$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/951b66f0-8993-47d2-9bf5-e85f4ad5e32b.roa File: 951b66f0-8993-47d2-9bf5-e85f4ad5e32b.roa (raw, json) Hash identifier: DtSoT65tJyxeafw22+AspKO1kTIfWEfviDLJSOJbA9U= Subject key identifier: 89:B2:86:B4:E5:57:88:C9:DE:A4:CB:33:1F:B3:A6:20:4D:C9:A7:14 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 72B59EDFA5B255FFCD0269EB5D18DC2AF2B7B0E3 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/951b66f0-8993-47d2-9bf5-e85f4ad5e32b.roa Signing time: Sat 04 Oct 2025 00:21:01 +0000 ROA not before: Sat 04 Oct 2025 00:21:01 +0000 ROA not after: Sat 08 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.249.218.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:b5:9e:df:a5:b2:55:ff:cd:02:69:eb:5d:18:dc:2a:f2:b7:b0:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Oct 4 00:21:01 2025 GMT Not After : Nov 8 23:59:59 2025 GMT Subject: serialNumber=8f55261080f713bcf8c29f44126d9053a1bfb00980f63de7d3c8773916751b63, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:30:12:f0:5a:26:98:bb:5c:4e:dc:75:1a:63: 96:91:af:70:51:3f:ab:8b:25:44:1e:ff:e9:27:96: 8b:eb:1d:5b:b6:4d:6c:ad:fa:95:fb:45:ff:d8:37: 71:84:f2:db:84:bd:bd:9e:9a:2e:e9:79:a8:6b:10: 43:b1:a3:fb:c5:ba:72:58:ab:f5:0a:79:41:01:29: ff:27:90:c7:a7:21:bf:9a:1a:f7:12:2e:19:63:67: 1f:35:8e:a6:13:33:d8:ff:a6:21:46:67:61:70:38: 80:75:a0:06:3c:ba:f3:b7:b8:c9:16:ad:98:7c:11: cd:16:cf:0f:8c:c4:b3:64:41:55:60:d4:c6:ac:3d: 0d:30:38:94:44:7b:ff:24:9f:0c:be:6b:10:64:e2: 1d:5f:a2:6b:1e:ef:cb:4d:9a:97:48:bd:0f:c4:bd: 21:c6:09:69:c8:e3:e1:d1:f1:81:d6:0f:d3:c1:57: 3a:ea:69:fa:8a:ba:df:cc:7b:f2:18:fe:50:6f:69: 98:a2:9b:2d:03:3e:95:ed:56:7c:df:42:fd:22:a0: 11:6b:f8:45:3f:96:a6:f0:9b:e5:2d:c9:46:93:d4: d1:d6:8a:41:ec:b2:d2:96:62:3d:63:c2:d6:94:07: 42:5e:1f:33:bd:bd:75:77:40:dd:f2:23:48:4c:19: 0c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:B2:86:B4:E5:57:88:C9:DE:A4:CB:33:1F:B3:A6:20:4D:C9:A7:14 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/951b66f0-8993-47d2-9bf5-e85f4ad5e32b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.218.0/23 Signature Algorithm: sha256WithRSAEncryption 06:54:e9:3b:b0:b4:da:c1:2e:d5:92:bc:93:93:c3:98:bb:d7: 6c:8f:81:fd:83:4c:9e:13:b8:76:54:d0:88:02:9c:e9:26:54: 76:17:88:f2:ce:34:47:6c:3f:92:71:2b:14:61:2c:24:5d:70: 6b:7f:d7:d9:b4:7d:ee:21:b0:6f:8e:0f:72:37:8a:72:7c:e5: 52:80:15:8d:a1:0a:82:d8:6d:9f:9d:b4:54:eb:c8:71:c9:c0: dc:cc:ec:54:8c:f4:b9:77:bd:7d:ef:ad:c2:e8:29:a4:b8:36: 02:0b:c4:d3:0e:fa:ba:72:ee:a2:a6:e8:f6:57:0f:c4:f2:4a: 3f:0a:05:10:16:a3:0f:0d:09:6c:6d:e1:80:14:e6:39:ef:67: 48:d7:a7:d7:93:98:0d:0c:21:e9:2c:21:4b:1a:9d:d7:1d:00: 1f:c1:4d:ee:3f:12:27:81:27:b6:9e:a3:84:fc:6d:de:c1:ee: 99:48:a1:b4:99:ed:47:82:f8:6e:ba:90:97:c0:f7:47:12:00: 55:17:19:5b:07:85:a9:e9:f4:da:57:3d:be:87:cf:9d:52:65: e0:8f:4d:99:b7:39:da:03:d3:3f:78:e0:b0:4f:c7:63:9a:5d: ee:6a:2f:98:53:40:1a:e0:90:9b:d3:13:b5:e1:0d:c2:8c:e7: 13:c4:72:17 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcrWe36WyVf/NAmnrXRjcKvK3sOMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUxMDA0MDAyMTAxWhcNMjUxMTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZjU1MjYxMDgwZjcxM2JjZjhjMjlmNDQxMjZkOTA1M2Ex YmZiMDA5ODBmNjNkZTdkM2M4NzczOTE2NzUxYjYzMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGMBLwWiaYu1xO3HUaY5aRr3BRP6uLJUQe/+knlovrHVu2 TWyt+pX7Rf/YN3GE8tuEvb2emi7peahrEEOxo/vFunJYq/UKeUEBKf8nkMenIb+a GvcSLhljZx81jqYTM9j/piFGZ2FwOIB1oAY8uvO3uMkWrZh8Ec0Wzw+MxLNkQVVg 1MasPQ0wOJREe/8knwy+axBk4h1fomse78tNmpdIvQ/EvSHGCWnI4+HR8YHWD9PB VzrqafqKut/Me/IY/lBvaZiimy0DPpXtVnzfQv0ioBFr+EU/lqbwm+UtyUaT1NHW ikHsstKWYj1jwtaUB0JeHzO9vXV3QN3yI0hMGQznAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUibKGtOVXiMnepMszH7OmIE3JpxQwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzk1MWI2NmYwLTg5OTMtNDdkMi05YmY1LWU4NWY0YWQ1ZTMyYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEX+dowDQYJKoZIhvcNAQELBQADggEBAAZU6TuwtNrBLtWSvJOTw5i712yP gf2DTJ4TuHZU0IgCnOkmVHYXiPLONEdsP5JxKxRhLCRdcGt/19m0fe4hsG+OD3I3 inJ85VKAFY2hCoLYbZ+dtFTryHHJwNzM7FSM9Ll3vX3vrcLoKaS4NgILxNMO+rpy 7qKm6PZXD8TySj8KBRAWow8NCWxt4YAU5jnvZ0jXp9eTmA0MIeksIUsandcdAB/B Te4/EieBJ7aeo4T8bd7B7plIobSZ7UeC+G66kJfA90cSAFUXGVsHhanp9NpXPb6H z51SZeCPTZm3OdoD0z944LBPx2OaXe5qL5hTQBrgkJvTE7XhDcKM5xPEchc= -----END CERTIFICATE-----Generated at Mon Oct 20 23:07:47 2025 by rpki-client