$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b5cc85b6-fdc1-4a8f-b266-611d77cebf5a.roa File: b5cc85b6-fdc1-4a8f-b266-611d77cebf5a.roa (raw, json) Hash identifier: 6BWERHjlm14zKcpyui6+dUasLIBdjKtdexW0j2iKGig= Subject key identifier: F7:30:6F:B1:DC:89:2A:4E:CC:47:C8:6C:F1:77:CA:F2:ED:3F:EB:F0 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 5A78D8259F33A4BA5AFB16E88D86F4E864441215 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b5cc85b6-fdc1-4a8f-b266-611d77cebf5a.roa Signing time: Wed 25 Jun 2025 00:00:48 +0000 ROA not before: Wed 25 Jun 2025 00:00:48 +0000 ROA not after: Wed 30 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 23.251.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:78:d8:25:9f:33:a4:ba:5a:fb:16:e8:8d:86:f4:e8:64:44:12:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Jun 25 00:00:48 2025 GMT Not After : Jul 30 23:59:59 2025 GMT Subject: serialNumber=8fe02e2d5e9f04f8fcf3ec8f1daf6abb0346ceb983051d4226ad3df9812de9f3, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6e:b3:2d:8d:dc:4d:e8:aa:53:04:15:7f:08: 82:db:3a:d6:df:00:66:e0:9d:70:a7:43:40:46:c8: be:ce:b2:12:5b:13:2b:90:40:d4:a9:62:53:d0:83: f4:be:ea:a3:cf:49:33:c9:f0:83:be:75:25:c8:10: f7:1a:f9:4b:53:57:60:5a:c0:15:9f:46:44:c8:a1: c2:bb:49:bb:0e:a3:cd:a0:dc:65:c0:6a:62:9e:3c: 1a:d6:b5:50:da:da:f5:da:9b:1d:a9:c5:6e:b5:64: 6d:37:d4:3a:12:ba:88:df:96:84:55:1a:28:5c:34: 47:97:0d:8e:31:75:06:ca:a3:35:b3:1c:55:d6:3a: 00:7d:45:fb:45:8a:82:21:f2:37:16:0c:b8:7f:05: 41:33:a4:fe:01:cb:c8:e8:1c:3b:bf:18:7e:28:4e: a5:1d:c4:c4:c8:21:50:25:4a:45:3d:3f:ff:ca:ef: 1f:76:e6:86:e2:0f:58:48:5e:37:55:7c:da:6c:4f: 5a:3f:d5:2c:78:1b:e6:bc:36:37:bd:49:0d:a6:77: 64:56:2e:bb:bc:60:83:ce:d1:05:91:ce:4f:7e:d1: 4c:1c:c3:92:65:f2:6b:6f:c1:80:1a:78:02:f8:45: 70:e4:f0:7a:fb:88:0b:90:ef:6a:ab:cc:d0:74:7c: 87:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:30:6F:B1:DC:89:2A:4E:CC:47:C8:6C:F1:77:CA:F2:ED:3F:EB:F0 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b5cc85b6-fdc1-4a8f-b266-611d77cebf5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.251.252.0/22 Signature Algorithm: sha256WithRSAEncryption 7b:b1:ff:3d:d6:61:e1:32:6d:56:49:a1:c3:b7:26:d7:15:ce: 04:b2:4b:04:22:d2:81:58:72:07:e3:46:23:25:e6:3c:3e:c9: 44:b5:13:50:42:c1:47:4c:bb:2f:5a:ca:82:8f:a9:ad:45:32: 0c:a7:42:57:a1:07:69:93:36:1e:f8:5e:32:34:33:42:93:40: bb:d6:21:11:e2:9c:4d:db:2e:74:e0:d8:0a:03:d9:00:fc:e8: d9:74:51:e6:91:0c:36:2a:64:68:d6:6d:47:a4:1b:85:25:ee: b5:55:fa:ec:17:72:bb:de:24:9c:93:14:7b:29:4e:e7:f3:00: 36:88:b2:3b:a1:43:b8:2c:22:22:a9:60:e7:1e:d4:eb:99:24: 75:0d:d8:3c:0b:e8:27:9b:a9:62:41:af:e6:d3:0a:17:bc:df: c8:8c:95:36:72:37:d6:ae:eb:78:86:cf:aa:e5:39:8a:2e:e3: 30:d8:3a:ed:72:d1:fe:11:a7:2f:07:f9:34:4f:4b:88:ee:3e: 1b:1d:db:dd:43:c9:a2:7f:92:f3:cb:80:ce:58:f0:9c:f6:7f: 16:53:b7:56:24:f8:42:ee:d9:02:a0:4a:84:1a:60:f3:6f:cb: 9d:74:a6:bd:60:c2:08:1f:06:af:b3:83:7e:6c:2e:ca:5a:a7: 6e:a4:28:9b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWnjYJZ8zpLpa+xbojYb06GREEhUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNjI1MDAwMDQ4WhcNMjUwNzMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZmUwMmUyZDVlOWYwNGY4ZmNmM2VjOGYxZGFmNmFiYjAz NDZjZWI5ODMwNTFkNDIyNmFkM2RmOTgxMmRlOWYzMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDIbrMtjdxN6KpTBBV/CILbOtbfAGbgnXCnQ0BGyL7OshJb EyuQQNSpYlPQg/S+6qPPSTPJ8IO+dSXIEPca+UtTV2BawBWfRkTIocK7SbsOo82g 3GXAamKePBrWtVDa2vXamx2pxW61ZG031DoSuojfloRVGihcNEeXDY4xdQbKozWz HFXWOgB9RftFioIh8jcWDLh/BUEzpP4By8joHDu/GH4oTqUdxMTIIVAlSkU9P//K 7x925obiD1hIXjdVfNpsT1o/1Sx4G+a8Nje9SQ2md2RWLru8YIPO0QWRzk9+0Uwc w5Jl8mtvwYAaeAL4RXDk8Hr7iAuQ72qrzNB0fIfPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU9zBvsdyJKk7MR8hs8XfK8u0/6/AwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2I1Y2M4NWI2LWZkYzEtNGE4Zi1iMjY2LTYxMWQ3N2NlYmY1YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIX+/wwDQYJKoZIhvcNAQELBQADggEBAHux/z3WYeEybVZJocO3JtcVzgSy SwQi0oFYcgfjRiMl5jw+yUS1E1BCwUdMuy9ayoKPqa1FMgynQlehB2mTNh74XjI0 M0KTQLvWIRHinE3bLnTg2AoD2QD86Nl0UeaRDDYqZGjWbUekG4Ul7rVV+uwXcrve JJyTFHspTufzADaIsjuhQ7gsIiKpYOce1OuZJHUN2DwL6CebqWJBr+bTChe838iM lTZyN9au63iGz6rlOYou4zDYOu1y0f4Rpy8H+TRPS4juPhsd291DyaJ/kvPLgM5Y 8Jz2fxZTt1Yk+ELu2QKgSoQaYPNvy510pr1gwggfBq+zg35sLspap26kKJs= -----END CERTIFICATE-----Generated at Sun Jun 29 00:34:19 2025 by rpki-client