$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/a11f9364-e88a-440b-a95f-a94c5ecdc863.roa File: a11f9364-e88a-440b-a95f-a94c5ecdc863.roa (raw, json) Hash identifier: b4gnh8ObnkB9Jw7admFfWfuXN9wVIqN2p7dn2d2XFww= Subject key identifier: 42:76:44:48:01:D3:87:44:2C:D4:28:7A:7C:63:CE:4B:46:85:8F:E3 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 0D891ACE226CB5E2AE918B31E2F09936C42B17B0 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/a11f9364-e88a-440b-a95f-a94c5ecdc863.roa Signing time: Mon 21 Jul 2025 15:21:23 +0000 ROA not before: Mon 21 Jul 2025 15:21:23 +0000 ROA not after: Mon 25 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 69.169.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:89:1a:ce:22:6c:b5:e2:ae:91:8b:31:e2:f0:99:36:c4:2b:17:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Jul 21 15:21:23 2025 GMT Not After : Aug 25 23:59:59 2025 GMT Subject: serialNumber=d313a00df8ae6b29c23e58e3fc2f953a254a6a9db3b84d1ac28e4ad10aac683c, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c1:bf:73:71:db:95:2c:44:dd:a0:0c:fc:14: 44:c1:2e:b2:96:41:13:6a:e1:df:87:d3:da:d4:6e: a6:b0:43:5c:fa:fd:08:a2:b7:d1:ba:97:31:ab:a0: 53:44:7e:11:3d:4c:e7:63:be:54:95:a0:df:f3:d9: 06:f8:1b:85:e2:c0:92:a2:45:fb:36:3a:ae:a3:f6: 08:c5:f6:7d:e5:a1:76:6b:ff:55:85:6d:72:df:62: 1c:07:a1:4f:55:4e:ca:4b:fc:60:16:f4:f1:09:99: e7:fc:3b:dd:e5:98:d5:4c:66:94:96:f3:16:7d:ef: 82:95:74:7a:5c:58:66:98:e6:3a:49:56:c1:5f:0c: e5:27:5a:87:d3:d8:b9:af:02:29:06:66:40:be:b4: 1d:3a:a4:10:40:5c:14:24:32:ca:06:4a:d7:14:ac: d1:bb:26:05:9b:0f:52:de:c8:60:79:96:8c:b2:00: c3:b3:af:77:88:ab:31:15:3a:55:5d:5d:ca:47:d1: 5d:1f:9d:9f:d1:ca:36:e4:7d:eb:e7:63:15:6a:37: be:02:70:ee:6a:eb:b9:f1:2f:c1:48:45:62:93:d9: c3:f2:3f:0b:2e:76:fc:24:9a:e0:3d:ac:cb:91:1a: 76:db:bf:df:47:68:b1:c4:51:4c:79:ad:a9:e5:ae: 84:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:76:44:48:01:D3:87:44:2C:D4:28:7A:7C:63:CE:4B:46:85:8F:E3 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/a11f9364-e88a-440b-a95f-a94c5ecdc863.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 69.169.237.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:d2:75:1a:69:05:25:5c:45:06:5a:ac:48:34:c4:f7:fc:c0: 45:81:fc:1c:ec:de:2f:c8:ae:2b:1c:b7:60:19:03:cc:14:cd: a6:6b:48:12:ae:41:4d:b2:48:3b:9e:f6:b7:a1:6d:66:d6:e3: 66:bc:35:fe:1a:16:86:7a:9c:f9:ef:65:91:4f:43:3e:92:2b: 21:86:06:1a:a8:a3:d4:69:ad:94:45:53:d1:db:01:a2:3b:d5: 69:dc:6d:e7:c1:15:83:d8:dd:34:5c:c5:95:95:59:fa:d0:c0: 0e:7d:e5:26:8d:f6:85:f2:43:1d:07:6c:d8:e0:3c:6a:aa:b9: 73:21:37:e5:0b:ca:84:66:19:b1:78:74:0e:24:ca:c3:da:15: 26:11:a2:d0:c7:dc:4f:89:f1:dc:87:6e:56:18:fb:72:3c:b5: 2a:50:8b:01:16:db:f9:86:c0:06:d5:ca:e0:3b:9c:75:4c:b8: a1:cc:8d:f2:f7:3f:63:5b:0b:a1:48:85:45:e0:1a:ed:d8:10: db:8b:5b:17:73:4d:93:59:8b:a0:d1:4b:70:a7:61:4f:43:a9: 03:9e:f2:55:a4:a4:71:5e:aa:a8:63:3b:4d:d0:21:3c:8f:3a: 84:1d:b1:61:71:0a:17:3e:7c:00:3a:74:5c:27:d9:53:96:6a: a7:a6:5c:26 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDYkaziJsteKukYsx4vCZNsQrF7AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNzIxMTUyMTIzWhcNMjUwODI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMzEzYTAwZGY4YWU2YjI5YzIzZTU4ZTNmYzJmOTUzYTI1 NGE2YTlkYjNiODRkMWFjMjhlNGFkMTBhYWM2ODNjMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpwb9zcduVLETdoAz8FETBLrKWQRNq4d+H09rUbqawQ1z6 /Qiit9G6lzGroFNEfhE9TOdjvlSVoN/z2Qb4G4XiwJKiRfs2Oq6j9gjF9n3loXZr /1WFbXLfYhwHoU9VTspL/GAW9PEJmef8O93lmNVMZpSW8xZ974KVdHpcWGaY5jpJ VsFfDOUnWofT2LmvAikGZkC+tB06pBBAXBQkMsoGStcUrNG7JgWbD1LeyGB5loyy AMOzr3eIqzEVOlVdXcpH0V0fnZ/RyjbkfevnYxVqN74CcO5q67nxL8FIRWKT2cPy PwsudvwkmuA9rMuRGnbbv99HaLHEUUx5ranlroRzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUQnZESAHTh0Qs1Ch6fGPOS0aFj+MwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2ExMWY5MzY0LWU4OGEtNDQwYi1hOTVmLWE5NGM1ZWNkYzg2My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABFqe0wDQYJKoZIhvcNAQELBQADggEBAArSdRppBSVcRQZarEg0xPf8wEWB /Bzs3i/Irisct2AZA8wUzaZrSBKuQU2ySDue9rehbWbW42a8Nf4aFoZ6nPnvZZFP Qz6SKyGGBhqoo9RprZRFU9HbAaI71WncbefBFYPY3TRcxZWVWfrQwA595SaN9oXy Qx0HbNjgPGqquXMhN+ULyoRmGbF4dA4kysPaFSYRotDH3E+J8dyHblYY+3I8tSpQ iwEW2/mGwAbVyuA7nHVMuKHMjfL3P2NbC6FIhUXgGu3YENuLWxdzTZNZi6DRS3Cn YU9DqQOe8lWkpHFeqqhjO03QITyPOoQdsWFxChc+fAA6dFwn2VOWaqemXCY= -----END CERTIFICATE-----Generated at Mon Aug 4 21:38:34 2025 by rpki-client