$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/78a0cdc2-ea20-466b-be87-e9cd69e17b3e.roa File: 78a0cdc2-ea20-466b-be87-e9cd69e17b3e.roa (raw, json) Hash identifier: P+NaLgEI4Y2IgY2AIxkjscKKtoarw8CzGXogViyX41Q= Subject key identifier: B2:E8:0A:F8:A1:58:C7:D2:F1:00:1D:8A:3F:66:9B:E7:9C:73:36:29 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 2D09814492456803C448D2070D90FAFFEACD8086 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/78a0cdc2-ea20-466b-be87-e9cd69e17b3e.roa Signing time: Mon 21 Jul 2025 15:20:18 +0000 ROA not before: Mon 21 Jul 2025 15:20:18 +0000 ROA not after: Mon 25 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 76.223.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:09:81:44:92:45:68:03:c4:48:d2:07:0d:90:fa:ff:ea:cd:80:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Jul 21 15:20:18 2025 GMT Not After : Aug 25 23:59:59 2025 GMT Subject: serialNumber=b0686aa58968fb1c32e54b0cb54ebaa683af8b96df1301ce9529317ab802e68c, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4c:32:12:75:d9:76:76:2c:d0:a3:ca:b6:f8: 6a:58:89:b5:74:58:37:81:6c:1c:7f:11:a5:36:5f: 0d:dd:a3:61:d0:98:48:2b:3a:dd:99:54:1c:7d:3f: 4e:78:26:36:a1:17:44:ff:b4:84:c3:fa:7a:4b:7b: 07:61:f3:79:63:9a:80:95:bd:d9:d9:62:19:15:ba: f1:35:20:af:9e:5e:cb:17:1a:95:8e:68:a1:0d:cb: 3a:88:24:e1:99:a4:9e:5b:55:93:64:71:4e:e6:09: 27:c5:9b:93:e1:63:8c:e9:dc:d2:dd:13:13:b0:f1: a9:97:3a:ec:ac:33:cf:15:05:96:87:96:42:d3:ca: 83:5a:b3:39:bc:14:9a:44:a9:81:ba:57:08:90:5c: f9:1b:8d:20:23:8b:6e:83:c5:b5:7e:1a:ab:25:a5: fd:be:78:fc:a4:60:87:14:f0:9f:1e:1d:48:1b:f9: 4d:d0:6c:21:6c:5f:65:79:74:44:3b:f6:be:7a:80: 8c:2e:18:a2:61:eb:95:6c:d9:3b:7c:cf:5f:80:96: 69:b2:96:b6:d5:72:03:a5:3c:17:c6:bb:93:c8:f3: 1e:33:3f:0e:77:5b:8e:99:50:8e:4c:56:50:6a:10: 6c:90:cc:0c:a9:79:b1:00:8b:2c:fd:57:c2:10:8e: c4:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:E8:0A:F8:A1:58:C7:D2:F1:00:1D:8A:3F:66:9B:E7:9C:73:36:29 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/78a0cdc2-ea20-466b-be87-e9cd69e17b3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.223.185.0/24 Signature Algorithm: sha256WithRSAEncryption 35:16:9a:dd:d8:ba:d7:30:2a:4f:1b:6c:84:03:dd:b1:b1:52: 8e:04:e5:40:fd:9e:6b:77:b0:6d:08:b0:10:53:7a:51:1f:ba: 85:07:f0:40:90:8f:49:bd:a9:19:55:5a:7e:97:1c:fc:d1:fc: 10:21:21:5a:dd:3a:e8:e5:af:fd:2e:4b:50:f7:f5:3d:e1:ce: 2a:36:9f:e3:1e:83:21:ad:54:0d:66:19:0f:22:8d:6d:40:59: 22:9b:a1:6d:f8:c1:ac:41:c6:20:ff:13:c9:9d:78:3e:db:91: 04:bc:41:bd:12:6e:8e:88:79:b0:69:76:d6:23:19:25:07:eb: 68:3a:dc:6b:a5:93:12:b2:3c:23:8e:22:64:7e:ac:fb:86:8f: 40:d1:06:25:4b:d5:87:2f:e4:ea:62:3c:92:32:da:9c:b3:eb: be:b2:87:e7:76:1d:15:ec:10:d8:2e:b2:4d:53:45:32:b0:71: ab:a9:cf:a8:0c:45:7e:0a:2d:45:59:d0:d8:29:92:1c:d5:b7: 73:93:4d:8a:d2:ab:ad:59:fd:08:7b:da:38:9e:69:07:f9:d3: 8c:df:a2:84:ac:28:92:e7:3c:7e:e2:9a:84:a2:c7:35:22:c9: 3a:cd:05:ab:70:b4:60:8d:2a:28:69:9e:60:55:48:23:62:c1: e9:fe:15:0e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULQmBRJJFaAPESNIHDZD6/+rNgIYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNzIxMTUyMDE4WhcNMjUwODI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMDY4NmFhNTg5NjhmYjFjMzJlNTRiMGNiNTRlYmFhNjgz YWY4Yjk2ZGYxMzAxY2U5NTI5MzE3YWI4MDJlNjhjMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4TDISddl2dizQo8q2+GpYibV0WDeBbBx/EaU2Xw3do2HQ mEgrOt2ZVBx9P054JjahF0T/tITD+npLewdh83ljmoCVvdnZYhkVuvE1IK+eXssX GpWOaKENyzqIJOGZpJ5bVZNkcU7mCSfFm5PhY4zp3NLdExOw8amXOuysM88VBZaH lkLTyoNaszm8FJpEqYG6VwiQXPkbjSAji26DxbV+Gqslpf2+ePykYIcU8J8eHUgb +U3QbCFsX2V5dEQ79r56gIwuGKJh65Vs2Tt8z1+AlmmylrbVcgOlPBfGu5PI8x4z Pw53W46ZUI5MVlBqEGyQzAypebEAiyz9V8IQjsStAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUsugK+KFYx9LxAB2KP2ab55xzNikwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzc4YTBjZGMyLWVhMjAtNDY2Yi1iZTg3LWU5Y2Q2OWUxN2IzZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABM37kwDQYJKoZIhvcNAQELBQADggEBADUWmt3YutcwKk8bbIQD3bGxUo4E 5UD9nmt3sG0IsBBTelEfuoUH8ECQj0m9qRlVWn6XHPzR/BAhIVrdOujlr/0uS1D3 9T3hzio2n+MegyGtVA1mGQ8ijW1AWSKboW34waxBxiD/E8mdeD7bkQS8Qb0Sbo6I ebBpdtYjGSUH62g63GulkxKyPCOOImR+rPuGj0DRBiVL1Ycv5OpiPJIy2pyz676y h+d2HRXsENgusk1TRTKwcaupz6gMRX4KLUVZ0NgpkhzVt3OTTYrSq61Z/Qh72jie aQf504zfooSsKJLnPH7imoSixzUiyTrNBatwtGCNKihpnmBVSCNiwen+FQ4= -----END CERTIFICATE-----Generated at Wed Aug 6 00:40:46 2025 by rpki-client