$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d249f01b-897e-478c-8119-d3047f3e69bd.roa File: d249f01b-897e-478c-8119-d3047f3e69bd.roa (raw, json) Hash identifier: NAt5Yp9lZz1GQ6Rbbi/ZZmPxv6Kx1re7JOgFnWn5+wI= Subject key identifier: 31:DA:91:53:63:73:48:AD:E3:D7:ED:CE:45:81:D1:73:D5:2B:F0:D0 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 14BE87D11DBD71E7FD8BFFD22335C110CC8404FF Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d249f01b-897e-478c-8119-d3047f3e69bd.roa Signing time: Fri 26 Sep 2025 02:32:12 +0000 ROA not before: Fri 26 Sep 2025 02:32:12 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.230.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:be:87:d1:1d:bd:71:e7:fd:8b:ff:d2:23:35:c1:10:cc:84:04:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 02:32:12 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=8d8750a6bab130500525e760f982b8f917574810532108fbd215c9e1d1a1a4e5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:77:21:b0:dc:5d:54:2e:05:00:ab:47:63:86: 2f:11:c1:09:ef:bf:a9:dc:16:23:77:5f:1d:c8:f6: a3:ed:09:12:a9:6e:09:87:93:59:94:3c:9e:a4:45: e6:5a:a7:f5:08:e6:a9:9f:f0:b5:61:f5:dd:3a:d4: a1:a3:03:00:9e:10:e7:4c:94:1d:37:77:0e:69:f2: a6:09:5c:00:a2:3f:ca:ea:7b:de:55:99:d0:67:1a: 35:df:c1:ed:45:88:73:65:2b:e7:b5:15:72:d9:bb: db:fe:6a:cc:b7:62:a5:b0:4e:43:82:5f:65:f4:ed: 49:91:c1:b6:f3:b1:e4:45:48:d9:ea:ec:6c:26:3f: 80:38:af:08:18:c3:d2:1a:60:55:97:56:f3:a2:9d: 85:2e:a1:8f:54:56:7e:d3:2d:53:9b:40:5a:d3:ba: 2a:02:2a:ed:4a:94:72:0f:b8:32:2c:67:c2:b4:f8: 05:25:cc:83:93:25:db:c1:38:b3:62:b4:85:7f:0a: 2f:3b:2a:42:11:06:cb:26:42:00:8f:10:d7:bb:46: 62:6f:af:0e:37:ec:dc:89:7b:19:bc:de:91:41:99: a5:ae:22:80:ff:71:36:af:49:8d:2c:ed:38:90:2a: 1d:69:9e:5b:70:20:39:ba:f6:de:d7:ee:1e:9a:d5: dc:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:DA:91:53:63:73:48:AD:E3:D7:ED:CE:45:81:D1:73:D5:2B:F0:D0 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d249f01b-897e-478c-8119-d3047f3e69bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.230.42.0/24 Signature Algorithm: sha256WithRSAEncryption 03:b1:f2:48:90:0b:3e:74:b4:72:9c:4c:1e:7f:54:be:92:b6: ac:60:c8:37:bd:38:8f:8d:05:9d:8c:e0:a1:f3:dd:2b:97:e3: 52:eb:5a:73:3c:b8:c1:92:fd:15:19:e2:a8:e1:78:4b:88:22: 35:f6:98:28:f8:33:ba:90:8f:ee:90:8c:ff:d4:8d:66:42:5f: bf:f5:58:49:de:72:2c:6f:60:18:fc:15:42:71:77:be:07:65: a7:56:7d:c5:ef:39:91:d0:8d:e6:45:1b:16:8a:e6:58:e0:90: 87:f5:ed:5a:1a:cd:f9:67:12:c3:3a:d6:9a:b7:9d:6c:32:e8: a6:71:20:d5:6a:a9:4c:da:23:c1:20:d3:bf:ea:6f:00:1f:2c: 74:5c:78:7f:41:4f:79:f4:43:b3:2e:b0:0c:5c:b9:bc:92:3e: 13:50:f4:fe:ce:c6:9f:35:7d:69:d1:35:1b:84:40:57:10:ea: 9d:50:fa:a2:54:a2:9f:40:59:6b:e0:76:36:64:96:44:c3:6a: 23:6a:a4:d7:fe:b1:fc:15:a6:84:cd:aa:5b:5f:d4:d5:e1:9b: f2:66:e8:8a:43:0d:5c:68:fe:c3:3d:f5:1d:ad:06:c7:12:82: ef:71:11:74:9a:3b:5e:6b:87:73:f4:8c:7e:cb:63:e7:2a:34: 0e:1f:2a:4b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFL6H0R29cef9i//SIzXBEMyEBP8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDIzMjEyWhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZDg3NTBhNmJhYjEzMDUwMDUyNWU3NjBmOTgyYjhmOTE3 NTc0ODEwNTMyMTA4ZmJkMjE1YzllMWQxYTFhNGU1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCsdyGw3F1ULgUAq0djhi8RwQnvv6ncFiN3Xx3I9qPtCRKp bgmHk1mUPJ6kReZap/UI5qmf8LVh9d061KGjAwCeEOdMlB03dw5p8qYJXACiP8rq e95VmdBnGjXfwe1FiHNlK+e1FXLZu9v+asy3YqWwTkOCX2X07UmRwbbzseRFSNnq 7GwmP4A4rwgYw9IaYFWXVvOinYUuoY9UVn7TLVObQFrTuioCKu1KlHIPuDIsZ8K0 +AUlzIOTJdvBOLNitIV/Ci87KkIRBssmQgCPENe7RmJvrw437NyJexm83pFBmaWu IoD/cTavSY0s7TiQKh1pnltwIDm69t7X7h6a1dwXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUMdqRU2NzSK3j1+3ORYHRc9Ur8NAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2QyNDlmMDFiLTg5N2UtNDc4Yy04MTE5LWQzMDQ3ZjNlNjliZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA25iowDQYJKoZIhvcNAQELBQADggEBAAOx8kiQCz50tHKcTB5/VL6Stqxg yDe9OI+NBZ2M4KHz3SuX41LrWnM8uMGS/RUZ4qjheEuIIjX2mCj4M7qQj+6QjP/U jWZCX7/1WEnecixvYBj8FUJxd74HZadWfcXvOZHQjeZFGxaK5ljgkIf17Voazfln EsM61pq3nWwy6KZxINVqqUzaI8Eg07/qbwAfLHRceH9BT3n0Q7MusAxcubySPhNQ 9P7Oxp81fWnRNRuEQFcQ6p1Q+qJUop9AWWvgdjZklkTDaiNqpNf+sfwVpoTNqltf 1NXhm/Jm6IpDDVxo/sM99R2tBscSgu9xEXSaO15rh3P0jH7LY+cqNA4fKks= -----END CERTIFICATE-----Generated at Mon Oct 20 15:44:17 2025 by rpki-client