$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/498f334e-4dc8-4118-b1a1-4c9a15d14b92.roa File: 498f334e-4dc8-4118-b1a1-4c9a15d14b92.roa (raw, json) Hash identifier: /EJTbhobuuV7Zx+TQtzTRVPHKYIfwuzdZv0fNuuWros= Subject key identifier: C2:BF:E1:29:CA:6D:42:76:68:E5:67:F3:8C:61:BC:5E:C3:79:68:A6 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 3C922B6291FBCFAF8832DBEF334290983362D110 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/498f334e-4dc8-4118-b1a1-4c9a15d14b92.roa Signing time: Sat 31 May 2025 00:10:06 +0000 ROA not before: Sat 31 May 2025 00:10:06 +0000 ROA not after: Sat 05 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 76.223.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:92:2b:62:91:fb:cf:af:88:32:db:ef:33:42:90:98:33:62:d1:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: May 31 00:10:06 2025 GMT Not After : Jul 5 23:59:59 2025 GMT Subject: serialNumber=701bb730b60da9e13d5320912b38ebc51f1bcfc9d3fbd6cb6dbff4d16f437647, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f4:c8:5f:0a:c8:e4:3c:0c:62:13:08:6c:2f: 23:07:54:4d:be:a5:72:07:5a:df:1e:fd:27:da:a0: 40:d1:03:e8:11:7a:95:5f:a7:04:7a:97:33:20:11: 9a:35:18:4e:5d:5c:38:78:83:18:e4:0c:1c:e6:5e: 4c:cd:89:4d:63:66:c7:4d:15:7e:26:f8:fa:3c:62: 60:95:e8:34:92:d3:85:80:85:12:3e:e1:92:a2:72: 22:20:b6:f8:b0:56:74:2c:fc:d5:76:68:4a:c1:4a: 93:63:fe:54:42:1f:4f:44:44:83:a9:f7:7e:23:b3: 77:06:68:a1:4c:a7:62:88:c9:af:26:8b:d3:c5:ea: a3:2b:cd:d9:45:b6:40:b7:8f:a3:6e:37:0d:4d:a9: a1:6b:fa:68:5b:59:df:af:ee:e3:37:88:d6:74:07: 73:32:4d:d6:e9:0c:ab:31:42:10:03:50:78:f7:03: 73:80:c9:a4:87:34:1c:d7:44:c8:7a:08:96:eb:45: 9f:b6:b2:97:fc:0b:02:83:66:c8:f3:86:c0:89:07: 9c:81:b1:b8:7e:8a:07:24:eb:62:53:9b:89:7b:c2: a0:51:e8:7c:59:d7:6a:92:0e:f2:fc:8d:b5:72:5e: c8:a3:10:c2:6b:93:5a:6c:33:c2:8f:40:a4:f5:37: cf:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:BF:E1:29:CA:6D:42:76:68:E5:67:F3:8C:61:BC:5E:C3:79:68:A6 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/498f334e-4dc8-4118-b1a1-4c9a15d14b92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.223.186.0/24 Signature Algorithm: sha256WithRSAEncryption 93:dc:26:de:98:d8:cc:49:37:97:a9:74:37:60:b8:95:1f:2d: ca:eb:bf:a3:49:7a:96:70:84:c7:a6:0b:f2:ab:c3:11:5d:83: 23:fb:ed:35:ae:c5:90:50:91:7a:cc:42:b8:bd:8c:90:00:75: 4c:ec:6e:00:80:b4:0c:b7:b8:b7:b3:33:ec:fc:4f:92:72:be: f2:14:dd:ee:04:46:51:02:10:e5:84:f2:94:3f:da:36:54:e3: 51:ee:d0:4d:27:8b:a8:39:d8:b1:06:cd:61:28:08:2f:42:ba: 8d:0e:bd:41:dd:6f:b4:f5:54:02:be:c5:73:de:15:b0:07:4d: b8:23:a8:da:98:76:2f:78:ec:29:a9:cb:e7:aa:56:06:ea:7f: 58:7d:31:76:0d:87:74:9b:fc:69:94:18:69:8c:f7:aa:8f:36: 45:5b:bb:31:d9:fe:36:de:60:96:85:cb:fd:80:85:c2:1e:b4: 43:46:37:0e:ab:09:bc:0b:08:61:40:28:18:37:a3:74:e7:c9: 0a:26:b0:30:70:90:df:c6:17:cf:b8:ef:f0:86:6c:5a:92:1a: c5:5f:b1:28:d1:a5:95:a0:b7:f5:a3:0f:e0:91:0a:90:3b:c3: d8:31:7b:d9:0a:11:ae:a4:74:c5:36:ec:ce:7b:b8:32:23:5d: aa:e9:33:36 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPJIrYpH7z6+IMtvvM0KQmDNi0RAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNTMxMDAxMDA2WhcNMjUwNzA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A3MDFiYjczMGI2MGRhOWUxM2Q1MzIwOTEyYjM4ZWJjNTFm MWJjZmM5ZDNmYmQ2Y2I2ZGJmZjRkMTZmNDM3NjQ3MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCY9MhfCsjkPAxiEwhsLyMHVE2+pXIHWt8e/SfaoEDRA+gR epVfpwR6lzMgEZo1GE5dXDh4gxjkDBzmXkzNiU1jZsdNFX4m+Po8YmCV6DSS04WA hRI+4ZKiciIgtviwVnQs/NV2aErBSpNj/lRCH09ERIOp934js3cGaKFMp2KIya8m i9PF6qMrzdlFtkC3j6NuNw1NqaFr+mhbWd+v7uM3iNZ0B3MyTdbpDKsxQhADUHj3 A3OAyaSHNBzXRMh6CJbrRZ+2spf8CwKDZsjzhsCJB5yBsbh+igck62JTm4l7wqBR 6HxZ12qSDvL8jbVyXsijEMJrk1psM8KPQKT1N88nAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUwr/hKcptQnZo5WfzjGG8XsN5aKYwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzQ5OGYzMzRlLTRkYzgtNDExOC1iMWExLTRjOWExNWQxNGI5Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABM37owDQYJKoZIhvcNAQELBQADggEBAJPcJt6Y2MxJN5epdDdguJUfLcrr v6NJepZwhMemC/KrwxFdgyP77TWuxZBQkXrMQri9jJAAdUzsbgCAtAy3uLezM+z8 T5JyvvIU3e4ERlECEOWE8pQ/2jZU41Hu0E0ni6g52LEGzWEoCC9Cuo0OvUHdb7T1 VAK+xXPeFbAHTbgjqNqYdi947Cmpy+eqVgbqf1h9MXYNh3Sb/GmUGGmM96qPNkVb uzHZ/jbeYJaFy/2AhcIetENGNw6rCbwLCGFAKBg3o3TnyQomsDBwkN/GF8+47/CG bFqSGsVfsSjRpZWgt/WjD+CRCpA7w9gxe9kKEa6kdMU27M57uDIjXarpMzY= -----END CERTIFICATE-----Generated at Sat Jun 14 06:21:08 2025 by rpki-client