$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/a91f26f0-5a1d-4d65-97ce-94a26d6646b8.roa File: a91f26f0-5a1d-4d65-97ce-94a26d6646b8.roa (raw, json) Hash identifier: 9LGdaLrWiFcWcI+2DQZivq4q8C7OZeOi5aZgHIr29QY= Subject key identifier: 24:8E:F9:D9:6D:0B:70:E9:7A:59:C2:DC:9A:97:37:07:CF:96:00:F8 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 214C591991DDA5F10F5C6B7DFBA4E6825C6ED14D Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/a91f26f0-5a1d-4d65-97ce-94a26d6646b8.roa Signing time: Mon 16 Jun 2025 15:00:07 +0000 ROA not before: Mon 16 Jun 2025 15:00:07 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 8987 IP address blocks: 216.221.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:4c:59:19:91:dd:a5:f1:0f:5c:6b:7d:fb:a4:e6:82:5c:6e:d1:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Jun 16 15:00:07 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=d34d607d06438d2c7aac30501fdca0fe64bafa640e9409928b884bc4ced064a3, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a7:92:5f:a5:72:95:0c:c9:92:64:d9:98:c9: a5:a9:df:c5:a0:8c:08:2a:c7:62:96:f0:87:7b:91: 82:5c:6e:6f:ad:13:dc:0d:d9:ba:4c:de:80:fc:d4: 92:5c:24:2d:4b:56:57:46:14:f4:3e:7a:9a:0c:96: d4:9c:4d:69:4d:8c:bb:94:39:f4:dc:a3:3f:55:f9: 27:a9:0a:51:76:f6:b6:13:6e:1e:04:e6:0e:f4:57: db:9a:ee:e6:06:a8:20:d9:7c:0b:a5:26:84:89:75: 3b:ba:3b:c9:ec:50:e1:61:f2:37:db:2d:7f:b7:7c: c3:02:06:b8:24:86:4b:e3:6a:3d:f7:d0:71:bd:70: f8:c5:c1:ee:59:8a:e3:c2:70:49:ef:99:ee:a1:93: 78:29:d4:aa:e1:20:92:af:96:6d:6f:b2:c7:d7:40: 60:60:6a:10:0b:7a:48:af:b5:89:df:86:fa:50:7b: c8:10:79:d2:f8:8f:3b:7f:99:35:c0:ed:a6:a4:82: 11:66:c4:68:bf:1a:59:23:a1:e2:e3:bc:64:12:a1: b5:23:9c:27:5e:fa:19:64:ff:c4:3f:08:ef:af:05: 05:48:fc:31:70:b3:de:14:0f:da:35:0d:a7:a9:c0: 80:d4:7d:35:f5:d2:22:f7:a0:6a:82:46:30:f3:8a: 64:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:8E:F9:D9:6D:0B:70:E9:7A:59:C2:DC:9A:97:37:07:CF:96:00:F8 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/a91f26f0-5a1d-4d65-97ce-94a26d6646b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.221.163.0/24 Signature Algorithm: sha256WithRSAEncryption 29:eb:7d:40:f1:39:9e:3d:c4:7a:d7:b6:45:17:d3:31:7b:e6: 3d:96:b8:33:72:7b:3f:fa:b8:f1:63:bd:f7:4b:9d:3e:e2:ad: d4:7f:c9:b8:8c:e0:98:83:17:b9:28:aa:74:a4:37:76:47:ad: 22:6a:28:65:4e:dc:b3:f5:52:18:51:e1:f4:bb:fe:2a:dd:37: a2:53:21:91:a4:53:c8:9b:5a:16:9c:69:66:b0:95:26:6d:a5: bb:1a:9f:67:c5:fe:a6:07:b9:e0:58:39:50:ec:cb:bb:36:19: c3:bf:60:fe:a8:f4:b1:ff:64:c5:60:f0:d2:b1:ed:80:3d:27: 67:b9:c6:b4:49:c0:67:c4:c5:e3:45:a1:4f:d5:81:24:51:b2: 25:29:6a:17:54:b7:6c:a6:72:fe:26:eb:a3:9e:e5:1d:fc:73: 9a:e7:bb:73:4f:45:2e:2b:1c:85:72:1f:be:01:b2:8f:e5:e5: 5e:80:5b:76:6e:83:36:75:51:f5:de:be:ed:a9:f8:10:48:f0: ec:78:fc:fc:9f:48:ee:8a:41:1b:95:f5:8f:3e:89:29:60:95: 45:cc:67:f3:05:71:1a:94:69:a2:a6:cb:cf:3f:e6:2f:67:b6: c9:45:20:56:d7:8f:24:98:56:1c:14:ac:99:58:e8:5b:b0:f0: bc:2a:94:20 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIUxZGZHdpfEPXGt9+6Tmglxu0U0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNjE2MTUwMDA3WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BkMzRkNjA3ZDA2NDM4ZDJjN2FhYzMwNTAxZmRjYTBmZTY0 YmFmYTY0MGU5NDA5OTI4Yjg4NGJjNGNlZDA2NGEzMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBp5JfpXKVDMmSZNmYyaWp38WgjAgqx2KW8Id7kYJcbm+t E9wN2bpM3oD81JJcJC1LVldGFPQ+epoMltScTWlNjLuUOfTcoz9V+SepClF29rYT bh4E5g70V9ua7uYGqCDZfAulJoSJdTu6O8nsUOFh8jfbLX+3fMMCBrgkhkvjaj33 0HG9cPjFwe5ZiuPCcEnvme6hk3gp1KrhIJKvlm1vssfXQGBgahALekivtYnfhvpQ e8gQedL4jzt/mTXA7aakghFmxGi/GlkjoeLjvGQSobUjnCde+hlk/8Q/CO+vBQVI /DFws94UD9o1DaepwIDUfTX10iL3oGqCRjDzimQDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJI752W0LcOl6WcLcmpc3B8+WAPgwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2E5MWYyNmYwLTVhMWQtNGQ2NS05N2NlLTk0YTI2ZDY2NDZiOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADY3aMwDQYJKoZIhvcNAQELBQADggEBACnrfUDxOZ49xHrXtkUX0zF75j2W uDNyez/6uPFjvfdLnT7irdR/ybiM4JiDF7koqnSkN3ZHrSJqKGVO3LP1UhhR4fS7 /irdN6JTIZGkU8ibWhacaWawlSZtpbsan2fF/qYHueBYOVDsy7s2GcO/YP6o9LH/ ZMVg8NKx7YA9J2e5xrRJwGfExeNFoU/VgSRRsiUpahdUt2ymcv4m66Oe5R38c5rn u3NPRS4rHIVyH74Bso/l5V6AW3ZugzZ1UfXevu2p+BBI8Ox4/PyfSO6KQRuV9Y8+ iSlglUXMZ/MFcRqUaaKmy88/5i9ntslFIFbXjySYVhwUrJlY6Fuw8LwqlCA= -----END CERTIFICATE-----Generated at Sun Jun 29 16:34:18 2025 by rpki-client