$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/f558359a-2a02-4c8e-9a72-7159b2569d66.roa File: f558359a-2a02-4c8e-9a72-7159b2569d66.roa (raw, json) Hash identifier: Pudz7daUfCi5XfeOjMQDfUJyx2WMmfyCqgGuTxzMmvg= Subject key identifier: 49:AD:4E:67:8B:C6:23:AD:4D:B6:2E:C6:BB:D3:C7:D4:D0:23:63:53 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 4BE13FD8F412FCCB585C6AE9A567E19F3E4A5070 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/f558359a-2a02-4c8e-9a72-7159b2569d66.roa Signing time: Fri 17 Oct 2025 00:10:02 +0000 ROA not before: Fri 17 Oct 2025 00:10:02 +0000 ROA not after: Fri 21 Nov 2025 23:59:59 +0000 asID: 8987 IP address blocks: 23.249.210.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:e1:3f:d8:f4:12:fc:cb:58:5c:6a:e9:a5:67:e1:9f:3e:4a:50:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Oct 17 00:10:02 2025 GMT Not After : Nov 21 23:59:59 2025 GMT Subject: serialNumber=44c4c105d098dd221c3d42f5d6e3ca00704780aafcf07851eefbba7fb65f1df1, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a8:bf:21:62:24:a2:49:fa:7d:71:0b:58:21: 90:a4:be:05:f4:e2:1d:ea:65:af:c0:96:5e:b7:f0: 7a:bf:d4:53:9f:3d:06:0b:88:3b:3d:38:97:7b:40: 03:43:57:de:b3:49:dc:3a:43:a3:ce:14:6c:90:58: 8e:45:bd:48:c8:95:9a:27:e2:2c:31:0e:90:27:91: 76:70:1b:03:d6:bb:eb:12:a1:32:6e:d0:16:cc:3e: ab:74:72:fc:c9:cc:77:bd:37:fe:3c:72:32:38:e1: 1e:7e:05:b4:73:62:ef:e8:2c:83:46:87:ec:d7:8f: 8e:5a:9e:0b:99:20:3c:d4:2b:c6:78:83:42:95:98: dc:3f:a0:be:9a:c1:43:ec:d2:67:2c:e1:07:86:a9: 45:55:19:f4:da:36:b6:3b:cc:03:d9:89:4d:5a:d6: 0b:d4:e5:14:d4:4b:d0:72:6e:87:c5:f3:2e:15:d8: aa:27:d1:11:48:32:9a:f1:a6:b9:ad:3b:a2:aa:13: 5f:fe:a0:8b:84:b3:dc:2c:ac:8b:5a:47:35:fb:aa: c6:bd:4f:20:d6:a9:a8:b8:1a:13:62:a1:d7:56:f1: d8:52:17:bf:67:bf:66:0e:d0:b0:13:de:16:de:24: 45:43:9e:54:f2:d6:42:6c:b8:54:84:e2:b9:7d:b9: e0:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:AD:4E:67:8B:C6:23:AD:4D:B6:2E:C6:BB:D3:C7:D4:D0:23:63:53 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/f558359a-2a02-4c8e-9a72-7159b2569d66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.210.0/23 Signature Algorithm: sha256WithRSAEncryption 8f:ed:78:67:c6:b4:81:8d:f9:fe:4b:3b:c3:b2:47:6e:08:91: ae:0e:18:54:9b:9e:31:63:f8:13:45:5c:9d:78:c4:7a:3e:b0: c8:df:16:35:e8:69:06:64:3a:9e:00:f9:92:75:84:72:db:ac: ef:a5:4b:03:17:3a:85:eb:c2:3c:d5:5f:4f:32:4b:1f:a1:a9: 8d:3f:83:c7:db:d3:b4:ef:5f:02:f0:08:de:fc:01:d1:85:38: 1d:a0:1a:e0:fd:c5:d6:ef:d0:28:3a:d3:ec:09:d9:19:18:34: 7a:59:3a:59:00:9f:26:f3:b7:ef:12:7a:9e:c6:e0:bf:77:52: 8b:ef:43:d7:bc:03:8b:47:a4:55:4e:19:1a:5a:21:3a:d9:09: 96:18:94:4c:40:0e:70:6f:a1:82:7d:81:01:e5:2b:92:52:32: 28:d3:69:53:2d:8b:df:4a:fc:af:06:bf:be:43:f1:4d:11:73: a8:1b:8a:24:19:97:cb:84:8b:f7:44:1c:7e:93:40:f4:37:b1: c0:d8:40:d0:a2:7b:d7:1a:e5:cf:ec:23:4e:d2:2f:72:1b:3c: f6:3f:84:55:7d:47:cd:9e:c0:86:5b:84:4b:c7:e8:8a:2c:13: 40:3c:62:11:a8:7f:60:53:6f:7a:02:89:b7:08:cb:50:4c:fd: 08:e8:61:4f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUS+E/2PQS/MtYXGrppWfhnz5KUHAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUxMDE3MDAxMDAyWhcNMjUxMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A0NGM0YzEwNWQwOThkZDIyMWMzZDQyZjVkNmUzY2EwMDcw NDc4MGFhZmNmMDc4NTFlZWZiYmE3ZmI2NWYxZGYxMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDdqL8hYiSiSfp9cQtYIZCkvgX04h3qZa/All638Hq/1FOf PQYLiDs9OJd7QANDV96zSdw6Q6POFGyQWI5FvUjIlZon4iwxDpAnkXZwGwPWu+sS oTJu0BbMPqt0cvzJzHe9N/48cjI44R5+BbRzYu/oLINGh+zXj45anguZIDzUK8Z4 g0KVmNw/oL6awUPs0mcs4QeGqUVVGfTaNrY7zAPZiU1a1gvU5RTUS9BybofF8y4V 2Kon0RFIMprxprmtO6KqE1/+oIuEs9wsrItaRzX7qsa9TyDWqai4GhNioddW8dhS F79nv2YO0LAT3hbeJEVDnlTy1kJsuFSE4rl9ueBpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUSa1OZ4vGI61Nti7Gu9PH1NAjY1MwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2Y1NTgzNTlhLTJhMDItNGM4ZS05YTcyLTcxNTliMjU2OWQ2Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEX+dIwDQYJKoZIhvcNAQELBQADggEBAI/teGfGtIGN+f5LO8OyR24Ika4O GFSbnjFj+BNFXJ14xHo+sMjfFjXoaQZkOp4A+ZJ1hHLbrO+lSwMXOoXrwjzVX08y Sx+hqY0/g8fb07TvXwLwCN78AdGFOB2gGuD9xdbv0Cg60+wJ2RkYNHpZOlkAnybz t+8Sep7G4L93UovvQ9e8A4tHpFVOGRpaITrZCZYYlExADnBvoYJ9gQHlK5JSMijT aVMti99K/K8Gv75D8U0Rc6gbiiQZl8uEi/dEHH6TQPQ3scDYQNCie9ca5c/sI07S L3IbPPY/hFV9R82ewIZbhEvH6IosE0A8YhGof2BTb3oCibcIy1BM/QjoYU8= -----END CERTIFICATE-----Generated at Mon Oct 20 12:41:23 2025 by rpki-client