$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5ff4b44a-41c9-4bc0-b77e-520fd1d7927e.roa File: 5ff4b44a-41c9-4bc0-b77e-520fd1d7927e.roa (raw, json) Hash identifier: WtXbRGlQ0dGDQgLSfd+YXPbNJmcmaQkCyLrQUHhpHzg= Subject key identifier: 06:79:45:E3:5F:B1:68:9A:8D:91:DC:9A:0B:23:44:D3:97:40:09:BD Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 5B99844045FA6DA0D4C4D3E798129399D26788EB Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5ff4b44a-41c9-4bc0-b77e-520fd1d7927e.roa Signing time: Sat 04 Oct 2025 00:20:59 +0000 ROA not before: Sat 04 Oct 2025 00:20:59 +0000 ROA not after: Sat 08 Nov 2025 23:59:59 +0000 asID: 8987 IP address blocks: 23.249.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:99:84:40:45:fa:6d:a0:d4:c4:d3:e7:98:12:93:99:d2:67:88:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Oct 4 00:20:59 2025 GMT Not After : Nov 8 23:59:59 2025 GMT Subject: serialNumber=ff0accf206781df1ec645863383c2baf1103cd99f75f4995e95d430f7baf159e, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c6:f0:03:53:b7:57:ae:ab:34:88:28:5f:98: 56:60:7f:9f:92:94:67:53:d3:5d:40:e4:36:3a:f4: 30:61:85:c5:62:b4:49:ee:a4:4a:5f:5c:dd:20:67: c8:73:f7:fd:fa:4f:8c:8f:8d:27:76:c0:64:24:7a: 1c:f7:3f:b0:bc:d9:b0:d5:0c:90:a8:6d:2e:df:e8: 64:59:fc:94:42:51:c3:05:c9:1b:01:11:c2:83:53: e4:47:41:d4:f3:81:37:ab:50:85:87:44:80:0c:97: 74:6a:a8:9b:2a:4a:1d:c9:d2:86:d1:72:5f:03:77: 28:eb:61:c6:1f:fa:c4:47:90:8f:1f:f9:00:75:66: 57:5a:e1:01:8e:12:38:28:cb:b6:36:62:3e:c1:c6: 08:cf:ef:db:45:8c:25:61:9c:eb:d3:ac:8b:03:be: 28:f5:50:d5:fa:ff:8e:9e:6a:4f:3f:dd:3a:70:59: 68:f0:e7:04:62:2a:9e:46:23:9e:b5:43:50:03:96: 13:20:0e:82:79:4b:41:e7:b6:f6:0a:9e:e2:4d:22: ed:f8:53:39:0f:36:ce:c3:f6:da:0c:dd:a4:64:80: 5e:b3:79:87:94:b2:2c:87:74:19:08:1f:fb:0b:81: 6f:fe:b9:68:06:f8:35:4d:9b:fd:9d:a6:c2:fe:37: de:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:79:45:E3:5F:B1:68:9A:8D:91:DC:9A:0B:23:44:D3:97:40:09:BD X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5ff4b44a-41c9-4bc0-b77e-520fd1d7927e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.214.0/24 Signature Algorithm: sha256WithRSAEncryption 12:6f:5d:52:fd:07:7b:74:50:24:7e:48:a0:7f:af:b8:a5:0d: 10:34:f4:53:d7:e2:0f:4b:ae:3d:95:8a:d0:b7:9a:93:c1:17: fe:04:27:d3:19:73:28:26:42:25:5e:42:16:08:e9:c2:26:6d: cb:e3:c2:36:ca:04:c6:8b:22:57:c3:4f:5d:df:d0:59:c9:b6: d9:ea:c0:22:be:f8:1b:e6:a8:15:d7:2c:33:95:bc:15:70:0d: 2f:d7:79:13:f5:57:2b:65:ad:bc:b2:01:3e:f0:48:79:e5:8e: 13:61:ea:54:e3:22:4b:54:d5:f0:89:3d:2d:5d:5b:f3:c7:b9: 2a:71:d5:e4:8f:78:4f:62:3a:3f:ff:c3:e5:ce:1e:87:b4:9d: 16:71:2c:49:4d:f3:f4:d5:f2:69:de:34:90:b7:23:79:f4:f7: 86:80:b5:11:bd:5c:1f:58:7c:a4:77:26:0c:ec:79:ce:6e:a6: 03:a7:2a:80:f3:9e:4e:24:ea:09:f8:b5:cd:1b:06:3f:4e:ca: a1:9b:ad:e2:a2:69:de:f8:cf:1d:01:32:85:c9:c4:13:6b:23: cd:d9:0f:97:c0:e9:0e:8e:71:4b:86:54:ee:22:7d:b2:58:d6: 5a:58:d9:d9:c2:1a:6a:b8:cb:d8:36:15:69:54:6e:83:d5:8a: 55:79:7a:bb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUW5mEQEX6baDUxNPnmBKTmdJniOswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUxMDA0MDAyMDU5WhcNMjUxMTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0BmZjBhY2NmMjA2NzgxZGYxZWM2NDU4NjMzODNjMmJhZjEx MDNjZDk5Zjc1ZjQ5OTVlOTVkNDMwZjdiYWYxNTllMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpxvADU7dXrqs0iChfmFZgf5+SlGdT011A5DY69DBhhcVi tEnupEpfXN0gZ8hz9/36T4yPjSd2wGQkehz3P7C82bDVDJCobS7f6GRZ/JRCUcMF yRsBEcKDU+RHQdTzgTerUIWHRIAMl3RqqJsqSh3J0obRcl8DdyjrYcYf+sRHkI8f +QB1Zlda4QGOEjgoy7Y2Yj7BxgjP79tFjCVhnOvTrIsDvij1UNX6/46eak8/3Tpw WWjw5wRiKp5GI561Q1ADlhMgDoJ5S0HntvYKnuJNIu34UzkPNs7D9toM3aRkgF6z eYeUsiyHdBkIH/sLgW/+uWgG+DVNm/2dpsL+N941AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUBnlF41+xaJqNkdyaCyNE05dACb0wHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzVmZjRiNDRhLTQxYzktNGJjMC1iNzdlLTUyMGZkMWQ3OTI3ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX+dYwDQYJKoZIhvcNAQELBQADggEBABJvXVL9B3t0UCR+SKB/r7ilDRA0 9FPX4g9Lrj2VitC3mpPBF/4EJ9MZcygmQiVeQhYI6cImbcvjwjbKBMaLIlfDT13f 0FnJttnqwCK++BvmqBXXLDOVvBVwDS/XeRP1VytlrbyyAT7wSHnljhNh6lTjIktU 1fCJPS1dW/PHuSpx1eSPeE9iOj//w+XOHoe0nRZxLElN8/TV8mneNJC3I3n094aA tRG9XB9YfKR3Jgzsec5upgOnKoDznk4k6gn4tc0bBj9OyqGbreKiad74zx0BMoXJ xBNrI83ZD5fA6Q6OcUuGVO4ifbJY1lpY2dnCGmq4y9g2FWlUboPVilV5ers= -----END CERTIFICATE-----Generated at Mon Oct 20 12:41:35 2025 by rpki-client