$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/498f334e-4dc8-4118-b1a1-4c9a15d14b92.roa File: 498f334e-4dc8-4118-b1a1-4c9a15d14b92.roa (raw, json) Hash identifier: fpGo7jXRltRYDAmfRoSpG9jDxDKibm40otPskaCuHpw= Subject key identifier: 2F:8F:E2:1E:04:68:EE:70:37:42:22:EC:56:4B:79:3E:C5:39:7E:C3 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 3E6CB47B0352CAFB082ACFDD157B7E603AA72BDC Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/498f334e-4dc8-4118-b1a1-4c9a15d14b92.roa Signing time: Wed 29 Oct 2025 00:10:12 +0000 ROA not before: Wed 29 Oct 2025 00:10:12 +0000 ROA not after: Wed 03 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 76.223.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:6c:b4:7b:03:52:ca:fb:08:2a:cf:dd:15:7b:7e:60:3a:a7:2b:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Oct 29 00:10:12 2025 GMT Not After : Dec 3 23:59:59 2025 GMT Subject: serialNumber=c292659a8a12a27d6591a95d9d5e6489e4ff2f7533eae2e69bc8414598acf52f, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:18:7c:d2:31:a8:6b:f2:d5:db:a7:26:83:61: b9:a2:6b:50:6d:71:df:ce:cf:90:c6:dd:4d:cd:91: 9f:c8:c1:8f:a9:b0:78:1f:22:21:1e:91:8e:4f:62: f9:22:3e:87:9e:85:45:0e:73:1e:ca:d3:83:bc:30: 8a:64:2a:7a:64:15:f0:c5:95:e9:10:e4:2d:03:df: ee:33:6f:21:c3:09:fc:ae:50:90:22:fa:fd:f1:38: 66:a3:f6:5d:31:36:a2:34:e4:93:ac:5e:18:46:0e: 88:d4:00:af:b1:67:be:98:03:d3:a8:f9:15:b5:8a: e2:87:00:1f:0f:6e:21:1f:1e:19:62:f5:90:6b:12: a3:f2:56:c6:52:92:60:c2:89:0a:6a:03:38:50:b4: 8f:e9:92:7e:fd:1b:84:17:a6:55:ff:84:87:1b:9b: 8a:4d:d8:e5:fc:b6:e7:f9:88:70:b1:a2:08:7c:1e: ee:e1:dd:9e:a9:9e:2e:4a:07:5f:90:a2:91:0e:75: 08:62:fe:d7:9f:52:6f:3a:da:80:26:de:38:c7:6d: 5e:02:d6:43:b8:27:2b:85:9a:10:7c:ab:82:d5:76: 37:ec:a4:3a:57:c5:68:a5:d0:f8:96:d9:85:5a:3f: 14:36:b7:33:93:4a:73:a5:7c:fb:fa:3c:8d:ab:b7: d6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:8F:E2:1E:04:68:EE:70:37:42:22:EC:56:4B:79:3E:C5:39:7E:C3 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/498f334e-4dc8-4118-b1a1-4c9a15d14b92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.223.186.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:1d:c9:07:b4:b7:84:e6:eb:70:35:81:f1:96:65:98:77:34: 31:4b:21:f7:b5:2a:ad:e8:7e:7d:9d:80:09:91:bd:0e:53:b8: f3:42:9e:1a:4f:49:e8:43:b5:48:23:0a:fb:c6:23:7d:98:ee: 5a:1b:ae:1a:14:87:48:ec:b9:27:28:d5:df:76:eb:f2:36:23: 1e:7a:6a:40:de:1f:58:71:91:d6:86:17:72:d0:2a:c0:e3:0b: ce:a2:4d:1e:16:89:e0:cd:af:b9:39:fc:84:87:d7:c1:cd:90: dd:ce:6e:bf:fb:0f:75:2e:2a:23:45:3b:e3:3f:fd:8c:01:13: 01:24:21:72:fc:9c:4b:e1:24:e5:76:19:e2:60:e4:4f:de:0e: 83:ea:00:98:1c:0c:87:50:c4:b3:2c:4b:8b:b9:97:ae:e5:e0: 8a:63:25:85:a0:e9:5a:19:91:c0:11:e0:7e:f3:39:f6:b8:48: c7:5d:30:be:95:e6:20:7a:ad:82:05:5e:74:b4:72:2e:4a:08: 51:7f:7c:57:9a:dc:3c:05:0f:02:8c:d3:87:ae:da:ee:a0:ba: 69:1c:33:93:32:69:66:eb:c8:cc:50:e3:69:d6:1d:5d:4c:2b: f0:41:c2:a4:12:e4:83:c0:f4:74:92:d4:46:cd:46:96:fa:20: 40:c7:5e:9f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPmy0ewNSyvsIKs/dFXt+YDqnK9wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUxMDI5MDAxMDEyWhcNMjUxMjAzMjM1OTU5 WjB6MUkwRwYDVQQFE0BjMjkyNjU5YThhMTJhMjdkNjU5MWE5NWQ5ZDVlNjQ4OWU0 ZmYyZjc1MzNlYWUyZTY5YmM4NDE0NTk4YWNmNTJmMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyGHzSMahr8tXbpyaDYbmia1Btcd/Oz5DG3U3NkZ/IwY+p sHgfIiEekY5PYvkiPoeehUUOcx7K04O8MIpkKnpkFfDFlekQ5C0D3+4zbyHDCfyu UJAi+v3xOGaj9l0xNqI05JOsXhhGDojUAK+xZ76YA9Oo+RW1iuKHAB8PbiEfHhli 9ZBrEqPyVsZSkmDCiQpqAzhQtI/pkn79G4QXplX/hIcbm4pN2OX8tuf5iHCxogh8 Hu7h3Z6pni5KB1+QopEOdQhi/tefUm862oAm3jjHbV4C1kO4JyuFmhB8q4LVdjfs pDpXxWil0PiW2YVaPxQ2tzOTSnOlfPv6PI2rt9Y5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUL4/iHgRo7nA3QiLsVkt5PsU5fsMwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzQ5OGYzMzRlLTRkYzgtNDExOC1iMWExLTRjOWExNWQxNGI5Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABM37owDQYJKoZIhvcNAQELBQADggEBAB8dyQe0t4Tm63A1gfGWZZh3NDFL Ife1Kq3ofn2dgAmRvQ5TuPNCnhpPSehDtUgjCvvGI32Y7lobrhoUh0jsuSco1d92 6/I2Ix56akDeH1hxkdaGF3LQKsDjC86iTR4WieDNr7k5/ISH18HNkN3Obr/7D3Uu KiNFO+M//YwBEwEkIXL8nEvhJOV2GeJg5E/eDoPqAJgcDIdQxLMsS4u5l67l4Ipj JYWg6VoZkcAR4H7zOfa4SMddML6V5iB6rYIFXnS0ci5KCFF/fFea3DwFDwKM04eu 2u6gumkcM5MyaWbryMxQ42nWHV1MK/BBwqQS5IPA9HSS1EbNRpb6IEDHXp8= -----END CERTIFICATE-----Generated at Wed Nov 5 05:42:31 2025 by rpki-client