$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3200cf8e-c64b-4110-8ccd-4128ae231d47.roa File: 3200cf8e-c64b-4110-8ccd-4128ae231d47.roa (raw, json) Hash identifier: He8wLWfzbLIdvEAsm7l+7hkNMRoU0cdUu2CssEJw9jM= Subject key identifier: DC:3D:6F:BF:88:08:5F:ED:0E:AC:85:24:DF:2A:35:12:04:AE:A7:49 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 3F4ACE05C2B44A5289D8EB3AD9CB2C476B5D3114 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3200cf8e-c64b-4110-8ccd-4128ae231d47.roa Signing time: Fri 13 Jun 2025 00:10:14 +0000 ROA not before: Fri 13 Jun 2025 00:10:14 +0000 ROA not after: Fri 18 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 69.169.224.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:4a:ce:05:c2:b4:4a:52:89:d8:eb:3a:d9:cb:2c:47:6b:5d:31:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Jun 13 00:10:14 2025 GMT Not After : Jul 18 23:59:59 2025 GMT Subject: serialNumber=dda3e91f8488d2afb77bef4f9f10823f31d98c67182578e637a88625a0c4b53b, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b9:ca:f8:2e:f7:94:32:5b:28:be:72:78:9b: 90:52:05:1b:1b:03:a2:38:4c:61:86:1f:67:d5:23: 28:d0:6c:6a:0f:6f:fc:fb:07:9d:6d:9a:2b:8e:d0: 3d:cc:32:7a:dc:ac:f1:78:e8:b2:4a:48:89:e3:43: c2:90:75:68:36:5a:bc:18:d8:5f:b2:53:65:dd:6f: 15:7d:fe:6f:f6:54:99:a3:7b:c3:47:13:a8:4e:7d: c6:10:61:ff:1d:11:0d:3b:4d:25:d1:fd:49:e8:49: 22:45:29:85:2a:39:a6:b1:5a:7a:86:42:bb:7c:6b: 94:c7:10:41:27:16:0e:b4:97:99:a0:44:30:64:53: b4:87:92:cf:db:de:b0:7b:02:f2:e2:8e:55:4e:3c: ea:08:1e:82:e0:f4:01:a9:80:d3:b2:75:14:78:33: 5f:1f:08:60:84:fc:10:5e:a3:d8:e6:51:99:3d:f0: 37:9a:38:c5:65:57:30:f0:c8:31:7e:b2:ff:74:62: e6:f5:0e:92:e6:e0:be:e3:7e:80:17:de:0a:e4:59: df:c4:f8:a1:30:f5:0a:d2:1d:6e:15:80:9b:80:16: 5c:7a:a1:6a:5d:9f:19:73:9a:cb:d4:d9:ab:43:1b: 2f:c0:5f:6f:f3:34:b2:6e:15:06:aa:b2:0c:7f:b0: cb:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:3D:6F:BF:88:08:5F:ED:0E:AC:85:24:DF:2A:35:12:04:AE:A7:49 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3200cf8e-c64b-4110-8ccd-4128ae231d47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 69.169.224.0/23 Signature Algorithm: sha256WithRSAEncryption 3d:88:c6:b7:47:43:ba:29:a9:28:9c:d8:01:9b:ee:0c:67:b2: 24:63:82:5a:87:56:98:b5:04:6e:4f:91:23:e9:dc:ee:99:8f: 4e:92:36:d5:b8:54:de:56:b1:84:d7:eb:27:6e:79:89:93:83: be:97:25:69:d3:c9:9d:a5:36:11:5c:f4:8c:96:65:7d:72:33: 4d:63:a5:90:f9:9e:11:6d:0a:f2:0e:d2:23:4a:f2:3a:0e:54: f4:d3:60:af:0e:bf:a8:a8:b5:13:5f:80:53:27:a8:81:9f:2a: c8:49:8a:21:c4:89:c4:ad:f4:1f:46:60:02:80:e9:92:b3:fc: 00:00:e3:28:46:ea:e6:e3:6f:e9:1a:01:9f:d9:fb:6d:5c:3b: 0f:a2:5f:8f:e2:0c:1d:c8:f6:6f:6a:d8:1e:b1:92:1f:52:2c: a6:07:25:19:48:08:40:69:22:2c:81:ee:da:6f:e7:5b:cc:a2: 79:a2:f2:6b:5f:40:7b:fe:05:5f:c2:ee:7f:d6:f8:d4:ed:45: f3:ce:bd:7b:4a:e3:5d:a8:e2:d4:86:02:d0:80:27:e9:31:ee: 27:95:f5:70:a0:a6:35:97:54:92:b6:b8:99:5b:16:2e:2f:53: b4:55:b1:09:e4:2b:41:00:d8:f7:af:f8:f2:c2:f5:99:77:bf: 00:c5:20:d2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUP0rOBcK0SlKJ2Os62cssR2tdMRQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNjEzMDAxMDE0WhcNMjUwNzE4MjM1OTU5 WjB6MUkwRwYDVQQFE0BkZGEzZTkxZjg0ODhkMmFmYjc3YmVmNGY5ZjEwODIzZjMx ZDk4YzY3MTgyNTc4ZTYzN2E4ODYyNWEwYzRiNTNiMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCUucr4LveUMlsovnJ4m5BSBRsbA6I4TGGGH2fVIyjQbGoP b/z7B51tmiuO0D3MMnrcrPF46LJKSInjQ8KQdWg2WrwY2F+yU2XdbxV9/m/2VJmj e8NHE6hOfcYQYf8dEQ07TSXR/UnoSSJFKYUqOaaxWnqGQrt8a5THEEEnFg60l5mg RDBkU7SHks/b3rB7AvLijlVOPOoIHoLg9AGpgNOydRR4M18fCGCE/BBeo9jmUZk9 8DeaOMVlVzDwyDF+sv90Yub1DpLm4L7jfoAX3grkWd/E+KEw9QrSHW4VgJuAFlx6 oWpdnxlzmsvU2atDGy/AX2/zNLJuFQaqsgx/sMsZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU3D1vv4gIX+0OrIUk3yo1EgSup0kwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzMyMDBjZjhlLWM2NGItNDExMC04Y2NkLTQxMjhhZTIzMWQ0Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFFqeAwDQYJKoZIhvcNAQELBQADggEBAD2IxrdHQ7opqSic2AGb7gxnsiRj glqHVpi1BG5PkSPp3O6Zj06SNtW4VN5WsYTX6ydueYmTg76XJWnTyZ2lNhFc9IyW ZX1yM01jpZD5nhFtCvIO0iNK8joOVPTTYK8Ov6iotRNfgFMnqIGfKshJiiHEicSt 9B9GYAKA6ZKz/AAA4yhG6ubjb+kaAZ/Z+21cOw+iX4/iDB3I9m9q2B6xkh9SLKYH JRlICEBpIiyB7tpv51vMonmi8mtfQHv+BV/C7n/W+NTtRfPOvXtK412o4tSGAtCA J+kx7ieV9XCgpjWXVJK2uJlbFi4vU7RVsQnkK0EA2Pev+PLC9Zl3vwDFINI= -----END CERTIFICATE-----Generated at Sat Jun 14 06:39:33 2025 by rpki-client