$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b6baeeb4-7674-46a4-a4ce-344a183851c5.roa File: b6baeeb4-7674-46a4-a4ce-344a183851c5.roa (raw, json) Hash identifier: bqI12si1zZNXS41GhHHJtpngYBkzVeyllVJAD+cOdIQ= Subject key identifier: 45:5D:B0:7B:FB:FD:70:28:34:A8:C4:DC:6D:F2:34:5F:44:C6:D0:DC Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4A7A243471DCCC53D826651A8B854DCE476A2FB5 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b6baeeb4-7674-46a4-a4ce-344a183851c5.roa Signing time: Sat 18 Oct 2025 05:42:25 +0000 ROA not before: Sat 18 Oct 2025 05:42:25 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.253.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:7a:24:34:71:dc:cc:53:d8:26:65:1a:8b:85:4d:ce:47:6a:2f:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 05:42:25 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=f960e578587211c88328a2502dc6ab686239a2328999cd6887dcd231a7a49e5c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ed:62:2a:a7:42:17:c4:88:de:a0:2f:7c:8c: 4f:1a:aa:8d:01:a3:cd:3f:c8:75:62:34:50:09:78: a0:13:f5:d7:a3:1d:54:44:ac:5b:e2:35:35:32:6d: aa:79:5e:f2:da:bf:6b:fd:c5:45:7e:9f:63:41:2a: a0:3e:30:14:33:04:df:fb:56:7e:68:11:a5:7e:25: d9:b9:02:95:13:41:98:aa:98:bf:e5:36:1f:f9:f6: fd:a3:a9:62:79:4d:f4:e3:56:e7:93:99:6e:d8:22: cb:c9:5c:44:aa:40:17:23:a4:6d:bf:1b:46:9d:ea: d4:94:4b:75:51:4c:1a:8f:1c:57:df:1e:44:97:fe: 22:d8:84:6f:79:75:4c:d1:cf:79:c8:b6:7d:49:ef: d3:36:0c:71:db:5d:26:5e:c8:a6:54:b6:79:1e:ea: b5:94:fe:29:b3:90:c1:7a:65:bf:1e:58:ce:f3:17: 1e:f6:39:4c:da:29:81:f9:f9:1c:e4:17:ee:57:f5: d5:63:4d:bc:9c:0a:78:25:14:65:84:32:9a:1c:34: d0:e9:78:44:a9:5f:1a:e9:f7:26:9e:30:4b:02:0d: 87:df:da:17:1b:e0:50:d1:1c:b3:07:de:44:8b:7c: 45:32:12:a7:46:cd:be:0e:64:dc:76:73:32:84:cb: ca:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:5D:B0:7B:FB:FD:70:28:34:A8:C4:DC:6D:F2:34:5F:44:C6:D0:DC X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b6baeeb4-7674-46a4-a4ce-344a183851c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.253.0.0/18 Signature Algorithm: sha256WithRSAEncryption 4a:db:07:85:95:16:a1:79:fd:51:d3:e2:74:ce:b1:d7:c3:44: b7:90:b7:95:8b:ec:62:a1:4e:72:91:f4:b8:30:6f:b3:95:aa: e9:35:6f:b9:15:df:20:f3:c2:b1:ef:79:f9:2f:10:16:b3:d0: 73:34:ee:4f:5f:f9:72:c3:e5:4a:e0:62:a1:7e:58:eb:12:16: 82:50:af:bb:fd:b2:41:db:8f:20:a5:a0:54:c8:65:83:4e:a9: 11:5e:90:52:bd:53:b2:f6:f7:90:2f:a3:e9:a9:86:34:45:4a: c3:ad:26:03:6c:00:bf:77:5f:4d:00:74:b0:dd:35:57:40:70: d2:e7:40:25:83:dd:64:9c:2e:ea:2d:b4:7b:99:4f:7c:99:09: d3:2d:01:59:93:cd:4e:8b:12:d4:64:06:eb:1b:50:c7:0d:12: d3:86:0a:95:7c:16:83:48:d2:29:5e:6a:aa:2f:22:83:32:d2: 15:98:96:08:f3:fb:24:50:28:cc:39:0a:f4:84:19:d1:a5:6d: f6:36:9d:f2:4c:cf:6d:6f:4a:c0:e9:8f:09:0c:ee:81:24:9d: 8c:37:a5:aa:f5:10:21:f6:62:24:59:09:6d:3e:42:d1:b7:0a: 2d:6f:dc:a5:e2:d5:e4:21:46:18:48:01:17:ac:e8:d5:b0:67: 7c:4c:bb:0d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSnokNHHczFPYJmUai4VNzkdqL7UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MDU0MjI1WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BmOTYwZTU3ODU4NzIxMWM4ODMyOGEyNTAyZGM2YWI2ODYy MzlhMjMyODk5OWNkNjg4N2RjZDIzMWE3YTQ5ZTVjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC27WIqp0IXxIjeoC98jE8aqo0Bo80/yHViNFAJeKAT9dej HVRErFviNTUybap5XvLav2v9xUV+n2NBKqA+MBQzBN/7Vn5oEaV+Jdm5ApUTQZiq mL/lNh/59v2jqWJ5TfTjVueTmW7YIsvJXESqQBcjpG2/G0ad6tSUS3VRTBqPHFff HkSX/iLYhG95dUzRz3nItn1J79M2DHHbXSZeyKZUtnke6rWU/imzkMF6Zb8eWM7z Fx72OUzaKYH5+RzkF+5X9dVjTbycCnglFGWEMpocNNDpeESpXxrp9yaeMEsCDYff 2hcb4FDRHLMH3kSLfEUyEqdGzb4OZNx2czKEy8qlAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQURV2we/v9cCg0qMTcbfI0X0TG0NwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2I2YmFlZWI0LTc2NzQtNDZhNC1hNGNlLTM0NGExODM4NTFjNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY2/QAwDQYJKoZIhvcNAQELBQADggEBAErbB4WVFqF5/VHT4nTOsdfDRLeQ t5WL7GKhTnKR9Lgwb7OVquk1b7kV3yDzwrHvefkvEBaz0HM07k9f+XLD5UrgYqF+ WOsSFoJQr7v9skHbjyCloFTIZYNOqRFekFK9U7L295Avo+mphjRFSsOtJgNsAL93 X00AdLDdNVdAcNLnQCWD3WScLuottHuZT3yZCdMtAVmTzU6LEtRkBusbUMcNEtOG CpV8FoNI0ileaqovIoMy0hWYlgjz+yRQKMw5CvSEGdGlbfY2nfJMz21vSsDpjwkM 7oEknYw3par1ECH2YiRZCW0+QtG3Ci1v3KXi1eQhRhhIARes6NWwZ3xMuw0= -----END CERTIFICATE-----Generated at Wed Nov 5 10:39:47 2025 by rpki-client