$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/df197ecf-bb9a-42ae-a19a-a4168fe6a3a2.roa File: df197ecf-bb9a-42ae-a19a-a4168fe6a3a2.roa (raw, json) Hash identifier: VkBwPmjHXy6D6luqrYmJWbGI6ofCy21gFnf8husIyx4= Subject key identifier: 94:90:C1:1B:9A:7B:36:B3:25:7A:19:E2:B0:AD:4E:B2:48:AD:48:22 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 78366C461E9D904D4EC47CB900FF25FD77B40B8E Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/df197ecf-bb9a-42ae-a19a-a4168fe6a3a2.roa Signing time: Wed 25 Jun 2025 00:00:40 +0000 ROA not before: Wed 25 Jun 2025 00:00:40 +0000 ROA not after: Wed 30 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.251.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:36:6c:46:1e:9d:90:4d:4e:c4:7c:b9:00:ff:25:fd:77:b4:0b:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Jun 25 00:00:40 2025 GMT Not After : Jul 30 23:59:59 2025 GMT Subject: serialNumber=72b5e5db9e67249dfcd1973be20f2ae9d7fcee5c6858a93644c039d3624f7923, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fa:0d:6e:09:d9:8d:95:b7:01:ee:86:ec:19: c1:c1:da:8c:98:6b:ad:4e:f3:c3:e5:41:51:f0:2c: fc:03:f2:ff:77:93:68:f8:d8:f6:bd:dd:3d:e7:fe: 6b:6e:87:03:07:9b:81:70:29:dc:76:cc:ef:4a:28: 4d:7e:36:3e:b1:9e:68:dd:46:86:47:0a:6b:da:a0: 93:7b:fc:cc:cb:86:02:cf:5d:e8:95:09:28:b9:a2: 54:16:99:38:42:22:26:f4:e4:d2:a0:85:3c:40:ae: 13:d0:5e:35:b7:31:0e:34:86:94:02:96:b7:45:7d: 26:f8:73:27:1b:12:5b:b4:91:15:41:eb:21:2b:bc: f2:cc:35:38:47:c7:88:96:6e:9d:59:2d:51:73:97: 22:d0:fa:04:98:49:7b:ff:3e:8b:56:49:d4:f8:d1: 99:8d:98:cb:74:ee:b8:31:ec:7a:9d:f2:a2:40:5c: 32:17:3c:09:af:2e:3c:a8:0c:bb:49:c8:9b:61:46: de:d1:d9:bd:eb:89:36:7a:8f:2a:38:1c:80:2d:10: 86:75:a8:b0:c8:f8:18:bb:84:d9:ec:a6:29:e5:c8: de:ec:b1:d7:52:48:3f:b9:5f:4a:56:84:ef:3d:07: aa:69:92:c0:fe:96:c9:fc:c4:5e:ea:5f:0f:09:0d: 50:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:90:C1:1B:9A:7B:36:B3:25:7A:19:E2:B0:AD:4E:B2:48:AD:48:22 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/df197ecf-bb9a-42ae-a19a-a4168fe6a3a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.251.232.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:39:49:0d:07:06:cf:9e:a8:bb:ba:2d:36:94:e0:f7:da:e8: 40:16:1d:1c:f2:f5:1a:09:54:8d:00:b1:17:67:ed:e2:d0:c7: 90:29:79:e6:ca:2b:ce:21:6b:94:a7:ab:84:d5:e2:12:e2:65: b1:41:89:74:bd:79:18:41:45:a5:de:60:95:9a:d9:ee:2a:df: f9:98:61:e1:76:8c:2a:bc:3f:55:53:77:d6:4e:d8:21:a6:15: 3d:ce:f6:c9:39:6a:09:98:7d:c2:b4:74:78:d2:6d:f3:02:d5: ac:61:bb:1d:64:3e:52:4f:7c:ec:b1:54:ee:3f:42:9a:e5:d7: f7:0c:58:81:79:3e:58:33:31:1e:e7:ae:42:17:e7:81:84:98: e8:8a:9d:f7:be:11:cf:e5:cb:1b:e3:fa:fa:c3:15:f9:0a:10: c2:e1:03:2b:6f:52:af:09:87:a4:1d:0c:13:fd:b1:9b:2b:dd: 34:7c:66:06:41:7a:c3:76:f7:e9:db:69:e1:98:64:e4:cb:d3: 9a:34:48:42:17:c3:57:2b:58:8a:88:a0:8b:24:10:5f:40:68: 99:f3:6a:98:96:5d:80:d4:18:1e:6e:88:dc:39:f3:d8:17:85: 6c:01:ff:42:5a:66:9f:cb:c5:35:7f:d9:a6:6a:60:51:1c:de: dd:ba:a3:10 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUeDZsRh6dkE1OxHy5AP8l/Xe0C44wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNjI1MDAwMDQwWhcNMjUwNzMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A3MmI1ZTVkYjllNjcyNDlkZmNkMTk3M2JlMjBmMmFlOWQ3 ZmNlZTVjNjg1OGE5MzY0NGMwMzlkMzYyNGY3OTIzMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7+g1uCdmNlbcB7obsGcHB2oyYa61O88PlQVHwLPwD8v93 k2j42Pa93T3n/mtuhwMHm4FwKdx2zO9KKE1+Nj6xnmjdRoZHCmvaoJN7/MzLhgLP XeiVCSi5olQWmThCIib05NKghTxArhPQXjW3MQ40hpQClrdFfSb4cycbElu0kRVB 6yErvPLMNThHx4iWbp1ZLVFzlyLQ+gSYSXv/PotWSdT40ZmNmMt07rgx7Hqd8qJA XDIXPAmvLjyoDLtJyJthRt7R2b3riTZ6jyo4HIAtEIZ1qLDI+Bi7hNnspinlyN7s sddSSD+5X0pWhO89B6ppksD+lsn8xF7qXw8JDVDFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUlJDBG5p7NrMlehnisK1OskitSCIwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2RmMTk3ZWNmLWJiOWEtNDJhZS1hMTlhLWE0MTY4ZmU2YTNhMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX++gwDQYJKoZIhvcNAQELBQADggEBAIw5SQ0HBs+eqLu6LTaU4Pfa6EAW HRzy9RoJVI0AsRdn7eLQx5ApeebKK84ha5Snq4TV4hLiZbFBiXS9eRhBRaXeYJWa 2e4q3/mYYeF2jCq8P1VTd9ZO2CGmFT3O9sk5agmYfcK0dHjSbfMC1axhux1kPlJP fOyxVO4/Qprl1/cMWIF5PlgzMR7nrkIX54GEmOiKnfe+Ec/lyxvj+vrDFfkKEMLh AytvUq8Jh6QdDBP9sZsr3TR8ZgZBesN29+nbaeGYZOTL05o0SEIXw1crWIqIoIsk EF9AaJnzapiWXYDUGB5uiNw589gXhWwB/0JaZp/LxTV/2aZqYFEc3t26oxA= -----END CERTIFICATE-----Generated at Sun Jun 29 04:17:31 2025 by rpki-client