$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/498f334e-4dc8-4118-b1a1-4c9a15d14b92.roa File: 498f334e-4dc8-4118-b1a1-4c9a15d14b92.roa (raw, json) Hash identifier: CgYxO6vkgcVIl9oZoMjoROcTmqEQprCkJQvUQ+Zj2TY= Subject key identifier: 23:ED:2A:76:53:B5:0E:A0:1C:2D:DE:78:66:FA:BF:C9:84:9E:15:6C Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 61AE122B7675EFCC23B40F9F89A6BF0D5379B1CD Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/498f334e-4dc8-4118-b1a1-4c9a15d14b92.roa Signing time: Mon 21 Jul 2025 15:20:09 +0000 ROA not before: Mon 21 Jul 2025 15:20:09 +0000 ROA not after: Mon 25 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 76.223.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:ae:12:2b:76:75:ef:cc:23:b4:0f:9f:89:a6:bf:0d:53:79:b1:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Jul 21 15:20:09 2025 GMT Not After : Aug 25 23:59:59 2025 GMT Subject: serialNumber=58357c22f8fc0b003c21fb247cec9438c02234c4667f5a6ee29e08a9855643cc, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b3:07:e2:66:24:47:99:2d:68:5b:7f:00:15: 6d:f8:9b:f3:bc:a0:fd:6a:98:13:37:5c:7f:65:e9: 51:58:2d:86:5a:a9:62:56:36:31:09:e1:b4:2b:0d: 32:19:90:45:45:40:57:dd:e8:ac:6e:68:ef:ed:f7: f0:28:e5:87:0a:d1:11:2c:51:04:4b:3e:64:23:73: be:34:75:04:84:b6:7f:53:76:9f:ef:1b:e9:aa:ff: 1c:40:e8:b5:ae:87:11:9a:7d:c9:34:ad:77:e8:96: 9b:dc:e7:10:a9:1a:ee:66:cc:a0:e7:c2:f2:96:9e: 61:db:dd:cd:46:98:d8:bb:81:a4:52:f0:76:36:50: 13:bb:d6:4e:9c:4b:d1:fb:c7:db:9c:42:c7:3d:85: d1:ef:65:44:7e:aa:e2:d3:fc:eb:d6:51:37:ab:d5: 52:7d:1f:86:00:f2:cc:10:82:f0:4c:70:3d:fa:9d: b9:32:05:4f:34:c0:2b:98:c9:3c:1e:c1:e0:4d:fc: 7e:eb:0f:b4:f6:79:fe:72:f5:04:41:35:6a:bc:dc: 43:74:54:20:ee:83:1d:3e:09:30:96:a6:1c:9d:21: 7a:58:4e:71:c9:a0:75:b5:15:90:e9:a5:ee:f6:ea: 77:47:e9:ee:e6:92:77:9d:99:77:c3:ed:ef:d3:fd: 90:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:ED:2A:76:53:B5:0E:A0:1C:2D:DE:78:66:FA:BF:C9:84:9E:15:6C X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/498f334e-4dc8-4118-b1a1-4c9a15d14b92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.223.186.0/24 Signature Algorithm: sha256WithRSAEncryption 88:1e:6e:78:84:63:16:f7:23:4e:f6:f8:64:31:99:21:c2:63: f9:dc:11:05:e7:6e:e7:05:13:fe:68:46:ba:b1:98:c3:6c:a6: f7:0b:8d:d1:96:d4:4a:4e:b8:08:5b:cc:83:9a:92:a7:31:26: 4c:77:8b:30:07:8d:1b:23:fb:c5:14:90:a3:27:88:ba:2b:5d: 80:6b:2b:ee:2c:18:5a:a6:4e:20:9a:b2:09:f7:56:47:62:91: 3f:3d:59:52:c1:39:b5:63:bc:b1:cf:c7:ad:32:4c:33:37:13: 6a:8d:5e:7b:d7:2f:57:c3:df:fc:7b:98:e4:cf:4a:d4:e8:b0: e0:36:61:72:b1:b5:eb:d9:1f:4f:59:4f:57:ce:f9:e1:18:03: 7d:2f:b0:62:9c:1c:b0:75:18:d8:33:33:24:f2:71:28:23:6e: 67:04:0c:75:65:32:a5:ab:5d:37:a2:52:29:14:4c:9b:f9:43: 9e:f7:d9:b1:1c:bd:b8:9c:ac:64:df:1e:b0:e3:fc:a0:0a:7c: ca:a3:d2:c1:b9:32:d0:13:75:50:cd:df:1d:03:da:db:8f:df: 8b:0a:ce:96:35:58:4b:99:bf:ec:f6:80:ac:7c:23:7d:6d:24: cf:60:b0:4c:f1:91:bb:8e:11:4d:02:5f:60:51:72:55:1a:73: 36:f9:0e:cd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYa4SK3Z178wjtA+fiaa/DVN5sc0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNzIxMTUyMDA5WhcNMjUwODI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A1ODM1N2MyMmY4ZmMwYjAwM2MyMWZiMjQ3Y2VjOTQzOGMw MjIzNGM0NjY3ZjVhNmVlMjllMDhhOTg1NTY0M2NjMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwswfiZiRHmS1oW38AFW34m/O8oP1qmBM3XH9l6VFYLYZa qWJWNjEJ4bQrDTIZkEVFQFfd6KxuaO/t9/Ao5YcK0REsUQRLPmQjc740dQSEtn9T dp/vG+mq/xxA6LWuhxGafck0rXfolpvc5xCpGu5mzKDnwvKWnmHb3c1GmNi7gaRS 8HY2UBO71k6cS9H7x9ucQsc9hdHvZUR+quLT/OvWUTer1VJ9H4YA8swQgvBMcD36 nbkyBU80wCuYyTweweBN/H7rD7T2ef5y9QRBNWq83EN0VCDugx0+CTCWphydIXpY TnHJoHW1FZDppe726ndH6e7mknedmXfD7e/T/ZClAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUI+0qdlO1DqAcLd54Zvq/yYSeFWwwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzQ5OGYzMzRlLTRkYzgtNDExOC1iMWExLTRjOWExNWQxNGI5Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABM37owDQYJKoZIhvcNAQELBQADggEBAIgebniEYxb3I072+GQxmSHCY/nc EQXnbucFE/5oRrqxmMNspvcLjdGW1EpOuAhbzIOakqcxJkx3izAHjRsj+8UUkKMn iLorXYBrK+4sGFqmTiCasgn3VkdikT89WVLBObVjvLHPx60yTDM3E2qNXnvXL1fD 3/x7mOTPStTosOA2YXKxtevZH09ZT1fO+eEYA30vsGKcHLB1GNgzMyTycSgjbmcE DHVlMqWrXTeiUikUTJv5Q5732bEcvbicrGTfHrDj/KAKfMqj0sG5MtATdVDN3x0D 2tuP34sKzpY1WEuZv+z2gKx8I31tJM9gsEzxkbuOEU0CX2BRclUaczb5Ds0= -----END CERTIFICATE-----Generated at Tue Aug 5 16:43:32 2025 by rpki-client