$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/84c038ae-7a5a-414a-bd00-1edb6fbe5ad7.roa File: 84c038ae-7a5a-414a-bd00-1edb6fbe5ad7.roa (raw, json) Hash identifier: /Vx2WzgFs57sChaj4uXeB8tXjnupuYMy8eQW2IU83iY= Subject key identifier: AA:1B:3D:87:66:6F:26:5E:32:79:D8:37:F9:19:88:6B:6B:13:0F:A5 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 08219FA3E756307A4A9440CBFFAFEBB1C2BDEC50 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/84c038ae-7a5a-414a-bd00-1edb6fbe5ad7.roa Signing time: Wed 29 Oct 2025 00:10:10 +0000 ROA not before: Wed 29 Oct 2025 00:10:10 +0000 ROA not after: Wed 03 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.251.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:21:9f:a3:e7:56:30:7a:4a:94:40:cb:ff:af:eb:b1:c2:bd:ec:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Oct 29 00:10:10 2025 GMT Not After : Dec 3 23:59:59 2025 GMT Subject: serialNumber=2b9267ee5e3f19a53c90ca13f65ad9c4e6ff0ade82c210df2d9ecc15d9b8d409, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a6:36:4a:2f:01:9d:7b:02:49:89:6c:38:2e: 44:a3:67:26:80:cc:ef:fd:81:d7:11:7f:2e:af:58: 9f:aa:81:12:27:e8:62:e7:44:b3:59:c7:3e:c4:7e: ea:8c:cb:bc:0c:c8:5d:2f:7a:76:e2:7a:c0:a4:00: 1d:ea:b2:f6:e7:09:9e:49:73:69:60:29:f9:eb:12: 47:36:cf:07:2c:ec:b0:f7:2c:16:f4:2c:51:9e:bf: c4:7e:70:a7:b9:c5:b9:36:7e:25:82:25:bd:1f:17: ee:21:8f:0d:71:e9:cf:be:8b:03:d5:9b:5c:c3:eb: 35:ea:a9:6a:3b:08:68:d3:2a:a2:3f:13:17:2a:c7: 1a:49:04:b7:61:de:1d:4a:f4:68:b0:22:60:91:d6: 02:8f:44:31:c8:f3:bc:9e:d4:0a:1e:9a:ff:b2:ae: 2d:ff:60:3f:20:1d:4f:fe:ea:71:c8:1b:c6:2f:3b: 4c:7d:36:06:d4:a2:21:19:8b:de:9c:88:85:0b:cb: 26:52:95:92:19:7e:00:2b:40:bd:70:ff:1b:08:33: 83:41:01:4e:92:d5:0a:c4:ec:51:c8:15:3d:f1:74: 5e:32:c6:cc:da:7f:f3:9f:81:32:28:a4:0a:70:e5: 7f:46:27:e8:fb:5e:bf:26:c4:9d:b6:c4:25:24:0f: ba:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:1B:3D:87:66:6F:26:5E:32:79:D8:37:F9:19:88:6B:6B:13:0F:A5 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/84c038ae-7a5a-414a-bd00-1edb6fbe5ad7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.251.234.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:21:6c:ab:45:29:fb:f1:9e:65:e6:2a:e9:4b:5e:5b:ef:44: 5d:c2:35:3e:03:2c:aa:2e:64:ee:c2:1b:30:7b:4d:32:0c:0e: c4:6d:3b:e2:68:6f:29:4c:05:6f:1a:ca:cc:d3:79:c8:ef:60: f8:31:83:be:90:5b:7a:11:e4:70:6a:a0:cd:59:5e:e1:16:ec: e4:e9:4b:03:f7:5a:d3:bf:d5:5c:fc:82:41:dc:d4:44:30:0c: e7:8d:bd:0d:68:d2:45:49:77:af:98:2f:90:91:7c:2b:93:50: 70:14:11:91:38:8b:d0:a7:90:d1:a0:80:93:02:9f:09:35:22: d1:0e:9d:7c:96:7e:5e:e7:07:e9:72:b5:bf:f9:30:85:ea:2f: fc:1b:ad:25:d3:32:a0:08:85:1b:dc:ae:6b:b1:29:9a:d4:12: 09:ba:66:b9:0c:61:bc:9d:31:a1:ea:da:74:c3:0f:e9:6e:1e: 1a:d2:97:d1:ae:30:11:35:6b:0e:ad:17:3d:43:5b:59:46:58: c5:73:23:dd:ec:a9:62:5c:c9:00:1e:f0:02:94:e9:68:2a:cc: 7a:29:f5:f6:ad:34:c5:63:db:8a:cc:a8:32:e1:0e:fb:31:19: 39:1c:49:4b:67:e8:0d:7c:3d:49:b1:cb:a6:2e:d3:7b:4c:5d: 82:8f:f4:3d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCCGfo+dWMHpKlEDL/6/rscK97FAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUxMDI5MDAxMDEwWhcNMjUxMjAzMjM1OTU5 WjB6MUkwRwYDVQQFE0AyYjkyNjdlZTVlM2YxOWE1M2M5MGNhMTNmNjVhZDljNGU2 ZmYwYWRlODJjMjEwZGYyZDllY2MxNWQ5YjhkNDA5MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1pjZKLwGdewJJiWw4LkSjZyaAzO/9gdcRfy6vWJ+qgRIn 6GLnRLNZxz7EfuqMy7wMyF0venbiesCkAB3qsvbnCZ5Jc2lgKfnrEkc2zwcs7LD3 LBb0LFGev8R+cKe5xbk2fiWCJb0fF+4hjw1x6c++iwPVm1zD6zXqqWo7CGjTKqI/ ExcqxxpJBLdh3h1K9GiwImCR1gKPRDHI87ye1Aoemv+yri3/YD8gHU/+6nHIG8Yv O0x9NgbUoiEZi96ciIULyyZSlZIZfgArQL1w/xsIM4NBAU6S1QrE7FHIFT3xdF4y xszaf/OfgTIopApw5X9GJ+j7Xr8mxJ22xCUkD7rHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUqhs9h2ZvJl4yedg3+RmIa2sTD6UwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzg0YzAzOGFlLTdhNWEtNDE0YS1iZDAwLTFlZGI2ZmJlNWFkNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX++owDQYJKoZIhvcNAQELBQADggEBAE4hbKtFKfvxnmXmKulLXlvvRF3C NT4DLKouZO7CGzB7TTIMDsRtO+JobylMBW8ayszTecjvYPgxg76QW3oR5HBqoM1Z XuEW7OTpSwP3WtO/1Vz8gkHc1EQwDOeNvQ1o0kVJd6+YL5CRfCuTUHAUEZE4i9Cn kNGggJMCnwk1ItEOnXyWfl7nB+lytb/5MIXqL/wbrSXTMqAIhRvcrmuxKZrUEgm6 ZrkMYbydMaHq2nTDD+luHhrSl9GuMBE1aw6tFz1DW1lGWMVzI93sqWJcyQAe8AKU 6WgqzHop9fatNMVj24rMqDLhDvsxGTkcSUtn6A18PUmxy6Yu03tMXYKP9D0= -----END CERTIFICATE-----Generated at Wed Nov 5 05:41:17 2025 by rpki-client