$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/fa37fece-cb6b-47c4-9fdb-04a4117bc583.roa File: fa37fece-cb6b-47c4-9fdb-04a4117bc583.roa (raw, json) Hash identifier: mxZxnHoXS71Ow7ofVxGvRi8mTzf8Y0d+swHicASYiuY= Subject key identifier: 1C:C8:FF:78:B5:96:CB:70:2C:39:F5:1C:B8:41:09:05:DA:38:A8:63 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 2AC139395BD4902847F3A616A0117D82CB0A4AB7 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/fa37fece-cb6b-47c4-9fdb-04a4117bc583.roa Signing time: Sat 31 May 2025 00:10:13 +0000 ROA not before: Sat 31 May 2025 00:10:13 +0000 ROA not after: Sat 05 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 76.223.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:c1:39:39:5b:d4:90:28:47:f3:a6:16:a0:11:7d:82:cb:0a:4a:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: May 31 00:10:13 2025 GMT Not After : Jul 5 23:59:59 2025 GMT Subject: serialNumber=cc29324060fe9a991123510883e88d0eb19f9cc3b8561b42a5ddb2e76a634296, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f5:3a:2a:9c:5c:58:b3:67:ed:f5:09:d6:5a: c3:75:97:7c:5b:10:16:aa:8f:b8:8c:3f:c0:92:24: 19:56:4b:7b:90:05:b0:cc:d0:ed:53:98:df:8c:59: 13:bd:ca:87:d8:e4:dc:21:e0:e8:84:db:b5:b6:15: 2a:bc:45:40:56:36:2f:8d:9e:9f:b0:1c:74:b4:0e: ad:ec:e8:57:4a:22:5d:94:74:79:e1:2c:70:fd:b9: f6:84:6c:31:79:0f:f9:21:39:03:04:de:2f:30:a3: 5d:fd:b6:27:a5:0e:f5:9e:bb:07:6c:9b:22:61:27: 93:60:96:67:95:fd:ab:6f:74:1a:f2:52:e6:77:98: 6b:c2:10:ba:b7:5b:2b:ee:b1:68:c4:73:c3:90:b8: 58:a2:58:ab:0d:d8:75:42:c6:ad:35:db:16:d5:0e: ee:28:9d:49:d7:13:d1:52:1b:a7:ac:28:f3:48:80: 80:c4:68:a6:fb:69:2a:67:80:e4:25:a1:8f:37:f8: 2d:65:06:ae:f2:91:50:e1:b3:54:52:84:cd:ac:58: 7b:e8:8c:ad:78:0c:75:6a:95:79:8a:f8:20:ec:1b: b2:ce:a8:d0:d0:16:49:e1:1f:96:3d:72:f0:ac:58: 14:d7:cb:00:55:da:0e:01:65:6d:de:dd:68:b1:1e: eb:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:C8:FF:78:B5:96:CB:70:2C:39:F5:1C:B8:41:09:05:DA:38:A8:63 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/fa37fece-cb6b-47c4-9fdb-04a4117bc583.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.223.191.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:81:21:70:21:d2:0c:06:b1:6b:58:20:2a:ae:ab:21:96:a2: 3f:a6:83:18:ab:34:3f:5b:d6:9c:12:e7:39:2b:22:8c:e6:f8: 29:0c:ed:4c:af:3d:b5:16:72:4c:61:63:ba:5e:ea:01:a4:33: cb:05:d5:64:00:6f:fc:dc:2b:90:89:12:ce:d8:7c:6a:a8:31: 3e:5f:1c:9a:11:98:d8:f5:04:03:8a:f2:65:fc:b0:7c:a6:cd: 65:5e:d4:cc:b6:69:3a:3d:dd:33:c0:89:f8:1d:46:99:db:a3: 6e:e2:92:db:6d:9a:c7:02:30:29:1c:1e:17:dd:52:04:1e:13: ea:ff:bc:cf:7a:d8:ff:3b:71:59:32:11:70:13:2c:88:c0:07: a3:71:d4:c4:85:69:93:55:10:0f:98:47:1d:11:eb:8e:6f:36: 8e:f4:1c:2e:e0:44:0a:0a:8d:be:bd:98:df:2e:82:57:2e:14: 27:3b:1c:7f:8b:77:75:a2:51:68:a5:4b:7a:8c:ae:2c:9a:bb: 7c:88:fa:fd:2c:2f:ee:c7:8a:aa:a5:60:7e:df:22:78:9a:30: b3:97:4d:9d:07:32:83:4e:c2:3f:ba:ab:66:b7:24:48:a0:97: e9:5b:c3:71:6a:59:89:8d:ee:a0:52:da:c2:0b:aa:e5:65:af: 04:da:4f:2a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKsE5OVvUkChH86YWoBF9gssKSrcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNTMxMDAxMDEzWhcNMjUwNzA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BjYzI5MzI0MDYwZmU5YTk5MTEyMzUxMDg4M2U4OGQwZWIx OWY5Y2MzYjg1NjFiNDJhNWRkYjJlNzZhNjM0Mjk2MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/9ToqnFxYs2ft9QnWWsN1l3xbEBaqj7iMP8CSJBlWS3uQ BbDM0O1TmN+MWRO9yofY5Nwh4OiE27W2FSq8RUBWNi+Nnp+wHHS0Dq3s6FdKIl2U dHnhLHD9ufaEbDF5D/khOQME3i8wo139tielDvWeuwdsmyJhJ5NglmeV/atvdBry UuZ3mGvCELq3WyvusWjEc8OQuFiiWKsN2HVCxq012xbVDu4onUnXE9FSG6esKPNI gIDEaKb7aSpngOQloY83+C1lBq7ykVDhs1RShM2sWHvojK14DHVqlXmK+CDsG7LO qNDQFknhH5Y9cvCsWBTXywBV2g4BZW3e3WixHuspAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUHMj/eLWWy3AsOfUcuEEJBdo4qGMwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2ZhMzdmZWNlLWNiNmItNDdjNC05ZmRiLTA0YTQxMTdiYzU4My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABM378wDQYJKoZIhvcNAQELBQADggEBAFuBIXAh0gwGsWtYICquqyGWoj+m gxirND9b1pwS5zkrIozm+CkM7UyvPbUWckxhY7pe6gGkM8sF1WQAb/zcK5CJEs7Y fGqoMT5fHJoRmNj1BAOK8mX8sHymzWVe1My2aTo93TPAifgdRpnbo27iktttmscC MCkcHhfdUgQeE+r/vM962P87cVkyEXATLIjAB6Nx1MSFaZNVEA+YRx0R645vNo70 HC7gRAoKjb69mN8uglcuFCc7HH+Ld3WiUWilS3qMriyau3yI+v0sL+7HiqqlYH7f IniaMLOXTZ0HMoNOwj+6q2a3JEigl+lbw3FqWYmN7qBS2sILquVlrwTaTyo= -----END CERTIFICATE-----Generated at Sat Jun 14 06:16:18 2025 by rpki-client