$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/efff1c41-4813-4726-a794-2bd64d641531.roa File: efff1c41-4813-4726-a794-2bd64d641531.roa (raw, json) Hash identifier: G/HijWBXanz6vVxHtee3cyHVdrJ7qogeCAFMB/PBCSQ= Subject key identifier: 08:65:37:40:48:8D:9A:FB:CA:92:47:8E:08:E7:4D:A8:88:76:70:A4 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 47D0586175AAA00229E74CB94CBE5A2138A83737 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/efff1c41-4813-4726-a794-2bd64d641531.roa Signing time: Sat 04 Oct 2025 00:20:35 +0000 ROA not before: Sat 04 Oct 2025 00:20:35 +0000 ROA not after: Sat 08 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.251.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:d0:58:61:75:aa:a0:02:29:e7:4c:b9:4c:be:5a:21:38:a8:37:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Oct 4 00:20:35 2025 GMT Not After : Nov 8 23:59:59 2025 GMT Subject: serialNumber=0f25ad746eb01ef990b848031e58d6931dee4a0be7664c340a57e19843075888, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d2:05:5c:51:aa:07:6c:d6:5d:89:85:16:b5: f1:d9:84:84:2b:0d:ce:c9:f9:0f:ee:f8:06:dc:4a: 23:a7:5a:bf:07:66:9c:c1:fc:27:c1:8b:57:e6:d8: 45:88:aa:92:82:05:48:f1:08:79:c5:00:b4:b8:ee: 08:1f:47:02:16:92:92:8c:2e:b2:56:f0:ec:0a:91: 3e:7f:14:0d:9a:11:97:b9:e5:69:0f:8f:f9:24:ed: 92:43:ff:ad:46:c6:b4:eb:5f:13:51:16:74:fa:14: 11:a2:94:9c:94:9b:d8:45:40:db:d5:d7:43:75:35: 20:e4:f0:3e:2c:0a:2c:cc:d8:65:fb:6d:ad:b8:fd: 20:60:fe:b7:71:79:c9:fe:73:2b:ed:79:eb:e1:de: 59:55:92:20:1d:d2:f1:d7:3d:d2:04:2a:7b:a3:9e: ef:58:7b:c7:74:b3:a3:4a:00:bd:0a:63:36:53:8f: c8:67:c2:40:1d:a8:a4:7b:5e:db:f4:ab:79:52:7f: 9a:8f:fe:f4:9c:2c:06:da:6c:cb:27:00:02:51:1b: c6:db:a0:14:c5:ac:6b:4c:d5:53:b6:75:75:7c:ef: a5:5f:e5:05:89:99:fb:5b:7a:47:ae:04:11:53:13: 4e:d1:0b:4d:a8:ad:44:c3:13:48:80:cc:38:4d:b6: 79:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:65:37:40:48:8D:9A:FB:CA:92:47:8E:08:E7:4D:A8:88:76:70:A4 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/efff1c41-4813-4726-a794-2bd64d641531.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.251.235.0/24 Signature Algorithm: sha256WithRSAEncryption 37:f6:9f:de:75:8d:95:20:f8:4f:4e:4f:34:c4:eb:1f:fd:fe: ff:6c:a8:ad:7c:23:a6:d1:f5:62:b5:da:77:67:b7:35:4f:bd: 3e:b5:73:8b:d3:30:65:24:52:2a:91:17:cd:20:cb:1f:55:d5: ef:ba:e7:52:41:78:e4:53:db:af:b7:c5:40:2f:a1:fa:01:d9: 1c:e2:17:06:be:61:d9:3f:de:27:cf:86:d9:a7:59:db:01:04: a2:10:cf:61:14:2b:1b:57:49:28:bf:0c:ac:e7:b0:c9:e9:c7: 0e:16:98:92:ce:f0:d9:e0:45:f0:b9:6c:56:c8:aa:cd:59:bc: a6:18:d1:a6:cc:cf:64:00:d4:f2:8c:0f:48:de:ec:28:b5:0a: 93:ac:5e:ab:cb:1d:fe:79:fa:1c:e5:3a:2c:5a:3e:0b:e6:10: 06:b4:75:7d:9f:0c:99:b2:5c:0d:2d:6d:c9:b8:9b:18:59:a3: 50:15:24:6d:af:64:82:52:e8:11:a8:80:90:d9:87:34:05:cb: 80:38:bb:67:05:5b:63:ca:f9:14:fb:85:97:68:75:00:d9:78: 95:53:c1:1c:f3:22:ae:9e:54:9b:22:0d:30:94:28:87:ed:7e: 40:67:36:e7:80:ef:f5:b3:98:c2:db:ab:2e:e9:d7:5f:92:d9: 85:8c:8c:64 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUR9BYYXWqoAIp50y5TL5aITioNzcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUxMDA0MDAyMDM1WhcNMjUxMTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0AwZjI1YWQ3NDZlYjAxZWY5OTBiODQ4MDMxZTU4ZDY5MzFk ZWU0YTBiZTc2NjRjMzQwYTU3ZTE5ODQzMDc1ODg4MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC70gVcUaoHbNZdiYUWtfHZhIQrDc7J+Q/u+AbcSiOnWr8H ZpzB/CfBi1fm2EWIqpKCBUjxCHnFALS47ggfRwIWkpKMLrJW8OwKkT5/FA2aEZe5 5WkPj/kk7ZJD/61GxrTrXxNRFnT6FBGilJyUm9hFQNvV10N1NSDk8D4sCizM2GX7 ba24/SBg/rdxecn+cyvteevh3llVkiAd0vHXPdIEKnujnu9Ye8d0s6NKAL0KYzZT j8hnwkAdqKR7Xtv0q3lSf5qP/vScLAbabMsnAAJRG8bboBTFrGtM1VO2dXV876Vf 5QWJmftbekeuBBFTE07RC02orUTDE0iAzDhNtnlnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUCGU3QEiNmvvKkkeOCOdNqIh2cKQwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2VmZmYxYzQxLTQ4MTMtNDcyNi1hNzk0LTJiZDY0ZDY0MTUzMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX++swDQYJKoZIhvcNAQELBQADggEBADf2n951jZUg+E9OTzTE6x/9/v9s qK18I6bR9WK12ndntzVPvT61c4vTMGUkUiqRF80gyx9V1e+651JBeORT26+3xUAv ofoB2RziFwa+Ydk/3ifPhtmnWdsBBKIQz2EUKxtXSSi/DKznsMnpxw4WmJLO8Nng RfC5bFbIqs1ZvKYY0abMz2QA1PKMD0je7Ci1CpOsXqvLHf55+hzlOixaPgvmEAa0 dX2fDJmyXA0tbcm4mxhZo1AVJG2vZIJS6BGogJDZhzQFy4A4u2cFW2PK+RT7hZdo dQDZeJVTwRzzIq6eVJsiDTCUKIftfkBnNueA7/WzmMLbqy7p11+S2YWMjGQ= -----END CERTIFICATE-----Generated at Mon Oct 20 13:13:12 2025 by rpki-client