$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/fa37fece-cb6b-47c4-9fdb-04a4117bc583.roa File: fa37fece-cb6b-47c4-9fdb-04a4117bc583.roa (raw, json) Hash identifier: 3Xb2Ls9BWQm2mCYnl93k0us0jHN2U0zZfyHtjH90YoE= Subject key identifier: 9F:5A:AB:18:68:44:B9:73:40:2A:D4:59:3A:30:4B:2D:DA:46:1E:0C Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 5EF14C638367CBD74D252E44BCDBE9B45DA4C8A3 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/fa37fece-cb6b-47c4-9fdb-04a4117bc583.roa Signing time: Fri 15 Aug 2025 00:21:35 +0000 ROA not before: Fri 15 Aug 2025 00:21:35 +0000 ROA not after: Fri 19 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 76.223.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:f1:4c:63:83:67:cb:d7:4d:25:2e:44:bc:db:e9:b4:5d:a4:c8:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Aug 15 00:21:35 2025 GMT Not After : Sep 19 23:59:59 2025 GMT Subject: serialNumber=d3caed6f21a4c3a0a7c69ae81ae8c6d82fcc44f17445c3261a54685d931374dd, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:2f:aa:13:4e:45:5b:3f:59:02:be:6f:ea:c7: c3:42:ab:d5:6f:4e:82:84:b6:b7:7f:3e:74:5f:0c: c9:f1:9e:89:1c:48:8b:a8:f0:a2:7c:c5:ab:1d:d6: da:f9:d9:b2:72:3e:cd:7e:29:e5:f5:bc:6d:e4:31: fa:0a:9c:31:89:e3:5a:36:e4:f1:48:ad:4d:9b:6c: 56:f0:0b:c0:6d:ad:5e:df:62:1c:92:37:50:78:3f: 2f:77:b9:75:f6:f4:f5:0f:dc:10:af:e8:90:6f:7c: 8c:a3:60:fb:1d:50:71:bd:e5:e5:39:49:4c:1b:88: 3b:f6:2e:bb:5b:4a:f0:4b:f8:b4:8b:a8:bc:b6:4b: f4:ad:42:1c:31:bf:99:e0:40:75:2d:83:65:f8:4d: 1c:cd:f9:d0:58:f7:58:e9:22:5b:bc:0d:57:5f:2c: 38:e7:52:e9:5e:2e:70:67:79:37:0e:ff:0a:da:19: 7b:a7:0e:df:26:7e:76:67:1e:17:94:89:1b:03:12: 75:46:9e:05:dc:45:af:f7:6f:1b:a3:e3:dd:34:d6: 42:3c:99:ba:ce:04:a9:32:ea:f1:87:d4:04:3c:be: 5d:5e:b5:d8:29:71:95:d5:76:1c:83:6f:d9:3e:c6: e9:e0:07:56:c6:d4:82:27:81:19:c0:79:4e:da:a0: 24:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:5A:AB:18:68:44:B9:73:40:2A:D4:59:3A:30:4B:2D:DA:46:1E:0C X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/fa37fece-cb6b-47c4-9fdb-04a4117bc583.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.223.191.0/24 Signature Algorithm: sha256WithRSAEncryption 70:3a:85:5c:38:0e:db:cc:13:a6:1a:ae:64:1c:76:c0:a6:cc: c3:55:9f:bd:e6:26:ba:77:0a:7f:a9:86:f4:e5:80:68:4f:5c: 91:df:02:66:bf:70:03:9a:f3:c1:ba:cf:39:30:c3:d8:16:40: c0:36:89:5c:0b:d2:05:19:53:cf:38:63:b0:bb:4e:53:45:fa: 13:c3:c3:dd:11:f6:0b:77:5a:b4:58:ef:02:91:65:d3:b7:55: 34:03:76:a7:ea:9d:70:b6:08:02:6c:6b:23:bb:64:73:18:40: d8:5b:09:69:ee:15:e8:e7:c3:33:b0:29:b2:d6:48:a9:38:d2: c5:db:0d:53:be:04:78:1e:1c:f3:36:14:a3:98:82:d9:67:2c: 6c:fb:da:7d:ac:9e:39:6c:30:28:e6:ce:b8:d7:17:68:65:74: b0:56:3e:cd:df:52:7b:48:99:84:9f:f0:5b:7a:ff:fb:31:7c: b4:cf:fc:24:37:ee:d9:66:db:86:df:13:a4:fa:6b:61:cc:52: d2:1e:7e:10:fb:d7:88:8f:67:c4:f7:1b:42:af:a9:51:17:ce: e6:34:83:95:2d:24:4c:d8:5e:53:f7:a5:f6:5a:aa:79:13:e3: 90:06:80:8d:94:94:46:f5:fa:f3:f6:bf:b3:97:ca:28:18:bb: f1:a2:c5:24 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXvFMY4Nny9dNJS5EvNvptF2kyKMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwODE1MDAyMTM1WhcNMjUwOTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BkM2NhZWQ2ZjIxYTRjM2EwYTdjNjlhZTgxYWU4YzZkODJm Y2M0NGYxNzQ0NWMzMjYxYTU0Njg1ZDkzMTM3NGRkMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQL6oTTkVbP1kCvm/qx8NCq9VvToKEtrd/PnRfDMnxnokc SIuo8KJ8xasd1tr52bJyPs1+KeX1vG3kMfoKnDGJ41o25PFIrU2bbFbwC8BtrV7f YhySN1B4Py93uXX29PUP3BCv6JBvfIyjYPsdUHG95eU5SUwbiDv2LrtbSvBL+LSL qLy2S/StQhwxv5ngQHUtg2X4TRzN+dBY91jpIlu8DVdfLDjnUuleLnBneTcO/wra GXunDt8mfnZnHheUiRsDEnVGngXcRa/3bxuj49001kI8mbrOBKky6vGH1AQ8vl1e tdgpcZXVdhyDb9k+xungB1bG1IIngRnAeU7aoCQrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUn1qrGGhEuXNAKtRZOjBLLdpGHgwwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2ZhMzdmZWNlLWNiNmItNDdjNC05ZmRiLTA0YTQxMTdiYzU4My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABM378wDQYJKoZIhvcNAQELBQADggEBAHA6hVw4DtvME6YarmQcdsCmzMNV n73mJrp3Cn+phvTlgGhPXJHfAma/cAOa88G6zzkww9gWQMA2iVwL0gUZU884Y7C7 TlNF+hPDw90R9gt3WrRY7wKRZdO3VTQDdqfqnXC2CAJsayO7ZHMYQNhbCWnuFejn wzOwKbLWSKk40sXbDVO+BHgeHPM2FKOYgtlnLGz72n2snjlsMCjmzrjXF2hldLBW Ps3fUntImYSf8Ft6//sxfLTP/CQ37tlm24bfE6T6a2HMUtIefhD714iPZ8T3G0Kv qVEXzuY0g5UtJEzYXlP3pfZaqnkT45AGgI2UlEb1+vP2v7OXyigYu/GixSQ= -----END CERTIFICATE-----Generated at Sat Aug 23 10:14:17 2025 by rpki-client