$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b1ff8619-1d98-458e-be2c-69e25a19783a.roa File: b1ff8619-1d98-458e-be2c-69e25a19783a.roa (raw, json) Hash identifier: e4xam0Xi8ylAFIJsgPWa22mBXB5WM7MKJr35mkLtE6Q= Subject key identifier: 34:F7:D6:62:41:77:71:4A:89:51:16:20:D2:89:7B:73:5A:7C:D7:B5 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 40F7A60AA98388268878E28BDD7021DA532B7F85 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b1ff8619-1d98-458e-be2c-69e25a19783a.roa Signing time: Fri 26 Sep 2025 02:42:10 +0000 ROA not before: Fri 26 Sep 2025 02:42:10 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.239.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:f7:a6:0a:a9:83:88:26:88:78:e2:8b:dd:70:21:da:53:2b:7f:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 02:42:10 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=809f3edbee386bbf9aae2c6678b1b2e5bc848bebb596a08f853d50d000fa619b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1d:c9:ca:f6:ff:a6:42:df:2c:ff:f7:61:4c: a0:e1:85:29:31:a4:ae:05:50:04:fb:73:a4:04:fa: e6:be:1d:bc:92:b9:39:92:ea:28:ad:64:be:75:37: 84:4e:44:00:08:92:d4:fb:2a:da:aa:7e:55:7e:c1: 1e:37:36:58:5e:8a:7c:ab:6d:23:18:aa:23:45:5c: 59:93:a7:a1:8b:2a:8e:0e:8c:e5:c6:da:47:9e:08: dc:e1:b7:15:51:f3:4c:8b:80:60:f7:06:5a:1c:f0: 74:32:46:f8:13:2e:8a:e5:12:9d:26:51:39:6b:3c: 11:ab:8f:d7:6b:3a:d6:d6:ab:5e:4f:27:24:18:f9: 17:8b:be:68:63:96:94:56:d5:39:a1:7f:dc:aa:a8: a8:01:1a:7e:1e:d3:90:7f:40:81:bd:66:58:6c:7f: d8:f5:d4:2f:15:ed:0a:e4:73:4b:05:c9:a0:f0:51: 79:ce:3c:73:1c:97:0f:3c:fd:6c:06:67:2a:3a:87: 39:18:a3:e6:fd:d0:b7:de:2f:bc:ad:d5:a4:a2:0b: be:0e:28:1b:0a:58:9f:03:e7:b6:6d:3c:18:da:34: 3b:7c:86:c3:ca:c2:34:7d:b8:17:3a:e3:5a:75:b8: f8:d8:2c:b9:88:4a:44:6e:ba:0a:35:ed:b2:0c:a9: 04:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:F7:D6:62:41:77:71:4A:89:51:16:20:D2:89:7B:73:5A:7C:D7:B5 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b1ff8619-1d98-458e-be2c-69e25a19783a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.239.190.0/24 Signature Algorithm: sha256WithRSAEncryption aa:37:39:52:3c:da:f9:24:27:6f:8d:f9:8f:3d:e4:d3:f3:34: 88:37:87:62:68:b4:12:fc:c5:d6:d7:01:84:c5:80:a1:61:e1: 56:b5:c7:35:42:7e:d3:76:52:b1:29:41:b9:63:00:d9:3e:a9: 2b:36:af:b8:6a:76:10:52:bb:c0:1c:8f:89:d1:4e:f0:2a:e2: b2:cb:96:23:2d:41:1c:b6:d7:52:7f:e7:62:f1:86:64:76:bd: de:e6:68:33:f1:45:99:61:69:f8:3e:a6:fd:f0:44:47:01:76: 23:41:4f:66:5f:cc:d0:cf:0d:cf:bf:67:be:5f:91:25:1a:b8: d1:4b:68:1b:f9:af:89:84:d7:e8:a2:1c:72:2e:f0:c7:bb:d2: ba:d9:e4:ab:2e:bc:25:d3:36:d2:e1:fd:c8:35:27:b9:27:0d: b7:16:73:ec:07:10:ae:b3:f6:01:81:1f:5a:d2:de:7d:23:b2: c7:ce:c0:f2:5a:31:a5:d1:2f:a8:11:66:7b:e4:09:2a:32:1a: 87:ab:df:04:42:7c:51:9a:a7:3d:a9:83:4a:c7:0b:0a:60:6b: c6:17:28:cb:ff:e7:97:db:fa:ce:b7:22:2e:a7:33:1b:06:40: b0:64:51:92:02:7b:46:af:f8:92:10:53:1b:00:c7:34:1c:56: 65:3b:15:8a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQPemCqmDiCaIeOKL3XAh2lMrf4UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDI0MjEwWhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A4MDlmM2VkYmVlMzg2YmJmOWFhZTJjNjY3OGIxYjJlNWJj ODQ4YmViYjU5NmEwOGY4NTNkNTBkMDAwZmE2MTliMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDPHcnK9v+mQt8s//dhTKDhhSkxpK4FUAT7c6QE+ua+HbyS uTmS6iitZL51N4RORAAIktT7KtqqflV+wR43NlheinyrbSMYqiNFXFmTp6GLKo4O jOXG2keeCNzhtxVR80yLgGD3Bloc8HQyRvgTLorlEp0mUTlrPBGrj9drOtbWq15P JyQY+ReLvmhjlpRW1Tmhf9yqqKgBGn4e05B/QIG9Zlhsf9j11C8V7Qrkc0sFyaDw UXnOPHMclw88/WwGZyo6hzkYo+b90LfeL7yt1aSiC74OKBsKWJ8D57ZtPBjaNDt8 hsPKwjR9uBc641p1uPjYLLmISkRuugo17bIMqQQFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUNPfWYkF3cUqJURYg0ol7c1p817UwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2IxZmY4NjE5LTFkOTgtNDU4ZS1iZTJjLTY5ZTI1YTE5NzgzYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA2774wDQYJKoZIhvcNAQELBQADggEBAKo3OVI82vkkJ2+N+Y895NPzNIg3 h2JotBL8xdbXAYTFgKFh4Va1xzVCftN2UrEpQbljANk+qSs2r7hqdhBSu8Acj4nR TvAq4rLLliMtQRy211J/52LxhmR2vd7maDPxRZlhafg+pv3wREcBdiNBT2ZfzNDP Dc+/Z75fkSUauNFLaBv5r4mE1+iiHHIu8Me70rrZ5KsuvCXTNtLh/cg1J7knDbcW c+wHEK6z9gGBH1rS3n0jssfOwPJaMaXRL6gRZnvkCSoyGoer3wRCfFGapz2pg0rH Cwpga8YXKMv/55fb+s63Ii6nMxsGQLBkUZICe0av+JIQUxsAxzQcVmU7FYo= -----END CERTIFICATE-----Generated at Fri Oct 17 23:45:44 2025 by rpki-client