$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/38b1d6a5-8a6e-4ed3-a057-939fd4f17f57.roa File: 38b1d6a5-8a6e-4ed3-a057-939fd4f17f57.roa (raw, json) Hash identifier: isVWRq25irDCk6RpBTfXyBgSS3aYdjxlkcM7/SbNfI0= Subject key identifier: 59:C1:D3:DC:A3:1A:77:C8:E4:F2:14:26:2E:08:85:B7:C2:45:4B:D3 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 112D3C08243D9B5824D06C3D4791DA6A4F954358 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/38b1d6a5-8a6e-4ed3-a057-939fd4f17f57.roa Signing time: Wed 27 Aug 2025 00:10:16 +0000 ROA not before: Wed 27 Aug 2025 00:10:16 +0000 ROA not after: Wed 01 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.251.240.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:2d:3c:08:24:3d:9b:58:24:d0:6c:3d:47:91:da:6a:4f:95:43:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Aug 27 00:10:16 2025 GMT Not After : Oct 1 23:59:59 2025 GMT Subject: serialNumber=5c10e4d05fe2b8f42b26b4f40c487c30f28810da3b3436ae89a3cde0cfc57850, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ca:66:f9:47:8a:a4:46:9a:b9:55:c6:70:cc: dc:d2:56:99:f9:ac:24:61:6a:b7:83:a6:19:33:7f: 43:0e:c4:15:75:e9:d1:36:a0:60:ef:c9:17:82:e9: fa:01:5f:89:11:df:37:b8:5a:08:3c:d1:46:d0:4a: 0c:dd:ca:58:a5:d3:7b:95:76:fb:a8:14:d6:c8:4c: 97:3e:d3:cf:85:5d:0f:28:3d:3b:f4:e8:7c:6d:cf: 7b:ed:ab:6c:5e:e0:88:b7:7a:a5:d2:0c:37:cc:f6: e0:de:8e:3f:6a:23:1e:0e:db:6a:4a:70:25:1f:51: 49:22:12:98:44:a2:7e:a4:8b:14:6f:ee:b0:5a:60: 88:ff:ac:1b:bc:a0:73:ac:ef:2a:b8:0f:46:07:95: 91:ab:f2:95:23:ec:47:b1:be:cb:a6:96:d3:0e:ac: 33:b7:8b:65:f9:97:68:82:30:3c:f4:46:6f:00:78: e4:74:08:43:de:7d:36:f6:7d:70:df:02:8a:9a:bb: 5e:3d:31:65:d0:04:08:09:95:f1:0e:b6:cd:fc:49: 8e:35:da:aa:67:7a:a9:d4:2b:2a:8b:67:37:86:cb: b4:11:79:11:65:58:ba:51:9d:67:5d:36:e2:3f:67: 6a:7e:c6:39:56:40:ca:25:41:fe:b7:3a:b5:1f:72: 24:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:C1:D3:DC:A3:1A:77:C8:E4:F2:14:26:2E:08:85:B7:C2:45:4B:D3 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/38b1d6a5-8a6e-4ed3-a057-939fd4f17f57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.251.240.0/23 Signature Algorithm: sha256WithRSAEncryption 00:54:d6:10:76:b0:45:23:90:de:51:45:91:1b:ef:a6:03:a6: be:26:ec:12:eb:31:95:31:fd:5f:69:6a:9d:25:b2:bf:8e:66: 9a:b5:2b:6e:77:c8:fb:8d:ce:fa:26:df:f6:58:22:1b:dc:50: 14:d2:bc:14:84:23:42:47:a9:5a:76:ce:18:72:98:56:1f:8b: a3:d8:fb:f2:3c:fc:ba:60:89:c6:a1:73:e0:b2:c4:63:04:45: f2:9c:c7:f1:6a:e2:7f:f3:4c:d5:96:43:1d:86:68:61:ca:f4: ac:75:6d:14:49:d5:23:6a:05:31:f2:8f:c6:35:ba:c5:20:25: 95:60:4b:a6:58:19:d6:46:b6:e8:21:33:09:c3:46:7b:45:88: 2b:c3:5b:cc:c0:42:19:bb:5f:c6:09:02:1b:0f:45:5f:99:b4: ef:29:eb:d1:e6:fc:45:f7:63:a2:e5:dd:4e:35:5f:d5:ba:c1: de:43:8c:e7:77:f1:27:68:a3:12:fc:b5:4d:c2:f6:cd:71:de: ea:31:ac:85:d6:4c:44:3c:8d:cd:50:5d:5b:75:ca:2f:5c:3c: 74:f6:00:4f:e1:3d:d9:11:da:2b:01:e5:7d:11:c6:b5:c9:14: 1a:f0:58:25:54:98:6d:0a:38:2e:5d:e4:71:a1:58:7a:68:42: b2:89:1d:6b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUES08CCQ9m1gk0Gw9R5Haak+VQ1gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwODI3MDAxMDE2WhcNMjUxMDAxMjM1OTU5 WjB6MUkwRwYDVQQFE0A1YzEwZTRkMDVmZTJiOGY0MmIyNmI0ZjQwYzQ4N2MzMGYy ODgxMGRhM2IzNDM2YWU4OWEzY2RlMGNmYzU3ODUwMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCcymb5R4qkRpq5VcZwzNzSVpn5rCRhareDphkzf0MOxBV1 6dE2oGDvyReC6foBX4kR3ze4Wgg80UbQSgzdylil03uVdvuoFNbITJc+08+FXQ8o PTv06Hxtz3vtq2xe4Ii3eqXSDDfM9uDejj9qIx4O22pKcCUfUUkiEphEon6kixRv 7rBaYIj/rBu8oHOs7yq4D0YHlZGr8pUj7EexvsumltMOrDO3i2X5l2iCMDz0Rm8A eOR0CEPefTb2fXDfAoqau149MWXQBAgJlfEOts38SY412qpneqnUKyqLZzeGy7QR eRFlWLpRnWddNuI/Z2p+xjlWQMolQf63OrUfciT/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUWcHT3KMad8jk8hQmLgiFt8JFS9MwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzM4YjFkNmE1LThhNmUtNGVkMy1hMDU3LTkzOWZkNGYxN2Y1Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEX+/AwDQYJKoZIhvcNAQELBQADggEBAABU1hB2sEUjkN5RRZEb76YDpr4m 7BLrMZUx/V9pap0lsr+OZpq1K253yPuNzvom3/ZYIhvcUBTSvBSEI0JHqVp2zhhy mFYfi6PY+/I8/Lpgicahc+CyxGMERfKcx/Fq4n/zTNWWQx2GaGHK9Kx1bRRJ1SNq BTHyj8Y1usUgJZVgS6ZYGdZGtughMwnDRntFiCvDW8zAQhm7X8YJAhsPRV+ZtO8p 69Hm/EX3Y6Ll3U41X9W6wd5DjOd38SdooxL8tU3C9s1x3uoxrIXWTEQ8jc1QXVt1 yi9cPHT2AE/hPdkR2isB5X0RxrXJFBrwWCVUmG0KOC5d5HGhWHpoQrKJHWs= -----END CERTIFICATE-----Generated at Sun Sep 7 16:15:37 2025 by rpki-client