$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3754532b-2417-490e-8cb4-26b8fc034925.roa File: 3754532b-2417-490e-8cb4-26b8fc034925.roa (raw, json) Hash identifier: 4zL4yCJf/hew0XAalUeP9Ms2xKAof2Y5WdE5ZkdlU6c= Subject key identifier: 1E:BE:3B:5A:0B:98:84:F7:16:1B:81:CF:C4:D6:B4:04:96:F2:A4:5E Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 5F7BA682F00D4FA8CAD158261B9316AE1D3F77CA Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3754532b-2417-490e-8cb4-26b8fc034925.roa Signing time: Sat 04 Oct 2025 00:20:54 +0000 ROA not before: Sat 04 Oct 2025 00:20:54 +0000 ROA not after: Sat 08 Nov 2025 23:59:59 +0000 asID: 8987 IP address blocks: 23.249.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:7b:a6:82:f0:0d:4f:a8:ca:d1:58:26:1b:93:16:ae:1d:3f:77:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Oct 4 00:20:54 2025 GMT Not After : Nov 8 23:59:59 2025 GMT Subject: serialNumber=51da4f0c6df7eeebd4e5bd4a4d16253c6fe844882bbf715b480d92ff4d9194bd, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e7:4e:4a:68:2f:b4:e4:14:9b:80:01:c0:dd: 99:9b:bf:b6:89:07:75:c3:a2:d9:25:79:f6:b2:c7: c6:5b:b0:7a:5a:eb:a8:5e:94:91:86:28:e4:19:19: 44:08:3e:b1:91:3b:8f:c8:97:a2:bc:f6:69:e3:a5: 03:3d:0c:ad:cf:79:d5:1a:3f:9d:8b:e8:e5:9d:d5: b6:45:a0:3a:67:dd:2e:1a:38:20:0d:07:12:a2:c9: b1:b7:f9:1d:a2:d7:1b:d7:80:78:e7:29:24:a0:c3: 61:f4:af:61:9d:0e:ec:96:0d:90:fe:db:8f:99:92: 9a:1c:be:d5:86:e7:b4:50:c7:58:11:1b:4c:c8:d1: b3:e9:46:96:65:86:ca:a3:bb:6f:31:ca:32:b4:70: a3:c3:2d:1e:f2:8d:cb:1b:c3:13:87:6f:78:fb:c5: 2f:91:e7:9f:50:be:68:e4:b3:96:ae:4d:50:6c:00: 81:5f:57:4c:a2:cb:fc:a8:e3:c1:82:7c:fb:f6:fa: 5c:cf:0a:0c:15:36:34:15:11:18:c4:cb:c9:80:ff: ed:db:9b:ae:2f:10:40:98:d4:66:bb:b3:9b:8d:e1: ff:80:5a:0e:4c:74:2a:e6:0e:96:d9:a6:df:22:97: 5c:ca:52:44:8e:94:68:cd:47:9f:60:d7:fd:58:d4: 47:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:BE:3B:5A:0B:98:84:F7:16:1B:81:CF:C4:D6:B4:04:96:F2:A4:5E X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3754532b-2417-490e-8cb4-26b8fc034925.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.212.0/24 Signature Algorithm: sha256WithRSAEncryption 10:72:78:e8:4b:ec:a3:dc:2a:3f:76:42:d6:fa:54:9e:ff:b3: cc:2c:cf:11:1f:29:a8:0e:da:2a:e3:41:20:eb:e3:d5:e0:82: b6:62:03:a8:46:7b:6a:b3:a5:41:ce:c7:0f:90:00:08:a2:ce: ba:0d:d8:e7:7f:9f:c5:7a:2e:a2:1e:80:5b:87:38:58:b7:a1: b6:00:f6:2d:65:2a:66:fa:6f:e7:02:d3:16:6b:31:d9:4c:dd: 7b:46:0f:4d:67:25:77:fb:2e:30:5c:e3:a3:c5:e1:f5:a5:5c: 28:d0:cd:aa:f2:3a:0b:83:9a:cc:c1:40:05:21:93:70:99:d1: cc:a2:93:89:3f:d8:73:7b:98:d6:78:84:47:8c:fa:07:38:46: b1:7d:3f:c6:4b:05:4c:a3:4a:4e:e8:7e:81:4a:54:7e:71:58: 6b:eb:27:2c:00:0b:5a:24:77:8e:57:41:b6:d7:ac:e3:92:db: b8:28:97:f2:b4:5e:96:94:b9:b4:7e:9a:43:cf:66:af:1d:f5: e6:d6:19:3d:7d:a0:24:ca:0c:fc:bf:b1:61:3b:dd:94:a0:f8: 5d:59:52:a4:39:f9:c3:56:74:9d:e8:44:08:4a:3f:12:70:9b: 06:63:33:70:16:6a:16:bf:fb:b8:2a:dc:b7:6e:6f:74:62:1c: b9:39:eb:43 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUX3umgvANT6jK0VgmG5MWrh0/d8owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUxMDA0MDAyMDU0WhcNMjUxMTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0A1MWRhNGYwYzZkZjdlZWViZDRlNWJkNGE0ZDE2MjUzYzZm ZTg0NDg4MmJiZjcxNWI0ODBkOTJmZjRkOTE5NGJkMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDH505KaC+05BSbgAHA3Zmbv7aJB3XDotklefayx8ZbsHpa 66helJGGKOQZGUQIPrGRO4/Il6K89mnjpQM9DK3PedUaP52L6OWd1bZFoDpn3S4a OCANBxKiybG3+R2i1xvXgHjnKSSgw2H0r2GdDuyWDZD+24+ZkpocvtWG57RQx1gR G0zI0bPpRpZlhsqju28xyjK0cKPDLR7yjcsbwxOHb3j7xS+R559Qvmjks5auTVBs AIFfV0yiy/yo48GCfPv2+lzPCgwVNjQVERjEy8mA/+3bm64vEECY1Ga7s5uN4f+A Wg5MdCrmDpbZpt8il1zKUkSOlGjNR59g1/1Y1EdZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUHr47WguYhPcWG4HPxNa0BJbypF4wHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzM3NTQ1MzJiLTI0MTctNDkwZS04Y2I0LTI2YjhmYzAzNDkyNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX+dQwDQYJKoZIhvcNAQELBQADggEBABByeOhL7KPcKj92Qtb6VJ7/s8ws zxEfKagO2irjQSDr49XggrZiA6hGe2qzpUHOxw+QAAiizroN2Od/n8V6LqIegFuH OFi3obYA9i1lKmb6b+cC0xZrMdlM3XtGD01nJXf7LjBc46PF4fWlXCjQzaryOguD mszBQAUhk3CZ0cyik4k/2HN7mNZ4hEeM+gc4RrF9P8ZLBUyjSk7ofoFKVH5xWGvr JywAC1okd45XQbbXrOOS27gol/K0XpaUubR+mkPPZq8d9ebWGT19oCTKDPy/sWE7 3ZSg+F1ZUqQ5+cNWdJ3oRAhKPxJwmwZjM3AWaha/+7gq3Ldub3RiHLk560M= -----END CERTIFICATE-----Generated at Mon Oct 20 15:25:37 2025 by rpki-client