$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/74dc84b0-0790-46ab-ab33-022f86c2512c.roa File: 74dc84b0-0790-46ab-ab33-022f86c2512c.roa (raw, json) Hash identifier: 5s7vHB93GIdA3FcaqQdv6BPeLpxjjnr2V5/3Ps2/hWg= Subject key identifier: 65:5A:54:D3:E7:8F:B8:5F:32:85:A5:45:EC:0B:E0:3A:40:E0:66:36 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 53E3B17789533415E2C3A383FC0D2F02DC6DDA16 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/74dc84b0-0790-46ab-ab33-022f86c2512c.roa Signing time: Wed 29 Oct 2025 00:20:06 +0000 ROA not before: Wed 29 Oct 2025 00:20:06 +0000 ROA not after: Wed 03 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.251.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:e3:b1:77:89:53:34:15:e2:c3:a3:83:fc:0d:2f:02:dc:6d:da:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Oct 29 00:20:06 2025 GMT Not After : Dec 3 23:59:59 2025 GMT Subject: serialNumber=cb6b01a00bf1036864226d6c011acf9fdc1dd50ad76a68ea2bacba2c2d24c972, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:00:33:8a:23:f1:1c:5e:a7:d8:02:0a:51:e1: 5a:e0:ba:81:e5:7d:e4:12:72:b6:5b:91:92:21:65: 19:00:dd:14:9f:a7:86:fe:56:eb:b7:46:4c:22:c8: 07:9b:65:7c:e4:b4:49:c1:59:de:07:38:fd:6c:aa: aa:91:8d:26:28:f4:69:a3:14:28:05:0e:5f:14:9b: 02:fc:9e:fa:61:03:00:2f:b4:02:bb:b7:18:98:e4: 8b:c8:e3:98:a8:75:f7:9c:fd:4b:0f:e6:be:3d:18: bb:d2:2a:89:85:f7:92:4b:39:85:71:ac:7b:77:49: 84:9b:ec:69:71:5f:91:b7:cb:8d:18:9c:b1:9f:6c: c5:3b:1e:19:e1:84:0d:d4:ac:ed:bd:0f:ca:e7:23: 70:7d:e2:99:4b:d9:15:de:67:cc:fe:d9:5e:66:ce: 44:8b:5f:b0:45:84:29:88:a6:7e:2f:25:ed:f5:9c: 60:93:8f:1d:6c:e3:65:79:79:98:f4:4d:1e:b3:e4: 43:65:46:19:ab:34:f5:c1:bd:d4:37:dd:c8:b6:32: d9:60:1c:b6:5e:a7:a2:9d:74:57:71:b1:98:eb:32: 24:db:ce:5d:49:f6:51:52:6d:3f:39:71:ab:07:47: fc:c3:31:85:e7:d5:b4:e8:f2:0c:a7:2b:d4:14:24: a3:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:5A:54:D3:E7:8F:B8:5F:32:85:A5:45:EC:0B:E0:3A:40:E0:66:36 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/74dc84b0-0790-46ab-ab33-022f86c2512c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.251.226.0/24 Signature Algorithm: sha256WithRSAEncryption 68:02:97:d4:33:17:82:1b:c4:a6:c7:20:97:c0:b7:f7:45:6a: fb:0a:c0:41:74:39:99:b1:ae:4a:71:af:b7:1f:ec:52:1e:7f: 2a:68:40:99:c3:23:f6:dc:e4:d5:3f:29:df:25:f9:cb:15:0a: 83:1f:e0:d7:91:50:74:53:19:1c:2e:f7:39:dd:41:fd:ba:c9: 8c:08:88:7e:32:b8:f7:15:25:01:bc:24:8c:fd:74:24:e8:39: 63:be:be:e7:f0:a7:0c:8d:46:4c:26:9e:73:36:d9:f6:c3:67: 8a:69:13:cb:e7:a4:3b:b3:a1:13:38:70:aa:2c:ad:7f:7a:f5: f3:fb:ca:20:dd:2c:7f:b2:40:2f:84:86:ec:2c:a9:1b:35:cc: 17:d5:95:d4:9a:7f:d2:dd:0c:0a:1d:24:8c:22:f1:0e:0e:9b: 4e:d9:ac:51:cd:d7:4e:4c:99:c3:e4:12:55:c6:b6:67:36:87: e9:f7:a1:a0:0e:4b:19:2d:92:eb:ab:2f:f2:29:71:94:87:01: 6c:ec:3a:f5:d6:f8:8e:8f:fa:b8:c8:40:20:48:53:55:59:17: b7:98:32:62:d8:c8:d9:b2:03:ba:8a:0f:45:43:8d:37:1e:94: 83:19:38:d7:e4:e7:29:85:d6:6e:c1:10:06:ef:ed:47:46:3f: c1:85:48:31 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUU+Oxd4lTNBXiw6OD/A0vAtxt2hYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUxMDI5MDAyMDA2WhcNMjUxMjAzMjM1OTU5 WjB6MUkwRwYDVQQFE0BjYjZiMDFhMDBiZjEwMzY4NjQyMjZkNmMwMTFhY2Y5ZmRj MWRkNTBhZDc2YTY4ZWEyYmFjYmEyYzJkMjRjOTcyMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9ADOKI/EcXqfYAgpR4VrguoHlfeQScrZbkZIhZRkA3RSf p4b+Vuu3RkwiyAebZXzktEnBWd4HOP1sqqqRjSYo9GmjFCgFDl8UmwL8nvphAwAv tAK7txiY5IvI45iodfec/UsP5r49GLvSKomF95JLOYVxrHt3SYSb7GlxX5G3y40Y nLGfbMU7HhnhhA3UrO29D8rnI3B94plL2RXeZ8z+2V5mzkSLX7BFhCmIpn4vJe31 nGCTjx1s42V5eZj0TR6z5ENlRhmrNPXBvdQ33ci2MtlgHLZep6KddFdxsZjrMiTb zl1J9lFSbT85casHR/zDMYXn1bTo8gynK9QUJKONAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZVpU0+ePuF8yhaVF7AvgOkDgZjYwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzc0ZGM4NGIwLTA3OTAtNDZhYi1hYjMzLTAyMmY4NmMyNTEyYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX++IwDQYJKoZIhvcNAQELBQADggEBAGgCl9QzF4IbxKbHIJfAt/dFavsK wEF0OZmxrkpxr7cf7FIefypoQJnDI/bc5NU/Kd8l+csVCoMf4NeRUHRTGRwu9znd Qf26yYwIiH4yuPcVJQG8JIz9dCToOWO+vufwpwyNRkwmnnM22fbDZ4ppE8vnpDuz oRM4cKosrX969fP7yiDdLH+yQC+EhuwsqRs1zBfVldSaf9LdDAodJIwi8Q4Om07Z rFHN105MmcPkElXGtmc2h+n3oaAOSxktkuurL/IpcZSHAWzsOvXW+I6P+rjIQCBI U1VZF7eYMmLYyNmyA7qKD0VDjTcelIMZONfk5ymF1m7BEAbv7UdGP8GFSDE= -----END CERTIFICATE-----Generated at Wed Nov 5 07:59:21 2025 by rpki-client