$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/58f9ffe5-09fd-40ac-8ea4-fe1f8d01d875.roa File: 58f9ffe5-09fd-40ac-8ea4-fe1f8d01d875.roa (raw, json) Hash identifier: FXDxklNZ30eEUb7+M9YxV3HtH83fN959iUUsXYH4SnU= Subject key identifier: 49:FC:94:79:C1:CF:44:0B:9E:28:68:E7:C6:FB:BE:3F:76:73:0C:23 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 4245E9FC038C8B5D26D09FA83C51979E5154A1C7 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/58f9ffe5-09fd-40ac-8ea4-fe1f8d01d875.roa Signing time: Fri 17 Oct 2025 00:10:08 +0000 ROA not before: Fri 17 Oct 2025 00:10:08 +0000 ROA not after: Fri 21 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 69.169.232.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:45:e9:fc:03:8c:8b:5d:26:d0:9f:a8:3c:51:97:9e:51:54:a1:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Oct 17 00:10:08 2025 GMT Not After : Nov 21 23:59:59 2025 GMT Subject: serialNumber=ddc083097e03ab102a86abb37d2104c0615f967dbb7b488fbaf0f7157e5eb27b, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:80:c0:a3:f2:8a:96:7b:7a:61:21:9b:e9:31: ef:7e:68:d6:50:b3:a0:6c:a5:bb:f5:d5:93:ec:e0: 4d:46:4e:f3:73:f7:42:a5:c4:31:dc:93:0a:3b:00: 1c:9b:61:d1:df:a5:17:56:f5:70:b5:af:c9:37:a1: 2b:9c:a3:fb:65:52:33:a7:01:2a:26:fb:3f:8f:b1: 7f:78:3d:28:d3:6b:97:6f:0a:79:46:86:64:0f:37: a4:2d:7c:39:17:05:5a:b6:5b:50:d7:4b:54:2d:45: c9:2a:06:42:16:bd:3b:6c:45:f0:66:f0:64:0f:fc: 05:f8:ec:3f:45:36:65:68:a6:96:51:0e:36:1d:cb: c1:45:d3:83:63:b8:4f:ed:d2:38:63:b1:6f:c6:c6: ec:3b:86:f2:df:bf:df:dd:48:0c:9c:31:11:3f:5b: 04:e3:fa:67:00:fb:a4:da:c7:b8:1b:31:74:9a:96: e3:2c:cf:5b:b1:7b:37:b0:a2:e5:40:f6:80:17:e0: 9e:04:5f:94:89:e9:4d:23:c6:05:9b:ea:5f:73:f1: 27:54:a2:3e:70:5d:2b:40:1c:44:18:d4:e2:bf:ef: a9:23:19:01:e2:7c:38:d0:17:7c:6b:ba:df:38:21: 79:e6:f1:71:1e:2f:b2:12:4f:f3:0b:93:ff:0e:86: dd:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:FC:94:79:C1:CF:44:0B:9E:28:68:E7:C6:FB:BE:3F:76:73:0C:23 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/58f9ffe5-09fd-40ac-8ea4-fe1f8d01d875.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 69.169.232.0/23 Signature Algorithm: sha256WithRSAEncryption 8a:0d:72:55:1c:ba:e4:77:97:dd:88:cf:73:df:be:0d:bf:a2: 62:07:ee:86:bf:bc:d4:e8:b4:f5:1f:d5:12:4c:05:59:4c:73: 6b:14:40:8e:db:7c:c6:e3:d1:09:34:47:b4:33:92:bf:fa:e3: fa:7f:e5:f6:e8:41:65:3e:9c:2d:5b:72:99:f1:a3:b7:61:09: b5:43:e8:66:6d:21:a0:1e:e9:c4:45:ae:3c:c6:61:92:de:1f: 64:94:00:ec:18:e3:71:5f:6a:a4:50:15:32:9e:b3:bf:7e:bb: 36:6f:e5:92:3f:fe:ab:8e:b8:81:12:5a:48:20:b3:db:93:0e: 0b:2c:b4:f7:03:06:c3:f1:7a:fd:b9:d1:7c:9c:b5:48:10:74: 73:6f:72:09:8a:01:22:6e:48:9e:5d:b3:94:9c:81:ee:5f:bb: 40:39:a1:d8:58:56:c6:27:89:bc:fd:c1:ea:04:8b:ff:3e:66: d2:dd:64:43:c1:88:c1:70:53:59:6e:66:11:9c:90:31:aa:2d: a4:d8:e8:b2:20:e7:e2:47:c1:52:ac:8d:f4:72:ef:6c:2d:ff: ac:b4:2c:79:d4:ca:ee:6c:18:ce:fa:11:00:5b:cc:40:92:19: d2:2a:81:52:fb:36:11:81:70:b9:a3:b3:c3:c3:64:d0:a9:b3: a6:9f:74:7b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQkXp/AOMi10m0J+oPFGXnlFUoccwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUxMDE3MDAxMDA4WhcNMjUxMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BkZGMwODMwOTdlMDNhYjEwMmE4NmFiYjM3ZDIxMDRjMDYx NWY5NjdkYmI3YjQ4OGZiYWYwZjcxNTdlNWViMjdiMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDMgMCj8oqWe3phIZvpMe9+aNZQs6Bspbv11ZPs4E1GTvNz 90KlxDHckwo7ABybYdHfpRdW9XC1r8k3oSuco/tlUjOnASom+z+PsX94PSjTa5dv CnlGhmQPN6QtfDkXBVq2W1DXS1QtRckqBkIWvTtsRfBm8GQP/AX47D9FNmVoppZR DjYdy8FF04NjuE/t0jhjsW/Gxuw7hvLfv9/dSAycMRE/WwTj+mcA+6Tax7gbMXSa luMsz1uxezewouVA9oAX4J4EX5SJ6U0jxgWb6l9z8SdUoj5wXStAHEQY1OK/76kj GQHifDjQF3xrut84IXnm8XEeL7IST/MLk/8Oht3pAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUSfyUecHPRAueKGjnxvu+P3ZzDCMwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzU4ZjlmZmU1LTA5ZmQtNDBhYy04ZWE0LWZlMWY4ZDAxZDg3NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFFqegwDQYJKoZIhvcNAQELBQADggEBAIoNclUcuuR3l92Iz3Pfvg2/omIH 7oa/vNTotPUf1RJMBVlMc2sUQI7bfMbj0Qk0R7Qzkr/64/p/5fboQWU+nC1bcpnx o7dhCbVD6GZtIaAe6cRFrjzGYZLeH2SUAOwY43FfaqRQFTKes79+uzZv5ZI//quO uIESWkggs9uTDgsstPcDBsPxev250XyctUgQdHNvcgmKASJuSJ5ds5Scge5fu0A5 odhYVsYnibz9weoEi/8+ZtLdZEPBiMFwU1luZhGckDGqLaTY6LIg5+JHwVKsjfRy 72wt/6y0LHnUyu5sGM76EQBbzECSGdIqgVL7NhGBcLmjs8PDZNCps6afdHs= -----END CERTIFICATE-----Generated at Mon Oct 20 13:04:59 2025 by rpki-client