$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/78a0cdc2-ea20-466b-be87-e9cd69e17b3e.roa File: 78a0cdc2-ea20-466b-be87-e9cd69e17b3e.roa (raw, json) Hash identifier: 7hiyTjSFnv7aYjYwJF674oC+e771o3QMds4c83/ijLk= Subject key identifier: DD:0E:DF:37:D5:E9:D6:BD:B5:7D:AA:C2:D5:75:F3:CC:35:9E:57:5D Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 41F06BA40B2FBC3177315210D3F14FF9A23DD392 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/78a0cdc2-ea20-466b-be87-e9cd69e17b3e.roa Signing time: Wed 25 Jun 2025 00:10:19 +0000 ROA not before: Wed 25 Jun 2025 00:10:19 +0000 ROA not after: Wed 30 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 76.223.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:f0:6b:a4:0b:2f:bc:31:77:31:52:10:d3:f1:4f:f9:a2:3d:d3:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Jun 25 00:10:19 2025 GMT Not After : Jul 30 23:59:59 2025 GMT Subject: serialNumber=8b1f20c78fcb7499f548bb26a2a6625bf043d9e662f877a4e601ea61c6e46606, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:0b:bc:45:f8:91:74:39:dd:7f:3a:86:d1:e9: a5:88:e7:bf:ca:10:5b:fa:b7:dd:87:40:2c:c2:a7: 62:d8:af:e2:66:6e:e5:9b:9f:b1:c8:ea:2a:c9:8f: 13:de:e8:85:85:d2:6d:cb:eb:3b:2c:09:67:e9:c4: b5:a3:76:47:ee:a5:82:d9:27:dd:7a:41:e7:d1:b4: 68:93:ce:d6:53:ab:48:43:2c:1d:ff:e3:ff:41:aa: be:4d:15:fa:8d:d9:7f:c0:21:f9:40:30:6f:ed:fa: 1b:25:2c:11:b3:d1:a5:f8:5e:ea:c5:09:30:eb:68: 7d:99:87:d5:e5:72:73:3c:40:08:b7:6b:b5:58:ac: e2:80:26:c6:54:46:1d:11:83:4b:cd:8a:a8:d9:ce: 70:b0:da:d9:de:32:f8:0b:4c:9e:81:e0:db:38:28: 30:f3:8c:f6:a1:7b:88:0f:09:92:02:61:e7:f8:35: e6:de:66:8b:38:ac:02:8d:e2:54:66:a6:f7:37:f2: ce:9a:4a:03:2a:2b:23:b2:be:49:17:eb:38:ff:c2: 64:b7:b4:4b:ed:b9:72:94:10:8a:1b:10:0b:8e:02: ac:6b:df:b5:6c:01:7e:c4:99:18:9b:48:dc:55:29: 60:ff:99:0d:5f:6c:38:f2:b0:bd:1b:31:05:b1:eb: c5:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:0E:DF:37:D5:E9:D6:BD:B5:7D:AA:C2:D5:75:F3:CC:35:9E:57:5D X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/78a0cdc2-ea20-466b-be87-e9cd69e17b3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.223.185.0/24 Signature Algorithm: sha256WithRSAEncryption 54:5d:b4:64:39:86:1b:3a:5c:61:b1:94:89:5a:9e:cf:12:43: b9:54:53:98:af:2b:be:20:67:c3:18:fa:2d:86:54:1f:a0:ec: f1:33:79:35:ac:06:19:84:88:73:92:c6:0b:fb:3d:a3:78:a3: b1:8a:97:41:05:ff:20:ba:15:02:97:f4:60:3d:e3:87:5e:ff: d4:bc:52:45:df:79:05:be:06:4f:1b:34:89:fc:9a:41:9d:42: ab:cb:9b:98:9c:3c:ea:f6:f2:12:06:ce:d7:de:b7:d7:64:cc: 2b:27:b0:6d:04:ca:82:b3:25:5b:ae:a0:41:d1:01:d6:a3:59: 6f:ea:bb:4e:bc:56:14:91:bc:7e:69:eb:be:eb:e2:09:0f:4f: 98:8b:fd:41:9a:fe:6e:08:ff:7f:57:2a:69:91:4c:31:3e:18: 71:52:08:7c:13:85:91:25:ce:78:2a:92:a8:07:66:a3:7a:33: fe:8f:89:73:53:20:e6:8f:01:9f:95:a5:69:f0:95:47:df:1d: b5:15:be:7f:cf:2b:d7:7c:0b:c6:2a:de:80:f1:3f:27:6f:de: f8:5e:56:29:f1:5c:ed:c2:3c:21:90:d1:c9:90:b2:b6:50:08: 85:b5:87:5c:68:ad:2a:cc:fe:70:5d:c3:ac:59:61:05:4f:1d: 28:69:22:3f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQfBrpAsvvDF3MVIQ0/FP+aI905IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNjI1MDAxMDE5WhcNMjUwNzMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A4YjFmMjBjNzhmY2I3NDk5ZjU0OGJiMjZhMmE2NjI1YmYw NDNkOWU2NjJmODc3YTRlNjAxZWE2MWM2ZTQ2NjA2MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDVC7xF+JF0Od1/OobR6aWI57/KEFv6t92HQCzCp2LYr+Jm buWbn7HI6irJjxPe6IWF0m3L6zssCWfpxLWjdkfupYLZJ916QefRtGiTztZTq0hD LB3/4/9Bqr5NFfqN2X/AIflAMG/t+hslLBGz0aX4XurFCTDraH2Zh9XlcnM8QAi3 a7VYrOKAJsZURh0Rg0vNiqjZznCw2tneMvgLTJ6B4Ns4KDDzjPahe4gPCZICYef4 NebeZos4rAKN4lRmpvc38s6aSgMqKyOyvkkX6zj/wmS3tEvtuXKUEIobEAuOAqxr 37VsAX7EmRibSNxVKWD/mQ1fbDjysL0bMQWx68WZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU3Q7fN9Xp1r21farC1XXzzDWeV10wHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzc4YTBjZGMyLWVhMjAtNDY2Yi1iZTg3LWU5Y2Q2OWUxN2IzZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABM37kwDQYJKoZIhvcNAQELBQADggEBAFRdtGQ5hhs6XGGxlIlans8SQ7lU U5ivK74gZ8MY+i2GVB+g7PEzeTWsBhmEiHOSxgv7PaN4o7GKl0EF/yC6FQKX9GA9 44de/9S8UkXfeQW+Bk8bNIn8mkGdQqvLm5icPOr28hIGztfet9dkzCsnsG0EyoKz JVuuoEHRAdajWW/qu068VhSRvH5p677r4gkPT5iL/UGa/m4I/39XKmmRTDE+GHFS CHwThZElzngqkqgHZqN6M/6PiXNTIOaPAZ+VpWnwlUffHbUVvn/PK9d8C8Yq3oDx Pydv3vheVinxXO3CPCGQ0cmQsrZQCIW1h1xorSrM/nBdw6xZYQVPHShpIj8= -----END CERTIFICATE-----Generated at Sun Jun 29 08:11:04 2025 by rpki-client