$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/a11f9364-e88a-440b-a95f-a94c5ecdc863.roa File: a11f9364-e88a-440b-a95f-a94c5ecdc863.roa (raw, json) Hash identifier: 5SuaQre14sxiBKAMzBzsQY/PYFUOtxObjer91m9T1tA= Subject key identifier: CC:71:4E:BC:C9:62:CE:FC:3B:71:90:D4:D6:1F:99:55:85:1D:21:78 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 2CAA3ED9B89743A477F3232593418AA470C81850 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/a11f9364-e88a-440b-a95f-a94c5ecdc863.roa Signing time: Sat 31 May 2025 00:00:24 +0000 ROA not before: Sat 31 May 2025 00:00:24 +0000 ROA not after: Sat 05 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 69.169.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:aa:3e:d9:b8:97:43:a4:77:f3:23:25:93:41:8a:a4:70:c8:18:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: May 31 00:00:24 2025 GMT Not After : Jul 5 23:59:59 2025 GMT Subject: serialNumber=cffa35938e81e6eeb481a21d72defeb0d85ecc4ecb9154b42266090c9f67209c, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4d:7b:9b:9f:ac:36:a7:51:89:c4:7e:52:6c: 8f:08:cf:a0:a5:00:7d:46:34:49:a5:78:15:4b:ca: 4c:ca:00:e4:07:9c:fd:6b:e1:57:ef:94:49:b2:fd: 53:60:04:ba:ba:7e:b1:c0:21:89:fd:c9:ef:e0:62: 89:f5:2e:e4:9e:b5:6c:21:ec:94:c1:58:68:7a:05: 0d:0a:31:cf:33:6a:12:49:a5:db:2d:d9:18:98:2b: dc:26:b5:d9:63:b8:a8:4a:2d:e2:aa:4e:f2:b5:70: b1:e7:2f:dd:2d:a8:a9:d9:3b:99:3b:bb:34:ee:73: 67:b1:7a:c3:be:fa:33:19:9a:e9:51:3e:06:1a:e9: 7e:8e:d9:5d:28:b6:f7:00:16:f5:5c:36:49:d4:6e: 8e:de:7a:5c:5e:59:67:8f:0d:8c:31:e7:f5:5c:9f: 80:fb:a0:63:0e:a6:db:30:62:a8:88:a8:77:1e:de: 0a:a0:d4:15:82:d1:5e:3e:9b:a8:b5:a0:f4:d1:da: 78:dd:47:df:95:fe:d2:25:b3:30:b3:68:bf:e2:42: 2c:59:d6:20:14:a6:a6:bc:59:dc:54:c2:87:8e:5f: 04:a9:f1:fb:95:2f:22:26:0c:7f:f2:cc:7f:8f:16: ad:e3:a4:4d:61:7d:f4:8f:7c:b6:13:33:9a:58:9e: f9:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:71:4E:BC:C9:62:CE:FC:3B:71:90:D4:D6:1F:99:55:85:1D:21:78 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/a11f9364-e88a-440b-a95f-a94c5ecdc863.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 69.169.237.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:28:66:d7:b1:58:9a:b9:fc:82:a0:bb:f2:bf:c4:3e:80:d8: 2a:1e:c1:c9:c4:db:03:06:5a:1a:91:17:bb:11:70:a5:43:58: d6:0c:12:a1:2f:17:e0:71:ba:e7:77:63:86:c2:2b:27:e1:7f: 24:62:b3:f3:d2:1a:1c:c7:49:9a:2c:20:9e:38:be:71:0e:e9: 53:b8:68:62:1b:6f:a4:9c:95:63:cb:8e:74:88:9d:06:5e:6c: ea:2e:13:ff:1d:d7:55:4d:d9:bf:a4:85:e9:83:22:18:cf:ed: c6:6f:59:0a:7d:99:26:1d:fe:da:02:f2:5a:aa:5e:02:84:a9: 05:4e:20:99:b6:73:bd:e2:5f:9b:36:0e:15:0c:48:61:7e:5e: 94:cb:b1:2b:18:a9:2d:58:82:ec:d1:ae:1c:18:7f:7b:6b:c5: 35:8a:c4:ea:8a:d1:47:c2:10:07:76:f1:c7:cd:18:84:af:07: bc:61:59:14:8c:5a:90:b1:eb:21:8e:82:0b:dc:5a:af:05:c4: 08:1b:7e:66:60:d4:6c:eb:14:2d:ea:f2:8f:0e:09:5d:29:ec: b7:4d:ca:73:55:57:24:78:39:ca:72:a6:9e:f9:f3:c8:fc:f2: 5c:79:be:ea:c3:c8:b5:bb:9c:14:a1:a4:06:b2:28:26:c9:d0: 39:1f:9b:ab -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULKo+2biXQ6R38yMlk0GKpHDIGFAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNTMxMDAwMDI0WhcNMjUwNzA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BjZmZhMzU5MzhlODFlNmVlYjQ4MWEyMWQ3MmRlZmViMGQ4 NWVjYzRlY2I5MTU0YjQyMjY2MDkwYzlmNjcyMDljMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDATXubn6w2p1GJxH5SbI8Iz6ClAH1GNEmleBVLykzKAOQH nP1r4VfvlEmy/VNgBLq6frHAIYn9ye/gYon1LuSetWwh7JTBWGh6BQ0KMc8zahJJ pdst2RiYK9wmtdljuKhKLeKqTvK1cLHnL90tqKnZO5k7uzTuc2exesO++jMZmulR PgYa6X6O2V0otvcAFvVcNknUbo7eelxeWWePDYwx5/Vcn4D7oGMOptswYqiIqHce 3gqg1BWC0V4+m6i1oPTR2njdR9+V/tIlszCzaL/iQixZ1iAUpqa8WdxUwoeOXwSp 8fuVLyImDH/yzH+PFq3jpE1hffSPfLYTM5pYnvmbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUzHFOvMlizvw7cZDU1h+ZVYUdIXgwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2ExMWY5MzY0LWU4OGEtNDQwYi1hOTVmLWE5NGM1ZWNkYzg2My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABFqe0wDQYJKoZIhvcNAQELBQADggEBABsoZtexWJq5/IKgu/K/xD6A2Coe wcnE2wMGWhqRF7sRcKVDWNYMEqEvF+Bxuud3Y4bCKyfhfyRis/PSGhzHSZosIJ44 vnEO6VO4aGIbb6SclWPLjnSInQZebOouE/8d11VN2b+khemDIhjP7cZvWQp9mSYd /toC8lqqXgKEqQVOIJm2c73iX5s2DhUMSGF+XpTLsSsYqS1YguzRrhwYf3trxTWK xOqK0UfCEAd28cfNGISvB7xhWRSMWpCx6yGOggvcWq8FxAgbfmZg1GzrFC3q8o8O CV0p7LdNynNVVyR4Ocpypp7588j88lx5vurDyLW7nBShpAayKCbJ0Dkfm6s= -----END CERTIFICATE-----Generated at Sat Jun 14 05:49:30 2025 by rpki-client