$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/a11f9364-e88a-440b-a95f-a94c5ecdc863.roa File: a11f9364-e88a-440b-a95f-a94c5ecdc863.roa (raw, json) Hash identifier: rEm1F38kjPfzNBie0VNfO6uZtEa9dvqhgUXRukKyImM= Subject key identifier: 85:24:E7:18:1C:52:F5:FD:D8:29:2E:BB:73:B1:62:D1:A3:A3:49:F6 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 7953190CBE75A771473B2860D875435749F0652D Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/a11f9364-e88a-440b-a95f-a94c5ecdc863.roa Signing time: Sat 04 Oct 2025 00:20:42 +0000 ROA not before: Sat 04 Oct 2025 00:20:42 +0000 ROA not after: Sat 08 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 69.169.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:53:19:0c:be:75:a7:71:47:3b:28:60:d8:75:43:57:49:f0:65:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Oct 4 00:20:42 2025 GMT Not After : Nov 8 23:59:59 2025 GMT Subject: serialNumber=d06803cadbfc2280b206dd2e9a5409d7c97756a906deed130d6732a2934a6d9e, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:94:1d:5b:99:ab:65:94:0c:f8:c1:bb:35:a2: c6:5a:12:43:f7:df:d3:59:14:3a:ba:f1:3e:0d:86: c0:e4:6c:cc:25:04:d8:09:f7:19:f5:e1:dc:6b:92: ab:2b:84:5d:de:81:a6:f2:de:81:b2:cc:18:e3:48: cd:00:99:23:02:09:6a:97:21:1e:a7:ee:4f:35:18: 74:08:b4:ae:16:37:ad:dc:b5:1a:59:46:f6:18:6e: 89:f9:3e:a8:72:ec:66:c1:84:0f:1e:f5:7a:c4:24: bb:c3:ec:c1:e2:88:42:54:34:54:c7:9d:d1:e6:47: f7:ce:4a:28:b8:28:5e:3a:cb:10:e0:21:2b:91:24: f0:6f:9d:e5:fe:61:10:e9:73:c4:f1:cd:35:2e:81: 06:b2:45:cc:a2:72:fe:3d:c5:a4:ed:4e:10:b7:6c: 1a:a5:77:c2:8f:2c:fa:c2:5c:2e:a5:ed:63:72:3c: cf:b7:37:37:35:3f:2b:79:42:09:ce:62:80:5e:c4: c3:b8:b5:2d:fb:10:a7:f5:88:ed:f4:2b:44:b8:b7: 08:86:3b:15:92:20:7c:f9:d8:bc:21:b1:b8:74:7b: 5c:e3:37:2c:65:58:32:12:97:68:6d:16:0f:85:04: c8:72:fc:17:a0:a2:17:de:10:ef:cd:4f:f2:1e:9e: 37:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:24:E7:18:1C:52:F5:FD:D8:29:2E:BB:73:B1:62:D1:A3:A3:49:F6 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/a11f9364-e88a-440b-a95f-a94c5ecdc863.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 69.169.237.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:20:f7:73:7d:96:13:f8:09:30:81:f3:b9:16:26:06:38:10: b0:a6:b7:c4:b0:14:04:52:d8:80:7f:8f:ec:20:28:0b:fe:b5: 10:f7:e2:6e:f7:b9:e8:7c:a7:c6:ff:4b:bf:81:dc:86:99:43: 8b:ae:3b:3e:85:22:0e:48:14:61:9a:07:31:a8:33:e4:2b:35: 19:6c:eb:4f:d0:d5:87:03:50:2a:4c:a8:62:cf:2a:08:c0:47: 58:e2:7d:75:d4:ae:46:88:b0:ec:8c:cd:15:88:f5:46:44:d3: 37:c0:e2:a0:49:0a:6a:9b:8d:2b:a8:c2:d0:5a:74:8c:07:ac: e0:92:fe:82:66:e7:78:d7:f8:66:2e:04:18:b0:8a:5e:ba:f1: b7:fc:cd:81:95:15:84:85:d6:7f:9e:64:ad:0a:00:21:f1:9b: b5:78:b3:f2:bb:d0:b1:e2:05:de:5c:47:09:01:cb:7f:e3:2e: f9:59:2e:c7:12:95:39:56:e7:9b:ef:02:63:68:79:5c:17:45: 18:26:27:de:21:5d:d3:07:9c:24:9b:c9:e7:3b:19:c8:3a:da: 6f:61:7d:25:8b:d6:f0:e5:3d:14:41:7a:59:b1:d4:ab:cd:96: ba:d0:26:f8:2f:2e:09:fd:15:93:f9:b5:9e:7a:a4:59:e5:96: 0b:d4:f7:15 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUeVMZDL51p3FHOyhg2HVDV0nwZS0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUxMDA0MDAyMDQyWhcNMjUxMTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMDY4MDNjYWRiZmMyMjgwYjIwNmRkMmU5YTU0MDlkN2M5 Nzc1NmE5MDZkZWVkMTMwZDY3MzJhMjkzNGE2ZDllMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4lB1bmatllAz4wbs1osZaEkP339NZFDq68T4NhsDkbMwl BNgJ9xn14dxrkqsrhF3egaby3oGyzBjjSM0AmSMCCWqXIR6n7k81GHQItK4WN63c tRpZRvYYbon5Pqhy7GbBhA8e9XrEJLvD7MHiiEJUNFTHndHmR/fOSii4KF46yxDg ISuRJPBvneX+YRDpc8TxzTUugQayRcyicv49xaTtThC3bBqld8KPLPrCXC6l7WNy PM+3Nzc1Pyt5QgnOYoBexMO4tS37EKf1iO30K0S4twiGOxWSIHz52Lwhsbh0e1zj NyxlWDISl2htFg+FBMhy/BegohfeEO/NT/Ienjd3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhSTnGBxS9f3YKS67c7Fi0aOjSfYwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2ExMWY5MzY0LWU4OGEtNDQwYi1hOTVmLWE5NGM1ZWNkYzg2My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABFqe0wDQYJKoZIhvcNAQELBQADggEBAH8g93N9lhP4CTCB87kWJgY4ELCm t8SwFARS2IB/j+wgKAv+tRD34m73ueh8p8b/S7+B3IaZQ4uuOz6FIg5IFGGaBzGo M+QrNRls60/Q1YcDUCpMqGLPKgjAR1jifXXUrkaIsOyMzRWI9UZE0zfA4qBJCmqb jSuowtBadIwHrOCS/oJm53jX+GYuBBiwil668bf8zYGVFYSF1n+eZK0KACHxm7V4 s/K70LHiBd5cRwkBy3/jLvlZLscSlTlW55vvAmNoeVwXRRgmJ94hXdMHnCSbyec7 Gcg62m9hfSWL1vDlPRRBelmx1KvNlrrQJvgvLgn9FZP5tZ56pFnllgvU9xU= -----END CERTIFICATE-----Generated at Mon Oct 20 18:00:12 2025 by rpki-client