$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5d3e8652-f410-4c92-b5a2-7173c9ab4ea0.roa File: 5d3e8652-f410-4c92-b5a2-7173c9ab4ea0.roa (raw, json) Hash identifier: rE7os8af7vbqfE10Irn5JlZ11b+XYaot4pr4XPpRoZU= Subject key identifier: 7F:5E:CA:2D:DD:B9:8D:F8:91:0D:7E:2A:61:AF:D4:CD:C1:91:60:39 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 3B5305AC221C95D3E8463FA2F42AA501ED8EC696 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5d3e8652-f410-4c92-b5a2-7173c9ab4ea0.roa Signing time: Wed 27 Aug 2025 00:10:26 +0000 ROA not before: Wed 27 Aug 2025 00:10:26 +0000 ROA not after: Wed 01 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 69.169.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:53:05:ac:22:1c:95:d3:e8:46:3f:a2:f4:2a:a5:01:ed:8e:c6:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Aug 27 00:10:26 2025 GMT Not After : Oct 1 23:59:59 2025 GMT Subject: serialNumber=64906c10e9d957dd9cc7b6ea9c141c7348831ccc19a999b2d6ea2e718a1bf161, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:82:31:aa:dd:76:0b:2c:32:e1:75:d4:08:24: 54:bb:a6:2d:b9:a4:a1:e4:9e:d8:64:69:4d:6a:12: ea:3a:57:09:48:00:08:be:63:24:84:8a:37:54:c0: cb:d6:04:92:57:0d:ce:4d:fb:13:5a:cc:78:ef:2c: a3:5f:72:b5:30:bb:b2:2e:dc:c8:b5:ea:b7:e0:65: d5:90:ab:b3:78:fa:0a:b7:40:85:4e:4d:41:81:73: 22:7c:bf:84:a6:0b:17:03:d3:a9:10:e0:1d:f9:57: 92:ef:00:10:72:2b:f3:c5:29:df:ae:9f:8f:65:51: ee:be:e4:4e:fb:2b:e8:9c:e6:ee:61:4d:1c:19:ec: 65:9b:9e:18:aa:08:13:94:31:38:f9:13:04:50:91: 90:35:2b:30:e1:a2:96:68:7a:d6:02:ea:f9:c3:9a: 03:a1:bc:a7:3a:d8:40:3c:55:9e:ce:dc:40:a5:21: 33:c8:9b:42:a3:3d:04:16:94:c7:91:fe:d2:65:25: f6:db:4a:6d:90:d3:b5:45:74:7c:72:eb:8e:22:7d: 24:ae:f8:06:f3:0d:2e:0c:97:96:76:78:01:cc:b9: de:8f:ad:73:c1:57:f4:65:77:a8:e0:04:56:6f:53: e2:b0:f0:14:4e:7e:89:5b:b4:46:7a:7f:e8:48:c7: 64:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:5E:CA:2D:DD:B9:8D:F8:91:0D:7E:2A:61:AF:D4:CD:C1:91:60:39 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5d3e8652-f410-4c92-b5a2-7173c9ab4ea0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 69.169.235.0/24 Signature Algorithm: sha256WithRSAEncryption 08:f2:17:87:d7:c6:47:91:61:2c:d2:fd:0b:9c:e0:60:8d:93: c0:99:8e:ee:e4:df:f9:2e:94:23:62:45:02:ba:d1:d2:ae:79: 33:28:87:69:4b:c8:e0:bc:40:bd:1b:b9:8f:00:99:ac:6b:b3: 4a:b6:c9:26:55:14:65:c9:0d:67:f1:bf:30:dd:f7:fb:1f:94: 38:1b:51:5e:a7:d7:ca:92:0f:fd:44:3d:7c:cb:42:41:37:43: 29:be:4e:d4:ce:70:af:da:df:fe:c9:6d:96:cd:b3:20:bc:b1: ba:3c:2e:79:d9:2e:71:f7:ea:4c:d7:dc:48:8c:52:11:ee:e5: f6:69:58:c7:1e:42:ae:dc:68:bc:dc:44:2d:a4:83:65:7e:81: f4:77:8e:e3:7c:98:07:0a:77:3f:16:e1:e9:db:36:d8:9f:a4: 16:1c:cd:77:87:0d:86:55:b5:41:fd:30:b6:87:bb:89:62:08: 23:00:ac:8b:6a:31:f4:12:a5:55:08:20:4e:78:e9:82:8d:3d: bf:bb:5c:cb:a6:23:68:1a:be:13:e8:90:61:4b:8b:d6:a8:3f: eb:eb:ae:db:df:22:fb:0d:93:9a:02:f9:c3:fe:c1:d7:33:98: 72:83:c9:da:07:5d:3c:b9:a2:a3:1b:9e:9f:c2:b9:2d:f0:ad: ad:ad:4e:fe -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUO1MFrCIcldPoRj+i9CqlAe2OxpYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwODI3MDAxMDI2WhcNMjUxMDAxMjM1OTU5 WjB6MUkwRwYDVQQFE0A2NDkwNmMxMGU5ZDk1N2RkOWNjN2I2ZWE5YzE0MWM3MzQ4 ODMxY2NjMTlhOTk5YjJkNmVhMmU3MThhMWJmMTYxMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCygjGq3XYLLDLhddQIJFS7pi25pKHknthkaU1qEuo6VwlI AAi+YySEijdUwMvWBJJXDc5N+xNazHjvLKNfcrUwu7Iu3Mi16rfgZdWQq7N4+gq3 QIVOTUGBcyJ8v4SmCxcD06kQ4B35V5LvABByK/PFKd+un49lUe6+5E77K+ic5u5h TRwZ7GWbnhiqCBOUMTj5EwRQkZA1KzDhopZoetYC6vnDmgOhvKc62EA8VZ7O3ECl ITPIm0KjPQQWlMeR/tJlJfbbSm2Q07VFdHxy644ifSSu+AbzDS4Ml5Z2eAHMud6P rXPBV/Rld6jgBFZvU+Kw8BROfolbtEZ6f+hIx2QXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUf17KLd25jfiRDX4qYa/UzcGRYDkwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzVkM2U4NjUyLWY0MTAtNGM5Mi1iNWEyLTcxNzNjOWFiNGVhMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABFqeswDQYJKoZIhvcNAQELBQADggEBAAjyF4fXxkeRYSzS/Quc4GCNk8CZ ju7k3/kulCNiRQK60dKueTMoh2lLyOC8QL0buY8Amaxrs0q2ySZVFGXJDWfxvzDd 9/sflDgbUV6n18qSD/1EPXzLQkE3Qym+TtTOcK/a3/7JbZbNsyC8sbo8LnnZLnH3 6kzX3EiMUhHu5fZpWMceQq7caLzcRC2kg2V+gfR3juN8mAcKdz8W4enbNtifpBYc zXeHDYZVtUH9MLaHu4liCCMArItqMfQSpVUIIE546YKNPb+7XMumI2gavhPokGFL i9aoP+vrrtvfIvsNk5oC+cP+wdczmHKDydoHXTy5oqMbnp/CuS3wra2tTv4= -----END CERTIFICATE-----Generated at Sun Sep 7 16:17:43 2025 by rpki-client