$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/dbab5aee-69a4-4b7c-8c0f-ab0177caf233.roa File: dbab5aee-69a4-4b7c-8c0f-ab0177caf233.roa (raw, json) Hash identifier: dCUi5IyCvv8me2j5FVtLlpw3vz+58niuhi2JYL7rdys= Subject key identifier: 08:11:64:0C:4F:E6:6A:09:A3:CE:5A:49:26:0A:FF:DF:9C:90:28:B7 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 1DEDEACBD1D8684BD97D9EB2024951D992DE5983 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/dbab5aee-69a4-4b7c-8c0f-ab0177caf233.roa Signing time: Tue 11 Nov 2025 00:10:06 +0000 ROA not before: Tue 11 Nov 2025 00:10:06 +0000 ROA not after: Tue 16 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.251.242.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Nov 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:ed:ea:cb:d1:d8:68:4b:d9:7d:9e:b2:02:49:51:d9:92:de:59:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Nov 11 00:10:06 2025 GMT Not After : Dec 16 23:59:59 2025 GMT Subject: serialNumber=7a7546e5a91eb805de28363816a13844d33bb913aaf756dcf201f404abdcfb36, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:68:d9:bc:53:66:20:98:20:0b:e5:98:2d:d5: db:30:4c:81:68:91:28:94:20:d5:03:d9:f6:d9:c2: 90:97:18:ff:c8:81:6b:b8:46:d3:68:fb:b0:6d:af: f6:c6:99:01:b7:1d:54:1e:c8:1e:c3:d4:88:37:89: 86:64:3e:24:de:09:86:21:42:bb:38:8a:1b:b2:70: 3b:34:22:1f:a3:c3:a7:de:96:2a:9e:70:31:45:7d: 49:a9:95:1e:70:06:a1:3a:84:f8:c1:c9:fe:35:f3: 49:2d:ff:8d:23:46:cb:2d:74:2a:8d:8e:fe:ba:ff: 25:1a:62:11:ed:04:8e:a2:4c:1b:ca:f9:25:26:0e: 65:9d:4e:04:95:5c:cf:31:55:56:69:37:bf:d8:7d: c1:5a:30:84:05:04:99:ce:87:91:2a:ed:3e:b1:cf: fc:7b:17:10:e5:a1:cc:1c:97:04:66:b3:4a:4a:60: fa:a8:67:36:85:aa:ff:5e:81:bd:7a:fb:5f:5b:d7: f2:16:c6:38:ce:99:62:09:d8:12:bc:6e:f4:51:41: 99:5a:86:d8:e8:50:3f:d5:b3:0b:37:c4:f6:2a:31: d5:fb:62:88:74:b0:b9:2a:84:75:4f:40:c6:c7:7c: e9:6a:e2:2a:8f:f6:3c:a8:dc:8e:2b:29:3c:f1:57: 29:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:11:64:0C:4F:E6:6A:09:A3:CE:5A:49:26:0A:FF:DF:9C:90:28:B7 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/dbab5aee-69a4-4b7c-8c0f-ab0177caf233.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.251.242.0/23 Signature Algorithm: sha256WithRSAEncryption 05:85:d9:99:23:23:af:29:5c:ad:72:42:6b:8e:6d:be:db:81: 1f:46:01:b4:f1:f0:90:ae:d6:0c:c6:46:9c:8e:66:f5:c9:2b: 7a:e7:f2:20:15:f7:6d:d7:74:e6:0c:58:f8:c2:a6:52:65:27: 87:4b:f0:34:f3:f5:2f:7d:b7:66:a2:9f:f0:98:bb:99:d7:94: 59:86:64:64:13:b1:b6:78:40:94:6c:90:bc:d6:e5:73:1a:9e: da:bb:7a:08:da:14:23:b0:bd:55:a5:6b:67:4c:a9:4f:de:18: 7f:74:a8:42:da:0d:24:ef:9c:0b:39:1c:45:26:92:3f:83:66: 67:21:59:61:57:e7:23:41:73:ce:ca:05:97:b9:51:3f:21:5e: 5d:12:1f:09:a2:89:af:2b:19:8e:03:4d:9a:1f:86:cf:97:f8: bc:b5:ed:33:d4:74:61:ce:91:e0:c4:8e:c7:e9:b7:2a:75:c2: 36:38:41:21:15:c8:09:24:4d:0c:c4:a2:93:0f:33:34:a0:c4: 79:a6:b6:53:dc:49:94:5b:4d:77:49:5e:d0:c2:e1:42:f6:24: 2f:3b:6b:a0:9a:85:67:84:8f:1e:3e:db:0f:cd:b5:9c:93:ff: fe:c0:73:57:77:31:d3:4c:67:3f:b8:f1:12:8a:20:3f:c7:3f: 7a:f4:c4:b7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHe3qy9HYaEvZfZ6yAklR2ZLeWYMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUxMTExMDAxMDA2WhcNMjUxMjE2MjM1OTU5 WjB6MUkwRwYDVQQFE0A3YTc1NDZlNWE5MWViODA1ZGUyODM2MzgxNmExMzg0NGQz M2JiOTEzYWFmNzU2ZGNmMjAxZjQwNGFiZGNmYjM2MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1aNm8U2YgmCAL5Zgt1dswTIFokSiUINUD2fbZwpCXGP/I gWu4RtNo+7Btr/bGmQG3HVQeyB7D1Ig3iYZkPiTeCYYhQrs4ihuycDs0Ih+jw6fe liqecDFFfUmplR5wBqE6hPjByf4180kt/40jRsstdCqNjv66/yUaYhHtBI6iTBvK +SUmDmWdTgSVXM8xVVZpN7/YfcFaMIQFBJnOh5Eq7T6xz/x7FxDlocwclwRms0pK YPqoZzaFqv9egb16+19b1/IWxjjOmWIJ2BK8bvRRQZlahtjoUD/Vsws3xPYqMdX7 Yoh0sLkqhHVPQMbHfOlq4iqP9jyo3I4rKTzxVylZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUCBFkDE/magmjzlpJJgr/35yQKLcwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2RiYWI1YWVlLTY5YTQtNGI3Yy04YzBmLWFiMDE3N2NhZjIzMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEX+/IwDQYJKoZIhvcNAQELBQADggEBAAWF2ZkjI68pXK1yQmuObb7bgR9G AbTx8JCu1gzGRpyOZvXJK3rn8iAV923XdOYMWPjCplJlJ4dL8DTz9S99t2ain/CY u5nXlFmGZGQTsbZ4QJRskLzW5XMantq7egjaFCOwvVWla2dMqU/eGH90qELaDSTv nAs5HEUmkj+DZmchWWFX5yNBc87KBZe5UT8hXl0SHwmiia8rGY4DTZofhs+X+Ly1 7TPUdGHOkeDEjsfptyp1wjY4QSEVyAkkTQzEopMPMzSgxHmmtlPcSZRbTXdJXtDC 4UL2JC87a6CahWeEjx4+2w/NtZyT//7Ac1d3MdNMZz+48RKKID/HP3r0xLc= -----END CERTIFICATE-----Generated at Tue Nov 18 10:40:20 2025 by rpki-client