$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/854367ff-45b7-4925-99a1-97b01f4fabe8.roa File: 854367ff-45b7-4925-99a1-97b01f4fabe8.roa (raw, json) Hash identifier: KHTVSYwgOMTKP/qt7PSAU+8v2t40xMsNSFnHuGi+OeU= Subject key identifier: 21:AE:AA:01:B3:17:4F:49:36:C8:2A:AC:D0:F7:59:E9:77:04:C9:4D Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 2B1317A205E263363400A7206CCA0CBE1FB67EB3 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/854367ff-45b7-4925-99a1-97b01f4fabe8.roa Signing time: Tue 28 Oct 2025 00:00:07 +0000 ROA not before: Tue 28 Oct 2025 00:00:07 +0000 ROA not after: Tue 02 Dec 2025 23:59:59 +0000 asID: 8987 IP address blocks: 216.221.166.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:13:17:a2:05:e2:63:36:34:00:a7:20:6c:ca:0c:be:1f:b6:7e:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Oct 28 00:00:07 2025 GMT Not After : Dec 2 23:59:59 2025 GMT Subject: serialNumber=778443579a14602f9108953e2aefd4b57bc6c8ed79dbf9e3afc5845b25c104e3, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:5f:a9:0e:47:8f:91:57:87:e4:80:00:55:86: d3:da:53:96:9d:4a:71:cd:ec:3e:c4:63:79:70:d4: d8:8f:8b:d3:d1:a7:cb:ae:77:b8:87:e8:4c:6d:16: 52:3c:3a:27:72:d6:7f:39:7f:05:ac:74:6d:19:d7: d3:5e:21:c5:87:78:cc:b8:50:bb:d6:81:2e:e2:43: f0:f2:5a:d2:7f:32:92:a5:b0:09:36:89:8a:77:4c: 43:ee:b1:9f:a1:06:52:81:19:d3:a3:5e:15:71:fa: 38:92:52:5e:07:06:2a:59:e6:c3:83:e4:51:64:56: 72:45:b9:db:b2:9f:6a:27:b9:bc:e9:bc:8e:7e:8b: a1:23:3c:83:87:c7:44:e5:b1:59:9b:39:ec:cf:5e: 70:97:4b:62:30:f9:66:9f:36:9a:ff:e5:db:e3:35: b5:89:77:3b:39:dc:e7:26:8a:40:0f:d5:aa:9b:ba: 42:7d:2c:9d:3b:b7:b0:b1:61:da:69:81:38:9a:04: 5c:a5:fd:3f:62:ad:01:35:1f:f3:e6:6a:c5:d7:0b: cb:97:95:8b:11:4b:20:c3:9b:33:0f:21:72:c4:15: 3e:c4:e6:b5:a1:be:03:db:39:e8:6d:78:c3:35:4c: 9c:f9:e1:b4:b0:6b:85:d0:f6:98:b3:f2:91:c7:86: b2:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:AE:AA:01:B3:17:4F:49:36:C8:2A:AC:D0:F7:59:E9:77:04:C9:4D X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/854367ff-45b7-4925-99a1-97b01f4fabe8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.221.166.0/23 Signature Algorithm: sha256WithRSAEncryption 0c:2b:8f:a0:28:e6:56:15:83:aa:4e:4e:97:d8:0d:3e:1f:9f: 84:cf:d5:a7:85:5f:20:17:c8:2d:35:37:10:3c:30:a4:aa:bf: b0:1c:61:33:c9:04:f8:fc:63:50:44:fa:63:d8:98:13:61:dd: c5:5e:86:cb:3c:f7:40:ba:59:3c:bd:31:a7:ee:ec:2d:dd:5c: 46:9a:67:a9:ad:f6:d0:b5:e0:ab:b6:8a:3c:2c:b2:28:ec:7e: 54:64:c4:80:38:09:f1:45:37:0f:47:e4:ba:30:21:14:3f:e3: 48:6f:2b:8f:a3:c0:00:5a:f1:2b:a6:19:19:f0:9a:11:99:1f: 61:2e:f1:0d:9b:94:e7:b6:b6:40:b0:6c:b6:4e:ff:1c:74:7b: ef:a6:1f:e6:04:e3:44:a3:1e:09:74:8d:ff:af:8c:60:6d:ca: f1:78:dc:58:ce:10:cb:3d:af:66:4c:d2:bf:ac:d9:ab:c7:eb: f4:12:a8:57:2d:58:d9:a4:62:f6:7e:bb:ca:40:fd:60:95:d0: 9a:b8:0a:f7:2c:89:5a:8e:e5:3b:92:40:31:ba:96:31:67:0b: 32:c2:ad:cf:e3:c3:6c:ad:08:e1:0d:b9:3c:d4:3b:dd:7a:34: 32:ed:ff:be:65:c2:08:09:60:bd:08:57:12:3c:6b:2b:e3:d5: 89:9f:52:80 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKxMXogXiYzY0AKcgbMoMvh+2frMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUxMDI4MDAwMDA3WhcNMjUxMjAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A3Nzg0NDM1NzlhMTQ2MDJmOTEwODk1M2UyYWVmZDRiNTdi YzZjOGVkNzlkYmY5ZTNhZmM1ODQ1YjI1YzEwNGUzMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDrX6kOR4+RV4fkgABVhtPaU5adSnHN7D7EY3lw1NiPi9PR p8uud7iH6ExtFlI8Oidy1n85fwWsdG0Z19NeIcWHeMy4ULvWgS7iQ/DyWtJ/MpKl sAk2iYp3TEPusZ+hBlKBGdOjXhVx+jiSUl4HBipZ5sOD5FFkVnJFuduyn2onubzp vI5+i6EjPIOHx0TlsVmbOezPXnCXS2Iw+WafNpr/5dvjNbWJdzs53OcmikAP1aqb ukJ9LJ07t7CxYdppgTiaBFyl/T9irQE1H/PmasXXC8uXlYsRSyDDmzMPIXLEFT7E 5rWhvgPbOehteMM1TJz54bSwa4XQ9piz8pHHhrKVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUIa6qAbMXT0k2yCqs0PdZ6XcEyU0wHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzg1NDM2N2ZmLTQ1YjctNDkyNS05OWExLTk3YjAxZjRmYWJlOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHY3aYwDQYJKoZIhvcNAQELBQADggEBAAwrj6Ao5lYVg6pOTpfYDT4fn4TP 1aeFXyAXyC01NxA8MKSqv7AcYTPJBPj8Y1BE+mPYmBNh3cVehss890C6WTy9Mafu 7C3dXEaaZ6mt9tC14Ku2ijwssijsflRkxIA4CfFFNw9H5LowIRQ/40hvK4+jwABa 8SumGRnwmhGZH2Eu8Q2blOe2tkCwbLZO/xx0e++mH+YE40SjHgl0jf+vjGBtyvF4 3FjOEMs9r2ZM0r+s2avH6/QSqFctWNmkYvZ+u8pA/WCV0Jq4CvcsiVqO5TuSQDG6 ljFnCzLCrc/jw2ytCOENuTzUO916NDLt/75lwggJYL0IVxI8ayvj1YmfUoA= -----END CERTIFICATE-----Generated at Wed Nov 5 01:39:41 2025 by rpki-client