$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b5cc85b6-fdc1-4a8f-b266-611d77cebf5a.roa File: b5cc85b6-fdc1-4a8f-b266-611d77cebf5a.roa (raw, json) Hash identifier: ZGmgRKcpxxGus7XMSXuujvkQNhvrp0YfnwRHCBVPIPI= Subject key identifier: 0A:CB:21:65:38:F8:71:14:E2:6F:E8:0A:F4:15:D8:BA:4D:3B:69:4F Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 25B99BF35223110A44B2AC9F6ACA12A5EF8A7CB3 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b5cc85b6-fdc1-4a8f-b266-611d77cebf5a.roa Signing time: Fri 15 Aug 2025 00:20:59 +0000 ROA not before: Fri 15 Aug 2025 00:20:59 +0000 ROA not after: Fri 19 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 23.251.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:b9:9b:f3:52:23:11:0a:44:b2:ac:9f:6a:ca:12:a5:ef:8a:7c:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Aug 15 00:20:59 2025 GMT Not After : Sep 19 23:59:59 2025 GMT Subject: serialNumber=33aae5d7bab13de6772796376b71eb6d386817998db2948dac8bfdfe3b2c12dd, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:cc:7d:77:93:9a:ac:c8:bd:66:d8:75:65:3d: f5:91:66:76:4f:6e:1d:0c:67:f9:e1:53:63:a8:db: 19:94:1f:f3:fa:a1:28:19:13:ec:e4:85:4d:a5:aa: c9:2b:32:2b:af:ba:4f:a3:66:8b:8b:06:8f:54:7e: 72:cf:ba:8f:93:87:22:0b:fa:46:42:eb:38:f1:74: ba:45:bc:9f:7a:f6:f7:5d:ee:b4:bc:ec:21:31:bd: 02:f0:49:51:9c:a3:57:fb:a4:f9:5c:df:89:d4:f0: 8c:aa:7f:16:ba:e2:34:2a:1d:b7:4f:14:f8:09:d2: c8:ba:54:f4:7f:59:b5:b5:87:74:45:7b:99:5b:8f: 00:ef:eb:6a:72:31:c1:33:eb:db:3f:18:ad:b0:33: 71:2b:d9:90:21:72:2f:78:e4:39:57:08:8f:11:ef: ef:fc:eb:2f:ea:e5:93:e9:b1:f5:e7:0b:59:52:7b: 52:f6:cd:38:9d:35:a0:49:b3:78:94:54:fc:8f:a1: 70:fa:cc:63:35:6b:3d:9a:3b:71:4b:12:61:a3:d1: 5d:b3:9e:31:c2:b2:53:f6:59:aa:b7:ff:4f:9a:f1: a8:19:17:e3:dc:9a:2a:88:bd:ef:d8:16:ad:e1:62: 0f:7e:30:1a:6c:00:f9:53:d8:dc:e0:d6:1f:1d:a9: 89:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:CB:21:65:38:F8:71:14:E2:6F:E8:0A:F4:15:D8:BA:4D:3B:69:4F X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b5cc85b6-fdc1-4a8f-b266-611d77cebf5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.251.252.0/22 Signature Algorithm: sha256WithRSAEncryption 58:68:66:99:af:1e:41:76:22:5c:d7:28:ca:3a:37:3b:8d:ed: b1:67:66:ae:2e:20:02:f3:ff:f1:cf:f6:92:a6:7c:e1:9e:81: f7:bd:17:73:ea:47:bb:98:8f:80:5c:a4:a4:be:82:96:6f:36: 79:d2:2c:85:4e:a5:99:ed:d7:ad:85:06:e3:84:27:4a:d0:71: be:80:a9:3a:4e:9d:b0:dd:45:ed:72:a0:c4:db:7c:84:1c:6a: 89:fd:db:ca:16:71:0d:cd:41:ae:8a:be:08:0b:c2:87:04:59: c7:1e:ec:f3:13:fd:d8:fd:60:cc:1f:77:2c:ac:d6:a9:ae:27: e1:74:48:79:df:84:f4:9e:47:f1:e4:b4:c6:4c:82:2d:ee:9e: 55:d9:95:93:6a:c9:7c:f6:a8:83:7e:ff:d9:fd:46:92:3a:83: 93:de:52:dd:90:33:fe:88:2e:ea:45:5c:b6:e4:ab:e1:db:02: f9:70:6e:40:43:60:92:23:dd:2a:d2:19:96:24:ff:ea:50:a2: 3c:61:38:21:9a:1b:8f:59:1d:47:34:d8:ae:ad:0c:84:f0:c1: 55:9b:fc:53:5f:57:f3:5a:00:ee:6a:cc:6b:a1:2a:a3:27:76: 1a:80:04:79:1b:e4:ef:f4:5d:67:ae:ae:f3:1e:b0:58:00:4f: 5c:bc:a5:9c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJbmb81IjEQpEsqyfasoSpe+KfLMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwODE1MDAyMDU5WhcNMjUwOTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0AzM2FhZTVkN2JhYjEzZGU2NzcyNzk2Mzc2YjcxZWI2ZDM4 NjgxNzk5OGRiMjk0OGRhYzhiZmRmZTNiMmMxMmRkMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHzH13k5qsyL1m2HVlPfWRZnZPbh0MZ/nhU2Oo2xmUH/P6 oSgZE+zkhU2lqskrMiuvuk+jZouLBo9UfnLPuo+ThyIL+kZC6zjxdLpFvJ969vdd 7rS87CExvQLwSVGco1f7pPlc34nU8Iyqfxa64jQqHbdPFPgJ0si6VPR/WbW1h3RF e5lbjwDv62pyMcEz69s/GK2wM3Er2ZAhci945DlXCI8R7+/86y/q5ZPpsfXnC1lS e1L2zTidNaBJs3iUVPyPoXD6zGM1az2aO3FLEmGj0V2znjHCslP2Waq3/0+a8agZ F+PcmiqIve/YFq3hYg9+MBpsAPlT2Nzg1h8dqYnVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUCsshZTj4cRTib+gK9BXYuk07aU8wHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2I1Y2M4NWI2LWZkYzEtNGE4Zi1iMjY2LTYxMWQ3N2NlYmY1YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIX+/wwDQYJKoZIhvcNAQELBQADggEBAFhoZpmvHkF2IlzXKMo6NzuN7bFn Zq4uIALz//HP9pKmfOGegfe9F3PqR7uYj4BcpKS+gpZvNnnSLIVOpZnt162FBuOE J0rQcb6AqTpOnbDdRe1yoMTbfIQcaon928oWcQ3NQa6KvggLwocEWcce7PMT/dj9 YMwfdyys1qmuJ+F0SHnfhPSeR/HktMZMgi3unlXZlZNqyXz2qIN+/9n9RpI6g5Pe Ut2QM/6ILupFXLbkq+HbAvlwbkBDYJIj3SrSGZYk/+pQojxhOCGaG49ZHUc02K6t DITwwVWb/FNfV/NaAO5qzGuhKqMndhqABHkb5O/0XWeurvMesFgAT1y8pZw= -----END CERTIFICATE-----Generated at Sat Aug 23 06:36:25 2025 by rpki-client