$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5e3c0e08-edb8-4079-81e3-f4c857efb338.roa File: 5e3c0e08-edb8-4079-81e3-f4c857efb338.roa (raw, json) Hash identifier: Hu+moSaPGokk5D9twNxdjOTHHDKH3IVbXshdoGEVvSo= Subject key identifier: 1C:77:63:0C:57:F3:64:33:87:7D:C4:00:3A:23:93:17:AB:A1:7F:E8 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 2602891E3C31D8908F736FEBB735323E3B53DEA3 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5e3c0e08-edb8-4079-81e3-f4c857efb338.roa Signing time: Wed 25 Jun 2025 00:00:03 +0000 ROA not before: Wed 25 Jun 2025 00:00:03 +0000 ROA not after: Wed 30 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.249.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:02:89:1e:3c:31:d8:90:8f:73:6f:eb:b7:35:32:3e:3b:53:de:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Jun 25 00:00:03 2025 GMT Not After : Jul 30 23:59:59 2025 GMT Subject: serialNumber=db7fd32432fae7da641ea0a53aec6871bd168d92d5278b90531e9f227fe9230d, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:21:02:e5:5b:6f:6d:49:70:15:89:66:e7:01: 7a:c4:7c:98:e1:59:ec:06:d6:8e:bf:75:fd:04:0d: 89:79:dd:d2:cf:d3:d7:f9:0d:42:fa:5d:8c:cd:6f: 1d:f2:30:64:79:28:d5:34:21:71:a9:7e:c6:31:4a: 02:f7:88:0e:5c:c5:a6:93:15:9f:95:33:00:58:9e: 55:84:14:4f:87:11:48:74:66:b9:28:31:2a:e3:d6: d7:aa:46:20:b6:5e:29:54:c4:02:59:f8:04:56:ba: 34:02:1c:91:52:1a:a7:0d:2d:87:91:5f:d7:35:b4: 7a:28:34:18:a4:b4:63:fd:3c:2c:6f:b7:81:2c:10: d8:38:53:71:78:bd:48:89:34:6f:1c:01:c0:2b:e3: cd:d6:94:f4:81:09:60:e7:a8:45:9c:1c:e1:f0:26: 7e:c9:22:3e:0a:7f:f9:d4:bf:68:93:2f:73:5f:fa: 28:27:d1:d7:36:2f:47:32:7d:81:e2:9b:4e:c2:af: c3:f2:0c:7c:dd:19:b5:ba:24:18:06:84:7a:27:67: 54:51:1b:c2:e4:b8:92:04:9c:5f:27:ec:99:92:ce: 5f:63:54:9c:0c:de:46:90:3e:1d:7f:7b:b5:1e:9f: b1:47:f9:1e:26:71:63:12:51:ae:51:d4:89:6f:00: d1:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:77:63:0C:57:F3:64:33:87:7D:C4:00:3A:23:93:17:AB:A1:7F:E8 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5e3c0e08-edb8-4079-81e3-f4c857efb338.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.221.0/24 Signature Algorithm: sha256WithRSAEncryption 40:5d:b1:50:54:c0:91:cf:58:47:c0:91:98:12:14:85:ab:45: d5:06:67:77:a1:7f:4d:8c:19:78:07:ba:83:a4:61:e2:d3:6b: 39:f4:62:31:c3:7b:0e:7a:f7:52:bf:6b:6a:12:3f:e4:50:cc: a5:cd:f6:e8:4d:30:85:11:5e:21:73:4f:d7:62:c5:01:db:b5: f0:11:17:1a:6b:fa:46:5c:e9:64:29:c5:86:e2:96:63:0c:b9: ce:c5:5e:4a:4d:ed:16:79:c4:cc:9e:b5:4f:c2:0f:85:49:07: e4:60:bb:ef:35:de:71:9b:97:2d:82:74:48:82:34:de:6f:1a: 07:6c:2f:8b:e0:70:3e:b2:59:71:cf:1b:26:92:30:69:61:b5: 96:6b:bf:95:60:bb:7c:0c:9e:08:bd:79:d7:81:0c:dc:ef:75: 1c:25:3f:3d:49:72:8f:65:ae:87:b1:69:91:a3:8f:1a:4d:7a: 79:c0:6a:ec:45:73:54:be:f6:b0:66:f0:46:7b:31:5c:a7:36: 3d:b8:2d:7a:b3:60:ad:26:24:cd:8c:54:23:95:33:76:60:6b: 9e:32:07:00:4f:2e:08:ce:ed:20:7c:33:ee:34:bc:6f:66:eb: ad:d1:8f:94:f0:f2:97:b7:86:e4:2a:aa:e2:bd:6b:86:95:12: 89:7b:d4:82 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJgKJHjwx2JCPc2/rtzUyPjtT3qMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNjI1MDAwMDAzWhcNMjUwNzMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkYjdmZDMyNDMyZmFlN2RhNjQxZWEwYTUzYWVjNjg3MWJk MTY4ZDkyZDUyNzhiOTA1MzFlOWYyMjdmZTkyMzBkMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpIQLlW29tSXAViWbnAXrEfJjhWewG1o6/df0EDYl53dLP 09f5DUL6XYzNbx3yMGR5KNU0IXGpfsYxSgL3iA5cxaaTFZ+VMwBYnlWEFE+HEUh0 ZrkoMSrj1teqRiC2XilUxAJZ+ARWujQCHJFSGqcNLYeRX9c1tHooNBiktGP9PCxv t4EsENg4U3F4vUiJNG8cAcAr483WlPSBCWDnqEWcHOHwJn7JIj4Kf/nUv2iTL3Nf +ign0dc2L0cyfYHim07Cr8PyDHzdGbW6JBgGhHonZ1RRG8LkuJIEnF8n7JmSzl9j VJwM3kaQPh1/e7Uen7FH+R4mcWMSUa5R1IlvANF3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUHHdjDFfzZDOHfcQAOiOTF6uhf+gwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzVlM2MwZTA4LWVkYjgtNDA3OS04MWUzLWY0Yzg1N2VmYjMzOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX+d0wDQYJKoZIhvcNAQELBQADggEBAEBdsVBUwJHPWEfAkZgSFIWrRdUG Z3ehf02MGXgHuoOkYeLTazn0YjHDew5691K/a2oSP+RQzKXN9uhNMIURXiFzT9di xQHbtfARFxpr+kZc6WQpxYbilmMMuc7FXkpN7RZ5xMyetU/CD4VJB+Rgu+813nGb ly2CdEiCNN5vGgdsL4vgcD6yWXHPGyaSMGlhtZZrv5Vgu3wMngi9edeBDNzvdRwl Pz1Jco9lroexaZGjjxpNennAauxFc1S+9rBm8EZ7MVynNj24LXqzYK0mJM2MVCOV M3Zga54yBwBPLgjO7SB8M+40vG9m663Rj5Tw8pe3huQqquK9a4aVEol71II= -----END CERTIFICATE-----Generated at Sun Jun 29 11:34:07 2025 by rpki-client