$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5e3c0e08-edb8-4079-81e3-f4c857efb338.roa File: 5e3c0e08-edb8-4079-81e3-f4c857efb338.roa (raw, json) Hash identifier: HIlwhrkAg54Hf3tKRGqRTJmcZMCaGjNDgfwgE3WLSg4= Subject key identifier: C5:78:70:1D:4E:24:F1:79:D2:21:59:2C:B1:0A:4B:C4:02:00:A8:8B Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 392F81939B92E125B657905C40AA3A84618877C9 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5e3c0e08-edb8-4079-81e3-f4c857efb338.roa Signing time: Sat 04 Oct 2025 00:20:52 +0000 ROA not before: Sat 04 Oct 2025 00:20:52 +0000 ROA not after: Sat 08 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.249.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:2f:81:93:9b:92:e1:25:b6:57:90:5c:40:aa:3a:84:61:88:77:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Oct 4 00:20:52 2025 GMT Not After : Nov 8 23:59:59 2025 GMT Subject: serialNumber=2b9d003f3317506c60a5881b7d326fdca76892934ef249799fc54774ce000229, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:68:61:0e:91:66:fd:86:8c:48:ae:3f:0e:3e: 69:68:2e:48:2d:13:d5:b7:89:b3:10:60:84:84:ea: eb:e6:0a:00:ac:55:4f:34:c4:cb:77:dd:65:e7:f6: 16:fc:b4:44:4a:2f:15:9b:7a:40:c2:9a:23:6c:f4: 37:da:c5:aa:a5:92:ce:aa:4f:aa:92:ac:7e:ac:c2: 37:39:38:1e:b2:94:25:ce:4c:f6:09:d6:f7:5d:55: b8:fa:a2:03:67:6d:95:6d:a5:f0:68:ce:ed:39:89: 84:02:13:ad:4c:14:21:50:fa:fc:dd:bc:5a:1c:d8: 66:44:8f:c4:0e:98:2d:b4:1e:f5:1b:93:12:88:7a: 6e:1b:e6:36:3c:08:8c:0a:50:df:8c:8a:1e:39:5a: 1a:b6:cb:05:1e:0b:2b:d8:47:52:b3:92:e0:28:1b: 55:94:1c:ee:4b:7f:84:48:7c:27:3d:11:f3:33:0e: f9:7a:f9:12:5a:7a:2a:fd:ac:03:12:12:94:58:ac: 2b:21:66:69:6b:ed:65:09:0e:b7:dc:cc:69:91:29: 77:16:70:f2:e2:1f:cd:16:6d:55:df:f1:fb:52:60: 20:54:ec:55:41:02:7f:3f:1d:15:c2:91:a5:31:9c: 3e:1f:20:50:31:00:5e:23:05:f9:47:c8:c1:26:87: 20:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:78:70:1D:4E:24:F1:79:D2:21:59:2C:B1:0A:4B:C4:02:00:A8:8B X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5e3c0e08-edb8-4079-81e3-f4c857efb338.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.221.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:70:84:1d:e9:9d:f5:0f:e2:a5:f3:07:0a:0c:79:8c:62:e0: 79:5d:b5:9b:2f:db:76:ac:e4:a8:9c:c7:aa:dd:8b:90:2f:34: f7:bd:84:88:58:61:40:14:b8:e5:fe:58:e0:5e:65:24:54:dd: a5:7e:96:81:31:7c:27:c6:b8:89:e4:a1:01:3c:a8:bd:36:3e: 0a:81:53:b1:52:ae:3c:d6:22:94:06:3c:04:8e:98:e9:8a:25: 61:34:4c:45:ec:43:e9:56:1c:8d:03:73:26:10:6d:5f:e9:2a: b9:96:18:a9:e7:5c:f0:03:05:68:5e:ce:7e:12:bc:a1:5c:69: 50:2b:a0:6c:d3:e3:69:e7:05:37:3b:d0:7c:67:a1:1a:cf:b3: 6e:7a:e2:82:d7:45:ee:2e:78:6e:f7:18:28:61:e6:e3:2b:00: 23:ab:44:ce:a9:37:c8:aa:5d:c4:39:5c:c9:93:20:5e:8a:08: b8:8e:f7:05:d5:e4:f9:6d:fe:03:03:43:35:5b:73:00:52:67: 09:68:72:3a:76:30:45:84:48:7a:30:06:17:6f:cd:3a:08:66: 2c:d3:8a:d3:a8:5d:cd:a3:28:ec:c0:4c:5e:79:50:7e:4b:01: a8:b0:d6:7b:e1:13:e9:1a:b7:8b:62:b9:7c:d8:5e:e9:8e:5e: f8:a6:99:96 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOS+Bk5uS4SW2V5BcQKo6hGGId8kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUxMDA0MDAyMDUyWhcNMjUxMTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0AyYjlkMDAzZjMzMTc1MDZjNjBhNTg4MWI3ZDMyNmZkY2E3 Njg5MjkzNGVmMjQ5Nzk5ZmM1NDc3NGNlMDAwMjI5MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQChaGEOkWb9hoxIrj8OPmloLkgtE9W3ibMQYISE6uvmCgCs VU80xMt33WXn9hb8tERKLxWbekDCmiNs9Dfaxaqlks6qT6qSrH6swjc5OB6ylCXO TPYJ1vddVbj6ogNnbZVtpfBozu05iYQCE61MFCFQ+vzdvFoc2GZEj8QOmC20HvUb kxKIem4b5jY8CIwKUN+Mih45Whq2ywUeCyvYR1KzkuAoG1WUHO5Lf4RIfCc9EfMz Dvl6+RJaeir9rAMSEpRYrCshZmlr7WUJDrfczGmRKXcWcPLiH80WbVXf8ftSYCBU 7FVBAn8/HRXCkaUxnD4fIFAxAF4jBflHyMEmhyAJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUxXhwHU4k8XnSIVkssQpLxAIAqIswHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzVlM2MwZTA4LWVkYjgtNDA3OS04MWUzLWY0Yzg1N2VmYjMzOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX+d0wDQYJKoZIhvcNAQELBQADggEBAG1whB3pnfUP4qXzBwoMeYxi4Hld tZsv23as5Kicx6rdi5AvNPe9hIhYYUAUuOX+WOBeZSRU3aV+loExfCfGuInkoQE8 qL02PgqBU7FSrjzWIpQGPASOmOmKJWE0TEXsQ+lWHI0DcyYQbV/pKrmWGKnnXPAD BWhezn4SvKFcaVAroGzT42nnBTc70HxnoRrPs2564oLXRe4ueG73GChh5uMrACOr RM6pN8iqXcQ5XMmTIF6KCLiO9wXV5Plt/gMDQzVbcwBSZwlocjp2MEWESHowBhdv zToIZizTitOoXc2jKOzATF55UH5LAaiw1nvhE+kat4tiuXzYXumOXvimmZY= -----END CERTIFICATE-----Generated at Thu Oct 23 16:09:45 2025 by rpki-client