$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/be6d27bc-a56d-4dce-b2c2-5a756eca4157.roa File: be6d27bc-a56d-4dce-b2c2-5a756eca4157.roa (raw, json) Hash identifier: +LHOlQbcybCthNZg20PHSQk7psllgNBTnrsm0DeWxV0= Subject key identifier: 48:F1:AF:F6:0C:80:11:02:E1:85:B7:CB:80:D1:0A:B6:03:B0:5A:36 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 0729A239C9B6D0128A9B63F90B51A20C88DC5C4E Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/be6d27bc-a56d-4dce-b2c2-5a756eca4157.roa Signing time: Fri 13 Jun 2025 00:10:00 +0000 ROA not before: Fri 13 Jun 2025 00:10:00 +0000 ROA not after: Fri 18 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.249.210.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:29:a2:39:c9:b6:d0:12:8a:9b:63:f9:0b:51:a2:0c:88:dc:5c:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Jun 13 00:10:00 2025 GMT Not After : Jul 18 23:59:59 2025 GMT Subject: serialNumber=4a7f7e08f0d737b79573ea8de3ff6a3fece4da5649a1564f7a5a5026f0cfcb6d, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f9:0f:37:9f:72:17:73:1f:a2:59:eb:43:d7: 99:46:83:84:53:4a:75:6c:d3:4a:96:2e:62:09:9b: 6d:9a:ef:18:fa:45:a1:17:69:51:0f:75:72:76:45: bd:21:4e:01:33:7a:23:76:4a:a4:95:a8:60:db:49: 2a:a5:16:6a:c9:7a:39:c8:a1:6e:ea:9b:9c:cb:5a: 3c:e2:22:43:cf:df:d2:b4:19:fb:ef:15:47:c7:8a: 6a:52:f9:bf:55:99:78:6f:ef:e0:3d:ab:56:f9:e7: cf:94:92:fa:21:ff:7c:05:e5:69:62:81:fc:ad:0c: f7:9a:c4:4b:93:44:56:52:e7:26:18:6e:8b:1c:a9: 42:75:f3:b7:06:6a:c2:a3:73:8e:96:57:62:0d:72: e4:10:47:d2:7d:90:f8:c4:0d:5e:50:be:2c:e4:cc: db:50:64:36:e1:66:74:ac:a1:fe:5f:ec:4a:b5:f7: 4b:52:d3:d0:a0:4f:81:90:9e:4b:fb:62:bc:12:0c: f5:6b:0c:9b:dc:b9:aa:1a:95:74:c0:c0:d4:c6:37: 3e:5c:3f:58:3a:0d:c8:c4:c8:78:c6:00:e8:47:c9: 7e:8b:74:d9:36:1d:55:a7:99:73:be:b3:e9:f1:fb: 58:da:c9:ad:05:65:33:3f:88:b3:04:ea:44:a8:7a: 78:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:F1:AF:F6:0C:80:11:02:E1:85:B7:CB:80:D1:0A:B6:03:B0:5A:36 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/be6d27bc-a56d-4dce-b2c2-5a756eca4157.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.210.0/23 Signature Algorithm: sha256WithRSAEncryption 8f:6f:06:28:60:52:cb:e2:f6:f7:e1:66:73:05:40:50:51:83: c0:ba:db:30:fa:23:b9:08:63:14:d9:a1:d5:3e:91:0f:39:a6: a1:c3:4d:66:67:4c:d7:c9:e6:38:38:e2:9b:1d:f4:cd:1f:ed: 32:c8:d1:44:b3:0b:c6:19:34:17:6e:91:1c:86:7c:fa:4a:78: bd:33:1d:9f:47:a2:cc:3f:ee:25:7f:be:2d:7d:ee:4a:cc:51: 61:83:96:3e:2a:03:32:b4:07:3e:17:c2:1f:ba:3e:65:e0:d8: 05:a0:5e:2d:29:b1:98:45:2b:62:e8:8c:b0:ed:c5:1d:ec:ed: ce:09:12:7c:eb:51:17:f7:5b:da:a0:fb:ff:78:6a:6f:d0:0d: 36:b2:5d:9a:86:e6:8f:34:3b:74:0f:f0:a5:08:8d:ae:f2:b1: 82:cc:c0:30:6f:f3:2e:4a:bc:7b:e7:e6:d7:ab:8d:58:9d:39: e1:12:e8:10:90:68:4f:2f:ca:96:10:a3:79:87:c6:0f:2f:d6: b6:32:9a:fa:ce:1e:54:c5:3c:5c:14:88:17:7a:35:4f:ae:94: d4:68:ad:e7:df:20:fe:dc:a8:5f:db:70:16:40:e1:95:f6:3b: 8c:4e:6f:f7:21:ff:c8:34:ec:9f:cf:2c:a2:de:56:85:7b:ba: bc:b6:34:32 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBymiOcm20BKKm2P5C1GiDIjcXE4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNjEzMDAxMDAwWhcNMjUwNzE4MjM1OTU5 WjB6MUkwRwYDVQQFE0A0YTdmN2UwOGYwZDczN2I3OTU3M2VhOGRlM2ZmNmEzZmVj ZTRkYTU2NDlhMTU2NGY3YTVhNTAyNmYwY2ZjYjZkMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCb+Q83n3IXcx+iWetD15lGg4RTSnVs00qWLmIJm22a7xj6 RaEXaVEPdXJ2Rb0hTgEzeiN2SqSVqGDbSSqlFmrJejnIoW7qm5zLWjziIkPP39K0 GfvvFUfHimpS+b9VmXhv7+A9q1b558+Ukvoh/3wF5WligfytDPeaxEuTRFZS5yYY boscqUJ187cGasKjc46WV2INcuQQR9J9kPjEDV5QvizkzNtQZDbhZnSsof5f7Eq1 90tS09CgT4GQnkv7YrwSDPVrDJvcuaoalXTAwNTGNz5cP1g6DcjEyHjGAOhHyX6L dNk2HVWnmXO+s+nx+1jaya0FZTM/iLME6kSoenjJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUSPGv9gyAEQLhhbfLgNEKtgOwWjYwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2JlNmQyN2JjLWE1NmQtNGRjZS1iMmMyLTVhNzU2ZWNhNDE1Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEX+dIwDQYJKoZIhvcNAQELBQADggEBAI9vBihgUsvi9vfhZnMFQFBRg8C6 2zD6I7kIYxTZodU+kQ85pqHDTWZnTNfJ5jg44psd9M0f7TLI0USzC8YZNBdukRyG fPpKeL0zHZ9Hosw/7iV/vi197krMUWGDlj4qAzK0Bz4Xwh+6PmXg2AWgXi0psZhF K2LojLDtxR3s7c4JEnzrURf3W9qg+/94am/QDTayXZqG5o80O3QP8KUIja7ysYLM wDBv8y5KvHvn5terjVidOeES6BCQaE8vypYQo3mHxg8v1rYymvrOHlTFPFwUiBd6 NU+ulNRoreffIP7cqF/bcBZA4ZX2O4xOb/ch/8g07J/PLKLeVoV7ury2NDI= -----END CERTIFICATE-----Generated at Sat Jun 14 07:00:24 2025 by rpki-client