$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/93d7471b-56b1-4f53-982e-a84765e52ef3.roa File: 93d7471b-56b1-4f53-982e-a84765e52ef3.roa (raw, json) Hash identifier: JwYVcTqPiE876ni+lcg9aE8hHSLYEfthCYTE3aCJoWo= Subject key identifier: FB:9A:C5:86:C7:DE:B3:34:05:27:20:4F:99:58:6F:E5:0F:04:61:43 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 7326E4A6DA1C78F39503CEFCD0BB82E45715D0B1 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/93d7471b-56b1-4f53-982e-a84765e52ef3.roa Signing time: Sat 04 Oct 2025 00:20:03 +0000 ROA not before: Sat 04 Oct 2025 00:20:03 +0000 ROA not after: Sat 08 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 76.223.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:26:e4:a6:da:1c:78:f3:95:03:ce:fc:d0:bb:82:e4:57:15:d0:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Oct 4 00:20:03 2025 GMT Not After : Nov 8 23:59:59 2025 GMT Subject: serialNumber=2b0c6f99941bc05054cc33d696594234fa8156ad5ba6f745c4621fd90bacc595, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:93:4b:a8:43:71:21:b5:ba:71:7f:67:6f:b5: 71:20:eb:16:3d:92:3b:02:bb:33:b0:9a:27:a3:8d: d8:be:18:a5:dd:0d:db:07:49:0c:1a:63:84:d9:89: 4c:0d:1e:8e:29:6f:8b:08:7b:32:2e:6b:fa:73:f7: 7e:8f:e7:de:57:33:a8:ee:ed:0c:86:4c:b7:14:2e: 16:a2:8f:3d:31:a3:12:0c:1e:e7:7c:39:8a:ed:94: f7:fc:53:44:ce:88:83:37:0f:c6:f3:c7:32:20:07: cc:92:64:86:d7:2c:40:33:25:9d:cc:69:34:6c:f6: da:9b:1b:98:ab:8d:32:53:ef:1b:c1:98:1a:88:97: fe:91:75:c6:55:87:08:7b:62:42:9d:23:91:f1:6e: e8:8a:87:90:08:e3:04:f4:64:1b:89:b5:29:1f:3c: 0a:43:db:d8:14:60:2e:9f:7c:3c:18:a7:22:8c:b1: 39:1c:35:80:7c:0b:62:88:e2:6b:71:9e:85:ee:7d: d4:ae:b8:15:94:71:e9:64:a0:74:b4:67:8a:1f:1d: 51:9c:18:6e:fb:76:64:7b:a3:77:fb:7c:c0:79:9a: ab:74:f2:31:8c:5b:eb:67:1c:ef:b5:50:f3:85:04: c2:67:bf:c1:ec:f9:3b:30:8a:e6:b4:61:82:c3:e0: be:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:9A:C5:86:C7:DE:B3:34:05:27:20:4F:99:58:6F:E5:0F:04:61:43 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/93d7471b-56b1-4f53-982e-a84765e52ef3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.223.188.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:6b:cd:39:1f:46:cc:cc:0d:5b:07:55:0b:9a:f8:71:61:f4: 50:fd:7a:8b:19:9b:21:1c:d0:05:1d:1e:67:c8:45:6b:fc:3c: 53:93:e5:c1:30:90:dc:c3:e4:20:70:b5:be:e8:59:33:2a:0e: c9:3f:7e:b2:5c:47:0c:05:c2:30:50:21:33:5a:cb:16:92:14: de:6f:5c:84:a1:9e:f2:42:1b:28:53:18:d6:42:07:9b:4b:13: f6:91:60:e7:10:94:71:5d:c8:bf:65:a1:05:21:55:c5:cf:8a: e3:8a:1e:be:6d:ae:5d:6b:c8:d4:27:09:79:81:c7:b3:93:73: 5d:a6:5a:59:86:4d:ed:e0:ca:c7:4f:0a:73:58:1e:32:dd:93: b2:3a:bf:7a:c5:a2:d9:9a:32:3e:ee:27:82:44:d7:11:60:6f: 94:f0:75:08:ff:0c:57:78:b5:b2:0d:be:ff:c6:b6:48:4d:43: 5e:5c:2b:b0:70:32:7c:e3:22:e6:34:66:12:20:9c:56:0d:6d: d4:ae:16:44:4b:42:30:85:f1:06:ce:4d:86:c0:cf:d0:b2:9f: 61:2a:cf:a9:52:14:eb:93:e5:7f:34:0b:28:88:43:66:ce:4b: 6e:4c:ab:00:16:0d:cd:2d:65:32:31:ca:8c:16:a6:ad:c1:94: 90:42:e9:6d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcybkptocePOVA8780LuC5FcV0LEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUxMDA0MDAyMDAzWhcNMjUxMTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0AyYjBjNmY5OTk0MWJjMDUwNTRjYzMzZDY5NjU5NDIzNGZh ODE1NmFkNWJhNmY3NDVjNDYyMWZkOTBiYWNjNTk1MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/k0uoQ3Ehtbpxf2dvtXEg6xY9kjsCuzOwmiejjdi+GKXd DdsHSQwaY4TZiUwNHo4pb4sIezIua/pz936P595XM6ju7QyGTLcULhaijz0xoxIM Hud8OYrtlPf8U0TOiIM3D8bzxzIgB8ySZIbXLEAzJZ3MaTRs9tqbG5irjTJT7xvB mBqIl/6RdcZVhwh7YkKdI5HxbuiKh5AI4wT0ZBuJtSkfPApD29gUYC6ffDwYpyKM sTkcNYB8C2KI4mtxnoXufdSuuBWUcelkoHS0Z4ofHVGcGG77dmR7o3f7fMB5mqt0 8jGMW+tnHO+1UPOFBMJnv8Hs+Tswiua0YYLD4L5BAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU+5rFhsfeszQFJyBPmVhv5Q8EYUMwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzkzZDc0NzFiLTU2YjEtNGY1My05ODJlLWE4NDc2NWU1MmVmMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABM37wwDQYJKoZIhvcNAQELBQADggEBAIxrzTkfRszMDVsHVQua+HFh9FD9 eosZmyEc0AUdHmfIRWv8PFOT5cEwkNzD5CBwtb7oWTMqDsk/frJcRwwFwjBQITNa yxaSFN5vXIShnvJCGyhTGNZCB5tLE/aRYOcQlHFdyL9loQUhVcXPiuOKHr5trl1r yNQnCXmBx7OTc12mWlmGTe3gysdPCnNYHjLdk7I6v3rFotmaMj7uJ4JE1xFgb5Tw dQj/DFd4tbINvv/GtkhNQ15cK7BwMnzjIuY0ZhIgnFYNbdSuFkRLQjCF8QbOTYbA z9Cyn2Eqz6lSFOuT5X80CyiIQ2bOS25MqwAWDc0tZTIxyowWpq3BlJBC6W0= -----END CERTIFICATE-----Generated at Mon Oct 20 13:52:41 2025 by rpki-client