$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/78a0cdc2-ea20-466b-be87-e9cd69e17b3e.roa File: 78a0cdc2-ea20-466b-be87-e9cd69e17b3e.roa (raw, json) Hash identifier: x2Jp1MGkGu2OVewy3bzlUY+FJgSVTzBtpkyYbZIChDI= Subject key identifier: 34:36:AA:45:DA:77:BC:F0:47:47:44:DD:2E:E5:55:DA:41:F8:91:7E Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 6D0FDED500EDF19C37464175D466E26C0C4B1430 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/78a0cdc2-ea20-466b-be87-e9cd69e17b3e.roa Signing time: Wed 29 Oct 2025 00:20:09 +0000 ROA not before: Wed 29 Oct 2025 00:20:09 +0000 ROA not after: Wed 03 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 76.223.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:0f:de:d5:00:ed:f1:9c:37:46:41:75:d4:66:e2:6c:0c:4b:14:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Oct 29 00:20:09 2025 GMT Not After : Dec 3 23:59:59 2025 GMT Subject: serialNumber=d399de2c58937babda1ebb79625cde9999b0de924079923d9094defe44cd3e6e, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:8b:69:e2:6c:b1:9c:06:62:70:89:dc:37:ea: 1d:c4:b5:1a:20:3b:15:9a:9e:13:e6:4f:ef:6b:86: 7b:25:26:27:00:99:bd:cf:eb:45:54:08:f6:e5:6f: 80:44:25:e0:93:0d:7c:1c:4d:52:9f:9f:10:d5:ed: e1:7f:df:b8:1d:c9:86:99:9d:c6:0b:d9:a4:96:fa: a1:7b:96:07:b5:7b:7a:51:ee:d4:63:d9:f0:0a:55: 9f:75:b5:08:8d:50:f6:b6:dc:e8:df:c4:78:17:db: 63:55:e7:1b:74:aa:e3:3c:9e:f2:a8:01:9a:7a:f0: 7c:56:fd:44:96:d3:fb:3c:f6:0b:9c:ad:ca:7c:7a: 31:fc:35:e8:22:2a:ed:18:51:a5:4a:61:8e:44:ec: 98:51:93:97:4c:03:73:3b:6d:8d:28:3b:35:8a:0f: 23:a6:72:c9:13:57:24:1d:04:b2:62:bc:cb:8d:0e: 30:67:b4:e9:21:44:67:29:cc:88:96:cb:96:2a:66: dc:5c:29:25:a3:b0:35:cb:ad:8a:cd:e9:c5:e9:26: df:84:c3:28:2a:1d:81:62:7d:14:8d:26:5d:b2:90: d3:3b:53:61:6c:bf:05:34:02:ab:8b:6e:e1:55:38: f1:31:73:79:e1:60:f8:bc:e0:55:97:78:75:97:35: a3:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:36:AA:45:DA:77:BC:F0:47:47:44:DD:2E:E5:55:DA:41:F8:91:7E X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/78a0cdc2-ea20-466b-be87-e9cd69e17b3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.223.185.0/24 Signature Algorithm: sha256WithRSAEncryption 35:d1:01:81:ce:76:26:d6:c5:c8:26:f3:e3:91:42:da:25:88: cc:31:25:87:5e:f7:08:b1:87:b9:7b:c3:6e:c6:59:67:fd:4d: dc:79:1d:5c:aa:31:39:44:bb:b5:f5:ca:5a:57:44:54:8a:01: 9b:d7:5e:1c:f0:df:f8:a2:41:0e:92:f3:7d:25:9f:58:74:9f: e6:60:4d:e5:a9:bf:71:06:09:5a:d9:03:76:b3:2f:d7:07:98: 1c:11:66:5f:15:df:d8:8d:4d:5d:94:63:2d:77:3a:66:eb:5a: 3e:b1:47:68:da:b5:3a:7b:76:6b:41:b8:9e:c6:3e:fa:7c:dd: a3:74:59:1d:b8:39:16:86:39:9d:92:44:2d:a8:6f:93:10:6f: 36:60:af:5b:aa:67:69:84:1a:18:29:45:99:68:b6:dd:b9:d8: 6b:65:a0:f9:26:8f:b8:be:82:82:a9:8d:c9:67:8a:c6:5c:50: 18:be:9f:7d:13:2b:93:77:a0:ea:47:c0:b6:17:36:7b:d6:7a: 87:64:23:37:22:27:28:20:38:6b:78:8d:69:1c:d4:ff:8d:fe: 05:5a:b4:81:6e:03:b8:27:02:3f:b6:4d:6e:f7:e3:62:50:93: 61:00:20:f1:d4:9c:8c:b3:f1:73:fd:02:f4:28:7d:f4:01:98: a0:5b:a7:b8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbQ/e1QDt8Zw3RkF11GbibAxLFDAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUxMDI5MDAyMDA5WhcNMjUxMjAzMjM1OTU5 WjB6MUkwRwYDVQQFE0BkMzk5ZGUyYzU4OTM3YmFiZGExZWJiNzk2MjVjZGU5OTk5 YjBkZTkyNDA3OTkyM2Q5MDk0ZGVmZTQ0Y2QzZTZlMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDni2nibLGcBmJwidw36h3EtRogOxWanhPmT+9rhnslJicA mb3P60VUCPblb4BEJeCTDXwcTVKfnxDV7eF/37gdyYaZncYL2aSW+qF7lge1e3pR 7tRj2fAKVZ91tQiNUPa23OjfxHgX22NV5xt0quM8nvKoAZp68HxW/USW0/s89guc rcp8ejH8NegiKu0YUaVKYY5E7JhRk5dMA3M7bY0oOzWKDyOmcskTVyQdBLJivMuN DjBntOkhRGcpzIiWy5YqZtxcKSWjsDXLrYrN6cXpJt+EwygqHYFifRSNJl2ykNM7 U2FsvwU0AquLbuFVOPExc3nhYPi84FWXeHWXNaOLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUNDaqRdp3vPBHR0TdLuVV2kH4kX4wHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzc4YTBjZGMyLWVhMjAtNDY2Yi1iZTg3LWU5Y2Q2OWUxN2IzZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABM37kwDQYJKoZIhvcNAQELBQADggEBADXRAYHOdibWxcgm8+ORQtoliMwx JYde9wixh7l7w27GWWf9Tdx5HVyqMTlEu7X1ylpXRFSKAZvXXhzw3/iiQQ6S830l n1h0n+ZgTeWpv3EGCVrZA3azL9cHmBwRZl8V39iNTV2UYy13OmbrWj6xR2jatTp7 dmtBuJ7GPvp83aN0WR24ORaGOZ2SRC2ob5MQbzZgr1uqZ2mEGhgpRZlott252Gtl oPkmj7i+goKpjclnisZcUBi+n30TK5N3oOpHwLYXNnvWeodkIzciJyggOGt4jWkc 1P+N/gVatIFuA7gnAj+2TW7342JQk2EAIPHUnIyz8XP9AvQoffQBmKBbp7g= -----END CERTIFICATE-----Generated at Wed Nov 5 07:59:18 2025 by rpki-client