$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/99da0f59-d115-4989-a1d7-d18495ddd845.roa File: 99da0f59-d115-4989-a1d7-d18495ddd845.roa (raw, json) Hash identifier: xuLS4hW4iBkUDTE9/t6B8Gt+dpgriSlas5dFR8bJoXo= Subject key identifier: EC:0B:22:E5:3A:E3:CA:8B:88:FF:70:1D:C2:2C:35:0B:07:CD:B1:3A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 67FA1C07D121DAAD3B7883BBE792A27691F434F0 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/99da0f59-d115-4989-a1d7-d18495ddd845.roa Signing time: Fri 26 Sep 2025 03:07:06 +0000 ROA not before: Fri 26 Sep 2025 03:07:06 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.239.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:fa:1c:07:d1:21:da:ad:3b:78:83:bb:e7:92:a2:76:91:f4:34:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 03:07:06 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=58cc4e76b7e0e9aa958cb8d890b91d3c12ad6ffb7397b283243efb58979c1278, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7c:02:66:23:c5:f8:ad:9a:85:b4:eb:20:53: a4:44:58:52:45:f9:c1:2c:b3:ea:a8:fa:73:79:2c: f7:fa:11:25:4e:2b:66:a7:b0:0a:b7:47:87:9b:ce: 89:eb:ea:d1:55:1a:63:5f:22:f9:37:93:24:9e:a5: cf:9b:a2:02:b9:55:a8:7f:e7:c7:4a:b7:22:12:9f: 11:f8:b2:51:1a:87:b2:a2:ad:dd:61:51:b0:f8:7b: 71:07:2f:9b:fe:15:28:4d:e0:c7:34:c5:6f:a1:1c: 20:76:9c:d4:91:47:db:d3:17:20:53:e5:85:9f:80: 83:29:16:76:bd:82:bf:cc:a3:85:8c:20:a4:f3:39: fb:4e:30:3d:1c:1b:bf:90:62:89:82:65:03:11:1b: 8f:d1:9e:80:49:09:c4:05:d3:97:46:23:b1:c7:37: e5:dc:8f:9d:47:f2:90:f2:f4:0f:f8:32:41:f8:24: 9c:3b:c0:7c:6d:62:f8:55:ec:c9:7c:77:fc:4e:43: 30:4c:f9:27:dc:61:34:cd:f8:b1:9e:5c:3c:74:54: c1:15:a8:62:bf:50:16:7c:42:0f:d4:56:58:09:f7: c9:47:78:89:6d:55:44:06:8d:4e:4b:1a:c7:7e:7d: 99:81:02:c3:8d:c7:43:98:42:8a:05:c3:f3:1d:c9: 8c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:0B:22:E5:3A:E3:CA:8B:88:FF:70:1D:C2:2C:35:0B:07:CD:B1:3A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/99da0f59-d115-4989-a1d7-d18495ddd845.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.239.144.0/20 Signature Algorithm: sha256WithRSAEncryption ae:4c:4a:55:44:fa:d3:21:2e:b0:9e:b6:2a:d5:8c:19:d5:d6: 84:d0:38:7c:d8:8b:5d:a3:dd:7e:3c:eb:31:9d:99:98:a2:1d: 64:8c:60:d0:92:47:ba:06:d5:38:bd:d2:b0:4b:cc:73:29:5b: 60:8b:db:77:04:8d:63:11:e2:a7:45:a9:b5:43:7d:f8:40:e5: b8:94:46:82:ab:82:ab:df:80:6c:fc:fa:a7:72:ef:e9:0f:1e: 04:20:38:be:23:3b:f3:b6:99:92:fd:e2:83:3d:db:da:63:6a: be:3d:e8:ce:2f:bf:b9:a0:e9:a0:15:be:de:45:84:72:eb:1e: 6f:e2:3e:76:d7:fa:7a:7c:7f:bd:0a:57:36:3f:51:ce:a4:fb: 8d:0e:b5:ca:58:eb:c6:c5:f7:0b:12:84:1e:3b:58:05:f4:5a: ac:9a:aa:f5:6e:34:10:a4:5c:2e:e5:d3:59:4c:28:c3:da:07: a4:ab:c2:e6:c4:2b:98:09:9c:e9:79:f9:ba:34:d7:5c:83:88: 98:7f:6e:b2:82:ff:d6:85:44:78:3d:4e:48:82:67:02:f9:81: 66:65:cd:1b:1e:14:81:c1:71:3b:9b:17:14:af:e4:d5:e9:93: 4f:bd:f2:23:27:e5:cd:82:56:87:83:81:b0:e7:80:e3:ce:75: dc:d1:60:8b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZ/ocB9Eh2q07eIO755KidpH0NPAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDMwNzA2WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A1OGNjNGU3NmI3ZTBlOWFhOTU4Y2I4ZDg5MGI5MWQzYzEy YWQ2ZmZiNzM5N2IyODMyNDNlZmI1ODk3OWMxMjc4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3fAJmI8X4rZqFtOsgU6REWFJF+cEss+qo+nN5LPf6ESVO K2ansAq3R4ebzonr6tFVGmNfIvk3kySepc+bogK5Vah/58dKtyISnxH4slEah7Ki rd1hUbD4e3EHL5v+FShN4Mc0xW+hHCB2nNSRR9vTFyBT5YWfgIMpFna9gr/Mo4WM IKTzOftOMD0cG7+QYomCZQMRG4/RnoBJCcQF05dGI7HHN+Xcj51H8pDy9A/4MkH4 JJw7wHxtYvhV7Ml8d/xOQzBM+SfcYTTN+LGeXDx0VMEVqGK/UBZ8Qg/UVlgJ98lH eIltVUQGjU5LGsd+fZmBAsONx0OYQooFw/MdyYytAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU7Asi5TrjyouI/3Adwiw1CwfNsTowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzk5ZGEwZjU5LWQxMTUtNDk4OS1hMWQ3LWQxODQ5NWRkZDg0NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQ275AwDQYJKoZIhvcNAQELBQADggEBAK5MSlVE+tMhLrCetirVjBnV1oTQ OHzYi12j3X486zGdmZiiHWSMYNCSR7oG1Ti90rBLzHMpW2CL23cEjWMR4qdFqbVD ffhA5biURoKrgqvfgGz8+qdy7+kPHgQgOL4jO/O2mZL94oM929pjar496M4vv7mg 6aAVvt5FhHLrHm/iPnbX+np8f70KVzY/Uc6k+40OtcpY68bF9wsShB47WAX0Wqya qvVuNBCkXC7l01lMKMPaB6SrwubEK5gJnOl5+bo011yDiJh/brKC/9aFRHg9TkiC ZwL5gWZlzRseFIHBcTubFxSv5NXpk0+98iMn5c2CVoeDgbDngOPOddzRYIs= -----END CERTIFICATE-----Generated at Fri Oct 17 22:04:14 2025 by rpki-client