$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bdc2f771-de5b-4e2a-931b-9ce89a364c11.roa File: bdc2f771-de5b-4e2a-931b-9ce89a364c11.roa (raw, json) Hash identifier: cGUqi5JF8elOBkrWOTo5Gau6Xn/4URxkMn5b63szk5g= Subject key identifier: 7D:42:BD:EC:3F:13:F6:22:12:04:F6:CC:81:54:4D:FD:A9:98:79:4F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0D92DACBC67D8D7C052713ED130A3AF1F5E50E9A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bdc2f771-de5b-4e2a-931b-9ce89a364c11.roa Signing time: Tue 04 Nov 2025 00:30:59 +0000 ROA not before: Tue 04 Nov 2025 00:30:59 +0000 ROA not after: Tue 09 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 34.254.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:92:da:cb:c6:7d:8d:7c:05:27:13:ed:13:0a:3a:f1:f5:e5:0e:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Nov 4 00:30:59 2025 GMT Not After : Dec 9 23:59:59 2025 GMT Subject: serialNumber=73e8d2a83de33034a2704d98fd0769427af7191218e47e5bdf5c93bf83ced229, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b0:34:78:72:d9:ed:9f:71:c0:2c:bd:22:a4: ae:c5:e7:c2:55:5c:ae:3d:e5:97:84:56:34:59:06: 23:62:19:fd:48:1e:0f:de:bb:d6:57:26:fe:41:5c: dd:d1:2c:14:b2:68:36:2c:52:40:18:2d:89:a4:15: 53:16:3e:ed:5e:43:80:7e:ed:1b:3a:99:9e:19:ee: 59:66:69:86:54:e1:1b:d3:12:19:3d:88:20:fe:13: d8:5d:4b:0b:63:da:58:a9:f3:4e:e0:7b:a5:a2:ea: 56:60:b9:f5:d7:ad:af:01:6a:e7:d6:0f:03:8e:a3: 97:a8:d3:18:6d:96:e1:45:dd:bc:92:ee:0c:33:26: 0a:08:af:95:4a:80:8f:d6:e3:95:0d:8c:a3:d1:d2: c2:e7:ff:6a:6d:f5:ca:d3:a0:2c:e6:a8:2c:1f:06: 33:87:45:61:5f:aa:d7:af:9d:56:5f:3b:55:b8:0c: cc:d2:a8:df:d5:09:bf:b8:f4:1d:e7:fc:35:72:af: 23:71:eb:3d:3c:a4:48:8b:df:e3:4e:00:6e:eb:80: a1:a6:85:60:03:71:c3:f9:97:2d:fd:c2:df:fb:1b: 6d:83:2d:98:3a:97:ca:c5:fc:e4:8e:46:51:43:80: 7c:37:0e:34:6a:3c:cf:2f:c5:b2:38:d0:f3:3e:d7: 4e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:42:BD:EC:3F:13:F6:22:12:04:F6:CC:81:54:4D:FD:A9:98:79:4F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bdc2f771-de5b-4e2a-931b-9ce89a364c11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 34.254.64.0/18 Signature Algorithm: sha256WithRSAEncryption 76:25:3e:9a:e9:15:e0:e9:db:dc:80:9f:8d:3c:7e:cf:76:c0: af:42:a2:35:7d:7a:86:ca:80:86:a7:b9:4b:6c:7c:19:83:0a: b5:4a:77:04:62:08:73:3a:b8:0c:5c:20:75:aa:fe:b7:e2:9b: 59:b9:46:1f:40:6a:d7:03:ac:f2:0f:2e:0b:d3:01:e3:5c:79: ed:e8:2c:c2:cd:a4:cf:98:9f:a2:ba:da:a7:40:5b:e9:b7:23: 8e:97:41:eb:7f:61:8e:4f:ae:61:89:66:b3:13:83:d9:c2:13: a6:71:8b:62:aa:cc:fc:78:9f:14:e9:4e:38:2e:32:25:c0:a9: 34:4f:cc:df:e1:75:40:4b:57:c4:07:05:60:1d:b4:45:2f:c6: e0:32:34:9f:d5:cd:b3:5d:c7:49:ac:4a:e9:6d:b7:af:4b:0c: 4b:31:e1:57:5e:66:c7:c3:32:8c:d0:8f:e2:15:9a:19:68:2d: d0:6a:d2:e2:54:f3:93:82:fe:f2:2d:22:2b:cf:0b:ac:d6:68: 52:46:b9:39:69:86:46:db:8f:ea:8a:b5:b9:1a:79:1f:76:7f: e8:9e:77:f3:07:ad:e6:0c:d8:c1:01:86:1a:e4:07:c5:37:9e: 22:5b:e2:73:35:ed:2d:43:40:2a:9d:8e:b8:f4:c6:e3:68:66: ab:54:1d:e4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDZLay8Z9jXwFJxPtEwo68fXlDpowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMTA0MDAzMDU5WhcNMjUxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A3M2U4ZDJhODNkZTMzMDM0YTI3MDRkOThmZDA3Njk0Mjdh ZjcxOTEyMThlNDdlNWJkZjVjOTNiZjgzY2VkMjI5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLsDR4ctntn3HALL0ipK7F58JVXK495ZeEVjRZBiNiGf1I Hg/eu9ZXJv5BXN3RLBSyaDYsUkAYLYmkFVMWPu1eQ4B+7Rs6mZ4Z7llmaYZU4RvT Ehk9iCD+E9hdSwtj2lip807ge6Wi6lZgufXXra8BaufWDwOOo5eo0xhtluFF3byS 7gwzJgoIr5VKgI/W45UNjKPR0sLn/2pt9crToCzmqCwfBjOHRWFfqtevnVZfO1W4 DMzSqN/VCb+49B3n/DVyryNx6z08pEiL3+NOAG7rgKGmhWADccP5ly39wt/7G22D LZg6l8rF/OSORlFDgHw3DjRqPM8vxbI40PM+107FAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUfUK97D8T9iISBPbMgVRN/amYeU8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2JkYzJmNzcxLWRlNWItNGUyYS05MzFiLTljZTg5YTM2NGMxMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYi/kAwDQYJKoZIhvcNAQELBQADggEBAHYlPprpFeDp29yAn408fs92wK9C ojV9eobKgIanuUtsfBmDCrVKdwRiCHM6uAxcIHWq/rfim1m5Rh9AatcDrPIPLgvT AeNcee3oLMLNpM+Yn6K62qdAW+m3I46XQet/YY5PrmGJZrMTg9nCE6Zxi2KqzPx4 nxTpTjguMiXAqTRPzN/hdUBLV8QHBWAdtEUvxuAyNJ/VzbNdx0msSultt69LDEsx 4VdeZsfDMozQj+IVmhloLdBq0uJU85OC/vItIivPC6zWaFJGuTlphkbbj+qKtbka eR92f+ied/MHreYM2MEBhhrkB8U3niJb4nM17S1DQCqdjrj0xuNoZqtUHeQ= -----END CERTIFICATE-----Generated at Wed Nov 5 18:22:19 2025 by rpki-client