$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/639621c0-050e-4e66-b3a2-1dd129de2c24.roa File: 639621c0-050e-4e66-b3a2-1dd129de2c24.roa (raw, json) Hash identifier: xejosaKezE1xiin+UkepQdSccEF7i9d8xm1/CXyiLhc= Subject key identifier: 08:55:9B:79:E2:DC:1A:FB:E9:41:2C:8F:AD:04:C7:C3:EC:34:F6:25 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 7A1E0BAAF7BFF1D3C0AB66DCDE9E0FD9AB8B896F Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/639621c0-050e-4e66-b3a2-1dd129de2c24.roa Signing time: Mon 21 Jul 2025 15:20:15 +0000 ROA not before: Mon 21 Jul 2025 15:20:15 +0000 ROA not after: Mon 25 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 76.223.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:1e:0b:aa:f7:bf:f1:d3:c0:ab:66:dc:de:9e:0f:d9:ab:8b:89:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Jul 21 15:20:15 2025 GMT Not After : Aug 25 23:59:59 2025 GMT Subject: serialNumber=b9bc58a3c9849899e2286889448c9bf5178607b5e44548d844a5c6bc5834e935, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:33:4f:1f:b8:63:7f:9f:4c:59:e5:91:87:ef: 06:aa:c9:be:ae:77:36:aa:ed:b8:5c:bc:69:af:85: ac:63:3a:05:b9:80:6b:95:45:4f:c6:ba:9b:d9:e0: 28:49:43:1f:4e:c5:77:cf:df:61:11:1c:e7:b3:b1: 1f:e4:63:a3:e0:16:3b:e4:ea:9f:27:cb:39:46:77: 8b:9a:5c:3a:db:8f:6c:88:0c:bc:6c:aa:49:da:5e: 7b:56:16:e5:18:41:58:39:62:80:f4:3b:0d:e2:17: 8c:80:a6:d2:f6:5d:a9:31:7b:12:3c:b0:de:1d:c2: 49:d2:72:2d:cc:95:1d:07:e1:50:07:c9:ae:b5:96: a0:d3:ff:1a:0b:74:54:ea:79:5f:2b:02:44:00:31: 6c:34:93:bd:1e:5d:56:80:16:19:ab:55:15:14:3a: 70:ce:6e:33:38:48:fa:7d:ec:19:7a:d8:db:4a:f4: 8b:b7:0f:74:7e:1e:14:bd:51:b3:41:51:81:c4:30: 55:7a:f8:7c:83:27:ef:ea:1b:30:4f:8c:57:2b:10: 6c:bb:0a:55:e2:2a:5f:f5:33:6e:28:fe:71:e2:0f: 0b:72:29:c4:d1:38:bc:da:39:13:8a:7f:dd:21:47: 85:25:55:cd:a4:c6:d1:11:55:7a:55:55:85:d5:1c: 3a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:55:9B:79:E2:DC:1A:FB:E9:41:2C:8F:AD:04:C7:C3:EC:34:F6:25 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/639621c0-050e-4e66-b3a2-1dd129de2c24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.223.182.0/24 Signature Algorithm: sha256WithRSAEncryption 95:80:25:2b:2a:88:01:0c:05:0c:1e:38:4b:3a:9f:10:f3:8f: 2e:e9:a3:f6:5f:75:25:a6:21:22:d6:6f:17:b3:1d:e4:29:ec: a7:7a:53:be:c4:05:95:36:c2:43:1c:2d:a8:f4:e7:58:a1:0b: 85:b9:40:3e:f1:23:b0:5a:36:7e:c4:02:28:ff:51:cf:b8:48: 1c:b6:23:37:f9:08:c5:52:7e:34:b0:0f:1e:4f:e3:a7:05:25: c5:63:1b:b6:42:8d:5f:83:1b:ce:7b:17:81:a6:66:a1:40:2b: fa:2e:7e:0b:14:6c:f5:5b:95:d1:81:d7:11:fd:cf:4a:2d:36: e9:d9:2d:4c:07:3c:99:ae:8b:f3:03:d3:03:be:4b:34:96:64: 3b:e9:a9:05:b7:47:6c:c5:ce:96:5a:ff:ab:4c:43:d2:31:9f: bd:4a:2c:7f:c6:10:43:f5:cb:f7:25:31:5c:b8:a9:0d:f0:fa: f4:06:56:2d:0c:68:30:16:6a:94:db:3a:aa:db:ea:fe:0b:34: 5e:5f:02:01:ab:c1:f9:c9:f8:8c:55:33:63:e5:3b:cf:42:5b: 74:db:56:70:61:33:63:d4:51:55:cd:4e:5b:46:3d:e1:d9:cf: 0f:fc:16:c9:2d:15:c8:3b:54:77:d3:e5:ca:63:4d:f5:e3:ab: 42:7f:9f:24 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUeh4Lqve/8dPAq2bc3p4P2auLiW8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNzIxMTUyMDE1WhcNMjUwODI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BiOWJjNThhM2M5ODQ5ODk5ZTIyODY4ODk0NDhjOWJmNTE3 ODYwN2I1ZTQ0NTQ4ZDg0NGE1YzZiYzU4MzRlOTM1MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2M08fuGN/n0xZ5ZGH7waqyb6udzaq7bhcvGmvhaxjOgW5 gGuVRU/GupvZ4ChJQx9OxXfP32ERHOezsR/kY6PgFjvk6p8nyzlGd4uaXDrbj2yI DLxsqknaXntWFuUYQVg5YoD0Ow3iF4yAptL2XakxexI8sN4dwknSci3MlR0H4VAH ya61lqDT/xoLdFTqeV8rAkQAMWw0k70eXVaAFhmrVRUUOnDObjM4SPp97Bl62NtK 9Iu3D3R+HhS9UbNBUYHEMFV6+HyDJ+/qGzBPjFcrEGy7ClXiKl/1M24o/nHiDwty KcTROLzaOROKf90hR4UlVc2kxtERVXpVVYXVHDrZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUCFWbeeLcGvvpQSyPrQTHw+w09iUwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzYzOTYyMWMwLTA1MGUtNGU2Ni1iM2EyLTFkZDEyOWRlMmMyNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABM37YwDQYJKoZIhvcNAQELBQADggEBAJWAJSsqiAEMBQweOEs6nxDzjy7p o/ZfdSWmISLWbxezHeQp7Kd6U77EBZU2wkMcLaj051ihC4W5QD7xI7BaNn7EAij/ Uc+4SBy2Izf5CMVSfjSwDx5P46cFJcVjG7ZCjV+DG857F4GmZqFAK/oufgsUbPVb ldGB1xH9z0otNunZLUwHPJmui/MD0wO+SzSWZDvpqQW3R2zFzpZa/6tMQ9Ixn71K LH/GEEP1y/clMVy4qQ3w+vQGVi0MaDAWapTbOqrb6v4LNF5fAgGrwfnJ+IxVM2Pl O89CW3TbVnBhM2PUUVXNTltGPeHZzw/8FsktFcg7VHfT5cpjTfXjq0J/nyQ= -----END CERTIFICATE-----Generated at Wed Aug 6 05:59:40 2025 by rpki-client