$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/271f0380-5b52-472a-bc37-cdbbdcd650e9.roa File: 271f0380-5b52-472a-bc37-cdbbdcd650e9.roa (raw, json) Hash identifier: 4tIqgBe85vDssf/08vNvNTEEtyNBoMPkICsAYev0/FU= Subject key identifier: A6:65:0A:E8:4B:61:CF:0B:B8:78:93:47:62:8E:DF:6E:71:8C:07:B0 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 5A62EEB0CCE94C8952871999A98312C29C1CB8D9 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/271f0380-5b52-472a-bc37-cdbbdcd650e9.roa Signing time: Wed 29 Oct 2025 00:10:06 +0000 ROA not before: Wed 29 Oct 2025 00:10:06 +0000 ROA not after: Wed 03 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.249.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:62:ee:b0:cc:e9:4c:89:52:87:19:99:a9:83:12:c2:9c:1c:b8:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Oct 29 00:10:06 2025 GMT Not After : Dec 3 23:59:59 2025 GMT Subject: serialNumber=071c291d56276ab0d8eba2999abeddd9329693b557d3626ab4a932892f587bb3, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:83:7a:24:78:5a:f5:ef:19:75:ea:21:00:82: 63:11:4b:c4:79:63:89:7f:7d:72:3a:5b:eb:99:b0: 88:ad:ff:4a:61:cc:15:b8:b4:99:08:93:6d:96:0b: 42:d0:63:1b:58:88:6c:8c:d5:7b:5a:95:11:64:93: e3:4d:3e:3b:b6:4b:9d:e1:b8:6c:f5:af:dc:39:48: 96:97:df:a1:86:ee:93:bc:75:b2:12:a4:0d:4d:62: 71:cc:86:9d:7c:ec:56:56:c9:24:db:18:f8:4f:d6: a3:10:7a:83:e5:82:8d:69:03:52:21:6c:73:10:9c: fa:d9:5d:9a:d3:0f:f0:fd:17:f5:5f:f3:b2:6e:78: 20:33:e1:98:07:87:38:f3:05:41:a6:f5:a6:80:bb: 4a:7b:3c:ba:fb:18:06:37:e9:9b:da:b2:95:1a:5d: eb:b9:c2:4f:f0:de:17:84:f1:fc:76:2c:fe:c7:a2: 38:28:7d:9b:7d:9b:96:a4:77:b0:d6:11:67:52:68: 12:eb:6f:08:b2:21:7e:1c:a8:4c:3f:4b:c3:55:77: 92:32:fd:6c:04:8d:04:69:6b:9a:6a:53:d7:49:90: db:72:98:88:1c:4a:de:1e:16:e7:8f:0a:9c:4f:18: 02:96:37:70:4b:f8:2c:79:d9:2f:d9:f3:6e:6a:7f: f5:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:65:0A:E8:4B:61:CF:0B:B8:78:93:47:62:8E:DF:6E:71:8C:07:B0 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/271f0380-5b52-472a-bc37-cdbbdcd650e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.217.0/24 Signature Algorithm: sha256WithRSAEncryption 20:84:11:ec:c1:33:c3:7a:81:ae:cb:7e:63:86:a8:f1:e7:3a: f4:8b:3a:28:d4:7c:08:0c:d6:ef:1a:4f:8d:41:d2:df:05:7c: 06:aa:b8:72:ea:ec:b7:cd:66:fc:41:85:7b:6c:e4:ed:59:fa: 67:fb:fa:76:e1:36:80:2c:74:d9:9f:b2:cc:fd:2d:72:c5:2f: 5c:28:00:d6:70:37:a4:de:bb:3d:df:fb:f6:97:fc:6b:3c:bc: 74:36:2b:07:18:fe:8c:66:3b:22:32:38:b9:8b:7c:8c:e1:a0: 2c:a9:c7:4b:6c:b2:22:43:20:96:1f:cb:3e:98:ba:ec:0e:0b: 40:65:60:ec:4d:c7:94:df:1a:c0:b9:03:08:51:a3:cd:2d:72: cd:1e:b1:bc:76:b6:c8:dc:b1:c7:3d:ed:4e:96:fd:ec:05:91: 6d:9d:6e:e8:09:d5:11:7d:5e:19:ab:a4:39:2d:d6:b5:6b:ce: a8:0f:e7:52:9d:6e:b6:18:92:7f:f0:80:21:e2:bb:72:3f:2f: a1:ae:82:a4:8e:39:f2:6b:16:92:a2:12:b8:8d:70:68:59:37: a6:93:32:5b:2a:83:03:f1:6f:0e:b7:7d:f3:68:cc:dd:16:44: 83:7b:94:e9:62:9f:11:4c:2a:10:1e:84:3f:0a:3d:dc:3f:86: 2b:d6:91:3e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWmLusMzpTIlShxmZqYMSwpwcuNkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUxMDI5MDAxMDA2WhcNMjUxMjAzMjM1OTU5 WjB6MUkwRwYDVQQFE0AwNzFjMjkxZDU2Mjc2YWIwZDhlYmEyOTk5YWJlZGRkOTMy OTY5M2I1NTdkMzYyNmFiNGE5MzI4OTJmNTg3YmIzMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCgg3okeFr17xl16iEAgmMRS8R5Y4l/fXI6W+uZsIit/0ph zBW4tJkIk22WC0LQYxtYiGyM1XtalRFkk+NNPju2S53huGz1r9w5SJaX36GG7pO8 dbISpA1NYnHMhp187FZWySTbGPhP1qMQeoPlgo1pA1IhbHMQnPrZXZrTD/D9F/Vf 87JueCAz4ZgHhzjzBUGm9aaAu0p7PLr7GAY36ZvaspUaXeu5wk/w3heE8fx2LP7H ojgofZt9m5akd7DWEWdSaBLrbwiyIX4cqEw/S8NVd5Iy/WwEjQRpa5pqU9dJkNty mIgcSt4eFuePCpxPGAKWN3BL+Cx52S/Z825qf/XFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUpmUK6Ethzwu4eJNHYo7fbnGMB7AwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzI3MWYwMzgwLTViNTItNDcyYS1iYzM3LWNkYmJkY2Q2NTBlOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX+dkwDQYJKoZIhvcNAQELBQADggEBACCEEezBM8N6ga7LfmOGqPHnOvSL OijUfAgM1u8aT41B0t8FfAaquHLq7LfNZvxBhXts5O1Z+mf7+nbhNoAsdNmfssz9 LXLFL1woANZwN6Teuz3f+/aX/Gs8vHQ2KwcY/oxmOyIyOLmLfIzhoCypx0tssiJD IJYfyz6YuuwOC0BlYOxNx5TfGsC5AwhRo80tcs0esbx2tsjcscc97U6W/ewFkW2d bugJ1RF9XhmrpDkt1rVrzqgP51KdbrYYkn/wgCHiu3I/L6GugqSOOfJrFpKiEriN cGhZN6aTMlsqgwPxbw63ffNozN0WRIN7lOlinxFMKhAehD8KPdw/hivWkT4= -----END CERTIFICATE-----Generated at Wed Nov 5 09:52:25 2025 by rpki-client