$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/d61aefde-15db-4326-8486-f4cd98992cbc.roa File: d61aefde-15db-4326-8486-f4cd98992cbc.roa (raw, json) Hash identifier: P21y8c84qQhMKrNc6VUD5TTfkJ/tgANIJSabogb7700= Subject key identifier: 3A:23:C6:02:D4:01:E6:A1:21:29:61:1B:D6:4C:DC:BD:7A:C7:B8:9D Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 5FF98BB8069F9F79095F59B9C5A3A64BED382262 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/d61aefde-15db-4326-8486-f4cd98992cbc.roa Signing time: Fri 15 Aug 2025 00:20:20 +0000 ROA not before: Fri 15 Aug 2025 00:20:20 +0000 ROA not after: Fri 19 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.249.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:f9:8b:b8:06:9f:9f:79:09:5f:59:b9:c5:a3:a6:4b:ed:38:22:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Aug 15 00:20:20 2025 GMT Not After : Sep 19 23:59:59 2025 GMT Subject: serialNumber=69a00d8282070e4e079cd5ec3248a59a09f6f3d27618ee233b6e5762e2457fd6, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:40:92:69:b0:49:11:a9:df:f7:75:36:d9:71: 75:29:62:c6:b4:43:80:6e:a5:fc:43:d1:d2:a5:5e: 26:c5:92:f8:f1:fc:9a:2d:71:7a:1d:58:7d:fe:cf: 1b:d2:35:0f:fa:f7:03:3f:7c:ed:65:2e:9c:a5:35: ae:eb:fd:27:63:01:83:25:2e:a5:e1:e2:50:57:52: 6e:1d:20:5d:ff:09:53:e5:62:5d:e2:9f:a1:c4:1e: 90:09:26:8a:87:8d:7c:93:72:c9:d9:03:c0:f0:61: 36:c1:ff:9f:63:33:ef:4e:98:47:60:bc:df:4c:8e: 0d:ce:7f:6e:02:30:c0:be:e0:4b:c2:cc:84:29:15: 5e:d3:57:1a:58:c2:9d:e6:76:11:9c:69:50:6e:96: 56:d2:b5:62:b4:4c:28:ee:be:9f:24:55:f8:28:04: 21:19:8d:80:5a:17:3b:9a:60:32:99:33:42:ec:9b: 94:d3:d1:da:0d:5a:5b:6e:ec:ef:53:f7:79:f5:19: f2:22:11:e4:15:00:06:48:9a:4e:0d:da:5f:7b:93: e3:f4:c8:85:93:9e:3c:d4:cb:22:be:3c:d9:1f:c6: 9b:fe:03:69:3c:4b:08:ef:fa:50:38:ed:37:43:7a: 67:ff:89:c3:1a:8e:c3:58:7d:86:e0:4e:f8:b7:8a: 6a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:23:C6:02:D4:01:E6:A1:21:29:61:1B:D6:4C:DC:BD:7A:C7:B8:9D X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/d61aefde-15db-4326-8486-f4cd98992cbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.223.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:16:60:16:b4:ce:28:fb:25:f9:07:a2:9f:f2:07:b6:28:3b: 36:97:ba:0f:22:8a:58:db:4d:5d:8e:4d:dc:82:80:86:7e:a7: d5:5f:e5:ac:b9:89:c9:4d:bd:73:97:97:5a:10:27:79:71:e2: 13:18:b1:ad:59:83:cd:7b:ee:f3:60:55:c3:74:ef:40:3f:57: 78:bb:1a:67:e8:d2:f4:7d:72:ae:cb:04:2b:b8:c6:47:45:8a: 8d:b3:2b:87:c5:94:ff:c8:5d:9d:06:74:c4:20:a3:a9:55:16: a9:b2:bc:01:e8:e0:7a:94:92:c7:42:58:1e:84:b7:2d:11:cb: fb:27:67:6a:ee:2e:97:5f:56:84:31:51:71:17:a4:cc:d3:05: 9d:24:6a:94:78:3d:7b:0f:a9:02:f6:08:d2:d2:cf:4c:ed:80: 61:ce:bc:3d:2a:38:67:99:ef:c0:9d:1e:2e:79:ce:78:cd:75: fc:a1:87:8b:1d:28:df:13:6a:3f:f3:59:3d:19:3c:c4:5e:58: 2c:a6:d9:c5:40:72:89:20:a3:0b:47:e6:fe:bf:dd:f3:d0:f9: b8:4e:52:54:f2:03:40:24:78:aa:f7:18:7f:ff:eb:60:11:8d: ed:53:85:ce:b4:45:10:25:fa:b9:e6:8b:9b:62:93:3c:37:8a: b6:58:40:2c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUX/mLuAafn3kJX1m5xaOmS+04ImIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwODE1MDAyMDIwWhcNMjUwOTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A2OWEwMGQ4MjgyMDcwZTRlMDc5Y2Q1ZWMzMjQ4YTU5YTA5 ZjZmM2QyNzYxOGVlMjMzYjZlNTc2MmUyNDU3ZmQ2MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxQJJpsEkRqd/3dTbZcXUpYsa0Q4BupfxD0dKlXibFkvjx /JotcXodWH3+zxvSNQ/69wM/fO1lLpylNa7r/SdjAYMlLqXh4lBXUm4dIF3/CVPl Yl3in6HEHpAJJoqHjXyTcsnZA8DwYTbB/59jM+9OmEdgvN9Mjg3Of24CMMC+4EvC zIQpFV7TVxpYwp3mdhGcaVBullbStWK0TCjuvp8kVfgoBCEZjYBaFzuaYDKZM0Ls m5TT0doNWltu7O9T93n1GfIiEeQVAAZImk4N2l97k+P0yIWTnjzUyyK+PNkfxpv+ A2k8Swjv+lA47TdDemf/icMajsNYfYbgTvi3imohAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUOiPGAtQB5qEhKWEb1kzcvXrHuJ0wHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2Q2MWFlZmRlLTE1ZGItNDMyNi04NDg2LWY0Y2Q5ODk5MmNiYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX+d8wDQYJKoZIhvcNAQELBQADggEBAH0WYBa0zij7JfkHop/yB7YoOzaX ug8iiljbTV2OTdyCgIZ+p9Vf5ay5iclNvXOXl1oQJ3lx4hMYsa1Zg8177vNgVcN0 70A/V3i7Gmfo0vR9cq7LBCu4xkdFio2zK4fFlP/IXZ0GdMQgo6lVFqmyvAHo4HqU ksdCWB6Ety0Ry/snZ2ruLpdfVoQxUXEXpMzTBZ0kapR4PXsPqQL2CNLSz0ztgGHO vD0qOGeZ78CdHi55znjNdfyhh4sdKN8Taj/zWT0ZPMReWCym2cVAcokgowtH5v6/ 3fPQ+bhOUlTyA0AkeKr3GH//62ARje1Thc60RRAl+rnmi5tikzw3irZYQCw= -----END CERTIFICATE-----Generated at Sat Aug 23 08:09:15 2025 by rpki-client