$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5e3c0e08-edb8-4079-81e3-f4c857efb338.roa File: 5e3c0e08-edb8-4079-81e3-f4c857efb338.roa (raw, json) Hash identifier: lEUT+xt1b89+OGRkJWvkCKmXZwgineBpit8jtqkCX8k= Subject key identifier: 0B:6B:83:D6:5F:B1:AD:43:FA:4E:79:DC:2E:86:5B:AF:D3:28:0A:1F Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 46A7DA543EF8C427EC7E7D56442C2998A795115D Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5e3c0e08-edb8-4079-81e3-f4c857efb338.roa Signing time: Wed 29 Oct 2025 00:10:07 +0000 ROA not before: Wed 29 Oct 2025 00:10:07 +0000 ROA not after: Wed 03 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.249.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:a7:da:54:3e:f8:c4:27:ec:7e:7d:56:44:2c:29:98:a7:95:11:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Oct 29 00:10:07 2025 GMT Not After : Dec 3 23:59:59 2025 GMT Subject: serialNumber=b69fff4fe43f6ebd6ffebb95170294c26ac355be9eb64ecbaedbac6e1f5b1ec1, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0f:d5:d8:d2:22:03:09:ff:af:e5:77:0f:42: 19:8e:a4:f7:59:0e:37:4d:5d:69:14:b8:91:fd:60: a0:c3:d9:80:40:fe:74:f4:5b:34:94:95:27:b5:b9: 97:d0:1d:07:02:62:f1:35:ea:d2:70:4f:dd:11:05: 56:3b:16:b4:0f:76:c4:1e:e4:11:5b:fb:bd:5a:d8: 62:6f:e1:6e:c6:de:49:94:fc:86:ab:29:6e:2b:a0: dc:c9:e8:26:9a:aa:0e:01:c2:76:73:a8:5a:2e:b1: 0c:e6:4c:d4:0e:46:ce:13:6b:9e:0d:52:e6:f3:01: 26:74:b5:ba:78:3f:1f:9e:7e:f7:eb:c2:ff:ae:83: ee:79:16:fe:0b:30:25:8c:67:e8:26:ea:b6:5d:fc: c9:6b:77:a9:6c:39:29:79:88:50:de:be:b7:47:e6: f7:75:63:8e:59:51:a4:76:db:15:39:d5:62:76:7f: 5b:fb:e7:3d:b4:0a:65:71:12:13:71:c5:20:87:6d: d4:b3:51:db:08:bc:4f:60:ac:a3:09:28:0f:17:a6: 58:28:7f:c9:9d:27:a2:ac:b6:e3:0c:6a:c2:e1:d7: 24:74:b8:f7:34:65:c7:22:01:79:33:aa:d9:ef:ae: 2b:86:10:fc:40:a1:72:e8:b8:31:b3:f3:dd:97:f6: 7e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:6B:83:D6:5F:B1:AD:43:FA:4E:79:DC:2E:86:5B:AF:D3:28:0A:1F X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5e3c0e08-edb8-4079-81e3-f4c857efb338.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.221.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:84:d3:28:68:ac:e7:3a:bf:c5:c5:41:ee:52:e1:78:c5:05: f8:0c:57:4e:b4:2f:23:ff:4a:50:a6:29:42:f8:99:38:0b:27: 03:ab:b0:63:a3:32:51:be:5a:af:9f:0c:cb:c5:30:69:3f:5a: fa:5d:c4:fe:50:3d:b6:b9:81:81:2a:44:71:6d:0b:a6:8f:7b: be:0a:b1:56:00:f3:b7:c2:c9:5c:d9:58:c2:38:9f:71:cf:92: 52:a4:74:c6:e2:cb:61:f3:b0:9f:50:c7:f0:fa:17:2a:5f:da: 5b:25:ae:fa:a1:aa:50:c9:19:21:ff:f7:4b:a3:0a:22:e1:5f: a5:82:b0:cf:79:31:e7:b9:4f:05:20:44:cd:53:e8:0b:9c:44: ee:7e:76:5a:94:56:6d:84:91:77:26:01:1e:0c:db:1f:ed:73: 68:71:18:54:c9:5e:e0:c2:04:74:fa:62:79:9f:14:3c:cf:db: 8c:56:5a:8a:cd:28:ec:a1:17:8b:6c:b5:5e:1a:c3:74:26:cb: 98:73:8c:36:be:bd:db:a9:89:71:4c:65:45:6e:90:60:8e:7d: 57:46:be:b4:eb:cb:59:6c:1d:66:2a:15:6d:82:db:7c:e6:ff: 14:2e:96:9a:e2:3c:2a:e7:09:ae:8e:4b:96:7d:54:d3:95:07: 35:62:3f:49 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURqfaVD74xCfsfn1WRCwpmKeVEV0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUxMDI5MDAxMDA3WhcNMjUxMjAzMjM1OTU5 WjB6MUkwRwYDVQQFE0BiNjlmZmY0ZmU0M2Y2ZWJkNmZmZWJiOTUxNzAyOTRjMjZh YzM1NWJlOWViNjRlY2JhZWRiYWM2ZTFmNWIxZWMxMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLD9XY0iIDCf+v5XcPQhmOpPdZDjdNXWkUuJH9YKDD2YBA /nT0WzSUlSe1uZfQHQcCYvE16tJwT90RBVY7FrQPdsQe5BFb+71a2GJv4W7G3kmU /IarKW4roNzJ6Caaqg4BwnZzqFousQzmTNQORs4Ta54NUubzASZ0tbp4Px+efvfr wv+ug+55Fv4LMCWMZ+gm6rZd/Mlrd6lsOSl5iFDevrdH5vd1Y45ZUaR22xU51WJ2 f1v75z20CmVxEhNxxSCHbdSzUdsIvE9grKMJKA8Xplgof8mdJ6KstuMMasLh1yR0 uPc0ZcciAXkzqtnvriuGEPxAoXLouDGz892X9n4RAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUC2uD1l+xrUP6TnncLoZbr9MoCh8wHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzVlM2MwZTA4LWVkYjgtNDA3OS04MWUzLWY0Yzg1N2VmYjMzOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX+d0wDQYJKoZIhvcNAQELBQADggEBAE6E0yhorOc6v8XFQe5S4XjFBfgM V060LyP/SlCmKUL4mTgLJwOrsGOjMlG+Wq+fDMvFMGk/WvpdxP5QPba5gYEqRHFt C6aPe74KsVYA87fCyVzZWMI4n3HPklKkdMbiy2HzsJ9Qx/D6Fypf2lslrvqhqlDJ GSH/90ujCiLhX6WCsM95Mee5TwUgRM1T6AucRO5+dlqUVm2EkXcmAR4M2x/tc2hx GFTJXuDCBHT6YnmfFDzP24xWWorNKOyhF4tstV4aw3Qmy5hzjDa+vdupiXFMZUVu kGCOfVdGvrTry1lsHWYqFW2C23zm/xQulpriPCrnCa6OS5Z9VNOVBzViP0k= -----END CERTIFICATE-----Generated at Wed Nov 5 11:25:56 2025 by rpki-client