$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/dbab5aee-69a4-4b7c-8c0f-ab0177caf233.roa File: dbab5aee-69a4-4b7c-8c0f-ab0177caf233.roa (raw, json) Hash identifier: 3zqr2VQXCwqq1biUTi6dpcfb6FqyREir4JaRiq44lb0= Subject key identifier: 53:E7:81:19:67:56:12:C3:D4:C1:8B:0E:7E:FC:42:89:B8:73:F3:8A Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 798915F81D7611301EA842D79A47114213AAA9F7 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/dbab5aee-69a4-4b7c-8c0f-ab0177caf233.roa Signing time: Fri 17 Oct 2025 00:10:05 +0000 ROA not before: Fri 17 Oct 2025 00:10:05 +0000 ROA not after: Fri 21 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.251.242.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:89:15:f8:1d:76:11:30:1e:a8:42:d7:9a:47:11:42:13:aa:a9:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Oct 17 00:10:05 2025 GMT Not After : Nov 21 23:59:59 2025 GMT Subject: serialNumber=34c693e4b2ca7225c1377d8eb7b8860d0a0105f579269e117053a77510e16fd2, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:7b:fb:9d:4e:b0:42:8c:51:18:b8:63:26:b2: 38:5b:c2:73:b1:f2:79:4c:8a:38:e2:f1:e0:33:b6: fd:93:44:49:10:87:17:df:53:eb:04:06:34:cb:5f: 7f:55:d4:b3:dc:37:76:4a:ba:fa:57:ee:ed:4d:1a: b5:d1:1f:e1:42:74:0a:21:6e:5a:8d:b7:b6:c8:da: b5:85:76:06:47:9c:ce:00:ed:93:4c:fe:fb:0c:0a: 88:27:84:ca:60:d4:dd:b1:ec:6f:70:d6:b3:6e:19: 0f:a0:e6:e2:34:ef:4d:cd:a7:62:75:e4:84:ea:fc: e8:de:c5:d8:69:cd:af:ae:a8:a2:c0:72:83:7b:7c: a9:fc:2a:a9:dc:45:3c:c2:6b:ad:df:f0:53:27:07: 19:06:0b:74:c1:9b:ff:e3:e3:17:a3:74:f1:33:22: be:81:d5:b7:04:32:6b:45:87:b1:76:de:71:aa:61: b4:04:9d:1c:36:78:67:b8:a5:fc:80:91:e4:68:a7: 18:8f:92:4a:9b:5d:04:3a:02:b3:9e:05:6b:fb:4c: 3a:ac:1e:4d:55:af:92:43:dc:f7:e1:62:7c:38:1c: 2e:0e:fd:6f:bf:2c:5a:30:17:23:89:17:fe:b1:0e: 1d:64:da:d5:6d:70:a1:c0:62:d9:83:50:c6:56:9c: 8d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:E7:81:19:67:56:12:C3:D4:C1:8B:0E:7E:FC:42:89:B8:73:F3:8A X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/dbab5aee-69a4-4b7c-8c0f-ab0177caf233.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.251.242.0/23 Signature Algorithm: sha256WithRSAEncryption 2d:2b:bb:9f:2c:2f:e5:87:2d:4d:c9:3f:73:63:dd:c6:08:1f: 71:62:50:81:c1:44:89:d5:39:17:12:52:40:32:8c:6d:06:d5: 3e:0f:42:8d:39:a9:d4:0b:8c:af:d7:94:97:91:54:62:06:d3: 35:03:b7:00:41:44:12:29:82:77:1f:6c:0f:79:68:89:d4:8a: e8:f0:d4:8a:1d:70:13:2b:d9:d6:55:d1:e0:08:95:41:d9:69: 5f:60:53:93:fc:c3:f6:36:af:11:3c:5f:51:d7:ef:79:9c:a3: 49:49:d8:13:d0:f5:e7:89:71:99:e3:6d:85:db:76:28:48:80: af:53:16:4a:49:3a:28:d9:27:06:c0:ae:39:19:f7:35:c0:75: 66:3c:e6:8d:30:c6:a6:f6:9c:f5:20:f3:c6:a8:9c:6c:32:51: 42:7f:c3:b5:5e:4a:b1:91:e4:46:d4:77:e4:3d:91:4a:af:98: b3:3b:a6:38:46:b9:e5:c8:18:86:2d:60:20:d9:cf:92:7b:7f: d2:11:ea:46:7e:cc:91:b2:09:da:4f:8d:28:fe:ec:c9:d0:79: f1:2f:c8:83:16:70:3c:19:b5:45:67:fa:6d:e9:35:75:7e:fa: 4a:37:3d:c9:22:c6:e0:4c:88:ae:57:2c:de:e5:66:83:22:ec: 1c:0e:b0:7c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUeYkV+B12ETAeqELXmkcRQhOqqfcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUxMDE3MDAxMDA1WhcNMjUxMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AzNGM2OTNlNGIyY2E3MjI1YzEzNzdkOGViN2I4ODYwZDBh MDEwNWY1NzkyNjllMTE3MDUzYTc3NTEwZTE2ZmQyMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDXe/udTrBCjFEYuGMmsjhbwnOx8nlMijji8eAztv2TREkQ hxffU+sEBjTLX39V1LPcN3ZKuvpX7u1NGrXRH+FCdAohblqNt7bI2rWFdgZHnM4A 7ZNM/vsMCognhMpg1N2x7G9w1rNuGQ+g5uI0703Np2J15ITq/Ojexdhpza+uqKLA coN7fKn8KqncRTzCa63f8FMnBxkGC3TBm//j4xejdPEzIr6B1bcEMmtFh7F23nGq YbQEnRw2eGe4pfyAkeRopxiPkkqbXQQ6ArOeBWv7TDqsHk1Vr5JD3PfhYnw4HC4O /W+/LFowFyOJF/6xDh1k2tVtcKHAYtmDUMZWnI2LAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUU+eBGWdWEsPUwYsOfvxCibhz84owHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2RiYWI1YWVlLTY5YTQtNGI3Yy04YzBmLWFiMDE3N2NhZjIzMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEX+/IwDQYJKoZIhvcNAQELBQADggEBAC0ru58sL+WHLU3JP3Nj3cYIH3Fi UIHBRInVORcSUkAyjG0G1T4PQo05qdQLjK/XlJeRVGIG0zUDtwBBRBIpgncfbA95 aInUiujw1IodcBMr2dZV0eAIlUHZaV9gU5P8w/Y2rxE8X1HX73mco0lJ2BPQ9eeJ cZnjbYXbdihIgK9TFkpJOijZJwbArjkZ9zXAdWY85o0wxqb2nPUg88aonGwyUUJ/ w7VeSrGR5EbUd+Q9kUqvmLM7pjhGueXIGIYtYCDZz5J7f9IR6kZ+zJGyCdpPjSj+ 7MnQefEvyIMWcDwZtUVn+m3pNXV++ko3PckixuBMiK5XLN7lZoMi7BwOsHw= -----END CERTIFICATE-----Generated at Mon Oct 20 18:07:42 2025 by rpki-client