$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/639621c0-050e-4e66-b3a2-1dd129de2c24.roa File: 639621c0-050e-4e66-b3a2-1dd129de2c24.roa (raw, json) Hash identifier: yAsPpDudffbxJyFlj31lPDrCGYIoUWcknKBStj7381A= Subject key identifier: 58:50:5A:D5:06:11:53:6C:E2:F4:61:D9:66:FE:EE:7B:12:A3:EE:F8 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 63EDB3825602953EC56B7CD4B120B4B534BFD0C3 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/639621c0-050e-4e66-b3a2-1dd129de2c24.roa Signing time: Wed 25 Jun 2025 00:10:18 +0000 ROA not before: Wed 25 Jun 2025 00:10:18 +0000 ROA not after: Wed 30 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 76.223.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:ed:b3:82:56:02:95:3e:c5:6b:7c:d4:b1:20:b4:b5:34:bf:d0:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Jun 25 00:10:18 2025 GMT Not After : Jul 30 23:59:59 2025 GMT Subject: serialNumber=aa0cc2e6c1e90e61faf7725456f0ef0d593eea38ba047481ba228a8936b88757, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8f:1d:37:ed:e6:e2:ba:da:57:a4:b1:28:2a: 5e:1b:74:fc:21:68:89:8e:51:a7:18:bf:23:9e:8b: 87:ca:d6:f8:fd:ab:77:be:93:cc:99:dd:62:19:ff: 97:8e:c8:5e:c3:9a:d0:0d:23:e7:a4:fb:94:60:c7: 4f:88:8d:08:69:a3:0c:f1:26:d3:90:53:e1:7d:40: c4:46:59:52:a7:40:c7:cb:06:c0:3b:c8:17:b6:a8: 9c:0b:f5:a5:ab:72:8c:a0:05:f1:35:5e:e4:a0:33: 95:38:b7:1d:c6:f4:d6:c0:b9:ff:e8:5d:de:07:f2: a4:de:b7:0e:08:21:af:46:f6:57:66:85:45:fc:a8: 1e:00:89:85:a6:a5:f3:fa:46:a2:cd:f9:a2:e3:8d: 5f:8c:04:a1:f0:cc:03:9a:5d:e9:e7:d5:e5:59:3f: c1:d6:95:b1:42:e7:bc:51:bf:29:45:6e:63:0e:d8: c9:63:d0:5c:65:eb:86:ed:c6:13:1f:4e:3f:a0:bf: 8d:bb:24:6d:9f:7d:ff:82:67:0c:64:04:32:fe:80: f3:e8:ce:7e:f9:5a:c7:ad:ab:8f:de:68:21:c2:1c: 75:43:a2:0f:fb:23:52:12:cb:fc:4b:4d:bf:ed:a7: e6:6b:10:c4:07:da:bb:3d:36:ac:df:19:a1:49:17: 28:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:50:5A:D5:06:11:53:6C:E2:F4:61:D9:66:FE:EE:7B:12:A3:EE:F8 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/639621c0-050e-4e66-b3a2-1dd129de2c24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.223.182.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:4b:8a:3d:34:f3:e8:cf:62:e3:68:76:ac:43:01:eb:36:23: 46:56:23:c7:12:01:9d:2e:94:42:d9:48:d1:15:19:75:0e:46: 4f:aa:d0:80:b2:3a:91:7b:de:1d:70:cc:94:43:5c:c0:8f:81: 2d:8f:9f:0e:ea:2b:26:fe:68:96:8e:c2:37:87:28:dc:74:72: 09:f0:1f:15:60:98:61:c3:f8:46:1e:dc:01:cf:58:8e:f0:83: f9:47:e6:44:51:ce:bf:1b:0b:76:81:30:fa:bd:f4:76:07:1a: 8c:ea:a5:22:1e:e2:73:9b:1c:9e:84:c1:fa:d9:19:0c:37:80: 71:21:57:34:d4:49:e9:6a:78:a7:71:0b:23:1a:8d:39:f7:11: 5a:88:88:d6:28:9f:e5:5e:76:95:ed:6f:da:da:9c:ac:ca:c8: e1:55:db:82:43:41:a0:66:50:9b:4c:f9:05:a0:0a:1d:fc:3f: 3e:27:a4:7a:f5:00:d6:c9:96:99:78:3f:e0:85:27:2a:8e:d7: 83:09:93:95:44:b2:3d:ea:d5:ac:43:aa:53:be:9f:d9:99:2c: 55:6a:90:54:65:4f:b7:3b:42:04:1c:8c:a9:e4:8a:48:d7:d9: c3:c3:a5:b6:d7:db:99:54:21:42:b9:1c:be:db:38:26:e3:2b: 74:c9:b1:92 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUY+2zglYClT7Fa3zUsSC0tTS/0MMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNjI1MDAxMDE4WhcNMjUwNzMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BhYTBjYzJlNmMxZTkwZTYxZmFmNzcyNTQ1NmYwZWYwZDU5 M2VlYTM4YmEwNDc0ODFiYTIyOGE4OTM2Yjg4NzU3MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDjx037ebiutpXpLEoKl4bdPwhaImOUacYvyOei4fK1vj9 q3e+k8yZ3WIZ/5eOyF7DmtANI+ek+5Rgx0+IjQhpowzxJtOQU+F9QMRGWVKnQMfL BsA7yBe2qJwL9aWrcoygBfE1XuSgM5U4tx3G9NbAuf/oXd4H8qTetw4IIa9G9ldm hUX8qB4AiYWmpfP6RqLN+aLjjV+MBKHwzAOaXenn1eVZP8HWlbFC57xRvylFbmMO 2Mlj0Fxl64btxhMfTj+gv427JG2fff+CZwxkBDL+gPPozn75Wsetq4/eaCHCHHVD og/7I1ISy/xLTb/tp+ZrEMQH2rs9NqzfGaFJFyhrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUWFBa1QYRU2zi9GHZZv7uexKj7vgwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzYzOTYyMWMwLTA1MGUtNGU2Ni1iM2EyLTFkZDEyOWRlMmMyNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABM37YwDQYJKoZIhvcNAQELBQADggEBAH9Lij008+jPYuNodqxDAes2I0ZW I8cSAZ0ulELZSNEVGXUORk+q0ICyOpF73h1wzJRDXMCPgS2Pnw7qKyb+aJaOwjeH KNx0cgnwHxVgmGHD+EYe3AHPWI7wg/lH5kRRzr8bC3aBMPq99HYHGozqpSIe4nOb HJ6EwfrZGQw3gHEhVzTUSelqeKdxCyMajTn3EVqIiNYon+VedpXtb9ranKzKyOFV 24JDQaBmUJtM+QWgCh38Pz4npHr1ANbJlpl4P+CFJyqO14MJk5VEsj3q1axDqlO+ n9mZLFVqkFRlT7c7QgQcjKnkikjX2cPDpbbX25lUIUK5HL7bOCbjK3TJsZI= -----END CERTIFICATE-----Generated at Sun Jun 29 21:08:10 2025 by rpki-client