$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/7c541838-12b7-470a-b044-f31d3ab72ede.roa File: 7c541838-12b7-470a-b044-f31d3ab72ede.roa (raw, json) Hash identifier: RJtQZzz6DYpLjJFYtKXQS17Yha3CDYf26zNpidy+wsI= Subject key identifier: C6:DC:BF:C2:45:32:28:05:85:D5:46:E0:55:7C:99:3B:2A:F7:F0:0D Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 1FA931483E2DC39A74CB27170024E1E7D3220A7D Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/7c541838-12b7-470a-b044-f31d3ab72ede.roa Signing time: Wed 29 Oct 2025 00:20:02 +0000 ROA not before: Wed 29 Oct 2025 00:20:02 +0000 ROA not after: Wed 03 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.249.208.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:a9:31:48:3e:2d:c3:9a:74:cb:27:17:00:24:e1:e7:d3:22:0a:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Oct 29 00:20:02 2025 GMT Not After : Dec 3 23:59:59 2025 GMT Subject: serialNumber=f0762915c8cffea390801c4bbdc787c29fb60fc7b59f9b759fa983e2690fdc68, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6d:79:6c:f9:7b:12:f5:11:8f:4f:76:5f:4c: 04:de:b7:4f:ec:dc:ee:df:45:96:72:8a:a5:d4:16: 00:31:43:93:4f:cb:13:46:9b:46:94:09:3d:bd:6b: 09:10:7a:f1:6a:29:f9:55:d4:60:20:d1:17:56:b2: 00:33:f0:52:95:a4:b3:2b:5a:cc:3e:16:40:2f:22: b3:65:ea:e9:76:14:46:02:a0:71:7e:ce:7c:0f:0c: f6:56:21:8c:3e:59:6f:cd:9d:58:67:08:f4:fc:92: b7:ab:ab:84:86:24:c3:29:e3:a9:6f:1b:3f:86:8a: 0d:d1:fd:be:0d:2c:18:70:91:45:05:41:52:c1:8b: c1:82:f9:b7:0f:82:f8:e9:08:50:4e:83:48:67:f4: 59:a9:4e:37:cc:33:2b:65:99:c5:96:f4:34:25:78: b3:99:90:79:e7:75:ad:35:26:e3:af:4d:73:4f:f3: 4c:2a:e9:f2:04:c9:31:2a:e0:81:c0:f1:e6:dd:d1: d2:33:47:3e:bd:d9:8c:95:3f:17:95:d9:d5:16:15: 19:37:cd:01:e6:6f:d6:64:da:f5:84:da:48:b9:13: af:ac:03:a4:20:e4:02:36:7e:4f:bd:d8:8d:82:40: 7e:4c:73:d6:65:08:b2:73:1b:31:9e:b6:fc:75:32: 12:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:DC:BF:C2:45:32:28:05:85:D5:46:E0:55:7C:99:3B:2A:F7:F0:0D X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/7c541838-12b7-470a-b044-f31d3ab72ede.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.208.0/23 Signature Algorithm: sha256WithRSAEncryption 69:e0:51:01:42:52:63:ff:07:b5:50:42:0f:a3:9e:3b:16:eb: 6b:e5:28:23:b5:90:50:a6:3c:f4:d4:21:25:b0:1d:19:88:d6: bd:f8:a5:fb:41:fe:93:e9:6f:7b:15:d5:2d:3c:5d:03:e2:b0: 6a:16:9a:a5:e0:ed:28:b7:0d:46:d3:25:a1:42:9b:99:6a:9d: f9:7d:c5:ef:91:74:29:18:5b:6f:a8:08:5f:57:ca:32:f4:28: 95:cf:46:4e:bf:41:89:c0:f0:33:94:4c:f3:9a:87:dd:09:6c: 94:19:e1:75:30:d0:de:23:09:f9:e3:f1:83:ce:fd:58:5a:16: f7:77:34:65:b5:b6:69:40:fd:a5:7e:32:3b:51:8f:73:26:e5: bc:fa:5f:da:42:87:a4:74:ba:4d:bf:68:8c:b0:f7:93:67:24: e3:21:b5:60:a2:53:f0:db:80:93:5f:11:95:4b:59:56:3f:a3: 37:72:aa:8d:0b:89:73:bc:51:58:1c:ec:cd:90:43:70:f7:b4: 57:e7:83:c4:3f:3a:75:34:2d:7b:55:e7:f8:9f:da:39:31:a2: 75:69:5f:ae:a0:f6:ef:20:9a:c2:8f:23:82:9e:bc:66:71:28: 05:7a:c5:f8:77:ed:bc:49:15:fd:90:15:fe:42:ff:82:3d:6e: 24:eb:24:4a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUH6kxSD4tw5p0yycXACTh59MiCn0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUxMDI5MDAyMDAyWhcNMjUxMjAzMjM1OTU5 WjB6MUkwRwYDVQQFE0BmMDc2MjkxNWM4Y2ZmZWEzOTA4MDFjNGJiZGM3ODdjMjlm YjYwZmM3YjU5ZjliNzU5ZmE5ODNlMjY5MGZkYzY4MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQClbXls+XsS9RGPT3ZfTATet0/s3O7fRZZyiqXUFgAxQ5NP yxNGm0aUCT29awkQevFqKflV1GAg0RdWsgAz8FKVpLMrWsw+FkAvIrNl6ul2FEYC oHF+znwPDPZWIYw+WW/NnVhnCPT8krerq4SGJMMp46lvGz+Gig3R/b4NLBhwkUUF QVLBi8GC+bcPgvjpCFBOg0hn9FmpTjfMMytlmcWW9DQleLOZkHnnda01JuOvTXNP 80wq6fIEyTEq4IHA8ebd0dIzRz692YyVPxeV2dUWFRk3zQHmb9Zk2vWE2ki5E6+s A6Qg5AI2fk+92I2CQH5Mc9ZlCLJzGzGetvx1MhIbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUxty/wkUyKAWF1UbgVXyZOyr38A0wHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzdjNTQxODM4LTEyYjctNDcwYS1iMDQ0LWYzMWQzYWI3MmVkZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEX+dAwDQYJKoZIhvcNAQELBQADggEBAGngUQFCUmP/B7VQQg+jnjsW62vl KCO1kFCmPPTUISWwHRmI1r34pftB/pPpb3sV1S08XQPisGoWmqXg7Si3DUbTJaFC m5lqnfl9xe+RdCkYW2+oCF9XyjL0KJXPRk6/QYnA8DOUTPOah90JbJQZ4XUw0N4j Cfnj8YPO/VhaFvd3NGW1tmlA/aV+MjtRj3Mm5bz6X9pCh6R0uk2/aIyw95NnJOMh tWCiU/DbgJNfEZVLWVY/ozdyqo0LiXO8UVgc7M2QQ3D3tFfng8Q/OnU0LXtV5/if 2jkxonVpX66g9u8gmsKPI4KevGZxKAV6xfh37bxJFf2QFf5C/4I9biTrJEo= -----END CERTIFICATE-----Generated at Wed Nov 5 05:46:30 2025 by rpki-client