$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/c09e0f25-1200-46ec-b6a7-aa4a9764d8c9.roa File: c09e0f25-1200-46ec-b6a7-aa4a9764d8c9.roa (raw, json) Hash identifier: jrw0tVrnuZ7v+gtIBHSfzfVBGRDq3X2wvbJ1t8odbfM= Subject key identifier: A3:23:DB:E2:21:63:54:4E:31:83:4E:4F:6F:CD:90:8C:E8:A4:1F:3B Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 1FAFCD28E1B37521E11EE3FB579589D20B6553E6 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/c09e0f25-1200-46ec-b6a7-aa4a9764d8c9.roa Signing time: Sat 04 Oct 2025 00:20:58 +0000 ROA not before: Sat 04 Oct 2025 00:20:58 +0000 ROA not after: Sat 08 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.249.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:af:cd:28:e1:b3:75:21:e1:1e:e3:fb:57:95:89:d2:0b:65:53:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Oct 4 00:20:58 2025 GMT Not After : Nov 8 23:59:59 2025 GMT Subject: serialNumber=792e4d86a320b84d8200290cc2d9838ea3bc0d8d7c107d31e7627a13b83b42cc, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:52:f4:fd:ab:ee:08:6e:56:bd:bb:42:ce:31: c1:09:72:34:35:d4:17:30:46:d5:8a:be:b8:16:88: b2:5b:cf:37:6c:45:3d:9a:f9:07:0e:4f:14:c9:72: ee:e9:35:9d:b8:60:14:01:8d:25:67:d2:74:df:40: 10:7e:08:8f:ec:75:88:d2:9d:3d:3e:99:b1:85:4f: 9e:ab:35:b7:1f:5c:13:b8:78:65:dc:46:f7:19:89: 99:b8:a1:4d:e6:c3:b4:f8:43:d1:b0:f7:e8:29:c0: 8b:99:7d:3d:ae:95:05:4c:d5:7d:92:de:f5:c4:83: 3f:d3:3d:4e:a9:a7:5b:de:bb:bd:27:46:f0:53:4b: da:50:0c:33:0b:64:52:39:e8:47:56:74:55:6b:3a: 1c:96:55:1a:62:5b:9c:90:c8:c9:2e:6c:8d:59:9d: 4c:00:ff:b8:71:e7:7d:1c:47:49:24:a2:eb:11:49: de:77:59:53:87:94:42:29:a7:e3:6f:0e:2b:99:40: 9c:ee:37:56:c5:ca:20:ca:b8:47:1b:f1:52:fd:93: bc:09:2f:7f:58:b8:3b:8f:d2:d7:1e:3a:a5:22:b7: 5a:64:d7:2a:d2:ca:b5:3b:85:d9:94:db:b7:37:03: 6c:40:66:8e:b1:2c:4f:a1:3c:ff:44:67:52:1b:fc: bd:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:23:DB:E2:21:63:54:4E:31:83:4E:4F:6F:CD:90:8C:E8:A4:1F:3B X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/c09e0f25-1200-46ec-b6a7-aa4a9764d8c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.215.0/24 Signature Algorithm: sha256WithRSAEncryption 57:fe:6f:b5:18:4a:ad:96:b3:e5:98:92:7c:26:11:bb:63:00: e0:29:e6:0c:59:f2:2c:c1:63:cf:22:c1:be:4d:59:fa:64:17: fc:64:e1:27:8c:f7:4d:29:2a:3a:7c:f4:9a:6e:65:78:06:c0: e1:72:04:e6:bd:3e:bb:44:ff:e0:43:f0:9f:5f:5b:42:43:cc: bd:e5:5b:48:58:0d:d5:5e:7a:18:8a:6d:6a:23:08:9e:36:7a: 30:b3:11:22:2a:7b:ef:33:9e:b5:72:c8:82:73:07:b4:3b:76: 52:a3:b8:af:a1:17:00:2d:32:f7:c3:21:07:10:93:9f:eb:e3: 88:1c:2d:12:5a:0b:f0:55:fb:43:25:64:cf:49:a7:8f:4b:6e: 76:dd:bc:ac:92:cd:a0:48:6f:e4:bc:55:24:72:34:ad:21:6d: a8:2a:34:08:5d:6a:27:fa:7b:ab:0f:d1:68:39:35:a5:84:52: df:8b:ba:83:89:44:a8:68:80:5a:b4:47:9d:45:cc:5b:dd:8a: 75:9d:1b:45:a5:27:9f:c2:f1:83:54:f5:78:23:b4:23:89:d8: b6:9e:b8:23:5e:48:88:8d:40:c9:6d:8a:31:5b:bd:e9:e3:91: fe:de:9d:55:2a:c5:f6:1c:7f:31:ee:c8:6a:90:07:58:5b:b9: 17:fb:20:25 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUH6/NKOGzdSHhHuP7V5WJ0gtlU+YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUxMDA0MDAyMDU4WhcNMjUxMTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0A3OTJlNGQ4NmEzMjBiODRkODIwMDI5MGNjMmQ5ODM4ZWEz YmMwZDhkN2MxMDdkMzFlNzYyN2ExM2I4M2I0MmNjMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCnUvT9q+4Ibla9u0LOMcEJcjQ11BcwRtWKvrgWiLJbzzds RT2a+QcOTxTJcu7pNZ24YBQBjSVn0nTfQBB+CI/sdYjSnT0+mbGFT56rNbcfXBO4 eGXcRvcZiZm4oU3mw7T4Q9Gw9+gpwIuZfT2ulQVM1X2S3vXEgz/TPU6pp1veu70n RvBTS9pQDDMLZFI56EdWdFVrOhyWVRpiW5yQyMkubI1ZnUwA/7hx530cR0kkousR Sd53WVOHlEIpp+NvDiuZQJzuN1bFyiDKuEcb8VL9k7wJL39YuDuP0tceOqUit1pk 1yrSyrU7hdmU27c3A2xAZo6xLE+hPP9EZ1Ib/L2pAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUoyPb4iFjVE4xg05Pb82QjOikHzswHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2MwOWUwZjI1LTEyMDAtNDZlYy1iNmE3LWFhNGE5NzY0ZDhjOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX+dcwDQYJKoZIhvcNAQELBQADggEBAFf+b7UYSq2Ws+WYknwmEbtjAOAp 5gxZ8izBY88iwb5NWfpkF/xk4SeM900pKjp89JpuZXgGwOFyBOa9PrtE/+BD8J9f W0JDzL3lW0hYDdVeehiKbWojCJ42ejCzESIqe+8znrVyyIJzB7Q7dlKjuK+hFwAt MvfDIQcQk5/r44gcLRJaC/BV+0MlZM9Jp49LbnbdvKySzaBIb+S8VSRyNK0hbagq NAhdaif6e6sP0Wg5NaWEUt+LuoOJRKhogFq0R51FzFvdinWdG0WlJ5/C8YNU9Xgj tCOJ2LaeuCNeSIiNQMltijFbvenjkf7enVUqxfYcfzHuyGqQB1hbuRf7ICU= -----END CERTIFICATE-----Generated at Mon Oct 20 13:03:30 2025 by rpki-client