$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/951b66f0-8993-47d2-9bf5-e85f4ad5e32b.roa File: 951b66f0-8993-47d2-9bf5-e85f4ad5e32b.roa (raw, json) Hash identifier: m9cAe0QNXMFbVQn3JcQUjrxmYWueQqgKOIwuCi77pwk= Subject key identifier: B8:8E:85:E6:62:43:1E:F7:E4:C9:54:DA:E9:E9:02:AB:91:22:50:29 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 71DC273CB2412FEE97210352CA0AF3D07D7034F2 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/951b66f0-8993-47d2-9bf5-e85f4ad5e32b.roa Signing time: Wed 25 Jun 2025 00:00:17 +0000 ROA not before: Wed 25 Jun 2025 00:00:17 +0000 ROA not after: Wed 30 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.249.218.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:dc:27:3c:b2:41:2f:ee:97:21:03:52:ca:0a:f3:d0:7d:70:34:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Jun 25 00:00:17 2025 GMT Not After : Jul 30 23:59:59 2025 GMT Subject: serialNumber=a99824305c3956752856ac5535b568cd3065df8d9881dbecff456bf4a1434e4f, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:a6:9c:9f:c6:82:0e:74:70:a7:83:65:f0:4d: d6:87:4b:a9:d6:d9:2a:0e:47:fc:10:d8:5d:69:6a: 98:a6:63:b8:21:03:a4:16:88:0c:a7:d7:ac:37:bd: 3b:a4:04:ac:ec:63:3c:77:53:86:39:05:3a:27:6e: 31:2f:34:35:66:f1:cf:d4:87:d9:77:a4:cf:de:50: b3:35:5a:05:fd:9b:ca:79:95:d6:ab:3a:e1:7a:c2: 22:b5:d9:b2:f5:d1:9b:0d:16:be:a2:45:2d:13:e4: da:59:bd:8b:0d:c7:03:be:e1:49:62:99:0c:7a:78: 1b:81:49:93:65:37:43:cd:58:44:5d:68:3a:7e:94: ce:de:d0:d8:81:80:e1:94:10:c6:10:60:08:e9:e9: b7:23:d2:22:4e:c7:75:25:05:de:51:a1:c1:7e:c9: 94:65:1c:97:37:66:1a:bb:a3:9a:e1:f3:7b:f7:5c: e9:c4:cb:a0:42:9f:e0:e3:9f:5f:79:75:5f:5b:0d: d8:7b:3c:ae:06:36:5e:bf:96:e0:28:8a:47:4b:71: c4:31:66:4d:d7:d6:ce:06:b5:76:a8:d5:b9:a8:2f: 5e:fe:d9:b6:b8:e7:52:ae:70:9e:82:4f:26:6f:8e: f5:13:ae:0c:80:56:09:a1:3f:98:c6:19:f7:50:54: 1b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:8E:85:E6:62:43:1E:F7:E4:C9:54:DA:E9:E9:02:AB:91:22:50:29 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/951b66f0-8993-47d2-9bf5-e85f4ad5e32b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.218.0/23 Signature Algorithm: sha256WithRSAEncryption 20:08:53:41:ca:6e:37:38:59:08:2b:c6:ad:d6:1a:7c:0b:57: 43:65:76:a3:69:2d:0d:c5:8c:22:e0:51:f7:54:d4:e4:1e:68: 78:ef:4d:11:55:f0:e8:80:41:04:db:92:50:ba:62:95:b5:cb: 68:ab:ea:82:0f:a0:d2:1a:f3:a3:6c:01:ee:b1:c6:50:ef:e8: 94:13:f3:ac:55:3b:f1:45:a1:db:99:23:e4:05:14:26:95:72: 06:f8:27:a8:82:3d:18:ce:72:e9:05:3a:0d:e1:be:1b:6c:2d: 60:4e:cc:7a:47:c3:91:4d:aa:df:28:93:9c:83:89:7e:77:16: 37:b0:39:41:ae:11:41:c5:8b:45:40:83:d9:8b:50:15:0f:d9: 57:35:e7:8e:4e:f4:3f:ac:79:f5:aa:52:8e:d3:39:ab:c8:64: 13:2a:aa:56:af:2f:88:ab:2f:7f:22:82:57:fb:9f:ae:c7:b2: 53:21:56:d6:ab:c0:91:80:52:1e:02:67:86:4c:f5:48:26:e8: 21:56:50:82:f6:e2:4e:b6:c3:c8:4b:ba:c3:31:fd:dd:b0:96: 49:bf:6a:bc:d1:54:95:72:03:92:bf:6f:30:03:30:17:c1:c0: ea:4c:96:51:f8:dd:9d:ce:34:d2:85:88:cb:66:0d:b4:c7:f4: c9:9b:67:bd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcdwnPLJBL+6XIQNSygrz0H1wNPIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNjI1MDAwMDE3WhcNMjUwNzMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BhOTk4MjQzMDVjMzk1Njc1Mjg1NmFjNTUzNWI1NjhjZDMw NjVkZjhkOTg4MWRiZWNmZjQ1NmJmNGExNDM0ZTRmMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDvppyfxoIOdHCng2XwTdaHS6nW2SoOR/wQ2F1papimY7gh A6QWiAyn16w3vTukBKzsYzx3U4Y5BTonbjEvNDVm8c/Uh9l3pM/eULM1WgX9m8p5 ldarOuF6wiK12bL10ZsNFr6iRS0T5NpZvYsNxwO+4UlimQx6eBuBSZNlN0PNWERd aDp+lM7e0NiBgOGUEMYQYAjp6bcj0iJOx3UlBd5RocF+yZRlHJc3Zhq7o5rh83v3 XOnEy6BCn+Djn195dV9bDdh7PK4GNl6/luAoikdLccQxZk3X1s4GtXao1bmoL17+ 2ba451KucJ6CTyZvjvUTrgyAVgmhP5jGGfdQVBuhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUuI6F5mJDHvfkyVTa6ekCq5EiUCkwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzk1MWI2NmYwLTg5OTMtNDdkMi05YmY1LWU4NWY0YWQ1ZTMyYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEX+dowDQYJKoZIhvcNAQELBQADggEBACAIU0HKbjc4WQgrxq3WGnwLV0Nl dqNpLQ3FjCLgUfdU1OQeaHjvTRFV8OiAQQTbklC6YpW1y2ir6oIPoNIa86NsAe6x xlDv6JQT86xVO/FFoduZI+QFFCaVcgb4J6iCPRjOcukFOg3hvhtsLWBOzHpHw5FN qt8ok5yDiX53FjewOUGuEUHFi0VAg9mLUBUP2Vc1545O9D+sefWqUo7TOavIZBMq qlavL4irL38iglf7n67HslMhVtarwJGAUh4CZ4ZM9Ugm6CFWUIL24k62w8hLusMx /d2wlkm/arzRVJVyA5K/bzADMBfBwOpMllH43Z3ONNKFiMtmDbTH9MmbZ70= -----END CERTIFICATE-----Generated at Sun Jun 29 03:16:37 2025 by rpki-client