$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/7c541838-12b7-470a-b044-f31d3ab72ede.roa File: 7c541838-12b7-470a-b044-f31d3ab72ede.roa (raw, json) Hash identifier: p9TxprpVEAkrfJv8/Zx5OdmMymOkiU1iht9RkujRpqw= Subject key identifier: B0:77:88:FC:9F:C0:A7:C7:F8:A9:01:0D:F7:B4:2C:7B:07:48:D1:00 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 5FE98B66B33D80B0A3827C446DFCDF662249C44D Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/7c541838-12b7-470a-b044-f31d3ab72ede.roa Signing time: Sat 31 May 2025 00:01:12 +0000 ROA not before: Sat 31 May 2025 00:01:12 +0000 ROA not after: Sat 05 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.249.208.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:e9:8b:66:b3:3d:80:b0:a3:82:7c:44:6d:fc:df:66:22:49:c4:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: May 31 00:01:12 2025 GMT Not After : Jul 5 23:59:59 2025 GMT Subject: serialNumber=d3540c1244c3b7c2c133bedb7c25dda47b8c4c4b358c77f94c29f73d2813aa9c, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:55:aa:9e:5a:01:4c:d9:75:b7:f8:ac:85:d4: 1e:fc:9e:db:1d:07:8c:9f:11:96:23:af:eb:06:9c: 72:d9:47:0b:f2:a3:ee:c5:b0:0b:99:43:4d:b4:72: be:26:0d:7d:4d:5c:f5:a1:f1:10:14:5b:82:d7:ca: 23:7b:66:2d:b4:93:39:3a:6d:c9:da:9c:38:f8:1f: 70:f6:22:90:bd:1d:ea:31:6f:d7:ff:96:64:ad:37: 5f:0a:66:83:b0:cf:0b:ce:f7:e1:e4:b9:65:b7:22: dd:0c:d0:3b:12:a5:9e:5d:67:55:70:3d:cd:0a:be: 4d:76:e8:88:cf:74:de:c3:05:23:fe:c7:e9:26:e5: cc:76:3c:76:f5:ce:00:6b:79:bf:ac:81:0b:58:37: 01:45:2e:32:b6:2d:63:15:56:eb:09:21:cd:c4:39: a2:cd:a9:50:5b:8d:2a:f3:4d:00:64:c2:c0:69:18: 64:67:dc:aa:d6:08:b2:1e:1e:7a:14:fe:25:6f:57: c6:5a:bc:f0:b9:65:e6:de:56:24:f3:2f:89:62:b4: d7:17:18:39:5b:f8:0f:e8:0a:22:a8:76:c3:16:e5: 96:ea:83:55:a3:c8:30:81:d1:f7:5f:5f:9b:92:92: 28:b0:de:f2:f7:ba:e1:ce:35:b5:8d:82:1b:e9:2b: 6f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:77:88:FC:9F:C0:A7:C7:F8:A9:01:0D:F7:B4:2C:7B:07:48:D1:00 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/7c541838-12b7-470a-b044-f31d3ab72ede.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.208.0/23 Signature Algorithm: sha256WithRSAEncryption 1f:1a:87:33:81:06:5c:c5:ec:c4:f7:3d:c6:b2:aa:55:66:17: 50:10:ad:80:f3:f4:a4:04:e6:7f:14:16:e5:b2:5a:b9:2e:da: a7:0f:3b:95:e1:bf:26:4a:52:f2:e4:f4:e9:5a:9b:2e:e8:9a: e3:37:7d:ff:2f:4e:12:c8:39:3e:3c:cb:82:d3:bc:f8:b7:61: 72:7f:ea:e0:56:3d:25:3b:df:bd:d5:40:24:8d:41:99:d7:f9: dd:2e:f7:e0:59:95:63:07:96:25:29:60:e8:1c:d0:66:27:04: 60:c7:b0:95:2e:0f:70:b6:c1:d2:98:5d:59:d5:25:c1:a3:7e: 41:98:e4:37:fe:bf:ab:f6:d3:67:bf:92:40:75:e2:36:f7:f6: e4:7e:b6:02:82:b9:2e:44:79:89:82:e3:cd:3e:50:52:0b:5c: 08:68:96:e8:05:01:68:38:83:fd:29:4d:76:f3:04:8a:90:01: ac:bc:7d:78:9a:5d:01:12:15:b9:56:05:c2:f1:12:d4:9d:54: 64:52:a0:ce:08:37:de:a6:f9:84:97:b0:94:7c:19:7b:b9:e8: df:d8:8d:1e:da:5f:13:fa:17:05:6e:ae:3c:3d:f9:78:2f:95: ea:30:1c:9c:d5:36:e3:14:98:90:a1:01:e7:bd:04:e1:86:7f: 84:80:28:f2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUX+mLZrM9gLCjgnxEbfzfZiJJxE0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNTMxMDAwMTEyWhcNMjUwNzA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMzU0MGMxMjQ0YzNiN2MyYzEzM2JlZGI3YzI1ZGRhNDdi OGM0YzRiMzU4Yzc3Zjk0YzI5ZjczZDI4MTNhYTljMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCOVaqeWgFM2XW3+KyF1B78ntsdB4yfEZYjr+sGnHLZRwvy o+7FsAuZQ020cr4mDX1NXPWh8RAUW4LXyiN7Zi20kzk6bcnanDj4H3D2IpC9Heox b9f/lmStN18KZoOwzwvO9+HkuWW3It0M0DsSpZ5dZ1VwPc0Kvk126IjPdN7DBSP+ x+km5cx2PHb1zgBreb+sgQtYNwFFLjK2LWMVVusJIc3EOaLNqVBbjSrzTQBkwsBp GGRn3KrWCLIeHnoU/iVvV8ZavPC5ZebeViTzL4litNcXGDlb+A/oCiKodsMW5Zbq g1WjyDCB0fdfX5uSkiiw3vL3uuHONbWNghvpK28hAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUsHeI/J/Ap8f4qQEN97QsewdI0QAwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzdjNTQxODM4LTEyYjctNDcwYS1iMDQ0LWYzMWQzYWI3MmVkZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEX+dAwDQYJKoZIhvcNAQELBQADggEBAB8ahzOBBlzF7MT3PcayqlVmF1AQ rYDz9KQE5n8UFuWyWrku2qcPO5XhvyZKUvLk9Olamy7omuM3ff8vThLIOT48y4LT vPi3YXJ/6uBWPSU7373VQCSNQZnX+d0u9+BZlWMHliUpYOgc0GYnBGDHsJUuD3C2 wdKYXVnVJcGjfkGY5Df+v6v202e/kkB14jb39uR+tgKCuS5EeYmC480+UFILXAho lugFAWg4g/0pTXbzBIqQAay8fXiaXQESFblWBcLxEtSdVGRSoM4IN96m+YSXsJR8 GXu56N/YjR7aXxP6FwVurjw9+XgvleowHJzVNuMUmJChAee9BOGGf4SAKPI= -----END CERTIFICATE-----Generated at Sat Jun 14 06:38:20 2025 by rpki-client