$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/8bae045f-365b-43cf-99fc-12cbcbce5f67.roa File: 8bae045f-365b-43cf-99fc-12cbcbce5f67.roa (raw, json) Hash identifier: 7TmW6LHZ/pM/2I92Gfg0WaXRgU+A+sf/sWql+Q5xU3Y= Subject key identifier: 60:CA:11:5A:F7:0B:14:54:22:A1:6A:A8:C0:A4:A0:01:1C:D3:BA:DD Certificate issuer: /CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d Certificate serial: 1CEEDFC8B05761DFE8FB9C074FADAAD2AD4FC4FA Authority key identifier: 7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/8bae045f-365b-43cf-99fc-12cbcbce5f67.roa Signing time: Tue 04 Nov 2025 00:10:06 +0000 ROA not before: Tue 04 Nov 2025 00:10:06 +0000 ROA not after: Tue 09 Dec 2025 23:59:59 +0000 asID: 62785 IP address blocks: 172.96.104.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:ee:df:c8:b0:57:61:df:e8:fb:9c:07:4f:ad:aa:d2:ad:4f:c4:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d Validity Not Before: Nov 4 00:10:06 2025 GMT Not After : Dec 9 23:59:59 2025 GMT Subject: serialNumber=5ae5199e4adc4ca1d7bee477377991e798f09c8583d595329c27fe477e8f74e0, CN=b0dbbb6a-5472-4b68-ae4d-401518603039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:7e:21:8b:de:dc:b8:0c:64:99:53:5f:d4:1d: 9d:5e:1e:bb:d7:4b:cd:98:d6:af:51:dc:66:70:e5: 9b:48:a1:f9:d3:05:c9:c2:ab:2d:6f:3b:c8:13:f1: e1:92:13:e8:22:af:94:ae:d5:22:a0:92:5e:2d:64: 18:2e:4f:c5:f0:26:64:3e:a9:8c:a5:87:ed:24:79: 5c:14:b7:c5:bc:15:2a:3d:94:2a:34:d9:d1:9b:8a: 84:bb:ac:f6:a7:97:4b:37:86:cf:33:b5:f6:06:04: a8:9d:9a:79:2c:7e:9b:e0:df:5a:f2:03:0c:b2:70: 7f:e2:0d:14:1f:f6:3b:9d:0f:30:71:71:e9:a4:bf: d3:63:59:79:6d:af:fc:81:d7:58:b8:b6:d5:29:a2: db:0e:57:e3:ca:d7:e6:5e:84:15:3b:8a:e9:0b:b5: b8:3e:00:39:60:02:f9:3d:87:c9:6c:63:60:49:04: 7f:e8:b8:a1:70:17:c3:fe:df:44:00:30:be:0c:2b: b9:96:fb:e0:70:5c:19:99:c5:0e:22:c7:e0:2f:10: 5f:a7:f2:a9:a0:30:05:db:91:ee:ec:79:bf:f3:a1: 93:ec:28:a2:48:00:a0:65:63:0f:06:93:17:4e:8f: 11:b7:be:84:b9:3a:b8:31:a2:d6:49:f9:bf:5f:fe: 5c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:CA:11:5A:F7:0B:14:54:22:A1:6A:A8:C0:A4:A0:01:1C:D3:BA:DD X509v3 Authority Key Identifier: keyid:7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/8bae045f-365b-43cf-99fc-12cbcbce5f67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 172.96.104.0/21 Signature Algorithm: sha256WithRSAEncryption ac:9f:f5:f4:ae:1b:65:b7:56:ac:5f:d0:a4:1f:50:de:70:de: 63:34:27:82:79:08:74:52:10:d7:32:a7:ec:62:7d:e1:e1:82: 2b:cd:6c:fd:97:17:66:d4:44:2e:54:f9:26:58:2d:ae:0a:56: 88:ba:d6:31:c6:51:1a:03:25:dc:57:02:d4:0f:e7:49:6f:b3: f1:eb:2d:98:ad:4b:83:59:01:85:49:f0:b2:ef:a6:d8:3c:94: 47:dc:b8:2d:cc:2c:54:75:70:5c:2e:be:05:40:23:b6:16:ef: de:ae:17:3d:b5:8d:5a:ec:d1:b8:0b:04:1a:a8:0e:e5:27:e2: 7a:28:78:c4:82:40:2b:60:1d:e0:46:7c:2b:81:c1:86:8d:00: e5:54:47:ae:bc:0a:41:19:1f:40:7a:69:87:25:13:b8:e5:3f: 41:d9:fa:3b:2d:c6:5e:9d:45:a0:96:f2:eb:37:58:5b:42:8c: c2:44:5c:6d:1e:36:d1:02:b5:36:f9:65:0a:15:f0:88:dc:51: 25:1a:55:1c:eb:5f:41:3d:50:b8:ba:82:ec:bb:b6:d4:d3:f3: 1a:ff:45:77:ea:a6:26:37:43:41:62:1c:a9:1f:44:e7:3e:d1: 24:e5:6d:e9:32:99:85:1d:b8:2f:9f:7f:e8:32:06:47:07:6d: 1e:e7:82:c8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHO7fyLBXYd/o+5wHT62q0q1PxPowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMGVlNDU4M2Q4NGQ5YjRmMDgyNGNiODBiYThmYzEyNDBi NDc5NGI1MTUwNzFlOTc1MWQwHhcNMjUxMTA0MDAxMDA2WhcNMjUxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A1YWU1MTk5ZTRhZGM0Y2ExZDdiZWU0NzczNzc5OTFlNzk4 ZjA5Yzg1ODNkNTk1MzI5YzI3ZmU0NzdlOGY3NGUwMS0wKwYDVQQDEyRiMGRiYmI2 YS01NDcyLTRiNjgtYWU0ZC00MDE1MTg2MDMwMzkwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCffiGL3ty4DGSZU1/UHZ1eHrvXS82Y1q9R3GZw5ZtIofnT BcnCqy1vO8gT8eGSE+gir5Su1SKgkl4tZBguT8XwJmQ+qYylh+0keVwUt8W8FSo9 lCo02dGbioS7rPanl0s3hs8ztfYGBKidmnksfpvg31ryAwyycH/iDRQf9judDzBx cemkv9NjWXltr/yB11i4ttUpotsOV+PK1+ZehBU7iukLtbg+ADlgAvk9h8lsY2BJ BH/ouKFwF8P+30QAML4MK7mW++BwXBmZxQ4ix+AvEF+n8qmgMAXbke7seb/zoZPs KKJIAKBlYw8GkxdOjxG3voS5OrgxotZJ+b9f/lxzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUYMoRWvcLFFQioWqowKSgARzTut0wHwYDVR0jBBgwFoAUfYRHxJeKC0xz m+v2kuJMdd0/vK4wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNGU0ZmVjNS0z NTEwLTQwMTctOTBlZi04MzkxNDEyZWNkNmMvMGVlNDU4M2Q4NGQ5YjRmMDgyNGNi ODBiYThmYzEyNDBiNDc5NGI1MTUwNzFlOTc1MWQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZGZkN2Y2ZDMtZTZlOS00OTg3LTlhZTctZDA1 MmM1MzUzODk4LzhiYWUwNDVmLTM2NWItNDNjZi05OWZjLTEyY2JjYmNlNWY2Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2RmZDdmNmQzLWU2ZTktNDk4Ny05YWU3 LWQwNTJjNTM1Mzg5OC8yYlR3Z2t5NEM2ajhFa0MwZVV0UlVISHBkUjAuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAOsYGgwDQYJKoZIhvcNAQELBQADggEBAKyf9fSuG2W3Vqxf0KQfUN5w3mM0 J4J5CHRSENcyp+xifeHhgivNbP2XF2bURC5U+SZYLa4KVoi61jHGURoDJdxXAtQP 50lvs/HrLZitS4NZAYVJ8LLvptg8lEfcuC3MLFR1cFwuvgVAI7YW796uFz21jVrs 0bgLBBqoDuUn4nooeMSCQCtgHeBGfCuBwYaNAOVUR668CkEZH0B6aYclE7jlP0HZ +jstxl6dRaCW8us3WFtCjMJEXG0eNtECtTb5ZQoV8IjcUSUaVRzrX0E9ULi6guy7 ttTT8xr/RXfqpiY3Q0FiHKkfROc+0STlbekymYUduC+ff+gyBkcHbR7ngsg= -----END CERTIFICATE-----Generated at Wed Nov 5 13:11:00 2025 by rpki-client