$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5ff4b44a-41c9-4bc0-b77e-520fd1d7927e.roa File: 5ff4b44a-41c9-4bc0-b77e-520fd1d7927e.roa (raw, json) Hash identifier: G5zHFgYHyJX1JnxBfo/B1Ow3SG6I/lhDaEFZEDtryRc= Subject key identifier: 76:76:85:65:68:69:C8:84:5F:C8:27:28:4F:E7:08:43:6C:E0:3F:5C Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 2A8BD368C60DF5111B0693F08EC2896F1188DA86 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5ff4b44a-41c9-4bc0-b77e-520fd1d7927e.roa Signing time: Fri 15 Aug 2025 00:20:21 +0000 ROA not before: Fri 15 Aug 2025 00:20:21 +0000 ROA not after: Fri 19 Sep 2025 23:59:59 +0000 asID: 8987 IP address blocks: 23.249.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:8b:d3:68:c6:0d:f5:11:1b:06:93:f0:8e:c2:89:6f:11:88:da:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Aug 15 00:20:21 2025 GMT Not After : Sep 19 23:59:59 2025 GMT Subject: serialNumber=6f72e52436fa18c85c08c4ba21ac3e389a112d2541cb55ec497da9ea6685bb9e, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:12:0a:d7:5d:c2:42:bf:82:bb:ff:3f:39:f5: 1f:cd:57:86:e0:b8:d5:67:6c:70:35:b2:71:af:21: 44:99:77:64:9d:60:75:a3:fb:68:07:ac:5f:f7:9d: aa:81:45:60:77:91:bd:02:a3:7a:ad:07:f2:f5:2b: 48:17:5f:f5:f6:4c:7d:ea:72:1a:be:89:b2:4e:61: af:40:51:cc:9a:a4:ee:34:ce:47:09:51:60:39:2e: 57:07:93:1a:9c:e2:49:ef:df:06:d8:16:20:2c:f1: 07:2f:2d:6e:a0:cd:be:c2:a0:b3:53:92:2d:12:1a: 78:c1:84:e3:66:fe:db:f9:ac:aa:d3:8e:1b:9c:57: e0:49:61:54:8d:6c:11:0e:17:87:39:04:3c:2e:6b: 13:7a:7f:d8:b0:70:eb:d5:5b:5b:be:68:c5:cc:9a: f2:81:63:25:a1:31:3e:f9:02:1d:fb:aa:74:3b:45: 7e:28:83:50:e5:11:75:c0:20:a1:fd:67:0c:99:9d: 1b:bf:71:c9:4f:71:09:34:0a:59:20:48:fa:18:c8: 89:96:9f:5d:c3:5f:e6:43:d3:d1:24:13:ea:07:a7: 1e:f4:bc:42:60:0a:57:f7:64:23:fe:19:b5:2a:43: 3c:f4:5e:54:d2:51:ac:1b:98:f0:28:61:27:8f:ac: 65:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:76:85:65:68:69:C8:84:5F:C8:27:28:4F:E7:08:43:6C:E0:3F:5C X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5ff4b44a-41c9-4bc0-b77e-520fd1d7927e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.214.0/24 Signature Algorithm: sha256WithRSAEncryption 65:f0:0c:4e:d3:7b:dd:bd:d2:15:d3:21:3a:fd:32:cc:90:24: e6:9a:9f:75:6f:dc:b4:86:e5:ce:47:a5:f5:5b:b9:b0:35:e3: 72:38:25:b1:c8:ae:49:c3:b8:ff:46:e4:da:0d:12:8f:f6:d6: 95:86:b0:1c:b1:95:99:64:c7:04:06:79:5e:63:4b:28:7f:0c: fe:85:db:41:dd:c0:cd:6d:90:64:88:4d:e7:86:5a:87:9e:ce: e1:b5:14:df:e9:d0:89:9b:92:54:30:7e:ab:a9:6f:98:a0:d9: 5e:26:24:97:b9:60:2f:8a:c1:4e:4b:5c:c5:c8:04:e4:48:4a: 4c:ae:68:b6:50:26:eb:d6:c1:cb:d8:ab:37:59:27:8a:c7:bd: 18:81:57:4a:cf:0d:2c:cd:db:b2:3a:9b:b0:46:94:43:f6:dc: 9d:cb:d2:1b:d4:ea:b0:48:93:8f:73:9a:a6:df:78:82:a4:51: 97:1d:e4:c0:eb:b9:aa:96:75:e7:9b:b2:c5:56:a1:91:96:d7: f2:d7:f5:8d:f3:73:7d:fe:57:19:88:ac:8b:3c:54:7e:66:d0: b1:f8:3f:05:df:34:4a:c0:b5:85:f8:88:59:9d:71:b4:fd:a6: 1f:0a:dd:65:41:68:47:cc:3d:1c:43:48:3c:78:03:3d:55:32: 43:5c:14:7e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKovTaMYN9REbBpPwjsKJbxGI2oYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwODE1MDAyMDIxWhcNMjUwOTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZjcyZTUyNDM2ZmExOGM4NWMwOGM0YmEyMWFjM2UzODlh MTEyZDI1NDFjYjU1ZWM0OTdkYTllYTY2ODViYjllMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDzEgrXXcJCv4K7/z859R/NV4bguNVnbHA1snGvIUSZd2Sd YHWj+2gHrF/3naqBRWB3kb0Co3qtB/L1K0gXX/X2TH3qchq+ibJOYa9AUcyapO40 zkcJUWA5LlcHkxqc4knv3wbYFiAs8QcvLW6gzb7CoLNTki0SGnjBhONm/tv5rKrT jhucV+BJYVSNbBEOF4c5BDwuaxN6f9iwcOvVW1u+aMXMmvKBYyWhMT75Ah37qnQ7 RX4og1DlEXXAIKH9ZwyZnRu/cclPcQk0ClkgSPoYyImWn13DX+ZD09EkE+oHpx70 vEJgClf3ZCP+GbUqQzz0XlTSUawbmPAoYSePrGWhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUdnaFZWhpyIRfyCcoT+cIQ2zgP1wwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzVmZjRiNDRhLTQxYzktNGJjMC1iNzdlLTUyMGZkMWQ3OTI3ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX+dYwDQYJKoZIhvcNAQELBQADggEBAGXwDE7Te9290hXTITr9MsyQJOaa n3Vv3LSG5c5HpfVbubA143I4JbHIrknDuP9G5NoNEo/21pWGsByxlZlkxwQGeV5j Syh/DP6F20HdwM1tkGSITeeGWoeezuG1FN/p0ImbklQwfqupb5ig2V4mJJe5YC+K wU5LXMXIBORISkyuaLZQJuvWwcvYqzdZJ4rHvRiBV0rPDSzN27I6m7BGlEP23J3L 0hvU6rBIk49zmqbfeIKkUZcd5MDruaqWdeebssVWoZGW1/LX9Y3zc33+VxmIrIs8 VH5m0LH4PwXfNErAtYX4iFmdcbT9ph8K3WVBaEfMPRxDSDx4Az1VMkNcFH4= -----END CERTIFICATE-----Generated at Sat Aug 23 14:54:25 2025 by rpki-client