$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/cc9456b4-9220-4344-96a0-04b9d83c30f6.roa File: cc9456b4-9220-4344-96a0-04b9d83c30f6.roa (raw, json) Hash identifier: kcICFz0W42IYhltdu9jgJq+xV+w7N0HBrpWk38vKmMY= Subject key identifier: F5:82:A1:AB:14:B9:1A:74:97:6A:23:54:26:D4:45:83:F6:C5:A0:A6 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 4957741A3BA6F2A982B6BCD5AE08135E79EE9530 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/cc9456b4-9220-4344-96a0-04b9d83c30f6.roa Signing time: Wed 27 Aug 2025 00:10:18 +0000 ROA not before: Wed 27 Aug 2025 00:10:18 +0000 ROA not after: Wed 01 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.251.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:57:74:1a:3b:a6:f2:a9:82:b6:bc:d5:ae:08:13:5e:79:ee:95:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Aug 27 00:10:18 2025 GMT Not After : Oct 1 23:59:59 2025 GMT Subject: serialNumber=659cd0e5bb1d774edd04ad4ce9810af4e8d9db973c6f57b4e5d3fdf2a221d438, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:27:b0:a2:e2:19:22:fd:e3:58:28:81:dd:85: 2a:c2:e3:f9:a2:9d:81:39:1d:a7:0c:43:29:8f:38: 7b:5d:7a:8d:86:8a:03:a9:0d:85:b5:6e:bd:c6:24: 5c:79:be:b8:8e:cc:55:36:d2:38:05:dc:d3:49:ed: c9:41:7f:30:4b:84:db:06:26:07:f2:8e:8b:cf:de: 5c:62:22:9f:63:8b:06:f7:a1:a0:6e:04:db:28:d2: 00:02:39:55:96:6a:6d:e0:cc:d9:e2:ed:58:e0:f7: 56:6f:bb:b0:c0:09:e7:1d:92:82:c9:3f:44:b8:b0: 03:25:35:33:23:0f:14:9d:d9:5a:5a:30:c6:be:c1: 2e:24:41:e6:d9:d9:55:0b:27:6a:ba:85:cf:1b:f5: fe:de:69:6b:53:ce:c3:91:99:e4:f5:78:45:ae:19: 96:15:65:26:fe:b1:19:0a:48:06:e8:44:59:92:59: eb:34:60:38:e9:fc:0d:7a:16:c8:b7:68:3f:ca:c1: 5d:02:d6:a7:4e:c1:05:3d:00:89:9a:08:90:b0:9f: e5:bc:bc:06:77:d8:20:65:98:d7:1e:e5:57:66:dd: d3:d8:a9:ed:b9:8c:03:41:6d:60:1b:ce:94:f5:74: 91:97:5a:c7:e4:43:d8:a7:18:8b:d2:34:93:3c:59: af:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:82:A1:AB:14:B9:1A:74:97:6A:23:54:26:D4:45:83:F6:C5:A0:A6 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/cc9456b4-9220-4344-96a0-04b9d83c30f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.251.248.0/23 Signature Algorithm: sha256WithRSAEncryption 72:00:5e:93:1b:fe:62:7e:31:ac:48:80:74:c0:11:1e:eb:85: ee:bc:85:7a:20:df:ca:a5:19:ae:90:af:6c:5c:50:74:54:65: 93:e9:ff:75:36:d2:0a:5d:ea:fd:65:7d:56:61:94:ea:61:62: 95:b2:d5:e3:6a:ab:86:4b:ee:b9:17:ac:59:21:87:10:63:a3: 50:8c:b3:7c:e0:14:39:75:51:77:2b:4a:6c:d8:66:2e:f9:8b: 5e:4d:d5:45:2d:04:73:24:5f:fb:77:49:ef:c5:b9:33:d9:db: 72:54:dd:88:2c:82:c9:91:2e:61:4d:c5:86:94:df:e2:ff:39: 8a:b8:3a:b0:9b:9e:a2:98:a3:b3:ff:76:80:d8:6f:84:a9:b0: 8b:e9:f4:d0:6c:cd:33:fe:e2:08:ac:b3:a2:d8:e3:d3:c5:16: f7:e9:71:b0:a2:dc:b0:80:37:3b:33:6d:53:4a:97:1d:9a:2f: 51:07:01:69:68:c2:9f:38:ad:b2:d0:48:fa:d0:d4:7c:54:a7: 5f:88:4a:0c:de:4e:c3:35:18:46:05:e0:5e:4f:49:ff:03:aa: 95:93:90:bc:a1:f7:44:d3:38:af:d9:9d:d4:ab:64:44:5e:d9: 31:7c:70:70:24:91:06:59:8b:52:e5:2a:4c:96:68:22:30:64: 14:98:9d:42 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSVd0Gjum8qmCtrzVrggTXnnulTAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwODI3MDAxMDE4WhcNMjUxMDAxMjM1OTU5 WjB6MUkwRwYDVQQFE0A2NTljZDBlNWJiMWQ3NzRlZGQwNGFkNGNlOTgxMGFmNGU4 ZDlkYjk3M2M2ZjU3YjRlNWQzZmRmMmEyMjFkNDM4MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCnJ7Ci4hki/eNYKIHdhSrC4/minYE5HacMQymPOHtdeo2G igOpDYW1br3GJFx5vriOzFU20jgF3NNJ7clBfzBLhNsGJgfyjovP3lxiIp9jiwb3 oaBuBNso0gACOVWWam3gzNni7Vjg91Zvu7DACecdkoLJP0S4sAMlNTMjDxSd2Vpa MMa+wS4kQebZ2VULJ2q6hc8b9f7eaWtTzsORmeT1eEWuGZYVZSb+sRkKSAboRFmS Wes0YDjp/A16Fsi3aD/KwV0C1qdOwQU9AImaCJCwn+W8vAZ32CBlmNce5Vdm3dPY qe25jANBbWAbzpT1dJGXWsfkQ9inGIvSNJM8Wa8lAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU9YKhqxS5GnSXaiNUJtRFg/bFoKYwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2NjOTQ1NmI0LTkyMjAtNDM0NC05NmEwLTA0YjlkODNjMzBmNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEX+/gwDQYJKoZIhvcNAQELBQADggEBAHIAXpMb/mJ+MaxIgHTAER7rhe68 hXog38qlGa6Qr2xcUHRUZZPp/3U20gpd6v1lfVZhlOphYpWy1eNqq4ZL7rkXrFkh hxBjo1CMs3zgFDl1UXcrSmzYZi75i15N1UUtBHMkX/t3Se/FuTPZ23JU3YgsgsmR LmFNxYaU3+L/OYq4OrCbnqKYo7P/doDYb4SpsIvp9NBszTP+4giss6LY49PFFvfp cbCi3LCANzszbVNKlx2aL1EHAWlowp84rbLQSPrQ1HxUp1+ISgzeTsM1GEYF4F5P Sf8DqpWTkLyh90TTOK/ZndSrZERe2TF8cHAkkQZZi1LlKkyWaCIwZBSYnUI= -----END CERTIFICATE-----Generated at Sun Sep 7 16:24:43 2025 by rpki-client