$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3754532b-2417-490e-8cb4-26b8fc034925.roa File: 3754532b-2417-490e-8cb4-26b8fc034925.roa (raw, json) Hash identifier: ZO/d1awrwwD/8CX4x4M6YMlNmi9pIQStFhjCvvT5Zbo= Subject key identifier: C7:7F:2C:BD:0E:5A:1D:9E:65:8E:B7:EC:BB:E2:5C:C5:89:7F:B8:03 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 25B152EA160C55C047CFAA9E2CF317C96B7F0C6E Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3754532b-2417-490e-8cb4-26b8fc034925.roa Signing time: Wed 29 Oct 2025 00:10:04 +0000 ROA not before: Wed 29 Oct 2025 00:10:04 +0000 ROA not after: Wed 03 Dec 2025 23:59:59 +0000 asID: 8987 IP address blocks: 23.249.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:b1:52:ea:16:0c:55:c0:47:cf:aa:9e:2c:f3:17:c9:6b:7f:0c:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Oct 29 00:10:04 2025 GMT Not After : Dec 3 23:59:59 2025 GMT Subject: serialNumber=5d1c8a766b9d3c9c6eec03b8c5c7cf8a597dae7118875998bb40b065aa57f0a6, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:bd:51:c7:bb:34:19:d3:56:3c:6c:a7:4b:11: a6:be:43:62:52:98:4b:fc:e5:1f:8e:15:19:30:2b: 1e:40:f2:71:92:3d:97:ca:27:f8:8e:64:cf:48:25: aa:12:f5:9a:46:1d:78:d1:3b:cc:ba:cc:25:f5:4f: 1a:38:c5:2c:a1:4c:a1:30:01:70:f2:f4:72:6f:d2: 1f:33:dc:b6:da:4f:14:e1:d7:c6:12:37:6e:64:31: 6e:fa:d8:bd:33:69:e7:b9:34:c2:fb:04:06:29:2b: b8:6a:90:f9:0e:26:7c:7b:b7:f4:8e:ca:5b:7e:13: 55:66:5d:af:58:cf:3a:16:29:d3:50:3b:fa:65:77: 07:95:09:4f:f4:c0:58:1e:22:0f:af:69:48:a5:39: 18:3d:34:34:db:ae:45:28:6b:ba:79:30:5d:2c:07: 7e:11:05:73:79:cd:69:40:98:e8:59:bb:35:b9:cd: 86:d7:18:34:7f:67:6a:29:b6:87:2c:1f:17:1a:55: d3:38:6f:ec:39:4e:7e:a7:02:3a:0f:e2:6f:05:26: 13:f2:66:cc:c9:01:24:05:57:13:42:41:27:2a:81: 74:92:56:71:e9:96:4d:1a:d2:8b:0a:9c:3b:29:44: ae:83:e2:ae:66:4c:b4:9d:3e:f9:ff:6b:1f:70:4d: 47:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:7F:2C:BD:0E:5A:1D:9E:65:8E:B7:EC:BB:E2:5C:C5:89:7F:B8:03 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3754532b-2417-490e-8cb4-26b8fc034925.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.212.0/24 Signature Algorithm: sha256WithRSAEncryption 78:00:08:f1:5b:48:1f:b6:f6:9e:35:a2:8b:dd:2a:89:35:c5: bb:ff:e9:60:41:63:8a:31:0f:62:31:60:a1:09:cf:27:68:01: 9b:06:12:d0:02:ad:2d:6f:f0:97:e1:4a:32:19:48:5e:58:5f: 02:56:e5:d5:70:d3:06:1d:25:df:be:c3:35:64:6b:21:04:04: b7:b9:9d:de:22:ed:9e:ab:9c:ab:5c:52:f9:c6:06:48:2a:42: b1:9a:b7:fe:56:b3:ff:07:f3:a6:49:02:2a:0f:4b:64:4f:2f: 1f:89:94:20:b3:03:b2:7c:d4:bd:d8:7c:99:11:54:da:d5:fa: df:73:4b:86:07:dd:64:63:99:26:12:8e:ff:fd:f1:d3:13:9d: 84:47:9e:c7:08:82:97:b4:e7:7f:1d:d6:a7:22:ab:1f:a9:b2: 4d:e7:d8:90:9d:08:94:4c:90:99:31:d8:3a:b0:c1:ae:0b:99: 00:77:f6:23:e2:f8:4e:e5:08:f6:13:12:a9:e7:4a:f7:16:a4: 65:32:28:7b:f7:16:89:73:0e:29:8d:7c:34:3f:a8:82:ca:c6: 42:08:ec:eb:6e:19:34:e8:c0:83:61:c9:44:ec:dd:d3:4b:d9: 4e:7b:82:cd:9d:8d:06:27:90:08:6c:51:59:10:1b:68:fa:e4: 05:7c:01:78 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJbFS6hYMVcBHz6qeLPMXyWt/DG4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUxMDI5MDAxMDA0WhcNMjUxMjAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZDFjOGE3NjZiOWQzYzljNmVlYzAzYjhjNWM3Y2Y4YTU5 N2RhZTcxMTg4NzU5OThiYjQwYjA2NWFhNTdmMGE2MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDgvVHHuzQZ01Y8bKdLEaa+Q2JSmEv85R+OFRkwKx5A8nGS PZfKJ/iOZM9IJaoS9ZpGHXjRO8y6zCX1Txo4xSyhTKEwAXDy9HJv0h8z3LbaTxTh 18YSN25kMW762L0zaee5NML7BAYpK7hqkPkOJnx7t/SOylt+E1VmXa9YzzoWKdNQ O/pldweVCU/0wFgeIg+vaUilORg9NDTbrkUoa7p5MF0sB34RBXN5zWlAmOhZuzW5 zYbXGDR/Z2optocsHxcaVdM4b+w5Tn6nAjoP4m8FJhPyZszJASQFVxNCQScqgXSS VnHplk0a0osKnDspRK6D4q5mTLSdPvn/ax9wTUezAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUx38svQ5aHZ5ljrfsu+JcxYl/uAMwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzM3NTQ1MzJiLTI0MTctNDkwZS04Y2I0LTI2YjhmYzAzNDkyNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX+dQwDQYJKoZIhvcNAQELBQADggEBAHgACPFbSB+29p41oovdKok1xbv/ 6WBBY4oxD2IxYKEJzydoAZsGEtACrS1v8JfhSjIZSF5YXwJW5dVw0wYdJd++wzVk ayEEBLe5nd4i7Z6rnKtcUvnGBkgqQrGat/5Ws/8H86ZJAioPS2RPLx+JlCCzA7J8 1L3YfJkRVNrV+t9zS4YH3WRjmSYSjv/98dMTnYRHnscIgpe0538d1qciqx+psk3n 2JCdCJRMkJkx2Dqwwa4LmQB39iPi+E7lCPYTEqnnSvcWpGUyKHv3FolzDimNfDQ/ qILKxkII7OtuGTTowINhyUTs3dNL2U57gs2djQYnkAhsUVkQG2j65AV8AXg= -----END CERTIFICATE-----Generated at Wed Nov 5 05:07:44 2025 by rpki-client