$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/addfda24-421e-4b45-80e1-dd5a255777c5.roa File: addfda24-421e-4b45-80e1-dd5a255777c5.roa (raw, json) Hash identifier: LGLJss8Xu/SGWyaSn8mfSMzmRLO7jZX3BSIzbryHIy0= Subject key identifier: 88:0E:C0:05:C4:1B:F2:A4:05:AB:57:73:71:F0:03:5C:51:66:B5:F4 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 046387AC1EED383B0DA378FAB896B0D66DFCC597 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/addfda24-421e-4b45-80e1-dd5a255777c5.roa Signing time: Wed 25 Jun 2025 00:00:47 +0000 ROA not before: Wed 25 Jun 2025 00:00:47 +0000 ROA not after: Wed 30 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.251.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:63:87:ac:1e:ed:38:3b:0d:a3:78:fa:b8:96:b0:d6:6d:fc:c5:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Jun 25 00:00:47 2025 GMT Not After : Jul 30 23:59:59 2025 GMT Subject: serialNumber=d8600995edbcb839f2da4fecefc06f946096faa408de9cfa78ab3d91bb616a9c, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f2:12:6f:f9:d6:cd:19:50:d4:ec:28:69:64: 40:d9:5e:e1:ff:60:b9:f6:ba:b6:57:08:53:b2:1f: 32:f7:ad:a2:27:b6:dc:53:62:bc:b6:ed:4c:af:5c: ba:9b:e9:2f:03:e3:53:23:8a:b1:46:43:c9:ce:a5: bf:a9:3b:82:7e:37:75:89:39:9b:3e:07:c5:51:1f: 50:00:a6:c8:eb:56:38:c1:1f:4e:7e:77:d5:f4:fb: 36:93:c6:59:a0:b7:bd:53:53:7c:4c:d7:0e:6e:a6: 65:b8:b4:26:51:61:83:01:0c:37:cd:a6:4e:43:95: e2:16:85:c3:40:fb:f4:d3:fa:be:31:b8:75:e5:45: 46:d1:f0:eb:f5:48:aa:ca:a2:88:0f:8e:e0:34:53: 92:8f:75:86:28:c0:6d:1a:7d:b2:99:d9:31:2b:10: 0a:7d:8e:fc:93:bb:2e:d6:99:31:c6:3e:77:da:bc: 3c:c3:bf:6c:a9:8f:bd:01:55:e8:53:77:54:01:2a: 4b:f1:fd:84:5e:bf:c5:4b:62:81:06:39:e2:a6:86: e3:da:b5:b6:e0:f8:1c:4c:eb:be:33:88:f1:6e:51: a6:d2:8a:b7:02:4e:7f:41:a0:dd:6e:8f:08:77:0b: 83:8b:27:83:3a:33:fa:7d:4b:8e:eb:63:b5:ba:33: 11:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:0E:C0:05:C4:1B:F2:A4:05:AB:57:73:71:F0:03:5C:51:66:B5:F4 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/addfda24-421e-4b45-80e1-dd5a255777c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.251.228.0/22 Signature Algorithm: sha256WithRSAEncryption 52:cf:02:94:14:07:64:94:6a:10:fd:62:46:71:9b:8a:ae:e5: e9:82:c2:26:cf:aa:1c:b5:ee:c1:76:29:09:1d:6f:2a:00:3e: 02:6f:0c:eb:9b:88:30:2a:7c:a5:6e:cf:62:ef:5e:cd:e5:75: c5:ae:84:9b:b1:ae:0f:7f:01:b9:78:f0:ae:15:76:99:c5:55: d6:ae:34:1e:0d:e3:08:32:8c:ac:de:eb:7b:9c:36:b1:1c:05: cc:a5:46:44:be:e4:7c:af:9a:73:54:91:31:27:64:66:66:03: dc:f0:27:0a:2b:b9:35:e4:11:3e:d5:9c:37:63:40:90:8a:eb: 11:ca:54:03:0d:92:48:69:fd:05:e7:9f:a8:25:d5:31:b8:34: 7a:4e:08:8e:7f:33:c2:a2:f0:06:99:cf:ce:0e:8e:31:d3:9f: 62:d9:6d:73:86:ae:03:70:e6:c8:a3:28:0b:34:5d:c3:ba:52: 1b:4c:67:23:64:9e:33:ab:fa:fd:88:b9:d6:7d:99:01:c4:21: 89:2b:d3:d4:62:ce:39:e3:7c:29:78:af:73:f5:5b:44:b1:a7: ab:51:20:22:b5:9d:7b:8e:96:65:92:e3:d4:56:90:8c:6a:09: f0:13:07:e5:ae:eb:e8:35:46:a1:bf:c8:8d:4a:a4:d9:ce:f1: 73:22:83:bd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBGOHrB7tODsNo3j6uJaw1m38xZcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNjI1MDAwMDQ3WhcNMjUwNzMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkODYwMDk5NWVkYmNiODM5ZjJkYTRmZWNlZmMwNmY5NDYw OTZmYWE0MDhkZTljZmE3OGFiM2Q5MWJiNjE2YTljMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCv8hJv+dbNGVDU7ChpZEDZXuH/YLn2urZXCFOyHzL3raIn ttxTYry27UyvXLqb6S8D41MjirFGQ8nOpb+pO4J+N3WJOZs+B8VRH1AApsjrVjjB H05+d9X0+zaTxlmgt71TU3xM1w5upmW4tCZRYYMBDDfNpk5DleIWhcNA+/TT+r4x uHXlRUbR8Ov1SKrKoogPjuA0U5KPdYYowG0afbKZ2TErEAp9jvyTuy7WmTHGPnfa vDzDv2ypj70BVehTd1QBKkvx/YRev8VLYoEGOeKmhuPatbbg+BxM674ziPFuUabS ircCTn9BoN1ujwh3C4OLJ4M6M/p9S47rY7W6MxEJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUiA7ABcQb8qQFq1dzcfADXFFmtfQwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2FkZGZkYTI0LTQyMWUtNGI0NS04MGUxLWRkNWEyNTU3NzdjNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIX++QwDQYJKoZIhvcNAQELBQADggEBAFLPApQUB2SUahD9YkZxm4qu5emC wibPqhy17sF2KQkdbyoAPgJvDOubiDAqfKVuz2LvXs3ldcWuhJuxrg9/Abl48K4V dpnFVdauNB4N4wgyjKze63ucNrEcBcylRkS+5HyvmnNUkTEnZGZmA9zwJworuTXk ET7VnDdjQJCK6xHKVAMNkkhp/QXnn6gl1TG4NHpOCI5/M8Ki8AaZz84OjjHTn2LZ bXOGrgNw5sijKAs0XcO6UhtMZyNknjOr+v2IudZ9mQHEIYkr09RizjnjfCl4r3P1 W0Sxp6tRICK1nXuOlmWS49RWkIxqCfATB+Wu6+g1RqG/yI1KpNnO8XMig70= -----END CERTIFICATE-----Generated at Sun Jun 29 07:38:08 2025 by rpki-client