$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b09353f5-b14f-4414-8aee-9058fc3e0dff.roa File: b09353f5-b14f-4414-8aee-9058fc3e0dff.roa (raw, json) Hash identifier: FlSLrFs+CzZC/6PlfYn+V+RXG8ZYQRm2GCGv8WZyEIY= Subject key identifier: EF:4C:15:09:12:12:68:CF:2B:CC:77:19:AF:2C:E1:11:7C:1E:0B:4B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1A3E542F21897A9E3C3F88AC1E1BB7689020417C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b09353f5-b14f-4414-8aee-9058fc3e0dff.roa Signing time: Fri 26 Sep 2025 02:45:20 +0000 ROA not before: Fri 26 Sep 2025 02:45:20 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.230.162.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:3e:54:2f:21:89:7a:9e:3c:3f:88:ac:1e:1b:b7:68:90:20:41:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 02:45:20 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=18d5bb6a42fcc702e21fa47cb60514f34e26ad3ba3400c02b249d3916033294e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:df:eb:c4:2c:2d:4e:91:8f:f9:2f:f0:9d:a7: 54:75:d6:1c:4d:03:85:45:16:04:a6:fa:d2:df:1e: d3:64:80:1e:3d:a7:57:85:39:ed:c5:8d:1c:21:df: 97:de:22:22:49:c5:81:cb:3d:9d:62:48:83:f1:84: 1f:ec:6b:ea:c6:52:bd:19:2b:a7:81:38:0c:dd:33: c0:cc:a5:9a:0a:f3:fe:8e:bf:cc:7c:4b:f5:c9:e6: b7:3d:03:f5:a9:11:38:7f:ce:22:47:98:14:5f:54: ff:c8:8e:80:ec:12:7f:64:d2:91:1e:3d:4e:fa:63: d0:e2:9a:f3:98:73:ec:65:99:b8:27:f8:6f:f0:87: 5e:89:e1:e6:e6:30:6a:f7:1b:36:e1:2a:00:94:0e: 59:47:d1:26:ed:78:76:0e:44:22:82:b6:76:ca:14: 64:4d:df:c2:af:96:d9:63:41:c4:37:84:1a:45:2d: 23:9a:43:97:62:33:e0:e6:07:ef:6b:85:c7:22:af: e7:c9:2c:5a:ae:a1:ec:a5:15:f1:34:a2:75:aa:7b: f5:df:89:c0:d8:b8:39:1e:1c:69:5f:59:c1:69:c1: 51:cc:cf:fd:13:be:f6:11:10:85:aa:63:0a:23:61: a2:16:10:80:ec:a6:15:98:d2:72:2b:43:c4:50:9c: 16:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:4C:15:09:12:12:68:CF:2B:CC:77:19:AF:2C:E1:11:7C:1E:0B:4B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b09353f5-b14f-4414-8aee-9058fc3e0dff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.230.162.0/23 Signature Algorithm: sha256WithRSAEncryption 47:ea:2e:ae:4a:55:4c:52:2b:0c:ad:6b:78:1f:19:42:21:41: 6a:1d:9d:57:0d:8c:1d:68:79:2d:24:01:aa:ad:8c:58:df:00: 89:0c:f9:b0:90:ed:9b:f8:b4:43:8b:45:e2:89:b3:e5:7e:b6: b6:55:0e:db:c8:2f:05:b4:71:97:6d:cd:5e:ea:24:5a:c5:d7: c6:f8:58:56:af:e4:53:b0:29:06:fa:ef:e6:fb:4c:bd:12:df: 3e:fc:55:99:a0:0a:06:a6:12:66:8a:da:5e:2f:90:a3:ef:79: 2a:67:18:36:09:09:e7:a4:ae:b3:21:fa:52:64:e0:71:30:94: 9d:40:7a:54:31:2a:4d:85:08:e9:7b:2b:d4:4c:df:ac:bc:e7: b3:11:bb:5f:f1:1a:ba:02:fd:35:d4:49:7a:5a:01:9b:8e:38: 4d:61:66:ce:40:ff:e0:8d:74:9e:9f:d3:b2:53:bd:71:4b:3b: 1b:ed:c6:51:cd:0a:45:41:ce:ca:2c:24:73:86:6d:d6:c3:ac: 11:45:d2:43:51:39:a5:5e:58:16:29:14:7f:45:87:65:17:d8: 22:dd:f0:b9:84:99:e2:4c:84:f0:9c:d2:a9:db:e8:a9:0e:07: ea:3a:1a:36:e4:74:f7:59:1c:ca:b8:56:43:9d:a8:ef:ab:25: 3b:0f:67:b0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGj5ULyGJep48P4isHhu3aJAgQXwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDI0NTIwWhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0AxOGQ1YmI2YTQyZmNjNzAyZTIxZmE0N2NiNjA1MTRmMzRl MjZhZDNiYTM0MDBjMDJiMjQ5ZDM5MTYwMzMyOTRlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCz3+vELC1OkY/5L/Cdp1R11hxNA4VFFgSm+tLfHtNkgB49 p1eFOe3FjRwh35feIiJJxYHLPZ1iSIPxhB/sa+rGUr0ZK6eBOAzdM8DMpZoK8/6O v8x8S/XJ5rc9A/WpETh/ziJHmBRfVP/IjoDsEn9k0pEePU76Y9DimvOYc+xlmbgn +G/wh16J4ebmMGr3GzbhKgCUDllH0SbteHYORCKCtnbKFGRN38KvltljQcQ3hBpF LSOaQ5diM+DmB+9rhccir+fJLFquoeylFfE0onWqe/XficDYuDkeHGlfWcFpwVHM z/0TvvYREIWqYwojYaIWEIDsphWY0nIrQ8RQnBbJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU70wVCRISaM8rzHcZryzhEXweC0swHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2IwOTM1M2Y1LWIxNGYtNDQxNC04YWVlLTkwNThmYzNlMGRmZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE25qIwDQYJKoZIhvcNAQELBQADggEBAEfqLq5KVUxSKwyta3gfGUIhQWod nVcNjB1oeS0kAaqtjFjfAIkM+bCQ7Zv4tEOLReKJs+V+trZVDtvILwW0cZdtzV7q JFrF18b4WFav5FOwKQb67+b7TL0S3z78VZmgCgamEmaK2l4vkKPveSpnGDYJCeek rrMh+lJk4HEwlJ1AelQxKk2FCOl7K9RM36y857MRu1/xGroC/TXUSXpaAZuOOE1h Zs5A/+CNdJ6f07JTvXFLOxvtxlHNCkVBzsosJHOGbdbDrBFF0kNROaVeWBYpFH9F h2UX2CLd8LmEmeJMhPCc0qnb6KkOB+o6GjbkdPdZHMq4VkOdqO+rJTsPZ7A= -----END CERTIFICATE-----Generated at Fri Oct 17 23:47:37 2025 by rpki-client