8:2d:80:51:97:49:6f:07:6c: 56:fe:1e:ce:b1:a2:6b:04:1f:84:2f:48:1e:a2:c2:11:62:f6: b5:10:6e:bf:7e:5a:ff:a2:3b:06:59:54:1c:c2:50:ab:7d:54: 75:dc:0b:d4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUM6rHezKNqk6TqNEFu1AW1mzWqrUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNjI1MDAwMDAxWhcNMjUwNzMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BlYjM4MjAwMWE1ZDEyM2ZlMTgxYjRkMThjYzM1ZDU3ZGNm MjY1MWY5MmEzNTc1NDg0MTU0ODA4MTcwMzE1NjFjMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHHCHr+9sYuLpm8jFGpQpM6Gy8AUTMLdmA02T+4ywXuTrb SLUNUgq5/TI3uDYFhTACzRJd8i5/zvvr0bLY9XXfeDQOsStIh6UG/3re0gvf86VU TEcTDHgQx7b8rJZpucLLgBBgYCGP30UYcbMV9P/oBGA3cLd1BywW+bQ0B26e8u7W RrtzRHt9r5SVCPGu9XbGbnd/qUreJYDWyKAlkyeW4jYf431+PyGs5GlG1npuDLCv wjDisxEl0adVp696s5tIyrfqJTwuo1GOa5hEYyTWzyaR6MS0dxZjvGDQ3+IrA3OV F8+pq/i1l/1TYOc17/mlDlSPHeblz3VgSm//RJpvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhJYyIaonv3Pjb06nDhSc6+ni4n4wHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzNmNjcyYzcyLTRkNWYtNDA4YS04MzI2LTdlNjJhZGJlZDg5MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX+d0wDQYJKoZIhvcNAQELBQADggEBAB8nrpXU+S36Gc2H6mc6pDHEWs12 Bv5yU1rc9b2Bf3WFD3g2SPHaTgVMYypW0TbJDnZ4gCLdkYs40jy4F1HZN/AfkAN8 9+HOBDRc82oc1Dw79/YKWM4bwk1OmEp9TJQ9r+VzVGmFW+LpA5d+nUAxpPg3SLhi S8Y/MCCSrNzByp5A6GAUlPjq5UTXOhN6lDORcwNbVBNLe/VOyk2MFxJb3ApLMa8v zS8wcuJmOaD0MaVJXeWODoToQFB4++Qdj6Q0O0rwVSVP0/FaVzdcjW5fzbgtgFGX SW8HbFb+Hs6xomsEH4QvSB6iwhFi9rUQbr9+Wv+iOwZZVBzCUKt9VHXcC9Q= -----END CERTIFICATE-----Generated at Tue Jul 1 18:20:53 2025 by rpki-client