$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/eaef83ec-c27a-4971-921b-164f8f284067.roa File: eaef83ec-c27a-4971-921b-164f8f284067.roa (raw, json) Hash identifier: jR7W8mVzOf6J5DVEfuMv6dw5nSwXQGwJpCwgi+L1kEw= Subject key identifier: 28:8E:45:5D:19:71:90:55:86:1D:42:0F:28:7F:4E:BF:76:2C:C5:61 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 7BFE48ABB4EEAA4B5B4A77EA7D6A7992A84EF837 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/eaef83ec-c27a-4971-921b-164f8f284067.roa Signing time: Wed 25 Jun 2025 00:10:07 +0000 ROA not before: Wed 25 Jun 2025 00:10:07 +0000 ROA not after: Wed 30 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 76.223.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:fe:48:ab:b4:ee:aa:4b:5b:4a:77:ea:7d:6a:79:92:a8:4e:f8:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Jun 25 00:10:07 2025 GMT Not After : Jul 30 23:59:59 2025 GMT Subject: serialNumber=43fe3ad86e2ac53b0bc6d229b850453927a02ede3afdc593aa2d32d97fa597f0, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:4d:ca:51:b2:da:f9:2d:0b:da:46:da:2f:78: 46:1d:dc:bd:84:63:98:f1:81:6c:76:24:75:e7:aa: 8d:6e:65:b5:b7:96:8c:bb:3e:3d:f8:c7:6a:e2:0a: 81:cf:b8:04:35:20:2b:a3:f9:e8:c3:42:4c:e0:94: 65:2e:80:b8:9e:73:42:c2:07:39:6c:16:55:25:18: 43:53:4b:4b:84:6b:e9:9d:04:fb:fd:d4:75:a5:a1: 6b:9a:03:12:99:df:00:d3:9f:7c:bd:53:d8:24:7a: 88:d7:79:35:d1:c6:73:a8:62:66:d7:1c:ae:3b:ad: 96:59:71:97:ca:c9:4c:c3:de:af:d9:63:2a:34:c4: 21:9d:14:45:b3:0d:29:96:26:ff:9b:8a:22:29:19: 50:c5:6d:ab:4e:1d:b2:83:a9:c5:f1:68:0a:75:8d: 1e:19:66:47:07:87:6d:5d:3b:6e:fb:18:81:cc:a2: d9:6d:0f:5b:1b:89:87:b2:1e:ff:01:a3:36:89:78: 71:46:ec:76:8b:9c:33:33:d6:86:ed:21:f8:7b:a3: d5:bf:c2:7b:75:8f:18:f0:7b:9e:95:72:4e:bd:ee: 5d:d9:bd:ba:ac:d4:39:48:9b:7b:ae:07:b9:dc:fd: 64:3a:9e:ab:f3:f6:32:d9:0f:de:2a:cf:82:3a:b9: 86:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:8E:45:5D:19:71:90:55:86:1D:42:0F:28:7F:4E:BF:76:2C:C5:61 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/eaef83ec-c27a-4971-921b-164f8f284067.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.223.187.0/24 Signature Algorithm: sha256WithRSAEncryption 35:90:c4:33:60:45:e8:b5:c6:7e:0f:49:18:c0:08:e1:f2:9b: 02:db:39:82:0f:40:88:06:4a:80:82:25:84:c5:26:47:35:ae: 69:3b:cc:8c:fc:59:c5:d6:ed:fe:c2:4a:78:a7:d0:6a:a3:cc: fc:e1:f4:ad:5f:9b:bc:5f:ac:e6:ab:a9:de:2e:07:f2:95:f9: c4:c9:6e:71:f5:e9:26:37:cd:13:f8:54:c1:94:40:19:aa:ae: d2:03:9c:bf:5e:10:d1:42:da:cb:32:fd:ec:5d:f7:86:9a:05: eb:2c:73:1e:b2:b2:40:a4:fb:58:02:e1:75:23:1d:0c:ce:13: 64:f1:5f:ff:71:ff:82:68:95:37:2c:c3:92:ff:fb:e6:5e:71: bf:b9:0e:0d:a0:68:a4:40:51:a1:93:03:00:3a:e9:fb:89:af: 8c:75:25:f0:fc:6c:91:3c:db:ab:0e:39:a6:fe:a6:23:9c:ee: 85:4a:e1:bf:e3:67:30:54:32:d5:b6:1f:b1:ff:c5:1c:c0:81: 03:21:e8:67:60:da:32:3b:2c:b4:a0:84:c0:99:ff:b0:0d:44: bc:da:f2:f3:a8:62:47:91:65:2d:9b:27:63:f4:96:55:43:ce: f7:be:b9:6a:98:78:52:0d:ff:d8:65:38:11:24:dc:7b:ef:f6: 13:01:ef:8e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUe/5Iq7TuqktbSnfqfWp5kqhO+DcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNjI1MDAxMDA3WhcNMjUwNzMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A0M2ZlM2FkODZlMmFjNTNiMGJjNmQyMjliODUwNDUzOTI3 YTAyZWRlM2FmZGM1OTNhYTJkMzJkOTdmYTU5N2YwMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDiTcpRstr5LQvaRtoveEYd3L2EY5jxgWx2JHXnqo1uZbW3 loy7Pj34x2riCoHPuAQ1ICuj+ejDQkzglGUugLiec0LCBzlsFlUlGENTS0uEa+md BPv91HWloWuaAxKZ3wDTn3y9U9gkeojXeTXRxnOoYmbXHK47rZZZcZfKyUzD3q/Z Yyo0xCGdFEWzDSmWJv+biiIpGVDFbatOHbKDqcXxaAp1jR4ZZkcHh21dO277GIHM otltD1sbiYeyHv8BozaJeHFG7HaLnDMz1obtIfh7o9W/wnt1jxjwe56Vck697l3Z vbqs1DlIm3uuB7nc/WQ6nqvz9jLZD94qz4I6uYZ9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKI5FXRlxkFWGHUIPKH9Ov3YsxWEwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2VhZWY4M2VjLWMyN2EtNDk3MS05MjFiLTE2NGY4ZjI4NDA2Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABM37swDQYJKoZIhvcNAQELBQADggEBADWQxDNgRei1xn4PSRjACOHymwLb OYIPQIgGSoCCJYTFJkc1rmk7zIz8WcXW7f7CSnin0GqjzPzh9K1fm7xfrOarqd4u B/KV+cTJbnH16SY3zRP4VMGUQBmqrtIDnL9eENFC2ssy/exd94aaBesscx6yskCk +1gC4XUjHQzOE2TxX/9x/4JolTcsw5L/++Zecb+5Dg2gaKRAUaGTAwA66fuJr4x1 JfD8bJE826sOOab+piOc7oVK4b/jZzBUMtW2H7H/xRzAgQMh6Gdg2jI7LLSghMCZ /7ANRLza8vOoYkeRZS2bJ2P0llVDzve+uWqYeFIN/9hlOBEk3Hvv9hMB744= -----END CERTIFICATE-----Generated at Sun Jun 29 14:19:09 2025 by rpki-client