$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b4bb9851-b5aa-4370-bffe-4fc1fd414858.roa File: b4bb9851-b5aa-4370-bffe-4fc1fd414858.roa (raw, json) Hash identifier: Qq1aS9b7xyCRlDDhKQ4EeXDCIr3tPM4L854s3vVBYHg= Subject key identifier: FC:CF:FD:1E:5F:A6:46:62:3D:E0:4E:FB:18:78:BB:01:21:CF:1B:8E Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 5B9CE1CDA37F8A2262669D928C19B309D69F0A50 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b4bb9851-b5aa-4370-bffe-4fc1fd414858.roa Signing time: Wed 25 Jun 2025 00:00:46 +0000 ROA not before: Wed 25 Jun 2025 00:00:46 +0000 ROA not after: Wed 30 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.251.236.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:9c:e1:cd:a3:7f:8a:22:62:66:9d:92:8c:19:b3:09:d6:9f:0a:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Jun 25 00:00:46 2025 GMT Not After : Jul 30 23:59:59 2025 GMT Subject: serialNumber=dda18298a97f89b712c46f019130388e7a33cfb669e7536ac2e841ba71be3a8d, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:1a:bf:cb:8f:7d:f4:2b:5e:95:e5:f1:c3:7f: 93:5e:02:c4:f8:d2:1b:43:a6:ae:76:0f:30:3a:38: a7:29:9a:a4:d4:c4:df:c1:45:56:12:75:dc:d1:c8: a6:5c:94:b8:f1:a8:d0:c9:25:5c:36:f8:c0:cf:b9: 7f:44:d9:e9:c4:41:b5:9d:bd:cd:21:ce:93:05:c0: 95:76:05:ab:53:d9:33:bb:b2:29:b8:23:81:f6:95: de:f9:03:3f:4b:98:1f:22:35:25:ff:d2:99:eb:7f: 12:4e:7c:37:7c:43:88:3c:2f:8c:1a:d1:e5:30:66: a6:d8:cc:4d:08:13:d6:54:2c:af:c1:75:d6:03:9f: bc:2b:8b:d6:c5:58:b2:62:7e:ee:ea:07:0e:ff:73: 96:38:5a:6a:a8:11:13:11:4a:f2:7b:1b:76:ab:e6: 94:6a:79:a5:be:fb:fc:33:11:02:ac:71:af:29:39: ff:32:aa:03:5b:3b:8d:ca:f7:69:ed:eb:ea:ff:47: d3:46:c9:18:76:78:05:be:9b:4f:c7:d8:53:95:f6: cb:2d:26:16:af:bf:93:af:f0:b7:4d:cc:df:2e:da: c0:35:a9:2e:db:35:ed:68:57:37:68:37:e3:92:ea: e2:04:04:a3:11:dd:43:fe:f8:6c:5e:fd:8f:88:4b: 93:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:CF:FD:1E:5F:A6:46:62:3D:E0:4E:FB:18:78:BB:01:21:CF:1B:8E X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b4bb9851-b5aa-4370-bffe-4fc1fd414858.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.251.236.0/23 Signature Algorithm: sha256WithRSAEncryption 03:fc:6f:45:c8:a4:4f:16:b0:26:e9:4e:e2:28:26:8c:fa:82: 9d:70:33:5e:23:d5:b5:0e:28:e1:71:06:59:12:39:d2:2f:0c: 10:1c:21:b1:07:37:d4:07:3c:44:15:8e:44:67:21:85:65:a7: 54:91:9e:aa:cb:c1:ee:bf:88:06:22:9b:3a:e3:ca:60:6b:14: be:be:c5:52:f1:13:6c:f5:f3:68:87:7d:5c:90:47:8f:80:73: 15:69:e3:eb:c3:a1:16:ef:7d:6b:33:62:cc:57:46:96:28:b1: 98:32:8a:86:c1:27:d9:14:29:b5:33:e0:70:b7:c2:f7:e9:9c: ab:e5:cf:38:87:80:e7:3a:b7:6f:39:3c:36:d8:9a:3d:75:a3: 07:79:ac:6c:87:49:f7:33:43:fd:38:06:63:82:94:ad:22:c0: be:3b:18:cf:7f:ef:06:7d:5f:52:af:91:65:ab:f8:01:da:37: a2:bd:2a:79:ca:9d:18:9e:ff:f8:2f:66:87:61:60:6f:8b:b1: 15:16:3d:35:92:df:4f:08:68:4f:12:cd:2c:cd:8d:c1:16:37: 92:3b:a9:b4:a5:8e:c2:5a:c3:ea:44:1e:5e:77:9a:ef:ac:b4: 03:5d:9d:20:17:eb:17:cb:c6:4c:d6:ab:1d:62:bb:f5:13:65: a0:9a:7e:ac -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUW5zhzaN/iiJiZp2SjBmzCdafClAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNjI1MDAwMDQ2WhcNMjUwNzMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkZGExODI5OGE5N2Y4OWI3MTJjNDZmMDE5MTMwMzg4ZTdh MzNjZmI2NjllNzUzNmFjMmU4NDFiYTcxYmUzYThkMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDkGr/Lj330K16V5fHDf5NeAsT40htDpq52DzA6OKcpmqTU xN/BRVYSddzRyKZclLjxqNDJJVw2+MDPuX9E2enEQbWdvc0hzpMFwJV2BatT2TO7 sim4I4H2ld75Az9LmB8iNSX/0pnrfxJOfDd8Q4g8L4wa0eUwZqbYzE0IE9ZULK/B ddYDn7wri9bFWLJifu7qBw7/c5Y4WmqoERMRSvJ7G3ar5pRqeaW++/wzEQKsca8p Of8yqgNbO43K92nt6+r/R9NGyRh2eAW+m0/H2FOV9sstJhavv5Ov8LdNzN8u2sA1 qS7bNe1oVzdoN+OS6uIEBKMR3UP++Gxe/Y+IS5PNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU/M/9Hl+mRmI94E77GHi7ASHPG44wHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2I0YmI5ODUxLWI1YWEtNDM3MC1iZmZlLTRmYzFmZDQxNDg1OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEX++wwDQYJKoZIhvcNAQELBQADggEBAAP8b0XIpE8WsCbpTuIoJoz6gp1w M14j1bUOKOFxBlkSOdIvDBAcIbEHN9QHPEQVjkRnIYVlp1SRnqrLwe6/iAYimzrj ymBrFL6+xVLxE2z182iHfVyQR4+AcxVp4+vDoRbvfWszYsxXRpYosZgyiobBJ9kU KbUz4HC3wvfpnKvlzziHgOc6t285PDbYmj11owd5rGyHSfczQ/04BmOClK0iwL47 GM9/7wZ9X1KvkWWr+AHaN6K9KnnKnRie//gvZodhYG+LsRUWPTWS308IaE8SzSzN jcEWN5I7qbSljsJaw+pEHl53mu+stANdnSAX6xfLxkzWqx1iu/UTZaCafqw= -----END CERTIFICATE-----Generated at Wed Jul 2 11:46:56 2025 by rpki-client