$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/32fde2e1-3674-4a8c-9968-42521c781b0a.roa File: 32fde2e1-3674-4a8c-9968-42521c781b0a.roa (raw, json) Hash identifier: lxL6eSZgF2Y3JQ4VAi5yQs9jEZe7j7gtSDx5PubjHd4= Subject key identifier: 56:00:5F:9C:C0:9C:A0:F1:36:29:83:DB:64:D7:A6:9B:09:72:CB:62 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 30585047C6022A524D404EB760648249E0C55BA8 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/32fde2e1-3674-4a8c-9968-42521c781b0a.roa Signing time: Mon 21 Jul 2025 15:21:14 +0000 ROA not before: Mon 21 Jul 2025 15:21:14 +0000 ROA not after: Mon 25 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.251.238.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:58:50:47:c6:02:2a:52:4d:40:4e:b7:60:64:82:49:e0:c5:5b:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Jul 21 15:21:14 2025 GMT Not After : Aug 25 23:59:59 2025 GMT Subject: serialNumber=90bb58f2e4505dd103ada44fa0bc10ac8b7522f95b78b8d5825719ed9720b3db, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:63:61:50:a3:88:82:23:5d:25:6c:5b:76:59: e8:22:8a:ed:5c:51:08:0f:9d:e5:6c:2a:fe:3e:32: ed:17:28:58:30:d5:7b:93:1e:89:c4:7c:88:50:71: a2:1d:f0:05:07:ee:c1:d0:a3:da:99:2d:83:fc:15: 35:44:0e:34:38:a3:81:1e:16:df:9d:f8:44:5b:f5: 59:73:b8:cf:2f:03:88:17:db:8e:98:55:af:7f:c0: 3c:07:63:f4:f4:2a:e9:3c:18:bc:be:2c:3f:29:04: 15:e2:fd:dc:18:d6:05:b7:22:fc:28:2d:45:e6:b4: cc:51:06:48:98:34:71:d5:56:34:39:91:d0:45:ee: 76:3e:2c:a7:47:70:ea:a8:7a:12:63:c6:d3:7c:3a: f4:57:57:01:0e:e1:19:ca:d7:63:a5:62:29:43:dc: cd:66:56:19:53:d5:10:4e:95:a7:67:23:0c:21:46: 87:53:ce:d0:92:44:56:e6:79:a9:07:d8:4d:5d:35: 44:f4:9b:c2:c9:1f:d7:c4:41:6b:d4:b9:c3:90:0a: b5:4b:23:07:01:a4:77:bc:a8:d3:ba:a1:5a:58:0b: 69:1b:df:db:8d:ef:2f:f4:d3:c4:45:de:93:50:34: bb:3e:20:c6:41:4b:93:dd:75:27:a8:a6:b2:10:f6: b1:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:00:5F:9C:C0:9C:A0:F1:36:29:83:DB:64:D7:A6:9B:09:72:CB:62 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/32fde2e1-3674-4a8c-9968-42521c781b0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.251.238.0/23 Signature Algorithm: sha256WithRSAEncryption 2d:ce:56:19:2b:67:01:23:54:66:1a:0f:dd:9a:fe:ad:1f:3f: 84:68:4f:27:76:22:ca:a4:f2:eb:2b:9a:ee:9f:35:1e:2a:c9: a9:d8:69:10:10:78:52:9b:ea:6a:5b:c7:37:97:a4:76:66:e1: b8:e1:f3:ef:cc:e3:10:d0:d9:f8:3e:1c:1f:af:b3:f2:e0:1c: 8d:05:91:95:70:d7:20:49:58:1f:ed:12:7b:44:a0:17:36:95: 93:67:30:e0:db:48:ce:27:4f:1e:11:91:b4:6a:f2:0d:94:fd: 62:e6:d5:c8:31:be:31:a1:6f:19:c3:c4:f7:e3:d0:76:21:fb: 29:f0:2a:ef:d7:e1:ca:60:9b:55:8d:46:e6:2a:5d:3a:3c:5e: b9:62:e3:60:bc:ab:6b:46:80:3b:8e:ce:ca:94:70:82:81:3a: da:3c:ef:27:77:f2:d1:41:95:05:6d:a4:db:ee:12:3a:41:95: b6:94:98:60:04:5d:6a:b0:a3:cd:66:ed:7b:4a:1b:55:a2:fb: ac:2f:8c:aa:a5:64:2d:e5:b2:a0:b3:bc:05:b5:d4:a4:96:c1: a3:a7:84:74:98:35:98:4b:29:8d:44:6e:90:7e:0a:75:43:77: 19:fe:61:79:7f:b7:84:dd:08:4b:04:ae:38:d2:d8:27:8f:ec: 94:01:f5:c1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMFhQR8YCKlJNQE63YGSCSeDFW6gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNzIxMTUyMTE0WhcNMjUwODI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A5MGJiNThmMmU0NTA1ZGQxMDNhZGE0NGZhMGJjMTBhYzhi NzUyMmY5NWI3OGI4ZDU4MjU3MTllZDk3MjBiM2RiMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCSY2FQo4iCI10lbFt2Wegiiu1cUQgPneVsKv4+Mu0XKFgw 1XuTHonEfIhQcaId8AUH7sHQo9qZLYP8FTVEDjQ4o4EeFt+d+ERb9VlzuM8vA4gX 246YVa9/wDwHY/T0Kuk8GLy+LD8pBBXi/dwY1gW3IvwoLUXmtMxRBkiYNHHVVjQ5 kdBF7nY+LKdHcOqoehJjxtN8OvRXVwEO4RnK12OlYilD3M1mVhlT1RBOladnIwwh RodTztCSRFbmeakH2E1dNUT0m8LJH9fEQWvUucOQCrVLIwcBpHe8qNO6oVpYC2kb 39uN7y/008RF3pNQNLs+IMZBS5PddSeoprIQ9rF9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUVgBfnMCcoPE2KYPbZNemmwlyy2IwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzMyZmRlMmUxLTM2NzQtNGE4Yy05OTY4LTQyNTIxYzc4MWIwYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEX++4wDQYJKoZIhvcNAQELBQADggEBAC3OVhkrZwEjVGYaD92a/q0fP4Ro Tyd2Isqk8usrmu6fNR4qyanYaRAQeFKb6mpbxzeXpHZm4bjh8+/M4xDQ2fg+HB+v s/LgHI0FkZVw1yBJWB/tEntEoBc2lZNnMODbSM4nTx4RkbRq8g2U/WLm1cgxvjGh bxnDxPfj0HYh+ynwKu/X4cpgm1WNRuYqXTo8Xrli42C8q2tGgDuOzsqUcIKBOto8 7yd38tFBlQVtpNvuEjpBlbaUmGAEXWqwo81m7XtKG1Wi+6wvjKqlZC3lsqCzvAW1 1KSWwaOnhHSYNZhLKY1EbpB+CnVDdxn+YXl/t4TdCEsErjjS2CeP7JQB9cE= -----END CERTIFICATE-----Generated at Mon Aug 4 22:14:50 2025 by rpki-client