$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/639621c0-050e-4e66-b3a2-1dd129de2c24.roa File: 639621c0-050e-4e66-b3a2-1dd129de2c24.roa (raw, json) Hash identifier: cO3g+dnPG7wjqMuBVV46e/1JDQyZIzXy67EbCnxc0+g= Subject key identifier: 02:DD:B4:6C:00:C2:23:AA:0B:48:25:21:1A:97:76:AD:8F:0C:03:AF Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 55022CEC5B7199B5390D7D5FAE6EDF0D8E3449EC Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/639621c0-050e-4e66-b3a2-1dd129de2c24.roa Signing time: Sat 04 Oct 2025 00:20:09 +0000 ROA not before: Sat 04 Oct 2025 00:20:09 +0000 ROA not after: Sat 08 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 76.223.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:02:2c:ec:5b:71:99:b5:39:0d:7d:5f:ae:6e:df:0d:8e:34:49:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Oct 4 00:20:09 2025 GMT Not After : Nov 8 23:59:59 2025 GMT Subject: serialNumber=03b8b64019d22d5db24821c2c97862766647dc5e933602bcf88651ee14ecc018, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f5:47:78:74:e3:b6:14:4b:c3:1c:55:d4:26: 2c:e4:f4:7d:a2:4a:ce:cf:0d:f3:f1:dd:ed:1f:d5: 71:31:5d:d7:b2:08:82:ef:05:52:8b:81:d5:7d:4d: b7:91:bc:80:4d:64:94:1d:6e:d2:0f:ee:aa:19:a5: d5:5b:55:18:22:92:2f:37:16:9b:bd:7a:a7:ff:f1: 9a:31:2d:09:f1:fc:7c:0f:3a:9e:47:2b:92:be:17: 86:83:49:a4:a5:57:42:3d:2d:3e:1b:45:7d:41:8a: d9:67:16:e0:59:6a:aa:cc:65:ef:b8:13:57:5f:0d: 1f:92:57:fe:17:75:23:34:89:cf:7e:d0:e2:e8:ab: 07:7b:c6:7e:7b:3a:8b:a8:50:c9:23:2d:b5:0a:c4: 54:bc:66:f7:80:02:92:c5:60:03:56:f4:fd:13:42: 0a:81:40:b3:5c:9e:1a:9a:14:92:5d:28:54:68:0a: 26:e5:05:b4:90:c3:c6:63:00:de:f4:16:4f:78:2b: 22:d1:8f:43:0c:88:e7:b4:77:2d:4f:aa:4a:be:81: 3d:e4:72:c7:14:77:4b:00:d3:d8:92:d6:75:33:f3: e3:bc:ab:09:87:05:0e:a8:13:d1:e0:05:7f:26:74: d6:f2:a3:72:c1:49:f4:9e:a6:fc:d4:d2:6c:90:01: be:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:DD:B4:6C:00:C2:23:AA:0B:48:25:21:1A:97:76:AD:8F:0C:03:AF X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/639621c0-050e-4e66-b3a2-1dd129de2c24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.223.182.0/24 Signature Algorithm: sha256WithRSAEncryption 77:7b:0a:ed:8d:6a:5a:d1:43:b5:a2:22:e6:ab:cc:03:39:b2: 59:17:05:3f:e6:ea:d8:71:13:b9:58:50:bc:8f:e4:a0:05:33: f8:e2:c3:dc:b2:72:89:c6:d7:d1:cf:d4:47:5d:e7:ec:8f:be: c2:bf:4a:2b:af:44:db:5f:88:8f:72:80:ae:ec:47:b7:33:4d: a3:ba:3b:03:c5:83:ab:0c:89:a2:7c:75:2e:d2:f2:99:2e:f9: 81:33:de:57:b7:99:88:c5:0f:04:4b:c5:e0:d1:b0:46:5a:b6: d7:0f:a2:47:43:cb:ab:cd:c0:a8:e0:dc:a0:0f:46:23:bb:94: 66:dd:8f:57:e6:f8:08:f1:a7:06:1c:35:14:60:be:75:b0:1a: f7:ff:5f:3c:24:c4:98:c6:5f:ca:2d:50:82:10:05:48:42:ed: 39:3b:c6:ad:62:c9:92:18:91:17:48:2d:2e:b7:9c:d1:30:31: 4e:d6:73:ae:40:eb:b2:33:9a:21:b9:6b:89:27:8a:57:8a:ba: 59:43:2f:ed:76:61:f1:0e:79:99:65:71:8f:b8:39:cd:f3:0f: b8:c4:a7:18:3c:c9:af:cb:8e:cc:6d:38:5c:95:0a:8e:bb:79: 50:2a:10:b7:7c:97:7a:bf:12:f4:c9:8f:2c:a6:b7:7f:b0:ae: 0d:db:0b:78 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVQIs7FtxmbU5DX1frm7fDY40SewwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUxMDA0MDAyMDA5WhcNMjUxMTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0AwM2I4YjY0MDE5ZDIyZDVkYjI0ODIxYzJjOTc4NjI3NjY2 NDdkYzVlOTMzNjAyYmNmODg2NTFlZTE0ZWNjMDE4MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDB9Ud4dOO2FEvDHFXUJizk9H2iSs7PDfPx3e0f1XExXdey CILvBVKLgdV9TbeRvIBNZJQdbtIP7qoZpdVbVRgiki83Fpu9eqf/8ZoxLQnx/HwP Op5HK5K+F4aDSaSlV0I9LT4bRX1BitlnFuBZaqrMZe+4E1dfDR+SV/4XdSM0ic9+ 0OLoqwd7xn57OouoUMkjLbUKxFS8ZveAApLFYANW9P0TQgqBQLNcnhqaFJJdKFRo CiblBbSQw8ZjAN70Fk94KyLRj0MMiOe0dy1Pqkq+gT3kcscUd0sA09iS1nUz8+O8 qwmHBQ6oE9HgBX8mdNbyo3LBSfSepvzU0myQAb47AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUAt20bADCI6oLSCUhGpd2rY8MA68wHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzYzOTYyMWMwLTA1MGUtNGU2Ni1iM2EyLTFkZDEyOWRlMmMyNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABM37YwDQYJKoZIhvcNAQELBQADggEBAHd7Cu2NalrRQ7WiIuarzAM5slkX BT/m6thxE7lYULyP5KAFM/jiw9yyconG19HP1Edd5+yPvsK/SiuvRNtfiI9ygK7s R7czTaO6OwPFg6sMiaJ8dS7S8pku+YEz3le3mYjFDwRLxeDRsEZattcPokdDy6vN wKjg3KAPRiO7lGbdj1fm+AjxpwYcNRRgvnWwGvf/XzwkxJjGX8otUIIQBUhC7Tk7 xq1iyZIYkRdILS63nNEwMU7Wc65A67IzmiG5a4knileKullDL+12YfEOeZllcY+4 Oc3zD7jEpxg8ya/LjsxtOFyVCo67eVAqELd8l3q/EvTJjyymt3+wrg3bC3g= -----END CERTIFICATE-----Generated at Mon Oct 20 13:11:07 2025 by rpki-client