$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/dbab5aee-69a4-4b7c-8c0f-ab0177caf233.roa File: dbab5aee-69a4-4b7c-8c0f-ab0177caf233.roa (raw, json) Hash identifier: Lkt555T3vl6E3/snMhoJ4SD5SSau4csyCQ4vUhL1gqU= Subject key identifier: C4:CB:40:58:3D:EA:07:6C:D7:E2:7D:CD:F1:8C:50:DA:19:32:29:54 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 3D960B391816BE81B29600F0C5A83394F7DB326A Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/dbab5aee-69a4-4b7c-8c0f-ab0177caf233.roa Signing time: Sat 02 Aug 2025 00:10:14 +0000 ROA not before: Sat 02 Aug 2025 00:10:14 +0000 ROA not after: Sat 06 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.251.242.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:96:0b:39:18:16:be:81:b2:96:00:f0:c5:a8:33:94:f7:db:32:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Aug 2 00:10:14 2025 GMT Not After : Sep 6 23:59:59 2025 GMT Subject: serialNumber=3a953eaf2c64c5adfa38975fceb42ede5c43f2295881f05a33add6b18bf82214, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:9c:b0:10:5f:68:51:5c:70:96:33:61:b3:26: 1e:82:5b:c8:e1:fb:36:da:02:a1:5e:05:6d:28:a9: 83:3d:6f:40:94:c0:58:f7:35:5f:da:71:24:2e:02: 40:c5:0f:57:b9:3f:d3:29:ea:4f:2f:d7:1d:11:23: 6c:21:54:1a:b3:ee:ea:7c:1b:6d:e7:68:17:9a:fb: 62:a8:14:57:7a:3b:70:f8:eb:82:ec:88:f3:54:35: bf:13:fd:a9:ee:cf:43:67:9a:0b:e6:14:db:45:b6: d7:83:fe:ed:4a:53:07:ae:5e:ae:60:39:01:39:5a: 03:49:dc:91:51:c2:59:4e:5d:c8:8d:30:49:03:b5: 46:f2:75:5a:38:a6:c5:ea:37:c3:8c:c5:63:24:e7: 9e:e7:17:f9:5c:d8:ca:36:8c:b3:0c:0a:72:25:4b: 60:9d:45:d2:34:84:42:4e:b0:41:f7:23:1c:f6:d7: 8a:6e:26:c3:1f:44:84:e8:93:1b:0e:80:89:53:08: 30:30:b0:78:e3:28:8b:e5:6c:3d:94:6d:ff:19:d0: 10:b9:17:0e:ae:64:bf:5d:33:75:34:2b:b6:41:64: 3c:e9:67:3d:df:77:bb:f9:c6:3f:b5:b7:b7:5d:2e: 5a:25:de:92:81:ab:49:bf:c2:1b:6c:be:47:5c:49: da:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:CB:40:58:3D:EA:07:6C:D7:E2:7D:CD:F1:8C:50:DA:19:32:29:54 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/dbab5aee-69a4-4b7c-8c0f-ab0177caf233.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.251.242.0/23 Signature Algorithm: sha256WithRSAEncryption 40:c8:ce:de:2f:be:62:b8:55:39:70:ea:9e:8b:f1:50:38:00: 0d:68:8d:a2:e9:2e:46:55:a8:a4:99:24:03:b6:1e:85:1c:9c: 26:a2:91:31:cd:fc:7e:b2:b4:7d:18:bf:51:1a:ea:a9:c4:31: 22:bc:53:0f:76:17:7b:e6:69:9d:78:f4:a1:b4:a4:76:a1:28: ff:3c:75:29:b6:27:61:36:65:1e:73:b0:02:82:fb:ac:61:b4: c0:fd:68:bc:0a:1b:18:81:f4:7d:ad:30:4c:a5:4c:fb:83:66: 61:69:d1:3a:fe:02:5e:f3:16:fe:47:30:d8:53:7d:2d:bd:97: c2:86:2e:b5:10:06:5a:46:d4:65:1b:f9:b2:56:5d:f4:47:96: 7f:a4:23:85:32:68:4c:c8:8a:28:67:47:25:1b:ea:c8:31:28: 2a:ed:27:75:3e:2e:00:f6:ca:28:75:7a:a8:9b:07:4c:f6:5d: df:55:db:66:df:20:d7:45:b4:43:8a:96:d0:24:69:02:c5:18: 3e:7f:94:55:4b:cc:ea:15:93:ec:d2:70:36:e0:07:9f:17:73: 54:3a:f8:f1:14:ca:af:1a:90:fa:e9:ba:73:45:5b:11:5a:f4: 28:d6:83:e2:b0:9f:38:2a:c9:83:e1:28:3b:8f:f7:bd:aa:b4: 08:3e:64:e2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPZYLORgWvoGylgDwxagzlPfbMmowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwODAyMDAxMDE0WhcNMjUwOTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0AzYTk1M2VhZjJjNjRjNWFkZmEzODk3NWZjZWI0MmVkZTVj NDNmMjI5NTg4MWYwNWEzM2FkZDZiMThiZjgyMjE0MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDdnLAQX2hRXHCWM2GzJh6CW8jh+zbaAqFeBW0oqYM9b0CU wFj3NV/acSQuAkDFD1e5P9Mp6k8v1x0RI2whVBqz7up8G23naBea+2KoFFd6O3D4 64LsiPNUNb8T/anuz0NnmgvmFNtFtteD/u1KUweuXq5gOQE5WgNJ3JFRwllOXciN MEkDtUbydVo4psXqN8OMxWMk557nF/lc2Mo2jLMMCnIlS2CdRdI0hEJOsEH3Ixz2 14puJsMfRITokxsOgIlTCDAwsHjjKIvlbD2Ubf8Z0BC5Fw6uZL9dM3U0K7ZBZDzp Zz3fd7v5xj+1t7ddLlol3pKBq0m/whtsvkdcSdqBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUxMtAWD3qB2zX4n3N8YxQ2hkyKVQwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2RiYWI1YWVlLTY5YTQtNGI3Yy04YzBmLWFiMDE3N2NhZjIzMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEX+/IwDQYJKoZIhvcNAQELBQADggEBAEDIzt4vvmK4VTlw6p6L8VA4AA1o jaLpLkZVqKSZJAO2HoUcnCaikTHN/H6ytH0Yv1Ea6qnEMSK8Uw92F3vmaZ149KG0 pHahKP88dSm2J2E2ZR5zsAKC+6xhtMD9aLwKGxiB9H2tMEylTPuDZmFp0Tr+Al7z Fv5HMNhTfS29l8KGLrUQBlpG1GUb+bJWXfRHln+kI4UyaEzIiihnRyUb6sgxKCrt J3U+LgD2yih1eqibB0z2Xd9V22bfINdFtEOKltAkaQLFGD5/lFVLzOoVk+zScDbg B58Xc1Q6+PEUyq8akPrpunNFWxFa9CjWg+KwnzgqyYPhKDuP972qtAg+ZOI= -----END CERTIFICATE-----Generated at Tue Aug 5 21:36:41 2025 by rpki-client