$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/d61aefde-15db-4326-8486-f4cd98992cbc.roa File: d61aefde-15db-4326-8486-f4cd98992cbc.roa (raw, json) Hash identifier: 6CBxLoWLiucjV03WzScbR96Xr3/MAmzmpGc0HCWDbks= Subject key identifier: A2:EF:9A:9F:55:AF:6B:AA:BF:19:53:A2:A8:8C:0A:2A:81:43:83:74 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 34DF168D9C8184D5AD85232AD77CC2807202CC9E Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/d61aefde-15db-4326-8486-f4cd98992cbc.roa Signing time: Sat 04 Oct 2025 00:20:59 +0000 ROA not before: Sat 04 Oct 2025 00:20:59 +0000 ROA not after: Sat 08 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.249.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:df:16:8d:9c:81:84:d5:ad:85:23:2a:d7:7c:c2:80:72:02:cc:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Oct 4 00:20:59 2025 GMT Not After : Nov 8 23:59:59 2025 GMT Subject: serialNumber=f287fea2fe0d64f07f384a69fd9694ef633a1a7c89ad9be13f8df61f03588397, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ba:a4:7c:8d:ef:3d:64:2a:0a:5f:b9:ad:e4: 1f:bb:62:b0:3d:e3:9f:ca:1a:36:f8:df:76:a9:0d: 88:33:ca:57:70:ae:ea:7d:59:95:8c:5b:5a:6a:7d: 20:d6:1c:fa:0a:d7:b9:72:44:32:20:49:7d:bf:47: f8:a7:70:a6:dc:b9:48:6f:79:89:31:bb:5e:27:15: 16:57:d3:53:3a:6f:7f:8f:b1:6f:4b:61:4c:5c:7d: cd:69:c0:14:b9:c3:f2:9a:a1:78:3a:2f:3b:c4:5e: 68:07:a2:f8:d3:71:80:1d:4e:4f:1e:44:4e:77:a4: 9e:6a:79:34:e8:87:04:48:4a:71:f0:97:b8:9b:de: 7d:1b:b8:58:fd:ca:23:34:3c:40:7d:68:f8:23:66: 8a:ad:16:87:43:94:36:f4:91:7d:10:13:92:f0:16: 9f:a8:f4:61:5c:72:f0:43:3e:3b:a5:61:13:c9:c5: 49:bb:a7:4e:8d:4b:8f:d9:14:49:c1:51:e4:41:d5: d8:6d:14:7e:dd:75:22:be:99:01:b6:f8:2b:e5:2d: 32:f0:4a:c4:ec:2f:1c:58:e4:a6:d2:df:59:58:e1: 0d:9b:29:b9:98:c3:cb:d0:5d:c1:37:50:f1:9e:8f: dc:64:2c:10:ca:0b:ca:47:a7:12:5a:00:12:d1:d5: 01:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:EF:9A:9F:55:AF:6B:AA:BF:19:53:A2:A8:8C:0A:2A:81:43:83:74 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/d61aefde-15db-4326-8486-f4cd98992cbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.223.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:1b:eb:3d:b1:50:88:87:ef:26:14:50:7f:06:b0:d0:7a:63: 5c:e7:16:51:09:bb:b5:73:9d:a9:8c:e6:a0:0e:47:87:4b:35: 8f:a5:2f:7c:77:35:d6:d2:78:ff:2d:4c:45:9f:d8:47:50:de: 5a:c7:99:46:3c:ca:9e:11:98:6e:69:2f:6a:ea:9e:1c:77:94: 5b:83:a5:47:a2:26:3a:34:dd:79:57:cb:c4:cb:21:5a:12:92: e4:df:4e:b6:bc:89:30:ef:fc:28:1b:eb:b4:41:71:f6:50:b2: c7:34:47:d1:aa:04:f2:98:0b:2f:ad:5e:9e:7f:ff:d2:b6:e5: 67:d5:c4:68:cc:f7:16:dd:ed:d3:e3:7a:df:61:15:b1:d2:6d: 20:0a:80:cc:cd:dd:91:c6:03:1c:13:ba:07:1d:35:11:f9:0d: 0f:9c:98:2e:53:d6:be:cb:1f:95:f3:df:c7:be:8d:99:d3:98: 21:0a:4a:a8:e8:2f:49:c9:50:9a:80:b7:83:5d:72:28:90:66: 6a:db:ea:2a:31:e3:6c:51:dc:74:3c:46:b8:e0:80:e4:83:a0: f6:06:5b:7b:aa:50:a0:81:17:f6:90:18:70:38:ec:65:d6:83: 8f:e6:bf:e9:b7:4b:d6:26:b5:92:df:2f:61:98:93:13:25:b4: ab:08:18:4c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNN8WjZyBhNWthSMq13zCgHICzJ4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUxMDA0MDAyMDU5WhcNMjUxMTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0BmMjg3ZmVhMmZlMGQ2NGYwN2YzODRhNjlmZDk2OTRlZjYz M2ExYTdjODlhZDliZTEzZjhkZjYxZjAzNTg4Mzk3MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCeuqR8je89ZCoKX7mt5B+7YrA945/KGjb433apDYgzyldw rup9WZWMW1pqfSDWHPoK17lyRDIgSX2/R/incKbcuUhveYkxu14nFRZX01M6b3+P sW9LYUxcfc1pwBS5w/KaoXg6LzvEXmgHovjTcYAdTk8eRE53pJ5qeTTohwRISnHw l7ib3n0buFj9yiM0PEB9aPgjZoqtFodDlDb0kX0QE5LwFp+o9GFccvBDPjulYRPJ xUm7p06NS4/ZFEnBUeRB1dhtFH7ddSK+mQG2+CvlLTLwSsTsLxxY5KbS31lY4Q2b KbmYw8vQXcE3UPGej9xkLBDKC8pHpxJaABLR1QGFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUou+an1Wva6q/GVOiqIwKKoFDg3QwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2Q2MWFlZmRlLTE1ZGItNDMyNi04NDg2LWY0Y2Q5ODk5MmNiYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX+d8wDQYJKoZIhvcNAQELBQADggEBAE8b6z2xUIiH7yYUUH8GsNB6Y1zn FlEJu7VznamM5qAOR4dLNY+lL3x3NdbSeP8tTEWf2EdQ3lrHmUY8yp4RmG5pL2rq nhx3lFuDpUeiJjo03XlXy8TLIVoSkuTfTra8iTDv/Cgb67RBcfZQssc0R9GqBPKY Cy+tXp5//9K25WfVxGjM9xbd7dPjet9hFbHSbSAKgMzN3ZHGAxwTugcdNRH5DQ+c mC5T1r7LH5Xz38e+jZnTmCEKSqjoL0nJUJqAt4NdciiQZmrb6iox42xR3HQ8Rrjg gOSDoPYGW3uqUKCBF/aQGHA47GXWg4/mv+m3S9YmtZLfL2GYkxMltKsIGEw= -----END CERTIFICATE-----Generated at Mon Oct 20 18:16:45 2025 by rpki-client