$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/ced1d856-48cb-491b-a1ab-adf22d3bad75.roa File: ced1d856-48cb-491b-a1ab-adf22d3bad75.roa (raw, json) Hash identifier: JjBe3NJSNiWfqtLwaoPPWswHW5eYHHrMv4564z7qexE= Subject key identifier: 89:FF:7A:13:A7:DD:AE:75:F5:AB:5F:B3:2D:A5:0F:17:7B:3B:CA:8A Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 6940E42128AB17652AA6D4FEC980EE9759416791 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/ced1d856-48cb-491b-a1ab-adf22d3bad75.roa Signing time: Fri 15 Aug 2025 00:21:30 +0000 ROA not before: Fri 15 Aug 2025 00:21:30 +0000 ROA not after: Fri 19 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 76.223.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:40:e4:21:28:ab:17:65:2a:a6:d4:fe:c9:80:ee:97:59:41:67:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Aug 15 00:21:30 2025 GMT Not After : Sep 19 23:59:59 2025 GMT Subject: serialNumber=a550032bc54c7cc90ade8325a04baa2c9e0464d8a4adc407a03b230afd983a28, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:19:ce:9a:ff:cd:ac:17:40:8e:d2:be:9e:4e: 57:2d:bd:3b:a6:08:8d:d9:02:de:e6:8f:ff:58:6f: b1:8e:8a:1f:03:bf:92:82:5c:67:4c:5a:1c:36:fc: 28:5f:81:49:01:cf:9e:fc:72:c7:60:65:89:6d:64: 93:d0:86:f4:5d:2e:29:64:d2:6b:14:2e:19:6e:8b: de:59:07:5f:ce:2a:0c:2a:af:d1:b5:b7:a7:4a:be: 17:55:8b:50:be:91:c9:58:10:58:df:d7:f8:84:19: 52:93:85:11:db:99:4a:17:a1:81:83:8b:58:4a:22: 98:d9:5a:fc:96:8c:b9:ae:81:41:08:8c:93:64:f1: 3c:4e:e6:2d:a7:ff:25:b3:05:9c:95:b6:5f:1a:b8: 3d:1c:75:6c:f1:af:6a:28:c5:ec:60:ac:dd:e4:8f: 2f:6a:4d:61:b4:c3:a2:cf:eb:5e:f7:e2:1d:48:57: 2b:cc:74:5c:b5:e4:4b:db:de:b1:20:1f:33:d1:65: 4b:d6:92:08:bc:ee:95:d2:1e:29:78:cb:32:b2:51: f5:69:91:aa:1c:21:72:5d:13:62:8b:11:60:36:f3: 7c:21:a2:07:4e:6f:f8:65:78:35:c5:be:70:92:05: 93:9e:49:db:bf:e7:28:81:bc:8f:06:ec:5a:80:8c: e2:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:FF:7A:13:A7:DD:AE:75:F5:AB:5F:B3:2D:A5:0F:17:7B:3B:CA:8A X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/ced1d856-48cb-491b-a1ab-adf22d3bad75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.223.176.0/20 Signature Algorithm: sha256WithRSAEncryption 3d:84:ba:9a:90:01:a0:93:cd:2d:9e:ff:e4:37:9d:31:06:31: d9:6d:b7:8c:c5:0d:0c:24:9f:c6:bd:3f:b4:06:2f:b1:e1:54: c0:cf:3a:81:ec:6d:61:25:19:21:f7:57:69:ab:32:fb:96:0c: 82:c9:32:79:74:db:05:f3:a9:fc:9d:a1:5d:97:6b:3c:d4:fe: 23:e7:33:f3:b0:cf:04:3c:e4:96:63:3a:84:81:90:45:91:8a: 50:18:91:22:3b:35:3b:c7:41:67:cf:25:87:53:63:b2:f3:87: ab:74:bb:fb:d5:65:0f:be:c5:94:9b:60:f7:00:39:84:ac:56: ad:6c:7a:bc:1d:29:85:1e:29:98:7a:98:b0:6d:f1:ef:4e:12: 54:e3:2b:05:77:1e:0d:dc:4f:b6:35:50:2d:75:de:b1:f1:f9: 1c:a6:2b:5c:d9:9a:b7:6f:4a:13:22:a4:63:a1:9a:fb:f8:1c: 62:0a:2c:d7:ef:1f:c2:f5:f1:b6:7d:e0:6d:6b:c7:46:8e:40: bb:aa:91:85:95:e7:d4:9f:c5:c6:a3:05:12:4d:56:cd:25:81: 32:ef:c8:23:51:c2:de:55:85:ce:8d:b3:c4:e4:9b:1f:8a:df: fb:82:ae:f4:45:12:98:c3:6d:d6:b6:50:9c:1c:1f:9e:b1:09: ac:ad:4d:cd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaUDkISirF2UqptT+yYDul1lBZ5EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwODE1MDAyMTMwWhcNMjUwOTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BhNTUwMDMyYmM1NGM3Y2M5MGFkZTgzMjVhMDRiYWEyYzll MDQ2NGQ4YTRhZGM0MDdhMDNiMjMwYWZkOTgzYTI4MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDWGc6a/82sF0CO0r6eTlctvTumCI3ZAt7mj/9Yb7GOih8D v5KCXGdMWhw2/ChfgUkBz578csdgZYltZJPQhvRdLilk0msULhlui95ZB1/OKgwq r9G1t6dKvhdVi1C+kclYEFjf1/iEGVKThRHbmUoXoYGDi1hKIpjZWvyWjLmugUEI jJNk8TxO5i2n/yWzBZyVtl8auD0cdWzxr2ooxexgrN3kjy9qTWG0w6LP61734h1I VyvMdFy15Evb3rEgHzPRZUvWkgi87pXSHil4yzKyUfVpkaocIXJdE2KLEWA283wh ogdOb/hleDXFvnCSBZOeSdu/5yiBvI8G7FqAjOLxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUif96E6fdrnX1q1+zLaUPF3s7yoowHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2NlZDFkODU2LTQ4Y2ItNDkxYi1hMWFiLWFkZjIyZDNiYWQ3NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBARM37AwDQYJKoZIhvcNAQELBQADggEBAD2EupqQAaCTzS2e/+Q3nTEGMdlt t4zFDQwkn8a9P7QGL7HhVMDPOoHsbWElGSH3V2mrMvuWDILJMnl02wXzqfydoV2X azzU/iPnM/OwzwQ85JZjOoSBkEWRilAYkSI7NTvHQWfPJYdTY7Lzh6t0u/vVZQ++ xZSbYPcAOYSsVq1serwdKYUeKZh6mLBt8e9OElTjKwV3Hg3cT7Y1UC113rHx+Rym K1zZmrdvShMipGOhmvv4HGIKLNfvH8L18bZ94G1rx0aOQLuqkYWV59SfxcajBRJN Vs0lgTLvyCNRwt5Vhc6Ns8Tkmx+K3/uCrvRFEpjDbda2UJwcH56xCaytTc0= -----END CERTIFICATE-----Generated at Sat Aug 23 06:48:10 2025 by rpki-client