$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/be6d27bc-a56d-4dce-b2c2-5a756eca4157.roa File: be6d27bc-a56d-4dce-b2c2-5a756eca4157.roa (raw, json) Hash identifier: qw/XRx2T6Ih+ATWSUG/imJKWMlWOnlLhtJj7xDjvTNs= Subject key identifier: 01:30:F9:D4:F6:44:AB:3A:91:EF:18:06:45:61:69:8A:D2:1D:44:E8 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 67507DDA5DD60068838F2CC376C83CC216728257 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/be6d27bc-a56d-4dce-b2c2-5a756eca4157.roa Signing time: Tue 11 Nov 2025 00:10:23 +0000 ROA not before: Tue 11 Nov 2025 00:10:23 +0000 ROA not after: Tue 16 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.249.210.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Nov 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:50:7d:da:5d:d6:00:68:83:8f:2c:c3:76:c8:3c:c2:16:72:82:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Nov 11 00:10:23 2025 GMT Not After : Dec 16 23:59:59 2025 GMT Subject: serialNumber=d59b3fb6fab8cd555c3b4d391eb24899c568d2871f76c307e337e63c12b4ff85, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e4:c8:23:d2:1d:5f:8e:76:2f:46:99:10:1f: d3:a3:25:d8:eb:26:e4:e3:de:80:d2:f1:ec:2e:d3: f8:e7:2f:b1:0e:3c:48:68:69:df:16:26:03:e6:d1: bf:6b:fa:39:f7:7b:fc:12:e3:9c:ac:38:8e:fa:fc: 57:60:a1:1a:60:f1:41:5f:3a:9e:de:10:c2:b3:db: e1:76:3e:08:1d:bd:06:f9:d7:c2:42:0b:54:ec:ad: 96:be:9f:56:65:bd:0e:75:ca:ab:f0:bc:48:e2:84: 48:ea:64:5f:8c:2c:b5:81:b9:a8:d7:c1:9b:13:d9: 03:c8:a3:0e:3d:79:ac:c6:9a:b5:8a:e3:0a:e2:3e: a7:31:40:c6:df:e3:4b:96:e5:97:1d:5c:31:32:2b: e7:eb:88:94:e9:82:36:1f:83:50:77:cd:61:16:9a: dc:ab:43:cb:77:bd:e0:78:2c:2a:4e:41:d0:07:cd: 3d:07:e1:c0:23:54:44:1d:56:ba:e7:d5:33:a5:6e: 6f:a9:43:8f:08:55:8b:d0:dd:56:2c:f9:91:b9:3b: 10:a4:48:97:b2:38:78:de:36:75:fb:89:23:96:30: 9c:6e:c6:b1:36:40:bf:1a:2a:44:df:67:73:85:e1: 72:5c:7d:b8:2c:0c:1e:02:6a:c0:ce:ac:37:24:db: aa:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:30:F9:D4:F6:44:AB:3A:91:EF:18:06:45:61:69:8A:D2:1D:44:E8 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/be6d27bc-a56d-4dce-b2c2-5a756eca4157.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.210.0/23 Signature Algorithm: sha256WithRSAEncryption 84:e2:bf:38:ab:cf:f6:b2:2e:e5:ef:95:31:a0:69:0b:84:d3: e4:68:0c:10:d3:71:1a:0d:fe:c6:93:c1:92:bd:c7:b7:94:61: 37:03:26:4d:5e:aa:39:c8:cd:46:78:54:eb:29:cf:91:3e:28: 2e:3f:42:85:3a:7a:fb:6a:32:0f:87:0b:f0:f2:dd:65:4f:5c: c5:ed:67:b2:d3:a4:b9:99:b5:6d:2c:23:71:ec:c5:f6:ea:12: eb:4b:e8:f2:17:ce:29:fc:a9:f5:d7:7c:02:e6:99:84:b8:00: f5:6a:16:25:22:32:f9:56:ed:0b:01:1b:00:5e:e8:62:6b:4b: 2f:ba:a0:a4:fd:50:18:0c:dc:34:7e:b1:b2:d4:a9:92:cc:98: 11:a4:5d:75:47:e0:63:aa:43:6f:32:ec:af:d4:a6:4e:65:39: 02:20:3a:cd:e3:d4:bb:83:65:06:af:23:71:20:46:34:17:97: 28:e8:1f:8a:10:44:7f:72:10:17:40:4e:0d:0c:43:5e:2e:48: 73:fc:d1:93:b3:2e:ed:4b:3d:4e:0b:2a:1f:4e:91:5d:93:9b: 15:17:11:a1:ba:fd:3d:9a:cf:8b:7a:58:65:ca:24:fe:66:3a: e1:d2:eb:ab:9a:5e:f6:95:c1:90:09:89:7b:5f:9d:78:0b:56: 2f:e5:27:c0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZ1B92l3WAGiDjyzDdsg8whZyglcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUxMTExMDAxMDIzWhcNMjUxMjE2MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNTliM2ZiNmZhYjhjZDU1NWMzYjRkMzkxZWIyNDg5OWM1 NjhkMjg3MWY3NmMzMDdlMzM3ZTYzYzEyYjRmZjg1MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+5Mgj0h1fjnYvRpkQH9OjJdjrJuTj3oDS8ewu0/jnL7EO PEhoad8WJgPm0b9r+jn3e/wS45ysOI76/FdgoRpg8UFfOp7eEMKz2+F2PggdvQb5 18JCC1TsrZa+n1ZlvQ51yqvwvEjihEjqZF+MLLWBuajXwZsT2QPIow49eazGmrWK 4wriPqcxQMbf40uW5ZcdXDEyK+friJTpgjYfg1B3zWEWmtyrQ8t3veB4LCpOQdAH zT0H4cAjVEQdVrrn1TOlbm+pQ48IVYvQ3VYs+ZG5OxCkSJeyOHjeNnX7iSOWMJxu xrE2QL8aKkTfZ3OF4XJcfbgsDB4CasDOrDck26r1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUATD51PZEqzqR7xgGRWFpitIdROgwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2JlNmQyN2JjLWE1NmQtNGRjZS1iMmMyLTVhNzU2ZWNhNDE1Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEX+dIwDQYJKoZIhvcNAQELBQADggEBAITivzirz/ayLuXvlTGgaQuE0+Ro DBDTcRoN/saTwZK9x7eUYTcDJk1eqjnIzUZ4VOspz5E+KC4/QoU6evtqMg+HC/Dy 3WVPXMXtZ7LTpLmZtW0sI3HsxfbqEutL6PIXzin8qfXXfALmmYS4APVqFiUiMvlW 7QsBGwBe6GJrSy+6oKT9UBgM3DR+sbLUqZLMmBGkXXVH4GOqQ28y7K/Upk5lOQIg Os3j1LuDZQavI3EgRjQXlyjoH4oQRH9yEBdATg0MQ14uSHP80ZOzLu1LPU4LKh9O kV2TmxUXEaG6/T2az4t6WGXKJP5mOuHS66uaXvaVwZAJiXtfnXgLVi/lJ8A= -----END CERTIFICATE-----Generated at Tue Nov 18 05:41:10 2025 by rpki-client