$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/f67538ee-cd29-4883-9251-086023a50dc3.roa File: f67538ee-cd29-4883-9251-086023a50dc3.roa (raw, json) Hash identifier: AWbjU3ZEY1z30BFsLa97iW5FQpXQPejJTQoUQBrbeqs= Subject key identifier: 8A:B4:DF:83:1C:43:BA:98:6C:D9:90:59:2F:F3:26:5D:45:B9:72:F7 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 5EADED6B9568B7B754497758CE0D46370F74F88F Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/f67538ee-cd29-4883-9251-086023a50dc3.roa Signing time: Fri 15 Aug 2025 00:20:46 +0000 ROA not before: Fri 15 Aug 2025 00:20:46 +0000 ROA not after: Fri 19 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.251.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:ad:ed:6b:95:68:b7:b7:54:49:77:58:ce:0d:46:37:0f:74:f8:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Aug 15 00:20:46 2025 GMT Not After : Sep 19 23:59:59 2025 GMT Subject: serialNumber=f10ff6805a849c2de5ee0fab74bebfc5ffa0f66c1e180d8d706f6d11682d05a8, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f7:f4:88:ad:4e:f5:6f:10:ed:e0:87:ac:9a: 72:32:fe:8e:e8:63:b1:e6:f1:85:ee:f6:13:f3:4e: c6:3c:48:b2:c3:19:02:e7:7f:c0:52:bf:e2:da:28: fe:3e:b4:86:05:f0:0b:ed:03:dc:4e:e8:b7:0d:13: ec:97:68:52:6d:dc:b6:39:3e:42:51:a2:59:0f:46: a4:1b:78:d4:ea:50:71:e8:fd:f8:59:b1:58:76:86: ee:8c:4e:df:01:8e:24:0c:cb:80:4e:ec:fe:6c:c9: ca:22:64:2f:cc:cd:13:c8:42:78:c2:f7:a0:a1:b7: f7:bd:84:46:cd:86:f3:f4:8c:eb:ec:b1:70:7c:93: ba:05:ee:59:2a:48:a5:cf:b5:80:f3:d7:b4:7d:13: 4b:29:fc:9b:c4:62:23:09:24:47:07:81:67:b8:ad: ec:f5:23:a5:a8:70:f6:40:58:0c:d9:26:39:85:2f: 59:6c:7d:be:4e:47:8a:88:e3:c2:8e:9e:90:36:77: 02:21:65:5f:13:34:4d:64:b2:8a:4f:da:a0:d1:bf: e1:29:06:e4:62:28:58:71:8c:9f:a6:64:a6:c0:06: 90:70:7f:5f:86:25:3d:6f:e1:71:e8:b1:73:b9:7b: 4d:f2:14:76:c1:cf:20:f9:ea:75:51:cc:d8:01:7c: 66:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:B4:DF:83:1C:43:BA:98:6C:D9:90:59:2F:F3:26:5D:45:B9:72:F7 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/f67538ee-cd29-4883-9251-086023a50dc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.251.227.0/24 Signature Algorithm: sha256WithRSAEncryption 75:07:7e:0f:01:bc:eb:42:e5:2b:1a:e5:ee:e0:5d:a0:c6:12: a1:de:72:2e:a3:4b:9a:95:ea:5a:88:97:b7:f6:db:c3:16:d0: 3d:11:15:72:be:57:a0:19:b2:e8:c8:cf:7a:d8:c1:c8:50:d3: 67:46:05:ce:d1:a6:06:ab:eb:cf:3f:7a:64:67:ce:09:47:94: e2:7d:01:61:ca:aa:50:c6:7e:08:37:81:28:ca:d2:50:71:c6: 5f:1e:8b:f1:ce:83:06:68:81:a2:7a:88:78:28:ba:7e:98:9b: 68:aa:63:c0:50:3a:91:0b:a6:95:3b:3e:c0:0a:23:9e:62:e2: 90:b1:3b:51:80:c0:0e:43:39:5e:51:3d:82:58:37:28:84:b5: 34:7a:33:77:b9:ff:72:a4:73:08:e3:9f:bc:3a:61:5e:19:a8: 40:2b:e1:3f:d3:4b:b0:78:b4:b6:47:fb:1e:3a:61:46:2d:e6: 23:80:68:0e:8e:72:53:63:37:f7:c6:90:e7:e1:47:36:55:69: eb:e4:4f:d6:19:59:be:7d:df:91:cd:d4:0a:b4:e5:21:3c:7f: 28:1e:6e:d6:a2:68:16:bc:37:d9:a3:50:eb:55:4b:5c:6c:7a: 34:48:06:b6:8f:85:18:8d:95:d7:9b:b9:b8:ff:76:da:4d:b2: 85:1b:54:17 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXq3ta5Vot7dUSXdYzg1GNw90+I8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwODE1MDAyMDQ2WhcNMjUwOTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BmMTBmZjY4MDVhODQ5YzJkZTVlZTBmYWI3NGJlYmZjNWZm YTBmNjZjMWUxODBkOGQ3MDZmNmQxMTY4MmQwNWE4MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCN9/SIrU71bxDt4IesmnIy/o7oY7Hm8YXu9hPzTsY8SLLD GQLnf8BSv+LaKP4+tIYF8AvtA9xO6LcNE+yXaFJt3LY5PkJRolkPRqQbeNTqUHHo /fhZsVh2hu6MTt8BjiQMy4BO7P5sycoiZC/MzRPIQnjC96Cht/e9hEbNhvP0jOvs sXB8k7oF7lkqSKXPtYDz17R9E0sp/JvEYiMJJEcHgWe4rez1I6WocPZAWAzZJjmF L1lsfb5OR4qI48KOnpA2dwIhZV8TNE1ksopP2qDRv+EpBuRiKFhxjJ+mZKbABpBw f1+GJT1v4XHosXO5e03yFHbBzyD56nVRzNgBfGaJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUirTfgxxDuphs2ZBZL/MmXUW5cvcwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2Y2NzUzOGVlLWNkMjktNDg4My05MjUxLTA4NjAyM2E1MGRjMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX++MwDQYJKoZIhvcNAQELBQADggEBAHUHfg8BvOtC5Ssa5e7gXaDGEqHe ci6jS5qV6lqIl7f228MW0D0RFXK+V6AZsujIz3rYwchQ02dGBc7Rpgar688/emRn zglHlOJ9AWHKqlDGfgg3gSjK0lBxxl8ei/HOgwZogaJ6iHgoun6Ym2iqY8BQOpEL ppU7PsAKI55i4pCxO1GAwA5DOV5RPYJYNyiEtTR6M3e5/3Kkcwjjn7w6YV4ZqEAr 4T/TS7B4tLZH+x46YUYt5iOAaA6OclNjN/fGkOfhRzZVaevkT9YZWb5935HN1Aq0 5SE8fygebtaiaBa8N9mjUOtVS1xsejRIBraPhRiNldebubj/dtpNsoUbVBc= -----END CERTIFICATE-----Generated at Wed Aug 20 13:20:12 2025 by rpki-client