$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/f558359a-2a02-4c8e-9a72-7159b2569d66.roa File: f558359a-2a02-4c8e-9a72-7159b2569d66.roa (raw, json) Hash identifier: sveChD+jAMCc0dBDvBe/pnFm5UuX9ANJrb96KvW1YRw= Subject key identifier: 1D:0C:3C:60:D4:29:85:12:81:0B:44:FA:7B:70:9A:B4:44:38:04:16 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 44CCB0FE59AA8459B52C3D93C5DB36DA7388B2AD Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/f558359a-2a02-4c8e-9a72-7159b2569d66.roa Signing time: Sat 02 Aug 2025 00:10:07 +0000 ROA not before: Sat 02 Aug 2025 00:10:07 +0000 ROA not after: Sat 06 Sep 2025 23:59:59 +0000 asID: 8987 IP address blocks: 23.249.210.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:cc:b0:fe:59:aa:84:59:b5:2c:3d:93:c5:db:36:da:73:88:b2:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Aug 2 00:10:07 2025 GMT Not After : Sep 6 23:59:59 2025 GMT Subject: serialNumber=eee1ca1dc8b9f70ab931c84331727b66d3bc170e21116606d217efc5726f37ab, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1b:9d:04:1f:a5:cf:74:c8:49:61:e0:7c:f4: bb:70:a3:27:ce:6a:2a:87:e6:21:eb:a8:39:da:a7: ba:9d:be:45:8f:82:13:b6:65:cf:b6:5a:be:22:8b: a0:62:2f:d9:a5:fd:5d:51:8f:4f:b9:92:07:64:a1: 84:d2:d4:d9:59:66:e9:78:1a:ed:50:4d:ce:a0:36: e6:0e:06:ba:ce:a7:3b:e3:eb:19:a6:b3:86:e4:91: 27:42:68:4c:86:5b:a6:44:30:bf:2d:06:a8:7e:22: d7:e1:c1:47:b2:aa:15:3f:32:79:01:c8:b5:a3:51: 46:f1:00:fb:b8:75:cd:dc:b3:cc:a0:e8:c0:35:b5: 13:6e:7e:6a:18:44:57:bf:67:ed:3d:a8:a2:3d:a4: 9b:2f:4e:79:28:3d:30:59:3c:a3:c5:59:ec:b7:0a: f7:f8:15:3a:08:19:17:f0:c1:0b:76:3d:c9:78:65: 26:32:29:40:24:06:50:36:35:c1:13:3d:39:46:73: 4f:64:6a:9f:a5:b9:62:ee:f7:72:59:fc:bc:52:9e: 23:e3:13:e1:51:bb:81:c3:a4:cd:83:c1:59:e5:62: 0c:89:bf:e2:29:b2:64:0a:2a:a7:21:03:3b:c1:ab: 28:b5:a7:22:4b:26:4c:3e:3e:72:64:06:4e:ad:5e: 57:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:0C:3C:60:D4:29:85:12:81:0B:44:FA:7B:70:9A:B4:44:38:04:16 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/f558359a-2a02-4c8e-9a72-7159b2569d66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.210.0/23 Signature Algorithm: sha256WithRSAEncryption 21:74:33:54:9b:57:b8:2c:ae:a4:c2:a5:35:09:73:22:5a:9d: a1:b9:aa:2f:76:b5:09:06:b5:ea:7c:90:9e:c3:1d:c9:82:22: cc:38:a1:fa:8a:9d:71:fb:b3:73:ce:ad:25:59:ff:a9:10:88: 9a:cc:a8:65:ed:a7:c7:7a:87:9f:7f:0e:60:4b:3b:e9:35:c2: d3:a9:f7:09:1f:92:cd:24:d3:e0:96:c0:c7:04:22:43:50:cf: 02:dc:9a:a2:98:10:2a:a7:d8:5b:10:03:06:41:32:2e:08:84: a5:f6:d0:68:92:ea:91:f8:62:53:48:eb:79:27:23:ef:66:66: 39:51:1b:3a:1d:c9:be:70:84:35:40:6d:75:26:01:db:8e:7c: ae:96:50:a3:97:65:08:41:65:17:21:6f:f1:98:5c:f0:3c:92: 7a:51:d5:27:3c:22:e6:20:79:80:82:b5:bd:23:7a:61:a9:e5: 55:a3:68:e9:f0:d5:62:34:f2:d4:1d:5b:be:a8:3e:d3:39:fc: da:e5:6f:27:bd:93:e3:1c:a6:b6:53:73:20:d9:b5:7e:84:f9: c9:c7:30:4a:77:22:d0:b3:e2:6f:ef:49:34:84:68:4f:7c:0d: fd:0d:3b:55:99:f8:eb:5d:38:7e:48:e9:6a:40:98:a6:a1:89: bb:cb:eb:cd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURMyw/lmqhFm1LD2Txds22nOIsq0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwODAyMDAxMDA3WhcNMjUwOTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BlZWUxY2ExZGM4YjlmNzBhYjkzMWM4NDMzMTcyN2I2NmQz YmMxNzBlMjExMTY2MDZkMjE3ZWZjNTcyNmYzN2FiMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHG50EH6XPdMhJYeB89LtwoyfOaiqH5iHrqDnap7qdvkWP ghO2Zc+2Wr4ii6BiL9ml/V1Rj0+5kgdkoYTS1NlZZul4Gu1QTc6gNuYOBrrOpzvj 6xmms4bkkSdCaEyGW6ZEML8tBqh+ItfhwUeyqhU/MnkByLWjUUbxAPu4dc3cs8yg 6MA1tRNufmoYRFe/Z+09qKI9pJsvTnkoPTBZPKPFWey3Cvf4FToIGRfwwQt2Pcl4 ZSYyKUAkBlA2NcETPTlGc09kap+luWLu93JZ/LxSniPjE+FRu4HDpM2DwVnlYgyJ v+IpsmQKKqchAzvBqyi1pyJLJkw+PnJkBk6tXlfLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUHQw8YNQphRKBC0T6e3CatEQ4BBYwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2Y1NTgzNTlhLTJhMDItNGM4ZS05YTcyLTcxNTliMjU2OWQ2Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEX+dIwDQYJKoZIhvcNAQELBQADggEBACF0M1SbV7gsrqTCpTUJcyJanaG5 qi92tQkGtep8kJ7DHcmCIsw4ofqKnXH7s3POrSVZ/6kQiJrMqGXtp8d6h59/DmBL O+k1wtOp9wkfks0k0+CWwMcEIkNQzwLcmqKYECqn2FsQAwZBMi4IhKX20GiS6pH4 YlNI63knI+9mZjlRGzodyb5whDVAbXUmAduOfK6WUKOXZQhBZRchb/GYXPA8knpR 1Sc8IuYgeYCCtb0jemGp5VWjaOnw1WI08tQdW76oPtM5/Nrlbye9k+McprZTcyDZ tX6E+cnHMEp3ItCz4m/vSTSEaE98Df0NO1WZ+OtdOH5I6WpAmKahibvL680= -----END CERTIFICATE-----Generated at Mon Aug 4 16:03:22 2025 by rpki-client