$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/c09e0f25-1200-46ec-b6a7-aa4a9764d8c9.roa File: c09e0f25-1200-46ec-b6a7-aa4a9764d8c9.roa (raw, json) Hash identifier: hPaRHKDOevUUdmN6i1as4D/Fws8HYVKGunQD4nPJ8VQ= Subject key identifier: CE:0D:9A:48:A3:C4:16:D9:F8:21:ED:04:56:8D:B2:8A:7F:6B:BA:EC Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 143A7471BB12A0E68977D74FC983957062BE9693 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/c09e0f25-1200-46ec-b6a7-aa4a9764d8c9.roa Signing time: Fri 15 Aug 2025 00:20:17 +0000 ROA not before: Fri 15 Aug 2025 00:20:17 +0000 ROA not after: Fri 19 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.249.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:3a:74:71:bb:12:a0:e6:89:77:d7:4f:c9:83:95:70:62:be:96:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Aug 15 00:20:17 2025 GMT Not After : Sep 19 23:59:59 2025 GMT Subject: serialNumber=68a1a5b6ceca6be251c89cde84c70cc1b6339ea47a857ac6433e85da9f44e598, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:91:8f:13:45:de:cd:d9:e6:69:3b:28:c2:0e: 61:6b:39:78:76:cf:fb:64:33:de:23:a5:bc:65:e9: 1b:be:25:b3:2d:60:5e:d3:82:03:3b:b3:12:e3:37: 0a:0e:6a:88:57:67:16:ef:3a:20:9d:3d:4e:dd:45: cb:2c:5c:85:93:ea:11:77:32:b2:c6:56:be:43:93: 80:95:14:dc:7d:3c:8b:10:f7:2f:be:6e:df:88:a5: 1a:f7:a4:17:d5:d9:3d:ca:22:14:74:fb:0a:d1:c3: da:78:ea:b7:fe:c8:ba:04:a1:44:ae:4f:14:6f:7f: c6:60:3b:27:09:4c:a6:4a:ae:f8:a5:72:8c:92:d7: 16:14:51:02:4d:7d:4e:ce:1e:6a:11:4d:25:4f:a3: 10:16:05:18:f7:93:65:67:12:87:ae:7e:18:15:de: eb:04:82:7e:26:59:dd:3d:af:fa:db:61:cd:13:39: 53:8e:6f:a2:a4:65:11:ca:54:81:b0:0b:5a:4e:c0: e4:c2:fb:db:ff:4c:92:45:c0:2c:00:86:47:28:27: 1b:86:5f:f5:e5:8b:83:c8:53:89:8d:d6:0e:6a:0e: ba:60:80:ae:40:9c:f9:10:12:2a:88:d4:61:3a:d1: 3b:51:1a:9d:96:23:14:7b:a8:6e:d0:c9:18:d5:31: 06:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:0D:9A:48:A3:C4:16:D9:F8:21:ED:04:56:8D:B2:8A:7F:6B:BA:EC X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/c09e0f25-1200-46ec-b6a7-aa4a9764d8c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.215.0/24 Signature Algorithm: sha256WithRSAEncryption 36:0c:3d:e7:09:29:73:2d:e8:9d:87:bf:8b:4a:ea:9c:e6:71: f2:d6:40:3a:cb:97:df:62:bd:d9:43:6b:ea:ea:9e:f6:46:a6: f9:75:83:d5:b3:f5:d4:0e:e2:14:f3:3f:cb:d8:cd:59:f9:8c: ab:a1:f8:15:00:b0:25:4c:52:56:03:ec:9b:8d:24:d6:43:c5: c3:4b:d8:f7:8f:d2:ef:47:5b:bd:0c:61:43:89:6d:16:f8:36: 01:25:b0:65:5e:76:fe:47:70:71:cb:3c:51:e1:a7:12:16:15: c7:29:34:ae:31:51:73:db:46:df:f3:59:b1:a4:5c:ac:82:5c: 23:35:bb:01:7f:af:d4:b2:e7:45:fe:f5:5e:50:88:db:3c:7a: 8a:78:fb:b8:65:ca:00:ed:2e:2b:87:ca:06:2f:ad:ac:a2:44: ad:75:f4:a7:61:bb:00:8c:06:b2:fc:db:02:7d:58:9f:40:be: 0c:43:a3:57:e8:ca:87:6f:3c:77:90:12:73:76:b4:5b:1e:09: 06:e7:53:68:d4:bb:7c:d6:70:f9:1c:4a:c9:c0:e6:20:29:78: 20:e4:7e:cb:cd:91:0e:be:df:8f:76:ca:24:63:71:2f:39:a3: f5:e7:45:6d:ae:aa:5d:4d:94:e6:9a:2a:b9:99:27:cd:c0:df: f0:e9:38:f8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFDp0cbsSoOaJd9dPyYOVcGK+lpMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwODE1MDAyMDE3WhcNMjUwOTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A2OGExYTViNmNlY2E2YmUyNTFjODljZGU4NGM3MGNjMWI2 MzM5ZWE0N2E4NTdhYzY0MzNlODVkYTlmNDRlNTk4MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDkY8TRd7N2eZpOyjCDmFrOXh2z/tkM94jpbxl6Ru+JbMt YF7TggM7sxLjNwoOaohXZxbvOiCdPU7dRcssXIWT6hF3MrLGVr5Dk4CVFNx9PIsQ 9y++bt+IpRr3pBfV2T3KIhR0+wrRw9p46rf+yLoEoUSuTxRvf8ZgOycJTKZKrvil coyS1xYUUQJNfU7OHmoRTSVPoxAWBRj3k2VnEoeufhgV3usEgn4mWd09r/rbYc0T OVOOb6KkZRHKVIGwC1pOwOTC+9v/TJJFwCwAhkcoJxuGX/Xli4PIU4mN1g5qDrpg gK5AnPkQEiqI1GE60TtRGp2WIxR7qG7QyRjVMQZhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUzg2aSKPEFtn4Ie0EVo2yin9ruuwwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2MwOWUwZjI1LTEyMDAtNDZlYy1iNmE3LWFhNGE5NzY0ZDhjOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX+dcwDQYJKoZIhvcNAQELBQADggEBADYMPecJKXMt6J2Hv4tK6pzmcfLW QDrLl99ivdlDa+rqnvZGpvl1g9Wz9dQO4hTzP8vYzVn5jKuh+BUAsCVMUlYD7JuN JNZDxcNL2PeP0u9HW70MYUOJbRb4NgElsGVedv5HcHHLPFHhpxIWFccpNK4xUXPb Rt/zWbGkXKyCXCM1uwF/r9Sy50X+9V5QiNs8eop4+7hlygDtLiuHygYvrayiRK11 9KdhuwCMBrL82wJ9WJ9AvgxDo1foyodvPHeQEnN2tFseCQbnU2jUu3zWcPkcSsnA 5iApeCDkfsvNkQ6+3492yiRjcS85o/XnRW2uql1NlOaaKrmZJ83A3/DpOPg= -----END CERTIFICATE-----Generated at Sat Aug 23 08:21:59 2025 by rpki-client