$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3f672c72-4d5f-408a-8326-7e62adbed891.roa File: 3f672c72-4d5f-408a-8326-7e62adbed891.roa (raw, json) Hash identifier: lnCvMfGGSdpTq4lpGbqf95wQRtLqlj6qgGx3DNebc5k= Subject key identifier: 07:75:8C:FF:C6:46:BA:57:C1:54:81:B8:DD:A2:AB:4D:4E:EA:57:D2 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 5FE77AB05DDD2037248B795A6509D9027A490083 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3f672c72-4d5f-408a-8326-7e62adbed891.roa Signing time: Sat 04 Oct 2025 00:20:52 +0000 ROA not before: Sat 04 Oct 2025 00:20:52 +0000 ROA not after: Sat 08 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 23.249.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:e7:7a:b0:5d:dd:20:37:24:8b:79:5a:65:09:d9:02:7a:49:00:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Oct 4 00:20:52 2025 GMT Not After : Nov 8 23:59:59 2025 GMT Subject: serialNumber=46a8f700f4f32089d32f6056c64036a2ee91fe4abdf418480616001cdd411bcb, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6b:0b:dd:f6:2e:4f:35:65:46:df:7b:9d:18: 99:dc:68:7f:e4:ea:e5:ba:88:b0:d8:4a:d2:1e:b4: 17:0f:1f:45:24:80:4d:cc:3d:72:e1:cb:cf:e9:77: 42:cd:e3:cd:52:8f:81:05:2d:94:e1:60:fe:c1:87: 5a:2a:df:d6:2d:ac:25:04:84:57:d6:a7:97:9b:ff: b7:94:ad:3c:3f:80:21:47:a3:37:87:29:67:f8:ad: 82:ec:60:40:c2:87:d6:99:96:2c:5a:c3:a9:c8:43: be:e8:23:3b:1a:46:79:0b:c2:1c:65:a5:d1:a0:b4: be:b5:d3:84:da:c1:e4:3a:ea:78:cc:69:87:36:d3: 22:bb:53:cc:57:c6:1f:a1:10:86:94:94:d1:0f:3c: 86:62:77:0f:84:d2:d9:e4:86:af:6b:6d:b8:cc:16: 0b:88:3e:ba:1e:7b:dc:8d:c1:55:0e:7e:f6:7b:81: 5f:3f:2a:1f:a4:f4:12:c6:8b:ac:f9:77:21:b8:7a: 3e:f3:69:a0:e0:59:9b:34:99:54:a8:02:10:55:35: e0:65:63:67:e7:63:6a:a0:74:c4:a4:08:3d:69:3d: ed:91:fd:5f:24:dc:3f:ce:5a:15:97:15:ef:96:58: 8a:c4:df:85:6a:15:84:0a:d9:90:5b:de:68:01:38: 47:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:75:8C:FF:C6:46:BA:57:C1:54:81:B8:DD:A2:AB:4D:4E:EA:57:D2 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3f672c72-4d5f-408a-8326-7e62adbed891.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.221.0/24 Signature Algorithm: sha256WithRSAEncryption 48:46:c4:43:d3:30:37:ee:9c:0f:41:0f:f8:11:1d:eb:bd:b5: 62:d6:52:4b:62:bb:7b:66:02:d9:33:da:5b:12:9e:bf:cd:50: 0c:a0:ee:04:ca:ef:75:7d:94:77:24:65:4f:f0:c2:16:23:f5: cd:16:58:5c:e3:19:4c:d0:1d:15:24:10:13:3a:ca:17:6c:00: 63:7e:fa:f4:57:2f:18:1c:20:d4:9a:e7:1c:9d:14:38:34:30: 01:a6:18:25:d9:0c:f7:d2:06:aa:a8:01:6f:b3:98:ba:ed:f0: 3b:19:fd:90:d3:fc:49:54:11:fb:48:cd:b9:ac:8b:34:35:58: 2b:50:4b:a2:ee:42:4b:98:03:4d:3b:b8:fb:01:35:34:8c:82: a6:4f:c9:99:86:6c:75:85:47:9e:5a:30:94:51:9e:47:79:38: 72:f3:27:d9:bb:3a:75:16:93:2e:18:d6:0d:08:7d:cb:38:61: ec:60:4a:b5:02:6d:11:67:64:7d:bd:dd:44:e2:79:8f:2c:91: 60:71:86:3c:a4:dd:cc:64:72:73:a4:6c:88:6c:cc:6c:cd:68: 03:f2:64:60:2b:5d:24:d7:a0:bb:4b:5b:27:f3:48:39:ff:0a: 1e:8c:d3:12:35:05:9a:d4:36:4b:2c:b9:a2:90:92:da:9d:3d: d6:cb:8b:ce -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUX+d6sF3dIDcki3laZQnZAnpJAIMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUxMDA0MDAyMDUyWhcNMjUxMTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0A0NmE4ZjcwMGY0ZjMyMDg5ZDMyZjYwNTZjNjQwMzZhMmVl OTFmZTRhYmRmNDE4NDgwNjE2MDAxY2RkNDExYmNiMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCoawvd9i5PNWVG33udGJncaH/k6uW6iLDYStIetBcPH0Uk gE3MPXLhy8/pd0LN481Sj4EFLZThYP7Bh1oq39YtrCUEhFfWp5eb/7eUrTw/gCFH ozeHKWf4rYLsYEDCh9aZlixaw6nIQ77oIzsaRnkLwhxlpdGgtL6104TaweQ66njM aYc20yK7U8xXxh+hEIaUlNEPPIZidw+E0tnkhq9rbbjMFguIProee9yNwVUOfvZ7 gV8/Kh+k9BLGi6z5dyG4ej7zaaDgWZs0mVSoAhBVNeBlY2fnY2qgdMSkCD1pPe2R /V8k3D/OWhWXFe+WWIrE34VqFYQK2ZBb3mgBOEdPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUB3WM/8ZGulfBVIG43aKrTU7qV9IwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzNmNjcyYzcyLTRkNWYtNDA4YS04MzI2LTdlNjJhZGJlZDg5MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX+d0wDQYJKoZIhvcNAQELBQADggEBAEhGxEPTMDfunA9BD/gRHeu9tWLW Uktiu3tmAtkz2lsSnr/NUAyg7gTK73V9lHckZU/wwhYj9c0WWFzjGUzQHRUkEBM6 yhdsAGN++vRXLxgcINSa5xydFDg0MAGmGCXZDPfSBqqoAW+zmLrt8DsZ/ZDT/ElU EftIzbmsizQ1WCtQS6LuQkuYA007uPsBNTSMgqZPyZmGbHWFR55aMJRRnkd5OHLz J9m7OnUWky4Y1g0Ifcs4YexgSrUCbRFnZH293UTieY8skWBxhjyk3cxkcnOkbIhs zGzNaAPyZGArXSTXoLtLWyfzSDn/Ch6M0xI1BZrUNkssuaKQktqdPdbLi84= -----END CERTIFICATE-----Generated at Wed Oct 8 19:45:13 2025 by rpki-client