$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/cff2aad7-f173-47b6-ad48-6f279ff321d1.roa File: cff2aad7-f173-47b6-ad48-6f279ff321d1.roa (raw, json) Hash identifier: E7uP2sjfttVUAtqu1twJgWbisG4VTSilDOD+uKH4tHg= Subject key identifier: 8F:8B:0C:BA:30:26:30:BA:8B:E1:1B:83:DE:EE:A7:15:77:12:9D:BA Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 52BB830264F0D541B9F5AD919C27E52114EE6B98 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/cff2aad7-f173-47b6-ad48-6f279ff321d1.roa Signing time: Sat 31 May 2025 00:00:58 +0000 ROA not before: Sat 31 May 2025 00:00:58 +0000 ROA not after: Sat 05 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.249.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:bb:83:02:64:f0:d5:41:b9:f5:ad:91:9c:27:e5:21:14:ee:6b:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: May 31 00:00:58 2025 GMT Not After : Jul 5 23:59:59 2025 GMT Subject: serialNumber=4dd3027e9c81cbda412949571df13566fc75062f13b87c77719e415e55d71000, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3c:5c:08:a1:11:7e:37:b4:7c:b7:ed:b5:ae: e4:34:2d:88:2d:0a:44:09:9d:a8:01:24:c1:19:f8: 2c:c4:eb:e1:19:ff:8d:eb:db:eb:85:d3:16:a2:8d: be:de:4b:dc:14:b2:ed:eb:a6:61:77:b4:c5:3b:2a: ad:25:07:9a:35:73:a0:06:36:64:52:24:83:05:79: 80:a0:1e:0a:1b:0e:c2:d3:13:56:99:bc:2e:ec:3a: ee:03:d4:1e:de:26:7a:bf:15:f0:fe:99:22:db:51: 31:5c:fa:6a:50:2f:49:28:c1:cb:c5:d4:88:2c:29: c5:01:67:d2:35:98:be:cf:12:52:2b:3e:a9:36:05: b6:f7:23:b9:7e:48:aa:f4:14:65:53:d5:0e:44:ff: 30:eb:cf:9d:89:aa:ae:be:8c:40:c4:e0:34:49:9a: 24:f8:83:87:51:e9:cd:09:23:26:6c:75:76:81:7f: 1a:91:8d:c7:bf:eb:da:1a:87:ca:47:a3:ef:fd:e6: fa:fb:68:7c:ea:70:8d:17:31:a1:d1:21:81:5a:20: 77:6e:1b:36:cb:aa:1f:d9:14:53:d5:e5:0b:3e:18: 71:a9:ae:16:08:96:eb:a6:86:9c:5f:7c:84:21:5c: 8a:9d:c5:37:51:4c:7b:01:72:42:20:9c:3a:6f:4d: 54:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:8B:0C:BA:30:26:30:BA:8B:E1:1B:83:DE:EE:A7:15:77:12:9D:BA X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/cff2aad7-f173-47b6-ad48-6f279ff321d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.212.0/24 Signature Algorithm: sha256WithRSAEncryption 46:a0:28:e5:3f:5e:ee:c5:e3:50:ce:3c:56:04:d6:48:41:63: c4:3f:3f:a5:cd:60:ef:30:41:d9:db:fa:c8:ef:c5:c8:a2:68: ef:b0:d9:0f:af:54:ab:c1:6d:41:26:6e:a6:06:41:13:ff:f7: d6:3a:86:d3:23:c6:a5:d3:4c:56:55:a6:44:07:95:a2:16:6f: f8:66:17:e1:d6:ce:a2:21:08:00:19:2f:30:bd:67:7a:e5:5d: d6:e6:a0:25:26:d1:80:b8:68:e9:3d:77:9a:82:62:2e:31:31: 58:6d:8a:4d:45:24:6b:09:24:30:f2:d5:6e:d5:b0:d5:8e:2f: 34:5b:36:c0:77:5f:9c:c2:1c:1e:58:4f:25:c5:b8:87:50:07: 8a:b0:aa:cb:31:34:1f:5f:44:92:61:0d:db:9a:23:c8:71:aa: 99:e4:88:54:45:cf:0c:4b:34:ac:7c:47:fb:34:0d:1e:62:a7: 6c:02:c2:dc:c2:37:0a:4c:5d:5d:5b:4d:ef:3f:62:14:c9:68: f2:ae:fd:92:2c:47:5a:c6:b4:41:36:45:07:0d:5b:68:fb:c2: db:6f:58:8e:92:b5:39:38:b2:bc:2f:48:b5:d4:b2:61:4b:3b: 16:bd:0b:a0:93:a8:e0:cd:3e:2f:7e:ec:45:a7:23:48:3e:97: 0f:2e:3f:00 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUruDAmTw1UG59a2RnCflIRTua5gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNTMxMDAwMDU4WhcNMjUwNzA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZGQzMDI3ZTljODFjYmRhNDEyOTQ5NTcxZGYxMzU2NmZj NzUwNjJmMTNiODdjNzc3MTllNDE1ZTU1ZDcxMDAwMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCcPFwIoRF+N7R8t+21ruQ0LYgtCkQJnagBJMEZ+CzE6+EZ /43r2+uF0xaijb7eS9wUsu3rpmF3tMU7Kq0lB5o1c6AGNmRSJIMFeYCgHgobDsLT E1aZvC7sOu4D1B7eJnq/FfD+mSLbUTFc+mpQL0kowcvF1IgsKcUBZ9I1mL7PElIr Pqk2Bbb3I7l+SKr0FGVT1Q5E/zDrz52Jqq6+jEDE4DRJmiT4g4dR6c0JIyZsdXaB fxqRjce/69oah8pHo+/95vr7aHzqcI0XMaHRIYFaIHduGzbLqh/ZFFPV5Qs+GHGp rhYIluumhpxffIQhXIqdxTdRTHsBckIgnDpvTVQFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUj4sMujAmMLqL4RuD3u6nFXcSnbowHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2NmZjJhYWQ3LWYxNzMtNDdiNi1hZDQ4LTZmMjc5ZmYzMjFkMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX+dQwDQYJKoZIhvcNAQELBQADggEBAEagKOU/Xu7F41DOPFYE1khBY8Q/ P6XNYO8wQdnb+sjvxciiaO+w2Q+vVKvBbUEmbqYGQRP/99Y6htMjxqXTTFZVpkQH laIWb/hmF+HWzqIhCAAZLzC9Z3rlXdbmoCUm0YC4aOk9d5qCYi4xMVhtik1FJGsJ JDDy1W7VsNWOLzRbNsB3X5zCHB5YTyXFuIdQB4qwqssxNB9fRJJhDduaI8hxqpnk iFRFzwxLNKx8R/s0DR5ip2wCwtzCNwpMXV1bTe8/YhTJaPKu/ZIsR1rGtEE2RQcN W2j7wttvWI6StTk4srwvSLXUsmFLOxa9C6CTqODNPi9+7EWnI0g+lw8uPwA= -----END CERTIFICATE-----Generated at Sat Jun 14 06:31:27 2025 by rpki-client