$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/59ab264e-284f-4e30-b2f0-d85fa73b62b7.roa File: 59ab264e-284f-4e30-b2f0-d85fa73b62b7.roa (raw, json) Hash identifier: cddT5CnoDpCxcshOioCuoA82SPG48f/1eD2UB6f20Dc= Subject key identifier: D5:02:AB:32:B2:C1:2C:B2:00:71:7C:7D:01:65:D5:A6:9F:EB:86:04 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 7CE420959CD18180F8B71CD1AB5B1B724C3B2608 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/59ab264e-284f-4e30-b2f0-d85fa73b62b7.roa Signing time: Wed 29 Oct 2025 00:20:18 +0000 ROA not before: Wed 29 Oct 2025 00:20:18 +0000 ROA not after: Wed 03 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.249.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:e4:20:95:9c:d1:81:80:f8:b7:1c:d1:ab:5b:1b:72:4c:3b:26:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Oct 29 00:20:18 2025 GMT Not After : Dec 3 23:59:59 2025 GMT Subject: serialNumber=9c63cb25df0c7dafb9b8d582b810dbd3ad7ae988a3599934147c1c815e002814, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:14:0c:fd:90:02:d9:5e:cd:c4:b0:62:57:12: 2f:02:a6:28:77:b1:04:5c:5b:3c:b6:c7:e7:04:4a: 4a:8d:7a:71:1d:7d:3a:5b:64:d9:f4:6b:b8:a3:72: 73:7f:f4:dd:da:f5:be:43:da:31:51:9e:64:57:98: 95:9d:cc:a2:99:78:e3:15:75:57:a1:db:af:8d:35: b2:34:4e:d6:61:54:47:b1:4f:72:0b:df:5b:01:df: e6:7d:c8:fb:9b:60:25:ff:21:74:c9:82:cd:cf:60: 04:e5:89:e6:2a:76:04:d6:cd:42:0d:a0:03:7b:17: 4d:24:82:82:89:e8:4a:87:3d:f9:60:c2:ad:ac:b7: ed:6a:da:c9:33:fc:6d:a8:cf:5f:5b:b4:db:32:e3: ff:e8:3f:36:2e:f5:44:6f:ca:75:a3:f6:34:ea:7f: eb:42:11:f5:cf:09:69:8b:b2:09:9a:b3:8b:c1:05: 13:0f:2a:39:38:8e:df:7b:a3:65:f9:dd:e2:f4:b5: ce:cf:b9:94:04:3a:63:fa:16:4a:bb:b9:9a:14:af: ab:d6:17:88:01:00:23:8d:2b:92:f1:c2:42:42:1e: bf:ed:72:6a:2c:2e:41:39:1a:34:7f:ed:d7:9b:42: 65:ec:dd:e3:16:4e:1f:26:bc:00:8e:60:f1:46:2d: b5:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:02:AB:32:B2:C1:2C:B2:00:71:7C:7D:01:65:D5:A6:9F:EB:86:04 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/59ab264e-284f-4e30-b2f0-d85fa73b62b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.220.0/24 Signature Algorithm: sha256WithRSAEncryption 12:a7:83:09:87:f0:0f:ee:9e:f7:c5:64:7f:79:9f:8a:73:01: 23:34:16:f3:0d:e4:1b:da:ce:5b:0c:a8:35:7a:d6:6e:5b:f0: cd:9e:80:86:ff:f4:d9:a8:36:f6:bc:d2:79:18:85:33:83:04: 00:33:e2:7c:cc:fb:ec:01:3d:42:f0:18:07:a2:82:55:1b:65: 1b:9a:97:77:1a:33:58:1a:85:db:3d:e9:11:8c:0b:6b:a7:79: 39:5f:6d:0d:ae:58:05:f4:cb:e3:73:7c:29:62:b8:fc:55:54: bd:48:01:8e:6d:30:45:37:a1:15:fe:9c:1a:b1:48:0a:bd:c5: 56:16:5a:65:13:8b:15:14:b6:f4:e4:d8:2e:67:75:a6:4d:75: 45:2e:47:ae:58:59:ab:fc:25:be:08:47:b8:76:c7:9c:76:03: fb:f7:62:39:25:dc:2a:95:c4:56:44:7a:36:a5:05:aa:9c:0e: 65:c9:5e:c6:2d:43:48:6d:11:9e:7d:d3:77:a9:1c:e1:59:8c: 0a:a5:52:7f:16:f1:9b:8e:4f:f3:77:ba:23:27:2f:af:d9:5b: 65:a2:f8:83:87:d2:b7:ee:b6:c9:c0:0d:0d:63:6c:4e:44:aa: 01:1c:6e:e6:ba:93:9e:74:b1:e9:9e:9c:51:ff:bd:f9:4a:23: 9f:48:6f:21 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfOQglZzRgYD4txzRq1sbckw7JggwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUxMDI5MDAyMDE4WhcNMjUxMjAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A5YzYzY2IyNWRmMGM3ZGFmYjliOGQ1ODJiODEwZGJkM2Fk N2FlOTg4YTM1OTk5MzQxNDdjMWM4MTVlMDAyODE0MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpFAz9kALZXs3EsGJXEi8Cpih3sQRcWzy2x+cESkqNenEd fTpbZNn0a7ijcnN/9N3a9b5D2jFRnmRXmJWdzKKZeOMVdVeh26+NNbI0TtZhVEex T3IL31sB3+Z9yPubYCX/IXTJgs3PYATlieYqdgTWzUINoAN7F00kgoKJ6EqHPflg wq2st+1q2skz/G2oz19btNsy4//oPzYu9URvynWj9jTqf+tCEfXPCWmLsgmas4vB BRMPKjk4jt97o2X53eL0tc7PuZQEOmP6Fkq7uZoUr6vWF4gBACONK5LxwkJCHr/t cmosLkE5GjR/7debQmXs3eMWTh8mvACOYPFGLbWvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU1QKrMrLBLLIAcXx9AWXVpp/rhgQwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzU5YWIyNjRlLTI4NGYtNGUzMC1iMmYwLWQ4NWZhNzNiNjJiNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX+dwwDQYJKoZIhvcNAQELBQADggEBABKngwmH8A/unvfFZH95n4pzASM0 FvMN5BvazlsMqDV61m5b8M2egIb/9NmoNva80nkYhTODBAAz4nzM++wBPULwGAei glUbZRual3caM1gahds96RGMC2uneTlfbQ2uWAX0y+NzfCliuPxVVL1IAY5tMEU3 oRX+nBqxSAq9xVYWWmUTixUUtvTk2C5ndaZNdUUuR65YWav8Jb4IR7h2x5x2A/v3 Yjkl3CqVxFZEejalBaqcDmXJXsYtQ0htEZ5903epHOFZjAqlUn8W8ZuOT/N3uiMn L6/ZW2Wi+IOH0rfutsnADQ1jbE5EqgEcbua6k550semenFH/vflKI59IbyE= -----END CERTIFICATE-----Generated at Wed Nov 5 05:42:08 2025 by rpki-client