$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/8621c38c-da14-4436-8fad-6252da797f1a.roa File: 8621c38c-da14-4436-8fad-6252da797f1a.roa (raw, json) Hash identifier: fRpvipvzJOWdBCs2KQ0L8YTzGKTxDyNCK1nCkv0eiPQ= Subject key identifier: E4:C7:76:B2:86:76:4B:39:7C:F1:9E:AF:27:F1:AD:A9:D0:4C:2A:72 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 0BFF034C652486D4B980F80671F1EB03E683912B Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/8621c38c-da14-4436-8fad-6252da797f1a.roa Signing time: Sat 04 Oct 2025 00:20:58 +0000 ROA not before: Sat 04 Oct 2025 00:20:58 +0000 ROA not after: Sat 08 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.249.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:ff:03:4c:65:24:86:d4:b9:80:f8:06:71:f1:eb:03:e6:83:91:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Oct 4 00:20:58 2025 GMT Not After : Nov 8 23:59:59 2025 GMT Subject: serialNumber=5a57d2e66404446baedd28536aaa99c0371fb3ca5c695f8ab38ef0205fcad71b, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:92:d9:02:74:7d:a7:34:45:09:91:9f:1c:f8: 45:35:1c:00:ad:13:b9:bc:cc:59:b4:f7:be:5a:82: a6:73:f9:e9:87:5f:9d:c2:9e:7d:9b:a2:94:4b:37: ff:06:25:ac:c4:16:0b:13:f1:0d:5d:c5:17:10:dc: cd:2d:3f:57:27:66:a0:fe:36:6e:d7:c2:d8:a5:34: 45:e0:70:89:2a:37:2a:7f:87:69:17:13:40:c5:5d: 29:39:36:25:32:9d:d0:be:77:10:3e:d9:b4:f7:46: 9c:97:59:c6:18:38:36:b9:50:54:b4:ad:36:f8:53: 85:a8:ac:81:52:2e:36:44:5d:da:aa:f3:d1:9f:ae: 07:99:58:b1:26:09:4c:ba:b4:1a:03:40:5f:83:9a: 08:65:e4:bc:46:64:5c:7d:74:fb:d2:83:e4:c3:21: 9f:4e:71:c3:b4:d5:57:80:78:b3:e7:f4:68:7e:f6: 3b:65:a7:d2:a1:aa:06:0b:9b:b9:12:58:03:55:d1: 6e:c0:01:d3:30:95:b9:1c:b8:7d:a5:d6:32:c0:4d: 62:a1:68:9e:c8:58:dc:55:55:8e:80:2c:44:0f:c4: be:c1:d3:23:8c:72:81:18:3e:0a:b3:45:aa:4c:31: 7f:0e:7c:86:03:63:03:af:eb:8a:52:c5:0f:82:44: e2:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:C7:76:B2:86:76:4B:39:7C:F1:9E:AF:27:F1:AD:A9:D0:4C:2A:72 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/8621c38c-da14-4436-8fad-6252da797f1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.222.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:71:7e:6e:24:75:64:db:d9:c3:00:fb:a9:01:9d:01:3f:81: c8:5e:59:96:dd:3d:33:fb:fc:d4:ad:e0:b4:02:26:3e:76:e7: 40:95:79:34:4f:05:4c:61:f4:bf:ae:12:74:a4:14:fb:dd:27: cb:02:8a:08:82:31:75:66:73:c0:f6:f9:78:ad:11:2f:a4:bc: 70:59:ca:2f:37:4d:36:09:15:a6:8a:ee:3e:0f:13:e6:c7:0c: 98:bd:94:6d:4e:d9:0d:f3:1a:21:59:b2:e5:c9:91:13:65:37: 26:91:60:7a:55:69:4d:e4:cf:29:8b:a1:0d:a3:09:ea:0d:c5: 52:46:ea:16:93:78:35:83:4d:4c:d7:dc:33:9c:cb:a5:ee:23: 3f:1d:10:d9:4f:d5:fe:10:9c:48:07:06:65:dd:eb:83:4c:ab: b0:1b:eb:99:84:4b:c1:b6:43:d9:27:f9:50:ef:6b:7b:ea:b5: ce:3d:cc:00:15:0c:2e:69:83:72:40:db:15:b5:94:fd:16:43: 62:43:f8:d0:98:98:34:52:48:0e:26:7b:c3:61:d2:8b:b5:70: 68:29:b1:3f:0d:f7:25:bf:6f:24:c5:07:60:9d:85:6e:c2:24: 5f:5f:a0:da:5d:cd:0c:af:18:40:6c:7f:7d:bb:84:23:24:33: 33:0a:dc:fe -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUC/8DTGUkhtS5gPgGcfHrA+aDkSswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUxMDA0MDAyMDU4WhcNMjUxMTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0A1YTU3ZDJlNjY0MDQ0NDZiYWVkZDI4NTM2YWFhOTljMDM3 MWZiM2NhNWM2OTVmOGFiMzhlZjAyMDVmY2FkNzFiMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCNktkCdH2nNEUJkZ8c+EU1HACtE7m8zFm0975agqZz+emH X53Cnn2bopRLN/8GJazEFgsT8Q1dxRcQ3M0tP1cnZqD+Nm7XwtilNEXgcIkqNyp/ h2kXE0DFXSk5NiUyndC+dxA+2bT3RpyXWcYYODa5UFS0rTb4U4WorIFSLjZEXdqq 89GfrgeZWLEmCUy6tBoDQF+Dmghl5LxGZFx9dPvSg+TDIZ9OccO01VeAeLPn9Gh+ 9jtlp9KhqgYLm7kSWANV0W7AAdMwlbkcuH2l1jLATWKhaJ7IWNxVVY6ALEQPxL7B 0yOMcoEYPgqzRapMMX8OfIYDYwOv64pSxQ+CROKZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5Md2soZ2Szl88Z6vJ/GtqdBMKnIwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzg2MjFjMzhjLWRhMTQtNDQzNi04ZmFkLTYyNTJkYTc5N2YxYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX+d4wDQYJKoZIhvcNAQELBQADggEBADxxfm4kdWTb2cMA+6kBnQE/gche WZbdPTP7/NSt4LQCJj5250CVeTRPBUxh9L+uEnSkFPvdJ8sCigiCMXVmc8D2+Xit ES+kvHBZyi83TTYJFaaK7j4PE+bHDJi9lG1O2Q3zGiFZsuXJkRNlNyaRYHpVaU3k zymLoQ2jCeoNxVJG6haTeDWDTUzX3DOcy6XuIz8dENlP1f4QnEgHBmXd64NMq7Ab 65mES8G2Q9kn+VDva3vqtc49zAAVDC5pg3JA2xW1lP0WQ2JD+NCYmDRSSA4me8Nh 0ou1cGgpsT8N9yW/byTFB2CdhW7CJF9foNpdzQyvGEBsf327hCMkMzMK3P4= -----END CERTIFICATE-----Generated at Mon Oct 20 13:11:48 2025 by rpki-client