$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/161fc1b3-35e6-4e0b-9781-62c5b6f6a5bf.roa File: 161fc1b3-35e6-4e0b-9781-62c5b6f6a5bf.roa (raw, json) Hash identifier: sXQpI967soGZVVRnxehpx1aZycfay9TFtz1z4k02UwU= Subject key identifier: 40:B5:99:4C:52:32:3E:90:38:16:24:A5:18:3A:BE:83:50:4A:63:E6 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 22D1D8A0F5AE238F4558E6682633E476BD2F19DE Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/161fc1b3-35e6-4e0b-9781-62c5b6f6a5bf.roa Signing time: Fri 13 Jun 2025 00:10:07 +0000 ROA not before: Fri 13 Jun 2025 00:10:07 +0000 ROA not after: Fri 18 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.251.244.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:d1:d8:a0:f5:ae:23:8f:45:58:e6:68:26:33:e4:76:bd:2f:19:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Jun 13 00:10:07 2025 GMT Not After : Jul 18 23:59:59 2025 GMT Subject: serialNumber=a6489d3249c7f8ad2ba8c56dbce734ed85aecb138fdccd921884cf9ce4c18e8f, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4b:aa:40:01:3f:f3:ee:8c:64:95:aa:13:e2: dc:53:59:c0:af:75:05:c5:f8:ea:f6:98:f8:dd:95: 24:f0:ed:19:42:63:35:cc:3f:df:4f:b8:be:af:af: f4:02:45:43:c1:3f:03:8a:84:d6:0d:2a:11:0c:90: d6:0c:49:4d:72:a1:47:d1:9f:54:61:7a:49:15:47: 48:20:16:79:0f:b2:58:7f:cf:7a:53:77:f4:be:be: 9a:8c:c4:fa:b9:00:e8:e8:7a:e9:44:29:99:6c:42: 71:72:85:67:9f:50:bf:7b:dc:a6:2d:e5:40:d1:26: 69:ff:82:89:a7:c0:fe:d9:5b:fe:cf:d8:50:e7:ba: 98:3a:69:b2:b6:05:86:33:ee:5b:eb:72:da:3b:ff: b3:40:6a:45:22:50:91:fd:eb:e0:ec:d6:a1:7e:f8: ba:b5:81:f8:78:f0:57:43:03:0a:b2:94:c2:23:38: ed:a6:b3:19:9e:6f:98:e3:5f:06:f2:f4:63:7b:2a: 2d:a1:92:99:be:79:ad:f9:23:1d:03:11:7c:34:62: 8b:21:05:e4:c6:4a:5d:53:80:8b:55:87:19:cb:55: 76:73:bb:d6:e0:66:c7:42:dc:8d:29:bf:7b:ea:24: 4e:ab:44:8a:f3:f7:4e:ac:c3:6a:ff:88:1e:1b:79: 42:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B5:99:4C:52:32:3E:90:38:16:24:A5:18:3A:BE:83:50:4A:63:E6 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/161fc1b3-35e6-4e0b-9781-62c5b6f6a5bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.251.244.0/23 Signature Algorithm: sha256WithRSAEncryption 30:f4:fd:d0:ec:34:9e:e3:b6:85:6d:f1:30:0f:0a:99:97:f9: 35:9f:23:1b:19:b4:e2:7d:85:ce:66:c1:cc:3b:96:47:68:68: d5:a4:65:68:ee:ed:7b:92:1e:f4:dd:a5:f9:c6:10:8f:17:6b: 14:90:89:c3:69:24:6c:54:bf:3a:a8:94:9b:f3:0d:fd:6c:ab: 19:2d:b3:07:83:40:e9:83:27:d8:a8:43:68:70:71:fb:1f:d3: c6:0c:9c:26:8d:84:3c:b1:a7:02:10:89:d3:c6:65:cc:44:6c: 86:bd:a4:5e:ba:77:28:b5:9a:b6:0e:4f:c7:a0:ec:c7:d2:9b: 03:df:55:b3:d0:87:62:8b:7e:e3:00:4b:c1:b2:ec:b5:b5:15: ff:3c:cd:d0:fc:26:57:50:09:c1:e9:d7:b8:c4:d8:dd:4a:98: 65:db:51:fc:98:9f:63:8b:af:02:b7:83:cb:61:dc:87:b1:3c: cb:93:b7:30:3e:37:d5:7b:dd:90:42:90:10:5f:ac:a9:ce:00: 7f:77:6b:1b:ff:ac:fd:01:e0:40:29:5d:97:33:54:19:bc:d2: d0:3c:e5:b5:51:27:b7:a9:9d:d1:55:6a:b8:c3:bd:8b:dd:c0: d0:42:09:2a:8c:b0:1d:f4:49:37:94:f7:3f:16:a5:f9:41:e2: a3:03:8e:b7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUItHYoPWuI49FWOZoJjPkdr0vGd4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNjEzMDAxMDA3WhcNMjUwNzE4MjM1OTU5 WjB6MUkwRwYDVQQFE0BhNjQ4OWQzMjQ5YzdmOGFkMmJhOGM1NmRiY2U3MzRlZDg1 YWVjYjEzOGZkY2NkOTIxODg0Y2Y5Y2U0YzE4ZThmMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGS6pAAT/z7oxklaoT4txTWcCvdQXF+Or2mPjdlSTw7RlC YzXMP99PuL6vr/QCRUPBPwOKhNYNKhEMkNYMSU1yoUfRn1RhekkVR0ggFnkPslh/ z3pTd/S+vpqMxPq5AOjoeulEKZlsQnFyhWefUL973KYt5UDRJmn/gomnwP7ZW/7P 2FDnupg6abK2BYYz7lvrcto7/7NAakUiUJH96+Ds1qF++Lq1gfh48FdDAwqylMIj OO2msxmeb5jjXwby9GN7Ki2hkpm+ea35Ix0DEXw0YoshBeTGSl1TgItVhxnLVXZz u9bgZsdC3I0pv3vqJE6rRIrz906sw2r/iB4beUIxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUQLWZTFIyPpA4FiSlGDq+g1BKY+YwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzE2MWZjMWIzLTM1ZTYtNGUwYi05NzgxLTYyYzViNmY2YTViZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEX+/QwDQYJKoZIhvcNAQELBQADggEBADD0/dDsNJ7jtoVt8TAPCpmX+TWf IxsZtOJ9hc5mwcw7lkdoaNWkZWju7XuSHvTdpfnGEI8XaxSQicNpJGxUvzqolJvz Df1sqxktsweDQOmDJ9ioQ2hwcfsf08YMnCaNhDyxpwIQidPGZcxEbIa9pF66dyi1 mrYOT8eg7MfSmwPfVbPQh2KLfuMAS8Gy7LW1Ff88zdD8JldQCcHp17jE2N1KmGXb UfyYn2OLrwK3g8th3IexPMuTtzA+N9V73ZBCkBBfrKnOAH93axv/rP0B4EApXZcz VBm80tA85bVRJ7epndFVarjDvYvdwNBCCSqMsB30STeU9z8WpflB4qMDjrc= -----END CERTIFICATE-----Generated at Sat Jun 14 06:20:24 2025 by rpki-client