$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/dce2db93-8fb7-42b9-be56-23f46b5bf4e0.roa File: dce2db93-8fb7-42b9-be56-23f46b5bf4e0.roa (raw, json) Hash identifier: rQ5C1mhHut61koweN4BnlpNeCmEWRwiBNhgc6ykf6Xk= Subject key identifier: B9:07:35:76:43:40:6D:AF:44:4F:6D:E8:4B:25:E8:2D:D4:E1:20:0F Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 3AE9DEB55CCFB2AD92461CA6AF5FB1610B6A5D08 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/dce2db93-8fb7-42b9-be56-23f46b5bf4e0.roa Signing time: Fri 15 Aug 2025 00:21:34 +0000 ROA not before: Fri 15 Aug 2025 00:21:34 +0000 ROA not after: Fri 19 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 76.223.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:e9:de:b5:5c:cf:b2:ad:92:46:1c:a6:af:5f:b1:61:0b:6a:5d:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Aug 15 00:21:34 2025 GMT Not After : Sep 19 23:59:59 2025 GMT Subject: serialNumber=f9fdc19d4fe36f6945d4e171bd4fc3433209285c2aa7d9a7c7cf3db1df37d935, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:34:06:30:06:2e:a7:46:c1:d7:6f:cb:39:52: 99:19:0c:2b:05:90:43:0d:a1:4c:77:7c:6d:3e:3a: 9f:dc:9c:e5:6e:e9:85:b7:61:31:f5:75:a4:ab:65: bd:9f:b6:28:80:57:40:26:23:6b:75:e4:2a:94:d1: 20:b5:db:c3:8b:f0:a4:ee:68:37:30:a6:38:ce:b5: bc:00:71:48:87:aa:95:c5:c5:25:25:c0:7f:84:ba: dd:3c:ef:1e:28:dd:4b:ea:b2:12:e8:ae:72:d7:6c: 1b:5b:92:9d:7a:93:7c:1a:d3:e3:67:21:13:ef:bc: 06:2a:1a:e3:8f:00:34:5f:81:c5:63:a1:07:47:b1: d7:12:1f:e6:45:9b:32:69:97:0a:50:d7:6c:12:51: 6a:95:d7:70:5d:c8:6d:ba:0b:01:2d:0e:0b:88:68: 72:b6:1c:b8:bc:9d:80:57:cf:f2:ed:11:76:e7:cf: cb:34:14:8e:7a:01:bb:8d:90:ed:d4:99:e6:02:cd: 76:d8:7c:a0:bb:58:a4:e5:3c:39:72:89:57:0d:4c: c3:ae:13:7c:08:52:fb:8c:cb:3f:a7:01:57:c6:7a: 18:81:69:29:47:37:e4:21:80:2a:d6:a6:c2:43:08: 76:d7:84:89:80:4d:72:81:b0:ff:0c:80:0a:be:d2: 6c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:07:35:76:43:40:6D:AF:44:4F:6D:E8:4B:25:E8:2D:D4:E1:20:0F X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/dce2db93-8fb7-42b9-be56-23f46b5bf4e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.223.189.0/24 Signature Algorithm: sha256WithRSAEncryption 70:9f:83:99:42:82:70:73:7b:1b:4f:86:10:1d:3c:97:3d:ef: 6a:df:b3:93:bb:39:0f:c7:57:c7:5d:d2:76:72:e0:36:0a:48: 2d:49:48:11:8e:cb:5f:57:73:4f:60:fe:63:de:35:29:b8:e6: 9e:94:dd:da:30:45:d6:77:56:ad:14:2f:a6:e7:3d:1c:71:2a: d0:92:0e:2f:c7:81:f0:2c:bd:d0:f8:57:81:9d:d4:32:95:be: c1:39:c2:ea:fa:80:7e:57:52:2f:31:f4:c5:d1:0e:33:a0:3c: 9f:0d:c1:9b:36:5b:1b:39:17:a2:f6:bd:6b:8f:7e:e4:a4:51: 83:8f:52:af:1d:e2:cd:e1:53:60:96:47:02:99:ff:e2:a9:aa: 0e:78:c2:45:d1:d8:ef:73:aa:47:bc:1b:14:4a:60:20:df:89: 6f:91:9b:0d:a3:8b:9a:aa:a2:1b:5a:38:7c:d0:dc:29:88:d9: 2f:81:16:0c:b9:e0:fe:8a:65:1d:f7:a7:ee:55:a9:c9:5a:51: d9:d8:04:46:ca:a2:0e:f2:b4:b5:6c:e4:70:96:04:09:f1:fb: d9:57:f2:79:a9:b5:97:ab:70:10:4a:7e:4f:a7:78:13:d2:4d: 8e:60:2d:47:2c:a6:e8:e7:a9:a7:0b:d3:fb:2f:cc:dc:c0:66: 39:dd:05:5a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOunetVzPsq2SRhymr1+xYQtqXQgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwODE1MDAyMTM0WhcNMjUwOTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BmOWZkYzE5ZDRmZTM2ZjY5NDVkNGUxNzFiZDRmYzM0MzMy MDkyODVjMmFhN2Q5YTdjN2NmM2RiMWRmMzdkOTM1MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFNAYwBi6nRsHXb8s5UpkZDCsFkEMNoUx3fG0+Op/cnOVu 6YW3YTH1daSrZb2ftiiAV0AmI2t15CqU0SC128OL8KTuaDcwpjjOtbwAcUiHqpXF xSUlwH+Eut087x4o3UvqshLornLXbBtbkp16k3wa0+NnIRPvvAYqGuOPADRfgcVj oQdHsdcSH+ZFmzJplwpQ12wSUWqV13BdyG26CwEtDguIaHK2HLi8nYBXz/LtEXbn z8s0FI56AbuNkO3UmeYCzXbYfKC7WKTlPDlyiVcNTMOuE3wIUvuMyz+nAVfGehiB aSlHN+QhgCrWpsJDCHbXhImATXKBsP8MgAq+0mw/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUuQc1dkNAba9ET23oSyXoLdThIA8wHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2RjZTJkYjkzLThmYjctNDJiOS1iZTU2LTIzZjQ2YjViZjRlMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABM370wDQYJKoZIhvcNAQELBQADggEBAHCfg5lCgnBzextPhhAdPJc972rf s5O7OQ/HV8dd0nZy4DYKSC1JSBGOy19Xc09g/mPeNSm45p6U3dowRdZ3Vq0UL6bn PRxxKtCSDi/HgfAsvdD4V4Gd1DKVvsE5wur6gH5XUi8x9MXRDjOgPJ8NwZs2Wxs5 F6L2vWuPfuSkUYOPUq8d4s3hU2CWRwKZ/+Kpqg54wkXR2O9zqke8GxRKYCDfiW+R mw2ji5qqohtaOHzQ3CmI2S+BFgy54P6KZR33p+5VqclaUdnYBEbKog7ytLVs5HCW BAnx+9lX8nmptZercBBKfk+neBPSTY5gLUcspujnqacL0/svzNzAZjndBVo= -----END CERTIFICATE-----Generated at Sat Aug 23 13:31:17 2025 by rpki-client