$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b4bb9851-b5aa-4370-bffe-4fc1fd414858.roa File: b4bb9851-b5aa-4370-bffe-4fc1fd414858.roa (raw, json) Hash identifier: dw8Q/cMoYOBvu2giNRasCbaILqHk4atyFntWvO8m2Hc= Subject key identifier: EC:39:5A:F6:8D:33:6F:88:E4:27:2A:6E:02:70:3D:87:F9:AD:F6:B7 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 47430CA67D4519F4E51BDDD9E92ECCC47EF338DE Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b4bb9851-b5aa-4370-bffe-4fc1fd414858.roa Signing time: Fri 15 Aug 2025 00:20:56 +0000 ROA not before: Fri 15 Aug 2025 00:20:56 +0000 ROA not after: Fri 19 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.251.236.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:43:0c:a6:7d:45:19:f4:e5:1b:dd:d9:e9:2e:cc:c4:7e:f3:38:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Aug 15 00:20:56 2025 GMT Not After : Sep 19 23:59:59 2025 GMT Subject: serialNumber=46a4e73071eb0521883323e0e5f1ba79a4428c307cdd4a0e329891f80d39afc5, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:40:fc:96:d5:30:33:7e:21:df:1e:54:2b:a0: c1:ad:9e:aa:9f:ec:44:4f:19:d9:36:a6:db:ab:eb: 3d:db:87:fc:0e:92:5c:fb:7c:29:ba:31:52:fa:8d: a7:e0:4e:90:3f:48:3c:8f:59:ff:68:4d:34:aa:be: 61:84:70:71:db:d4:d5:70:76:9d:20:f0:bb:dd:ad: 14:88:3f:3a:15:60:2e:6e:3a:51:e3:c4:d2:35:5b: c7:89:9b:e3:9f:be:01:cf:52:6c:41:16:c1:35:36: 8c:ec:3c:62:46:f8:31:43:de:4b:4e:c4:ed:35:47: 03:80:f9:a2:72:40:e8:ab:81:b1:95:23:b1:f8:e8: 43:c4:26:0d:38:5f:95:c9:b4:ba:35:41:18:92:68: 9b:74:8d:96:e3:2a:23:4d:e0:d8:14:70:93:28:71: 2c:5b:64:f8:34:42:6a:05:14:1a:f9:d8:15:c3:0d: f8:6f:06:cd:13:b7:41:df:48:7c:f0:85:10:f0:ac: ce:f6:a7:59:ca:40:0b:5e:97:67:10:2d:aa:23:e8: 06:d6:b5:7a:5b:e0:76:1a:a4:58:b0:20:16:2c:fd: 1c:e4:74:5a:0e:57:16:45:d2:84:3f:1a:c2:1e:97: bd:19:26:22:4f:b8:2e:47:be:2a:f3:06:ab:b6:99: 97:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:39:5A:F6:8D:33:6F:88:E4:27:2A:6E:02:70:3D:87:F9:AD:F6:B7 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b4bb9851-b5aa-4370-bffe-4fc1fd414858.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.251.236.0/23 Signature Algorithm: sha256WithRSAEncryption 62:f1:85:70:2b:3e:5d:ed:56:49:ae:27:72:0f:b9:16:27:99: 4c:3f:6a:d0:1a:3b:7e:5e:c7:d2:0a:9b:c4:88:d2:e5:b7:1b: 47:98:5b:59:d8:73:27:ad:c3:67:4c:6f:cc:01:a7:8e:8f:5b: d1:d8:48:1c:cd:2c:c8:ed:e5:27:fb:1f:16:6a:46:e7:b9:be: 77:0e:1d:78:00:68:e8:7f:20:60:48:2c:0e:f1:a9:ef:98:5a: 6b:af:21:58:77:b1:ad:dd:6b:ce:32:20:67:f9:01:85:17:0f: 8e:ce:f6:a3:2d:4a:45:b3:70:4c:e8:57:e4:d4:e3:ca:dd:1f: 81:a2:63:88:33:68:f5:ba:e2:51:c1:9a:6f:d1:26:5b:a2:b4: fc:ed:dc:1b:f9:07:53:b1:58:3d:5a:62:61:a3:0d:77:dd:1c: fb:ce:9f:21:39:a3:2e:d1:b8:a3:3b:29:4e:4a:93:05:65:d3: 74:ff:58:5b:8c:41:f7:4b:b8:8a:78:60:1c:ee:f7:6d:f2:2b: 90:d0:91:72:b3:2f:d6:43:bd:eb:f8:10:00:bf:9f:3d:f7:57: 63:6e:36:e5:44:3c:b6:94:6a:ec:9a:e9:66:a1:0f:5a:96:0f: 3e:0a:e8:43:ca:ba:98:8d:98:07:0c:e3:b2:cb:e8:87:6f:bd: 3d:64:3b:eb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUR0MMpn1FGfTlG93Z6S7MxH7zON4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwODE1MDAyMDU2WhcNMjUwOTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A0NmE0ZTczMDcxZWIwNTIxODgzMzIzZTBlNWYxYmE3OWE0 NDI4YzMwN2NkZDRhMGUzMjk4OTFmODBkMzlhZmM1MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCKQPyW1TAzfiHfHlQroMGtnqqf7ERPGdk2ptur6z3bh/wO klz7fCm6MVL6jafgTpA/SDyPWf9oTTSqvmGEcHHb1NVwdp0g8LvdrRSIPzoVYC5u OlHjxNI1W8eJm+OfvgHPUmxBFsE1NozsPGJG+DFD3ktOxO01RwOA+aJyQOirgbGV I7H46EPEJg04X5XJtLo1QRiSaJt0jZbjKiNN4NgUcJMocSxbZPg0QmoFFBr52BXD DfhvBs0Tt0HfSHzwhRDwrM72p1nKQAtel2cQLaoj6AbWtXpb4HYapFiwIBYs/Rzk dFoOVxZF0oQ/GsIel70ZJiJPuC5HvirzBqu2mZd3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU7Dla9o0zb4jkJypuAnA9h/mt9rcwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2I0YmI5ODUxLWI1YWEtNDM3MC1iZmZlLTRmYzFmZDQxNDg1OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEX++wwDQYJKoZIhvcNAQELBQADggEBAGLxhXArPl3tVkmuJ3IPuRYnmUw/ atAaO35ex9IKm8SI0uW3G0eYW1nYcyetw2dMb8wBp46PW9HYSBzNLMjt5Sf7HxZq Rue5vncOHXgAaOh/IGBILA7xqe+YWmuvIVh3sa3da84yIGf5AYUXD47O9qMtSkWz cEzoV+TU48rdH4GiY4gzaPW64lHBmm/RJluitPzt3Bv5B1OxWD1aYmGjDXfdHPvO nyE5oy7RuKM7KU5KkwVl03T/WFuMQfdLuIp4YBzu923yK5DQkXKzL9ZDvev4EAC/ nz33V2NuNuVEPLaUauya6WahD1qWDz4K6EPKupiNmAcM47LL6IdvvT1kO+s= -----END CERTIFICATE-----Generated at Sat Aug 23 08:34:56 2025 by rpki-client