$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/addfda24-421e-4b45-80e1-dd5a255777c5.roa File: addfda24-421e-4b45-80e1-dd5a255777c5.roa (raw, json) Hash identifier: 3NfpktT3tFgabgl8gVCr4UynIYknXoME0K87wRqdXHc= Subject key identifier: F6:E1:16:C6:A6:65:05:9F:64:60:8B:E3:23:62:69:D1:D4:85:46:A8 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 62ABE7D7E1754F724FF8406AAF088267C427B636 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/addfda24-421e-4b45-80e1-dd5a255777c5.roa Signing time: Wed 29 Oct 2025 00:10:09 +0000 ROA not before: Wed 29 Oct 2025 00:10:09 +0000 ROA not after: Wed 03 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.251.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:ab:e7:d7:e1:75:4f:72:4f:f8:40:6a:af:08:82:67:c4:27:b6:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Oct 29 00:10:09 2025 GMT Not After : Dec 3 23:59:59 2025 GMT Subject: serialNumber=08b4f3144dbfc940aadf7af177ab26158c96b9312004537fba972210d5af76a7, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:dc:dc:ab:8f:07:5e:df:97:5a:39:97:4e:5b: fe:b3:bd:17:98:33:0b:f1:a1:47:de:5e:f9:42:aa: dd:90:2f:c6:80:06:88:6a:aa:94:64:98:8f:51:7e: 4f:3f:22:2f:aa:88:f0:71:10:3a:4d:14:6a:3f:99: 7c:30:79:1d:31:c8:0b:be:9c:12:0d:a2:bb:ce:ef: 9b:66:14:53:0f:03:d9:16:e4:4f:ba:44:63:12:da: 9d:b5:52:e9:65:5d:03:6a:f0:19:1e:18:17:44:01: c1:2b:c8:3a:ad:e8:49:fd:6b:c0:7a:35:ee:1f:08: 91:c8:1c:46:f0:23:f2:79:9d:76:91:7e:76:b1:d4: 37:88:fb:cb:54:ef:90:31:c5:5b:f0:1e:89:60:74: b3:49:e6:d8:73:7d:10:bd:7d:05:e0:97:03:28:07: 95:8f:22:3c:79:14:0a:e3:90:76:79:c5:b0:38:90: e5:f6:47:c2:5f:5b:92:89:10:51:2a:c4:68:9f:28: b3:7c:bd:4e:63:92:14:25:cf:28:c6:2d:7e:fd:cc: 39:7b:87:de:22:a7:5d:c1:30:5b:10:44:4d:f2:b9: 59:83:b2:f6:b5:d2:4e:6c:a8:f8:15:51:28:b1:30: 36:b3:61:4c:d6:a0:64:9f:21:b9:a1:b2:17:ac:66: 75:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:E1:16:C6:A6:65:05:9F:64:60:8B:E3:23:62:69:D1:D4:85:46:A8 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/addfda24-421e-4b45-80e1-dd5a255777c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.251.228.0/22 Signature Algorithm: sha256WithRSAEncryption 5f:5f:30:23:e9:e0:41:22:4a:8e:6f:22:fa:07:ff:49:c7:ae: 44:71:3a:42:d2:a5:46:11:05:0d:5d:ee:b1:22:17:66:fe:c8: 33:40:a1:b7:2a:6a:09:92:8c:57:f8:e4:49:10:3c:13:01:8d: ef:43:8a:a6:e1:2f:05:80:21:04:fd:b2:d1:27:dc:97:4b:29: 36:a6:aa:b0:15:9d:39:5b:72:d6:bd:a4:a4:3b:a6:6c:67:73: 68:62:4e:8a:e8:ea:26:72:8f:4e:89:f5:4c:23:6a:97:ae:2f: fd:bc:0d:06:6f:0b:28:38:2b:c9:e0:3d:1e:a8:ec:7b:18:9a: 1d:de:28:e7:5e:e2:21:08:43:37:c6:c6:f3:de:71:9a:70:16: 36:21:79:32:36:1c:78:30:e0:34:c2:74:39:20:4b:64:4b:18: 0d:e5:34:4a:9e:04:8e:e5:54:d4:2e:67:9b:f4:7e:60:60:e4: 3d:a5:81:34:54:4b:d9:cc:e4:3c:de:74:37:e5:d4:7d:45:a6: 69:a9:86:fd:e9:11:72:c4:55:a5:96:20:ce:6d:d2:2f:25:df: 2f:b6:e0:ea:21:c0:bb:66:79:2f:ac:15:17:fd:cd:82:7b:2a: 01:b4:6c:78:80:74:48:2e:b8:7f:98:44:ae:98:01:41:45:16: 26:da:4c:ab -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYqvn1+F1T3JP+EBqrwiCZ8QntjYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUxMDI5MDAxMDA5WhcNMjUxMjAzMjM1OTU5 WjB6MUkwRwYDVQQFE0AwOGI0ZjMxNDRkYmZjOTQwYWFkZjdhZjE3N2FiMjYxNThj OTZiOTMxMjAwNDUzN2ZiYTk3MjIxMGQ1YWY3NmE3MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCc3Nyrjwde35daOZdOW/6zvReYMwvxoUfeXvlCqt2QL8aA BohqqpRkmI9Rfk8/Ii+qiPBxEDpNFGo/mXwweR0xyAu+nBINorvO75tmFFMPA9kW 5E+6RGMS2p21UullXQNq8BkeGBdEAcEryDqt6En9a8B6Ne4fCJHIHEbwI/J5nXaR fnax1DeI+8tU75AxxVvwHolgdLNJ5thzfRC9fQXglwMoB5WPIjx5FArjkHZ5xbA4 kOX2R8JfW5KJEFEqxGifKLN8vU5jkhQlzyjGLX79zDl7h94ip13BMFsQRE3yuVmD sva10k5sqPgVUSixMDazYUzWoGSfIbmhshesZnV9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU9uEWxqZlBZ9kYIvjI2Jp0dSFRqgwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2FkZGZkYTI0LTQyMWUtNGI0NS04MGUxLWRkNWEyNTU3NzdjNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIX++QwDQYJKoZIhvcNAQELBQADggEBAF9fMCPp4EEiSo5vIvoH/0nHrkRx OkLSpUYRBQ1d7rEiF2b+yDNAobcqagmSjFf45EkQPBMBje9DiqbhLwWAIQT9stEn 3JdLKTamqrAVnTlbcta9pKQ7pmxnc2hiToro6iZyj06J9UwjapeuL/28DQZvCyg4 K8ngPR6o7HsYmh3eKOde4iEIQzfGxvPecZpwFjYheTI2HHgw4DTCdDkgS2RLGA3l NEqeBI7lVNQuZ5v0fmBg5D2lgTRUS9nM5DzedDfl1H1Fpmmphv3pEXLEVaWWIM5t 0i8l3y+24OohwLtmeS+sFRf9zYJ7KgG0bHiAdEguuH+YRK6YAUFFFibaTKs= -----END CERTIFICATE-----Generated at Wed Nov 5 09:30:40 2025 by rpki-client