$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/dce2db93-8fb7-42b9-be56-23f46b5bf4e0.roa File: dce2db93-8fb7-42b9-be56-23f46b5bf4e0.roa (raw, json) Hash identifier: LCfg3Ym2Hn0Nudlr5l8eh/mLOCzbxrog/unnu6nlBQo= Subject key identifier: 83:18:10:32:A2:74:18:69:E4:D2:A6:DB:52:69:E3:1D:65:96:FE:CE Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 5F14F69DA4C8C8B8523165CAA34F2F93315506F6 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/dce2db93-8fb7-42b9-be56-23f46b5bf4e0.roa Signing time: Sat 04 Oct 2025 00:20:05 +0000 ROA not before: Sat 04 Oct 2025 00:20:05 +0000 ROA not after: Sat 08 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 76.223.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:14:f6:9d:a4:c8:c8:b8:52:31:65:ca:a3:4f:2f:93:31:55:06:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Oct 4 00:20:05 2025 GMT Not After : Nov 8 23:59:59 2025 GMT Subject: serialNumber=c6b300f0ea8512ae88bcb70a35ed40580329d97d6f9fe44c618457add05c0a1e, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:1a:74:9c:8c:37:6c:71:c5:46:8a:d3:2f:e2: 1d:56:cd:85:be:4d:ed:aa:0b:45:ff:94:39:c5:26: a9:9c:69:05:a5:33:54:81:97:47:7c:3b:1b:77:d1: d3:69:f4:25:f9:55:17:62:75:28:c9:cf:02:81:83: 09:f2:08:e6:f6:59:00:61:34:c4:73:3c:dd:ed:fc: ca:29:da:10:1e:f1:f1:f8:7e:be:8e:27:86:4a:10: cf:a8:e8:8e:2e:c4:f0:74:cd:04:34:bd:7e:9f:f3: d2:4b:3c:e4:f0:64:91:fb:45:ab:00:b1:ee:6b:20: df:b0:45:12:fa:b4:4c:57:82:d0:16:89:c1:c5:c2: 8d:e3:a2:f7:e6:f6:5d:9f:5b:19:10:63:5d:8c:44: 43:2c:6b:eb:74:aa:86:54:ea:a2:32:9a:8e:f9:4d: d9:95:3e:85:2d:f3:38:eb:60:20:2c:af:ed:a8:ad: fe:7d:2b:e1:92:35:2f:9e:34:7c:14:e6:3b:15:e9: aa:f0:d4:93:0e:ef:07:e7:18:79:92:78:e5:5e:08: a9:db:33:77:17:1c:c3:c5:c2:31:7f:70:2e:8c:75: ec:55:75:20:d9:c5:ed:b7:6e:9f:01:83:fc:a2:06: 09:ae:81:8c:97:41:a6:53:a9:f3:d3:d9:e3:6c:a7: 6f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:18:10:32:A2:74:18:69:E4:D2:A6:DB:52:69:E3:1D:65:96:FE:CE X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/dce2db93-8fb7-42b9-be56-23f46b5bf4e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.223.189.0/24 Signature Algorithm: sha256WithRSAEncryption 61:f2:30:08:94:f4:c6:84:77:5c:45:5a:6c:39:11:60:48:7e: 81:da:c2:7a:75:23:c1:b1:17:f8:49:c7:4e:4e:3d:ee:b9:33: fd:e8:8f:ca:bf:b6:5c:fc:ea:aa:d9:ce:f5:b6:9f:54:40:e6: 2c:d8:01:a5:19:51:cd:3e:5e:be:41:47:80:66:73:87:dd:bf: a4:aa:81:9a:20:b0:d5:21:7d:3f:3d:74:c1:de:73:6f:75:78: 0e:39:0c:f3:fd:76:03:9a:c3:1e:88:82:a5:ef:a2:0b:9f:37: e5:88:bb:a7:33:0b:ec:71:8d:5f:09:7f:6b:9f:77:6e:80:80: 1a:8d:de:5a:4e:f3:3c:20:74:5f:bf:b3:75:ab:e3:86:9b:28: 8a:52:14:26:e2:64:ff:ea:71:3b:84:35:ef:84:74:86:a4:ed: fa:7a:a2:8f:e1:08:7d:93:7a:59:af:b0:48:f8:20:94:a7:31: 40:f0:cf:9b:71:e1:30:4a:cd:8d:56:75:de:29:af:b9:e5:7c: 9f:6e:59:8f:5d:b0:04:58:ab:30:9a:70:ba:9b:05:70:7e:17: 3a:90:13:4b:5d:8c:31:20:f8:73:34:e7:13:98:4b:5a:91:89: e8:89:41:99:9f:79:8f:f4:93:dc:04:22:e5:1c:23:26:ad:45: db:14:32:b0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXxT2naTIyLhSMWXKo08vkzFVBvYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUxMDA0MDAyMDA1WhcNMjUxMTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0BjNmIzMDBmMGVhODUxMmFlODhiY2I3MGEzNWVkNDA1ODAz MjlkOTdkNmY5ZmU0NGM2MTg0NTdhZGQwNWMwYTFlMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCXGnScjDdsccVGitMv4h1WzYW+Te2qC0X/lDnFJqmcaQWl M1SBl0d8Oxt30dNp9CX5VRdidSjJzwKBgwnyCOb2WQBhNMRzPN3t/Mop2hAe8fH4 fr6OJ4ZKEM+o6I4uxPB0zQQ0vX6f89JLPOTwZJH7RasAse5rIN+wRRL6tExXgtAW icHFwo3jovfm9l2fWxkQY12MREMsa+t0qoZU6qIymo75TdmVPoUt8zjrYCAsr+2o rf59K+GSNS+eNHwU5jsV6arw1JMO7wfnGHmSeOVeCKnbM3cXHMPFwjF/cC6MdexV dSDZxe23bp8Bg/yiBgmugYyXQaZTqfPT2eNsp29rAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUgxgQMqJ0GGnk0qbbUmnjHWWW/s4wHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2RjZTJkYjkzLThmYjctNDJiOS1iZTU2LTIzZjQ2YjViZjRlMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABM370wDQYJKoZIhvcNAQELBQADggEBAGHyMAiU9MaEd1xFWmw5EWBIfoHa wnp1I8GxF/hJx05OPe65M/3oj8q/tlz86qrZzvW2n1RA5izYAaUZUc0+Xr5BR4Bm c4fdv6SqgZogsNUhfT89dMHec291eA45DPP9dgOawx6IgqXvogufN+WIu6czC+xx jV8Jf2ufd26AgBqN3lpO8zwgdF+/s3Wr44abKIpSFCbiZP/qcTuENe+EdIak7fp6 oo/hCH2TelmvsEj4IJSnMUDwz5tx4TBKzY1Wdd4pr7nlfJ9uWY9dsARYqzCacLqb BXB+FzqQE0tdjDEg+HM05xOYS1qRieiJQZmfeY/0k9wEIuUcIyatRdsUMrA= -----END CERTIFICATE-----Generated at Mon Oct 20 18:04:38 2025 by rpki-client