$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/dce2db93-8fb7-42b9-be56-23f46b5bf4e0.roa File: dce2db93-8fb7-42b9-be56-23f46b5bf4e0.roa (raw, json) Hash identifier: ofa+1/w98j3f2YAKIGBCBGvAG8GSucHdeDemlTLwXLY= Subject key identifier: D9:4B:9F:06:32:08:AC:00:07:6C:DE:09:FF:2C:30:76:BD:FB:52:71 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 68A01C48DE2B6F9BF97995DE4A6772A7956B5C5F Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/dce2db93-8fb7-42b9-be56-23f46b5bf4e0.roa Signing time: Wed 25 Jun 2025 00:10:11 +0000 ROA not before: Wed 25 Jun 2025 00:10:11 +0000 ROA not after: Wed 30 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 76.223.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:a0:1c:48:de:2b:6f:9b:f9:79:95:de:4a:67:72:a7:95:6b:5c:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Jun 25 00:10:11 2025 GMT Not After : Jul 30 23:59:59 2025 GMT Subject: serialNumber=da02c12fd81d8e4b88af914faab7aa5f55e032649941f2689659f9f120f40536, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:22:9e:09:e1:b3:42:c7:11:d5:a1:61:6e:22: 08:c4:73:fd:73:fe:48:ef:03:08:60:6c:65:9c:af: 7d:3f:a0:81:4f:46:82:e1:6b:45:14:a4:ac:6c:38: 93:22:51:47:0b:a0:28:21:84:0a:fa:ae:b9:8d:d2: b1:31:ca:4f:0f:92:56:34:32:1a:4a:dc:5f:89:13: 97:b4:eb:e1:18:79:bb:c1:84:19:a1:c6:0f:b4:cc: 30:5e:78:74:f2:e1:ec:53:83:b1:45:0c:df:25:a8: 19:7a:e4:40:cc:29:03:53:1a:80:ce:09:d9:7f:0f: ed:45:95:6e:8d:c4:1f:8c:e8:b2:e2:8d:3b:da:9c: 70:a9:9d:4b:21:44:4b:dc:2f:ff:fc:1c:6d:c7:92: b8:92:3a:72:b1:06:d1:44:69:4c:63:ad:98:6c:9e: d4:d0:88:48:49:a1:63:fc:f6:42:d4:b5:20:5a:78: 4e:da:ea:48:2f:04:d6:b5:40:79:43:6a:19:d2:a9: d5:62:90:a5:2e:ce:36:ba:a4:60:87:22:44:41:46: 67:6d:d8:8a:0a:bd:9b:81:f2:de:8a:08:70:9e:e1: cd:51:3d:6c:28:3e:e2:c4:d9:71:60:3c:55:fc:ff: ee:ea:41:74:ca:2a:3c:c3:3c:ca:22:18:b4:64:52: 10:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:4B:9F:06:32:08:AC:00:07:6C:DE:09:FF:2C:30:76:BD:FB:52:71 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/dce2db93-8fb7-42b9-be56-23f46b5bf4e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.223.189.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:e6:84:ee:80:e3:79:03:7a:90:ea:a6:66:58:3a:a1:35:12: ad:7c:51:36:84:55:bf:0c:c8:dd:55:56:1a:78:71:80:44:75: 76:02:e0:47:7a:84:6e:e0:37:c6:24:5e:25:69:65:da:a9:14: 8f:57:ab:21:66:e3:82:49:cf:23:a9:81:61:30:8c:10:dc:e4: 7f:e9:64:96:ef:23:de:16:58:46:ac:a1:e8:94:0e:d4:33:75: da:57:bf:da:22:aa:f0:f4:ec:b1:a3:e4:6e:e4:b3:e0:6b:08: 52:a5:f5:3c:4e:b8:a5:60:5e:4f:81:70:31:41:c7:57:55:f3: 41:42:aa:53:5a:53:82:2a:ff:a1:71:88:bb:a5:ff:a0:42:b2: fe:63:85:6c:60:44:83:78:26:c8:d8:4c:17:b2:82:99:e7:94: a2:45:36:88:cc:2d:a7:67:31:c9:f5:7b:51:6c:20:75:3b:24: e0:f1:6e:6d:99:c6:e9:57:3f:c1:1e:fa:db:ff:4b:9a:f3:15: ee:3f:dc:af:06:10:74:65:70:3e:13:0d:95:2e:d6:1e:c6:69: 5a:b6:54:fc:b1:e6:40:d7:93:d6:1a:d0:cf:2f:09:50:f5:95: 99:54:96:a5:1c:01:2e:bb:8e:9b:56:9e:ab:0e:52:16:b3:ea: 38:f8:59:b3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaKAcSN4rb5v5eZXeSmdyp5VrXF8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNjI1MDAxMDExWhcNMjUwNzMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkYTAyYzEyZmQ4MWQ4ZTRiODhhZjkxNGZhYWI3YWE1ZjU1 ZTAzMjY0OTk0MWYyNjg5NjU5ZjlmMTIwZjQwNTM2MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6Ip4J4bNCxxHVoWFuIgjEc/1z/kjvAwhgbGWcr30/oIFP RoLha0UUpKxsOJMiUUcLoCghhAr6rrmN0rExyk8PklY0MhpK3F+JE5e06+EYebvB hBmhxg+0zDBeeHTy4exTg7FFDN8lqBl65EDMKQNTGoDOCdl/D+1FlW6NxB+M6LLi jTvanHCpnUshREvcL//8HG3HkriSOnKxBtFEaUxjrZhsntTQiEhJoWP89kLUtSBa eE7a6kgvBNa1QHlDahnSqdVikKUuzja6pGCHIkRBRmdt2IoKvZuB8t6KCHCe4c1R PWwoPuLE2XFgPFX8/+7qQXTKKjzDPMoiGLRkUhAXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU2UufBjIIrAAHbN4J/ywwdr37UnEwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2RjZTJkYjkzLThmYjctNDJiOS1iZTU2LTIzZjQ2YjViZjRlMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABM370wDQYJKoZIhvcNAQELBQADggEBAB/mhO6A43kDepDqpmZYOqE1Eq18 UTaEVb8MyN1VVhp4cYBEdXYC4Ed6hG7gN8YkXiVpZdqpFI9XqyFm44JJzyOpgWEw jBDc5H/pZJbvI94WWEasoeiUDtQzddpXv9oiqvD07LGj5G7ks+BrCFKl9TxOuKVg Xk+BcDFBx1dV80FCqlNaU4Iq/6FxiLul/6BCsv5jhWxgRIN4JsjYTBeygpnnlKJF NojMLadnMcn1e1FsIHU7JODxbm2ZxulXP8Ee+tv/S5rzFe4/3K8GEHRlcD4TDZUu 1h7GaVq2VPyx5kDXk9Ya0M8vCVD1lZlUlqUcAS67jptWnqsOUhaz6jj4WbM= -----END CERTIFICATE-----Generated at Sun Jun 29 07:44:52 2025 by rpki-client