$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/69808968-e51a-4b2b-8f4b-0add7a4dda5d.roa File: 69808968-e51a-4b2b-8f4b-0add7a4dda5d.roa (raw, json) Hash identifier: bod4J9MNoMgG/qIzNP5HDZjGC4ZluBy2rBGaTJ9IEqY= Subject key identifier: 4A:7C:78:A1:1E:76:DE:82:8C:A8:65:97:E1:8D:53:49:6A:56:CE:2F Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 401E2A200A07CA3774A24A605E96FDF6FE6D8A47 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/69808968-e51a-4b2b-8f4b-0add7a4dda5d.roa Signing time: Wed 25 Jun 2025 00:10:17 +0000 ROA not before: Wed 25 Jun 2025 00:10:17 +0000 ROA not after: Wed 30 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 76.223.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:1e:2a:20:0a:07:ca:37:74:a2:4a:60:5e:96:fd:f6:fe:6d:8a:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Jun 25 00:10:17 2025 GMT Not After : Jul 30 23:59:59 2025 GMT Subject: serialNumber=cec3f853323e7a623a337640ad3ecca46f8c11a3aefd249ee53f4dab058edeac, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:37:4e:84:9e:d9:34:a0:ce:a2:06:05:8b:c6: 92:16:7b:34:e2:b1:8f:85:a9:df:4c:12:98:93:b2: d7:ee:1a:97:10:4c:38:67:d3:4d:d5:ce:55:f2:e8: 6b:b1:a2:be:01:d1:c4:ec:a6:a5:e9:29:44:61:b6: c7:73:c0:36:16:4e:80:0b:dd:60:fa:cb:cc:32:72: 9f:cd:d8:ea:7f:ec:09:bf:e1:09:bc:05:ad:77:b3: 50:b4:5d:e5:12:a4:fa:70:96:65:4d:54:48:b7:af: bf:04:84:9d:3b:52:e9:1a:f2:38:dd:21:db:c2:5c: cc:1f:0b:1b:4e:9a:da:a9:af:5f:19:f1:e3:30:1f: 7b:c9:11:a1:65:8a:70:7c:b5:03:3e:c2:a1:2e:a2: 3b:cf:23:65:97:35:89:d5:d9:29:fb:2f:f8:3b:ff: 75:65:0f:be:f2:cf:55:ab:33:f5:9e:1d:6c:e3:fe: d9:e1:75:37:8c:41:e1:da:97:42:bf:bd:30:77:97: b8:c6:13:04:34:ce:4f:80:df:e7:d5:66:ed:02:ba: 51:6a:fe:49:ac:b0:af:40:0e:32:89:f6:fd:fd:96: f6:dd:6d:ff:4e:ee:ea:a1:e5:89:13:1a:35:24:3a: 7a:1c:82:cb:71:59:f1:5b:aa:95:59:c3:34:63:ee: 44:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:7C:78:A1:1E:76:DE:82:8C:A8:65:97:E1:8D:53:49:6A:56:CE:2F X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/69808968-e51a-4b2b-8f4b-0add7a4dda5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.223.176.0/24 Signature Algorithm: sha256WithRSAEncryption 91:16:c5:e6:14:9a:1c:36:0c:87:9b:8b:40:a2:5b:c9:c1:a1: a8:ce:af:d9:01:73:03:35:6c:ab:79:d0:f5:9b:75:4c:66:06: 58:14:62:fd:49:23:4a:26:55:62:94:da:b3:dc:bf:b6:bc:85: fb:a4:e0:41:de:0c:f4:80:be:11:d0:c2:a7:e4:31:e5:52:8c: 4a:37:64:82:60:c2:5a:77:03:5b:f0:64:8d:9e:9d:f1:b3:ff: 75:cd:0f:58:b6:5d:1f:52:16:92:16:35:4a:db:b2:dc:6b:93: ec:6b:11:4b:a4:72:3a:fa:6c:30:66:85:e6:ef:2c:14:ce:3d: 3f:7a:b3:97:31:b4:e6:1f:d8:3d:1a:97:bb:44:c3:9f:78:bc: 9f:72:e2:3c:ac:7f:3a:13:ca:d1:ae:0f:58:d4:59:9f:df:4e: d3:2c:f9:bb:f4:58:1a:ee:56:8b:1c:2f:8a:0d:bb:ab:91:62: 43:b2:c7:91:ab:42:fe:fe:9c:c8:a0:bd:9d:f6:31:44:34:be: ab:4f:c9:90:b9:f2:2d:55:b7:d0:a4:4f:2a:73:2d:af:37:d6: a2:b1:23:40:c9:32:c9:92:4a:9c:bc:e0:19:be:62:f1:65:f2: c0:98:b7:23:f2:b0:a3:d9:67:82:4f:9d:08:31:3b:cc:f3:f8: bd:34:3e:9d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQB4qIAoHyjd0okpgXpb99v5tikcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNjI1MDAxMDE3WhcNMjUwNzMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BjZWMzZjg1MzMyM2U3YTYyM2EzMzc2NDBhZDNlY2NhNDZm OGMxMWEzYWVmZDI0OWVlNTNmNGRhYjA1OGVkZWFjMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6N06Entk0oM6iBgWLxpIWezTisY+Fqd9MEpiTstfuGpcQ TDhn003VzlXy6Guxor4B0cTspqXpKURhtsdzwDYWToAL3WD6y8wycp/N2Op/7Am/ 4Qm8Ba13s1C0XeUSpPpwlmVNVEi3r78EhJ07Uuka8jjdIdvCXMwfCxtOmtqpr18Z 8eMwH3vJEaFlinB8tQM+wqEuojvPI2WXNYnV2Sn7L/g7/3VlD77yz1WrM/WeHWzj /tnhdTeMQeHal0K/vTB3l7jGEwQ0zk+A3+fVZu0CulFq/kmssK9ADjKJ9v39lvbd bf9O7uqh5YkTGjUkOnocgstxWfFbqpVZwzRj7kQpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUSnx4oR523oKMqGWX4Y1TSWpWzi8wHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzY5ODA4OTY4LWU1MWEtNGIyYi04ZjRiLTBhZGQ3YTRkZGE1ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABM37AwDQYJKoZIhvcNAQELBQADggEBAJEWxeYUmhw2DIebi0CiW8nBoajO r9kBcwM1bKt50PWbdUxmBlgUYv1JI0omVWKU2rPcv7a8hfuk4EHeDPSAvhHQwqfk MeVSjEo3ZIJgwlp3A1vwZI2enfGz/3XND1i2XR9SFpIWNUrbstxrk+xrEUukcjr6 bDBmhebvLBTOPT96s5cxtOYf2D0al7tEw594vJ9y4jysfzoTytGuD1jUWZ/fTtMs +bv0WBruVoscL4oNu6uRYkOyx5GrQv7+nMigvZ32MUQ0vqtPyZC58i1Vt9CkTypz La831qKxI0DJMsmSSpy84Bm+YvFl8sCYtyPysKPZZ4JPnQgxO8zz+L00Pp0= -----END CERTIFICATE-----Generated at Sun Jun 29 04:43:28 2025 by rpki-client