$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5d99a456-6c99-48ae-bf3a-149585d61d61.roa File: 5d99a456-6c99-48ae-bf3a-149585d61d61.roa (raw, json) Hash identifier: hExYxbi3MLynOo3Z9oYXLe0Cd8qUGhT5Yr0687iaoKo= Subject key identifier: 41:B1:A9:A8:65:D8:AC:66:CB:54:F1:37:E1:23:70:D9:2D:94:66:EC Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 32C2BDA7B5D69E7624698EDF5277A7EC37E97D01 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5d99a456-6c99-48ae-bf3a-149585d61d61.roa Signing time: Fri 17 Oct 2025 00:10:06 +0000 ROA not before: Fri 17 Oct 2025 00:10:06 +0000 ROA not after: Fri 21 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 69.169.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:c2:bd:a7:b5:d6:9e:76:24:69:8e:df:52:77:a7:ec:37:e9:7d:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Oct 17 00:10:06 2025 GMT Not After : Nov 21 23:59:59 2025 GMT Subject: serialNumber=f3ec9ec125780090de4c6bb7be4757cb5db0e69ad3a60a7b83032bfa4c560995, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a1:2c:ba:24:7e:4c:eb:21:d2:b0:28:6e:00: 25:9b:22:c9:9f:f9:b5:bd:1a:28:cf:ee:c2:a6:46: a7:b4:04:fb:90:3d:e8:44:92:3e:e5:df:fb:81:6a: a5:a2:ed:a7:3b:5c:da:c9:20:da:55:1a:ad:de:f6: 6f:0b:8d:88:06:56:1f:37:46:8f:22:93:65:77:70: 03:15:6d:88:ac:db:18:6e:ea:cb:1e:22:55:ad:92: af:09:ea:53:94:08:69:81:0f:f2:ea:39:e3:ea:90: f2:23:31:0e:26:8b:45:33:69:87:01:c3:ec:0b:f4: 92:b1:e1:21:dd:30:07:40:de:cb:46:e0:4d:e5:ed: 2a:ad:d4:bb:94:31:60:c9:f6:ab:9b:3e:61:42:b9: fd:cd:da:25:ce:93:37:43:9d:fd:52:cb:fa:5e:a0: e9:54:e9:18:ea:ad:29:88:73:0c:c4:b1:b4:d7:ac: 72:77:21:c6:de:ca:c2:83:42:4e:a6:91:6b:24:62: 39:f4:ea:3f:15:dc:a2:27:26:a6:01:c0:6c:25:4a: 03:7a:9d:9a:b6:70:3f:6d:fe:c9:85:94:98:fb:34: 2d:06:7e:72:9d:6f:77:55:31:d1:9c:65:bf:57:ab: 13:52:6b:5c:3f:02:a1:22:97:59:2f:78:4a:03:23: 26:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:B1:A9:A8:65:D8:AC:66:CB:54:F1:37:E1:23:70:D9:2D:94:66:EC X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5d99a456-6c99-48ae-bf3a-149585d61d61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 69.169.232.0/22 Signature Algorithm: sha256WithRSAEncryption 1b:37:7f:1a:21:1b:7d:c3:51:b4:6c:55:4b:ae:7b:b6:d2:69: e3:3f:5d:aa:c5:62:8b:a9:05:e3:fb:32:b0:82:b6:47:ec:79: 3b:0b:39:a6:bb:48:5c:0a:bb:39:16:1a:21:27:70:63:28:e8: da:3d:98:c1:4d:d7:d4:f3:04:17:fd:d1:f1:d8:b4:f1:92:0d: 0d:1d:d6:fa:ac:d3:c5:7c:67:af:4a:7b:ae:05:5c:1a:fe:54: 21:11:85:b5:dd:1c:ab:61:55:25:29:50:f6:51:c4:91:1d:79: 0c:33:a0:34:3e:d5:6f:e5:a7:a7:e5:98:69:1e:44:ea:7f:ea: a2:10:03:d5:05:9e:3f:53:4a:ce:3a:ca:60:7f:e9:17:0c:aa: 47:c8:24:8b:a0:5e:b3:27:33:75:54:0a:98:a5:6c:41:9d:95: b7:5c:22:63:3d:e4:d3:23:92:fc:8a:7a:93:37:51:b3:26:10: 71:20:37:4a:0d:9b:64:ba:04:2b:64:24:27:4f:59:9d:aa:7b: 29:a4:65:97:b1:59:2f:b3:df:6c:bf:22:f1:64:ff:60:c6:61: f1:9a:8e:2d:df:f2:f0:1a:b2:66:ae:ee:df:79:13:6e:d9:3c: 2b:fa:b1:fb:0e:82:5d:ad:0f:e7:63:5e:8e:97:ee:3d:b4:7a: a2:d5:04:66 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMsK9p7XWnnYkaY7fUnen7DfpfQEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUxMDE3MDAxMDA2WhcNMjUxMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BmM2VjOWVjMTI1NzgwMDkwZGU0YzZiYjdiZTQ3NTdjYjVk YjBlNjlhZDNhNjBhN2I4MzAzMmJmYTRjNTYwOTk1MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCeoSy6JH5M6yHSsChuACWbIsmf+bW9GijP7sKmRqe0BPuQ PehEkj7l3/uBaqWi7ac7XNrJINpVGq3e9m8LjYgGVh83Ro8ik2V3cAMVbYis2xhu 6sseIlWtkq8J6lOUCGmBD/LqOePqkPIjMQ4mi0UzaYcBw+wL9JKx4SHdMAdA3stG 4E3l7Sqt1LuUMWDJ9qubPmFCuf3N2iXOkzdDnf1Sy/peoOlU6RjqrSmIcwzEsbTX rHJ3IcbeysKDQk6mkWskYjn06j8V3KInJqYBwGwlSgN6nZq2cD9t/smFlJj7NC0G fnKdb3dVMdGcZb9XqxNSa1w/AqEil1kveEoDIybBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUQbGpqGXYrGbLVPE34SNw2S2UZuwwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzVkOTlhNDU2LTZjOTktNDhhZS1iZjNhLTE0OTU4NWQ2MWQ2MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJFqegwDQYJKoZIhvcNAQELBQADggEBABs3fxohG33DUbRsVUuue7bSaeM/ XarFYoupBeP7MrCCtkfseTsLOaa7SFwKuzkWGiEncGMo6No9mMFN19TzBBf90fHY tPGSDQ0d1vqs08V8Z69Ke64FXBr+VCERhbXdHKthVSUpUPZRxJEdeQwzoDQ+1W/l p6flmGkeROp/6qIQA9UFnj9TSs46ymB/6RcMqkfIJIugXrMnM3VUCpilbEGdlbdc ImM95NMjkvyKepM3UbMmEHEgN0oNm2S6BCtkJCdPWZ2qeymkZZexWS+z32y/IvFk /2DGYfGaji3f8vAasmau7t95E27ZPCv6sfsOgl2tD+djXo6X7j20eqLVBGY= -----END CERTIFICATE-----Generated at Mon Oct 20 20:44:05 2025 by rpki-client