$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/84c038ae-7a5a-414a-bd00-1edb6fbe5ad7.roa File: 84c038ae-7a5a-414a-bd00-1edb6fbe5ad7.roa (raw, json) Hash identifier: zg0ZsvYnQbamyECmjIrotcggGp2JLQwWHOzKzVaTdgU= Subject key identifier: 54:24:47:57:A1:E7:90:ED:EF:32:4D:04:40:19:3D:64:B3:0D:20:FF Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 66A692C673C9A7F3AAB357B7D64831823027B661 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/84c038ae-7a5a-414a-bd00-1edb6fbe5ad7.roa Signing time: Sat 31 May 2025 00:01:13 +0000 ROA not before: Sat 31 May 2025 00:01:13 +0000 ROA not after: Sat 05 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.251.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:a6:92:c6:73:c9:a7:f3:aa:b3:57:b7:d6:48:31:82:30:27:b6:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: May 31 00:01:13 2025 GMT Not After : Jul 5 23:59:59 2025 GMT Subject: serialNumber=000473f95c1b3758e7fcb128852ed774d43169e20ea0630815e981f751e376cc, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2b:a0:01:36:47:ce:d8:a4:e0:6f:79:c0:90: 5b:73:9a:64:e9:31:88:e3:a1:01:d8:aa:4f:c4:85: 92:a9:1a:f1:d7:72:9b:db:ed:e1:20:31:1a:e9:77: 1a:0e:9e:5f:64:26:72:eb:6f:a0:bc:3f:db:ee:a7: 94:62:5c:c6:66:ba:bb:cf:fd:ae:ff:64:2c:33:ed: 8c:7d:b6:92:bf:86:af:98:9a:e5:a1:53:b4:23:d3: 9d:40:3e:d9:9f:cb:2b:df:ba:81:e5:c3:3a:a5:69: ac:a8:3d:00:8b:8e:b7:50:14:3b:38:c0:5a:41:8f: 67:5a:f2:d5:bb:74:82:01:1e:8f:79:c6:be:b8:7f: 26:a9:09:75:52:f7:fa:35:8a:d4:1b:93:aa:5f:b7: f8:77:e5:2c:43:d4:48:a9:ae:87:0d:ba:b1:02:97: 9f:75:df:ab:6d:31:5c:91:a0:8f:0c:d6:db:48:0f: 2e:9a:ec:e7:3a:fb:af:06:7b:31:84:ea:3a:74:e2: a7:9c:84:70:06:2b:61:8b:51:9b:25:ef:83:b1:54: fe:89:ac:36:32:5a:c7:2e:72:cf:27:e9:ea:a7:4f: 78:50:73:d2:da:af:a8:7b:50:6f:75:31:9c:42:b6: 01:55:3c:47:aa:cf:b0:7e:d1:f1:7a:31:b6:20:7c: 1b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:24:47:57:A1:E7:90:ED:EF:32:4D:04:40:19:3D:64:B3:0D:20:FF X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/84c038ae-7a5a-414a-bd00-1edb6fbe5ad7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.251.234.0/24 Signature Algorithm: sha256WithRSAEncryption 02:44:d1:ac:58:70:99:04:90:14:d3:6d:23:3b:e4:45:cd:ca: 1d:7e:4c:3e:4c:2e:ec:34:01:da:8a:a8:f5:75:0e:9d:e8:b8: 4e:69:2a:ce:df:77:14:37:84:15:bc:66:84:33:86:c4:d6:16: e5:c6:c9:e0:8d:d7:70:64:0b:57:75:24:c4:e9:7b:0a:33:20: fe:82:5e:2c:62:ee:61:84:cb:4b:b0:f1:63:31:79:2f:c1:0c: ed:2c:23:ef:90:e0:27:34:c4:d1:24:25:2f:50:e5:79:e6:71: 6a:d6:fe:c1:0b:d0:17:b5:cb:39:29:39:f9:6b:c1:bb:f5:ff: b2:b6:9c:48:f2:c9:ab:e3:22:09:b2:dd:94:5e:ad:02:b2:a9: 44:41:16:65:9e:56:2e:b8:b7:bd:d3:bf:04:f0:d6:4a:bb:81: b2:77:b8:fd:b0:2f:58:a3:5d:7a:78:1e:39:e7:b6:81:41:6e: ee:bb:0c:c4:d6:31:99:5f:8f:c0:26:d5:25:c9:6d:11:9a:d3: de:96:00:07:95:b8:be:16:9d:f6:42:da:96:2b:7e:1a:53:67: be:34:b1:ba:c0:7e:31:f3:94:49:84:e8:f4:72:98:75:5b:0b: 54:c6:40:3b:43:e9:af:0c:5d:a4:4c:d0:cc:e0:91:c6:4a:4f: b1:76:d4:c9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZqaSxnPJp/Oqs1e31kgxgjAntmEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNTMxMDAwMTEzWhcNMjUwNzA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AwMDA0NzNmOTVjMWIzNzU4ZTdmY2IxMjg4NTJlZDc3NGQ0 MzE2OWUyMGVhMDYzMDgxNWU5ODFmNzUxZTM3NmNjMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDIK6ABNkfO2KTgb3nAkFtzmmTpMYjjoQHYqk/EhZKpGvHX cpvb7eEgMRrpdxoOnl9kJnLrb6C8P9vup5RiXMZmurvP/a7/ZCwz7Yx9tpK/hq+Y muWhU7Qj051APtmfyyvfuoHlwzqlaayoPQCLjrdQFDs4wFpBj2da8tW7dIIBHo95 xr64fyapCXVS9/o1itQbk6pft/h35SxD1EiprocNurECl59136ttMVyRoI8M1ttI Dy6a7Oc6+68GezGE6jp04qechHAGK2GLUZsl74OxVP6JrDYyWscucs8n6eqnT3hQ c9Lar6h7UG91MZxCtgFVPEeqz7B+0fF6MbYgfBufAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUVCRHV6HnkO3vMk0EQBk9ZLMNIP8wHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzg0YzAzOGFlLTdhNWEtNDE0YS1iZDAwLTFlZGI2ZmJlNWFkNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX++owDQYJKoZIhvcNAQELBQADggEBAAJE0axYcJkEkBTTbSM75EXNyh1+ TD5MLuw0AdqKqPV1Dp3ouE5pKs7fdxQ3hBW8ZoQzhsTWFuXGyeCN13BkC1d1JMTp ewozIP6CXixi7mGEy0uw8WMxeS/BDO0sI++Q4Cc0xNEkJS9Q5XnmcWrW/sEL0Be1 yzkpOflrwbv1/7K2nEjyyavjIgmy3ZRerQKyqURBFmWeVi64t73TvwTw1kq7gbJ3 uP2wL1ijXXp4HjnntoFBbu67DMTWMZlfj8Am1SXJbRGa096WAAeVuL4WnfZC2pYr fhpTZ740sbrAfjHzlEmE6PRymHVbC1TGQDtD6a8MXaRM0MzgkcZKT7F21Mk= -----END CERTIFICATE-----Generated at Sat Jun 14 06:27:11 2025 by rpki-client