$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5dab641b-24fb-48f2-8b71-57a07d630894.roa File: 5dab641b-24fb-48f2-8b71-57a07d630894.roa (raw, json) Hash identifier: aSXnqx4b3XrCN1dFr7D5p0NeN3be0UHHzLqhzUJX3QE= Subject key identifier: 07:C8:4F:C3:46:DF:10:84:C2:F0:A4:82:CD:97:F3:7A:63:92:FE:64 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 7B7987B9D9E32CC16F3C0EAF6E9D2454A169B6C2 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5dab641b-24fb-48f2-8b71-57a07d630894.roa Signing time: Wed 29 Oct 2025 00:20:07 +0000 ROA not before: Wed 29 Oct 2025 00:20:07 +0000 ROA not after: Wed 03 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.251.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:79:87:b9:d9:e3:2c:c1:6f:3c:0e:af:6e:9d:24:54:a1:69:b6:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Oct 29 00:20:07 2025 GMT Not After : Dec 3 23:59:59 2025 GMT Subject: serialNumber=ef17be142903f8eb1fb04b67d6f3d1e95adacdeedd88363e2053a1c72772e203, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:66:c7:ed:7f:66:6d:38:ef:a3:a9:fc:25:c2: 3e:f4:74:c9:7c:46:96:6b:f9:60:44:6d:f7:9e:62: 89:39:0d:25:a8:54:8e:70:de:b7:fa:d3:53:cf:fd: b1:fd:8e:51:1a:6a:0e:c8:cf:49:90:65:d4:73:55: 5b:c8:46:ed:7b:78:69:86:8f:b6:c4:71:2f:24:5c: 0b:f3:06:ba:59:f5:3b:0e:21:88:b4:34:43:04:32: 8c:07:fe:73:ee:9c:07:1e:b3:47:0e:9f:c9:f1:13: 51:3f:78:fe:4d:fe:ae:53:9c:e6:99:35:00:c2:b8: c7:e2:91:fb:1c:b3:7c:4f:c7:a3:e8:5f:73:5a:3b: 31:de:95:67:1b:89:d4:07:37:8c:8b:64:bf:24:b6: cf:28:a4:25:cc:8c:6b:63:74:d1:ca:cd:e8:b0:3c: 55:28:74:a5:b4:15:fb:91:45:94:c1:cc:d8:bf:da: 0b:3f:eb:7b:9d:df:46:91:15:33:c3:03:ee:3e:96: 0f:2d:ea:3d:16:a9:36:71:59:70:d7:92:7d:dc:b7: 8b:1a:79:e2:41:76:92:bf:d3:1d:49:9d:8d:77:aa: 52:fc:9f:98:e1:46:48:fe:e4:b7:91:f1:a0:40:ee: 53:c7:7a:94:fc:f6:94:ad:03:49:4e:b2:96:e3:2d: 6e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:C8:4F:C3:46:DF:10:84:C2:F0:A4:82:CD:97:F3:7A:63:92:FE:64 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5dab641b-24fb-48f2-8b71-57a07d630894.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.251.252.0/22 Signature Algorithm: sha256WithRSAEncryption 49:b5:4b:08:43:80:49:b0:42:68:66:36:95:f2:59:ba:f9:9d: 66:85:9e:e6:88:7c:d4:48:93:57:a3:98:40:d9:2d:8d:9d:d6: 7c:68:44:81:66:06:ad:0f:6b:08:91:f0:c1:56:e6:b3:9b:b3: 24:ea:e5:2f:5f:46:6a:31:92:7a:51:61:db:53:94:40:bc:db: a1:05:ac:25:7c:2c:05:61:72:00:20:9c:fb:72:10:50:98:1e: 61:a2:41:7a:45:dd:ca:d1:33:a0:14:38:9e:6f:95:7d:b6:2a: d6:34:1e:b6:f7:38:1c:5b:2a:59:ec:47:09:da:f4:3a:ec:00: e3:31:c4:6b:37:97:72:15:5d:47:7d:1c:08:01:4a:d4:52:50: b9:51:ae:44:21:d5:e9:ca:fa:78:e1:e6:dd:a9:fd:7c:a6:55: 0a:19:45:06:51:e2:cf:a8:ee:30:b4:25:bd:b0:60:cb:e5:d6: 83:30:a9:dc:46:a4:de:2e:c3:7b:85:7b:86:0c:b6:2d:13:59: 5c:69:80:d4:6b:6f:71:58:d1:b6:4c:cc:c9:ec:d2:33:1b:2f: 33:7f:20:af:31:20:30:37:ab:38:24:ac:28:52:6d:7c:6b:77: 57:7b:6f:3f:9e:e7:b3:72:98:58:7a:06:82:54:f4:ce:94:03: 74:19:0d:32 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUe3mHudnjLMFvPA6vbp0kVKFptsIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUxMDI5MDAyMDA3WhcNMjUxMjAzMjM1OTU5 WjB6MUkwRwYDVQQFE0BlZjE3YmUxNDI5MDNmOGViMWZiMDRiNjdkNmYzZDFlOTVh ZGFjZGVlZGQ4ODM2M2UyMDUzYTFjNzI3NzJlMjAzMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDIZsftf2ZtOO+jqfwlwj70dMl8RpZr+WBEbfeeYok5DSWo VI5w3rf601PP/bH9jlEaag7Iz0mQZdRzVVvIRu17eGmGj7bEcS8kXAvzBrpZ9TsO IYi0NEMEMowH/nPunAces0cOn8nxE1E/eP5N/q5TnOaZNQDCuMfikfscs3xPx6Po X3NaOzHelWcbidQHN4yLZL8kts8opCXMjGtjdNHKzeiwPFUodKW0FfuRRZTBzNi/ 2gs/63ud30aRFTPDA+4+lg8t6j0WqTZxWXDXkn3ct4saeeJBdpK/0x1JnY13qlL8 n5jhRkj+5LeR8aBA7lPHepT89pStA0lOspbjLW4vAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUB8hPw0bfEITC8KSCzZfzemOS/mQwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzVkYWI2NDFiLTI0ZmItNDhmMi04YjcxLTU3YTA3ZDYzMDg5NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIX+/wwDQYJKoZIhvcNAQELBQADggEBAEm1SwhDgEmwQmhmNpXyWbr5nWaF nuaIfNRIk1ejmEDZLY2d1nxoRIFmBq0PawiR8MFW5rObsyTq5S9fRmoxknpRYdtT lEC826EFrCV8LAVhcgAgnPtyEFCYHmGiQXpF3crRM6AUOJ5vlX22KtY0Hrb3OBxb KlnsRwna9DrsAOMxxGs3l3IVXUd9HAgBStRSULlRrkQh1enK+njh5t2p/XymVQoZ RQZR4s+o7jC0Jb2wYMvl1oMwqdxGpN4uw3uFe4YMti0TWVxpgNRrb3FY0bZMzMns 0jMbLzN/IK8xIDA3qzgkrChSbXxrd1d7bz+e57NymFh6BoJU9M6UA3QZDTI= -----END CERTIFICATE-----Generated at Wed Nov 5 19:46:03 2025 by rpki-client