$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/e7138651-9d24-41c2-8af2-d0a2f7645ca5.roa File: e7138651-9d24-41c2-8af2-d0a2f7645ca5.roa (raw, json) Hash identifier: ZhmBmRjJ2wSkGFuTWtznYjkXO/pLxuj7ZRdhcN6M3mE= Subject key identifier: D0:28:7E:57:0B:CF:49:D9:8C:DC:2B:C2:CF:80:7B:12:2D:36:A4:C1 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 37B4F03F3CF3FD8A8B6649EBB189D18321D75ED7 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/e7138651-9d24-41c2-8af2-d0a2f7645ca5.roa Signing time: Mon 16 Jun 2025 15:00:05 +0000 ROA not before: Mon 16 Jun 2025 15:00:05 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 216.221.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:b4:f0:3f:3c:f3:fd:8a:8b:66:49:eb:b1:89:d1:83:21:d7:5e:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Jun 16 15:00:05 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=5cac6bbb9b0ce0f7237393eb6965a70ad4c0b1f814dda7c189555a9584f8339c, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:de:ec:b4:c5:e4:e1:47:ea:fc:9c:d9:85:be: 92:b6:a1:ca:2f:e5:8d:32:fd:7e:15:be:da:fa:95: 2c:42:d8:5e:ed:21:61:5c:6e:63:fa:67:75:83:87: 46:41:61:0e:aa:77:a7:2a:49:c1:05:5d:a7:2e:1f: 09:b6:99:b0:82:4d:dc:cd:5e:28:5c:9c:89:bf:a6: e0:57:09:7d:39:f6:a8:db:3f:88:03:4c:28:43:40: 23:dc:36:eb:0b:ab:b3:09:39:59:52:ff:68:5a:26: 72:9b:96:ad:e2:d3:e0:ff:dc:50:8c:3d:a8:1c:eb: 20:f2:11:db:49:a4:d3:e5:51:07:21:19:78:2b:2e: 41:b9:2d:3e:88:b3:e8:96:1a:ae:ac:da:6f:25:1c: dc:34:28:a2:21:d8:58:3c:78:fb:06:90:da:19:bf: d0:a4:27:e5:db:ac:58:59:d4:0e:9f:1c:b3:02:a8: d7:22:11:74:37:f9:b1:c2:28:a4:d6:ef:56:22:44: 51:cc:33:23:80:8a:a9:67:4b:2d:22:4f:43:a1:b7: 84:26:ea:85:01:41:c9:4e:ff:0f:ae:99:41:d9:69: d8:2e:41:10:1e:53:a2:12:2e:72:d7:78:e3:35:eb: f2:3f:0e:8c:10:68:d8:d3:5f:2b:ce:f0:7e:a7:4f: e7:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:28:7E:57:0B:CF:49:D9:8C:DC:2B:C2:CF:80:7B:12:2D:36:A4:C1 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/e7138651-9d24-41c2-8af2-d0a2f7645ca5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.221.163.0/24 Signature Algorithm: sha256WithRSAEncryption 13:73:0b:31:c4:e2:42:01:f5:22:27:30:31:82:5c:a1:e3:f0: 70:69:fc:73:c3:66:40:95:c1:4e:37:4a:9d:d4:76:15:69:b1: 10:52:a1:cb:12:15:75:98:4b:7b:c2:ae:43:6c:aa:75:3a:4b: 32:5d:bc:4f:0a:47:c2:df:ff:47:05:38:59:a1:29:87:da:e4: aa:0d:67:3a:b9:3b:f3:aa:cf:e5:e9:fa:5a:3b:b6:ac:b7:2a: 84:4d:4f:30:16:09:6d:64:ac:55:42:54:e1:4b:a0:1c:7e:9f: d1:88:89:bd:96:0c:f0:17:57:e3:90:fc:e6:5c:66:dd:34:fe: ac:5e:82:e4:00:7c:54:e9:a5:59:21:ba:25:1f:1b:f8:15:d4: b7:f2:6e:3b:f3:89:8d:b8:c6:46:08:89:96:61:e9:19:ae:ad: 3e:1a:ad:47:cc:ca:f8:54:03:b7:e2:8d:e0:9d:50:f7:6c:b9: 00:9c:15:d1:15:a7:42:60:b2:fb:3c:81:11:a9:e8:1c:0b:ca: 9f:94:00:a1:41:1b:3e:8a:18:10:20:ab:70:1f:b7:81:de:29: 78:3a:bb:b2:e3:2d:21:ac:14:6e:1b:87:74:2a:40:af:1a:91: ed:a5:a7:55:3d:a5:5a:da:15:c6:2d:9e:b7:b2:c2:48:8c:71: 62:37:00:fa -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUN7TwPzzz/YqLZknrsYnRgyHXXtcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNjE2MTUwMDA1WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A1Y2FjNmJiYjliMGNlMGY3MjM3MzkzZWI2OTY1YTcwYWQ0 YzBiMWY4MTRkZGE3YzE4OTU1NWE5NTg0ZjgzMzljMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDG3uy0xeThR+r8nNmFvpK2ocov5Y0y/X4Vvtr6lSxC2F7t IWFcbmP6Z3WDh0ZBYQ6qd6cqScEFXacuHwm2mbCCTdzNXihcnIm/puBXCX059qjb P4gDTChDQCPcNusLq7MJOVlS/2haJnKblq3i0+D/3FCMPagc6yDyEdtJpNPlUQch GXgrLkG5LT6Is+iWGq6s2m8lHNw0KKIh2Fg8ePsGkNoZv9CkJ+XbrFhZ1A6fHLMC qNciEXQ3+bHCKKTW71YiRFHMMyOAiqlnSy0iT0Oht4Qm6oUBQclO/w+umUHZadgu QRAeU6ISLnLXeOM16/I/DowQaNjTXyvO8H6nT+cXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU0Ch+VwvPSdmM3CvCz4B7Ei02pMEwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2U3MTM4NjUxLTlkMjQtNDFjMi04YWYyLWQwYTJmNzY0NWNhNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADY3aMwDQYJKoZIhvcNAQELBQADggEBABNzCzHE4kIB9SInMDGCXKHj8HBp /HPDZkCVwU43Sp3UdhVpsRBSocsSFXWYS3vCrkNsqnU6SzJdvE8KR8Lf/0cFOFmh KYfa5KoNZzq5O/Oqz+Xp+lo7tqy3KoRNTzAWCW1krFVCVOFLoBx+n9GIib2WDPAX V+OQ/OZcZt00/qxeguQAfFTppVkhuiUfG/gV1LfybjvziY24xkYIiZZh6RmurT4a rUfMyvhUA7fijeCdUPdsuQCcFdEVp0Jgsvs8gRGp6BwLyp+UAKFBGz6KGBAgq3Af t4HeKXg6u7LjLSGsFG4bh3QqQK8ake2lp1U9pVraFcYtnreywkiMcWI3APo= -----END CERTIFICATE-----Generated at Sun Jun 29 04:15:09 2025 by rpki-client