$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/74dc84b0-0790-46ab-ab33-022f86c2512c.roa File: 74dc84b0-0790-46ab-ab33-022f86c2512c.roa (raw, json) Hash identifier: Y38KN7tadvAcVSgGHnyF8GY481YMvn3naPqVFYr4ZGI= Subject key identifier: BE:FB:A6:07:B2:44:36:C7:85:BC:5E:06:23:C2:35:36:CA:3C:F8:29 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 6F2E55F727C383A5C38CB3D877266A92DECCD26A Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/74dc84b0-0790-46ab-ab33-022f86c2512c.roa Signing time: Wed 25 Jun 2025 00:00:44 +0000 ROA not before: Wed 25 Jun 2025 00:00:44 +0000 ROA not after: Wed 30 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.251.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:2e:55:f7:27:c3:83:a5:c3:8c:b3:d8:77:26:6a:92:de:cc:d2:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Jun 25 00:00:44 2025 GMT Not After : Jul 30 23:59:59 2025 GMT Subject: serialNumber=57851bebbb2dae709a7a70ffa6f3a1d96e09fd24d508adf9f65149ce1a76085f, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c1:37:7a:4f:ff:a1:5e:6c:9b:a4:92:56:29: e7:33:89:32:27:0f:22:76:15:9d:9c:18:88:91:f4: 7d:a2:d8:77:32:df:5a:07:6d:9c:82:77:f5:71:9d: 21:78:b7:62:a5:3c:4a:b3:50:2e:79:23:ef:a4:c5: cd:4d:d2:ab:98:1f:9b:81:6c:38:17:46:66:28:95: 02:67:8d:7a:4f:90:06:73:89:15:b4:a4:f8:96:d2: f6:62:ab:ec:c9:3b:33:6d:f2:aa:13:2b:76:64:68: 19:a1:a4:31:d8:5e:99:17:57:a6:a5:c1:f5:c4:28: ae:a6:9a:a8:eb:28:cd:a4:ab:49:4a:7b:21:38:e2: 44:2d:5f:36:56:e2:18:5b:35:82:07:fb:d7:73:db: 2d:31:3b:a4:19:43:ce:80:40:c0:2a:2d:78:ec:b6: a0:a9:48:ea:6b:f6:2f:59:ce:47:1b:8b:be:1f:b6: d7:7e:14:d8:bc:fd:2a:b2:a1:d4:6c:37:20:78:e2: 19:3c:cf:4e:dc:5d:54:62:fa:25:6f:1a:3d:53:98: 69:d7:42:28:1b:e7:ac:45:0f:ac:6f:84:48:0b:95: e8:be:c5:67:49:ae:cb:b2:0c:1f:f2:b2:d1:44:1a: 5d:b8:7b:39:e7:de:49:42:f5:90:4a:07:66:13:42: 36:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:FB:A6:07:B2:44:36:C7:85:BC:5E:06:23:C2:35:36:CA:3C:F8:29 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/74dc84b0-0790-46ab-ab33-022f86c2512c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.251.226.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:25:cf:2f:4e:94:b1:c8:49:31:17:c1:7e:75:7e:f0:c5:7e: d1:49:05:a1:4d:72:b2:75:ef:b8:80:94:50:e1:43:30:2b:ef: f3:3f:4b:64:9a:af:f8:54:5a:3b:f3:af:8e:97:8a:7c:6c:f2: f3:9f:06:75:c3:1a:65:1e:10:34:66:ef:07:08:ec:81:11:93: 8d:b2:2e:82:82:3c:64:99:f4:ef:e8:60:88:7e:4a:70:b8:d0: 01:ad:75:ed:1e:59:36:dd:c5:1e:65:2d:c3:26:f2:2c:ef:37: 85:ec:8c:f3:70:2b:48:b8:06:4c:26:4b:d5:34:7c:11:ea:ef: 20:9b:7a:1d:b5:ee:36:01:30:9f:e2:8d:0f:6d:11:6e:4a:05: 01:02:4d:11:1e:bd:ed:15:65:74:67:ef:0d:8c:ab:29:f4:e7: 1c:17:71:a8:20:da:ed:23:a9:05:46:d4:2f:85:8c:cb:79:a3: 06:46:69:1f:39:7b:7f:ef:10:20:2b:0a:5f:cf:f3:c9:ea:cb: a0:11:b4:5c:ec:db:ad:f4:dc:4d:b8:57:45:cd:03:b5:3f:90: 53:0d:f2:7d:2d:53:94:5b:e2:20:b5:f1:4b:a4:8f:9c:4f:fa: ec:e9:64:bb:9f:99:cf:a2:77:a0:a3:ba:97:45:a4:99:7a:ac: ac:15:47:f2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUby5V9yfDg6XDjLPYdyZqkt7M0mowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNjI1MDAwMDQ0WhcNMjUwNzMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A1Nzg1MWJlYmJiMmRhZTcwOWE3YTcwZmZhNmYzYTFkOTZl MDlmZDI0ZDUwOGFkZjlmNjUxNDljZTFhNzYwODVmMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7wTd6T/+hXmybpJJWKecziTInDyJ2FZ2cGIiR9H2i2Hcy 31oHbZyCd/VxnSF4t2KlPEqzUC55I++kxc1N0quYH5uBbDgXRmYolQJnjXpPkAZz iRW0pPiW0vZiq+zJOzNt8qoTK3ZkaBmhpDHYXpkXV6alwfXEKK6mmqjrKM2kq0lK eyE44kQtXzZW4hhbNYIH+9dz2y0xO6QZQ86AQMAqLXjstqCpSOpr9i9Zzkcbi74f ttd+FNi8/SqyodRsNyB44hk8z07cXVRi+iVvGj1TmGnXQigb56xFD6xvhEgLlei+ xWdJrsuyDB/ystFEGl24eznn3klC9ZBKB2YTQjY3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUvvumB7JENseFvF4GI8I1Nso8+CkwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzc0ZGM4NGIwLTA3OTAtNDZhYi1hYjMzLTAyMmY4NmMyNTEyYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX++IwDQYJKoZIhvcNAQELBQADggEBAC4lzy9OlLHISTEXwX51fvDFftFJ BaFNcrJ177iAlFDhQzAr7/M/S2Sar/hUWjvzr46Xinxs8vOfBnXDGmUeEDRm7wcI 7IERk42yLoKCPGSZ9O/oYIh+SnC40AGtde0eWTbdxR5lLcMm8izvN4XsjPNwK0i4 BkwmS9U0fBHq7yCbeh217jYBMJ/ijQ9tEW5KBQECTREeve0VZXRn7w2Mqyn05xwX cagg2u0jqQVG1C+FjMt5owZGaR85e3/vECArCl/P88nqy6ARtFzs26303E24V0XN A7U/kFMN8n0tU5Rb4iC18Uukj5xP+uzpZLufmc+id6CjupdFpJl6rKwVR/I= -----END CERTIFICATE-----Generated at Sun Jun 29 08:15:22 2025 by rpki-client