$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bdc40aaa-4cc4-4a09-9fba-052eaf7129c5.roa File: bdc40aaa-4cc4-4a09-9fba-052eaf7129c5.roa (raw, json) Hash identifier: whGjNQAdvj9xd97q+ua2L7NryKIKxbB0K/YuNj6h0Fs= Subject key identifier: 96:08:82:37:FB:DB:7E:2D:3F:DC:E8:E5:2C:6D:6C:A4:03:75:CE:CC Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 53718B38120E9F27B80664BDD7871E0CAA078607 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bdc40aaa-4cc4-4a09-9fba-052eaf7129c5.roa Signing time: Tue 21 Oct 2025 10:21:24 +0000 ROA not before: Tue 21 Oct 2025 10:21:24 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.78.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:71:8b:38:12:0e:9f:27:b8:06:64:bd:d7:87:1e:0c:aa:07:86:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 21 10:21:24 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=9fe4e20f6cbaeb5df935537c8fc5ad175b699b0c05483e9bdfd26cd23a50e9ef, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:56:b6:3a:39:54:cf:86:a6:5f:12:8e:62:ee: 30:0c:96:f5:47:5d:2f:71:1c:9b:7a:c3:8b:05:2a: bd:6b:c8:df:d6:35:19:64:89:3f:2f:a8:61:1d:fb: 93:ca:cd:a3:47:85:50:10:02:94:b1:af:00:d0:f9: 29:47:3a:a0:18:cc:cc:30:d8:67:de:0c:cc:02:53: ef:5c:e2:5e:b4:ea:ce:af:0e:81:e6:16:8e:31:e1: 40:a3:dc:9c:d8:10:34:65:00:3c:d1:e3:d4:ca:8f: 4f:23:f8:0f:f0:50:15:67:09:83:4f:ed:25:44:45: 25:6a:d0:52:72:41:99:86:2d:0e:da:69:13:bc:cc: 3a:f3:11:f0:f9:19:e1:e3:ad:a9:ce:f7:a5:a6:a1: 4f:18:6c:a5:af:87:15:f9:63:6d:bc:88:a4:7e:a8: ea:7c:8f:49:29:b0:de:5d:b0:3d:93:6f:ae:1b:1f: b5:2c:00:80:d6:3f:e1:32:47:de:bb:41:79:1c:70: 54:4d:49:9e:58:f6:10:8e:e5:97:dd:94:56:e8:9f: 1c:2a:5c:59:e0:2c:c6:42:fe:d2:b7:a8:3f:b3:85: 2d:53:cb:f1:7a:24:4e:7e:5b:9e:dd:a1:53:90:6c: 08:79:7b:7f:27:c3:e6:f3:4c:ec:27:cb:f6:5d:ec: 8d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:08:82:37:FB:DB:7E:2D:3F:DC:E8:E5:2C:6D:6C:A4:03:75:CE:CC X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bdc40aaa-4cc4-4a09-9fba-052eaf7129c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.78.0.0/17 Signature Algorithm: sha256WithRSAEncryption 0a:36:2f:b9:35:ac:0e:ae:d0:88:c1:3d:4e:a1:bb:a3:25:38: 53:e6:ab:d5:c1:a0:ba:6d:b7:d8:a2:d6:fb:4d:b4:67:9f:70: 46:fa:96:54:3f:e1:12:7e:3c:40:5f:23:65:da:00:41:93:9a: 5f:29:b0:41:88:49:ee:71:b1:1a:86:cc:ca:85:c8:38:4d:a6: bb:bc:9d:ee:4a:db:b2:18:29:49:cd:55:4c:a3:53:24:48:00: 8e:c0:b4:ba:60:55:a1:6d:72:09:e5:e5:72:0e:8c:47:55:ac: 3d:1c:46:fb:ab:1c:de:87:a2:ba:a7:db:06:c2:7c:65:b7:79: 56:e0:2b:57:29:ce:7a:51:89:72:6c:6f:60:12:0e:d2:24:ac: 51:5a:a2:14:f1:33:66:8d:c5:e6:2b:bd:fa:0f:dd:3e:89:22: 24:bc:3a:40:36:1c:1a:7e:11:32:68:a6:a7:e9:4c:62:35:31: b6:3a:c7:fc:a1:10:98:66:8c:db:a7:1b:b7:16:5e:24:f7:81: 7a:8d:d5:9f:39:9b:83:1b:fd:b9:2f:fc:d2:bc:4e:00:3f:86: 2a:03:a2:cc:64:ff:3c:49:78:38:5b:e3:12:d4:fa:f4:a8:db: df:d9:bf:15:99:11:24:2a:18:f7:ce:6e:9f:5b:cc:fa:b8:60: f0:17:7f:57 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUU3GLOBIOnye4BmS914ceDKoHhgcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDIxMTAyMTI0WhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZmU0ZTIwZjZjYmFlYjVkZjkzNTUzN2M4ZmM1YWQxNzVi Njk5YjBjMDU0ODNlOWJkZmQyNmNkMjNhNTBlOWVmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwVrY6OVTPhqZfEo5i7jAMlvVHXS9xHJt6w4sFKr1ryN/W NRlkiT8vqGEd+5PKzaNHhVAQApSxrwDQ+SlHOqAYzMww2GfeDMwCU+9c4l606s6v DoHmFo4x4UCj3JzYEDRlADzR49TKj08j+A/wUBVnCYNP7SVERSVq0FJyQZmGLQ7a aRO8zDrzEfD5GeHjranO96WmoU8YbKWvhxX5Y228iKR+qOp8j0kpsN5dsD2Tb64b H7UsAIDWP+EyR967QXkccFRNSZ5Y9hCO5ZfdlFbonxwqXFngLMZC/tK3qD+zhS1T y/F6JE5+W57doVOQbAh5e38nw+bzTOwny/Zd7I1RAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUlgiCN/vbfi0/3OjlLG1spAN1zswwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2JkYzQwYWFhLTRjYzQtNGEwOS05ZmJhLTA1MmVhZjcxMjljNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc2TgAwDQYJKoZIhvcNAQELBQADggEBAAo2L7k1rA6u0IjBPU6hu6MlOFPm q9XBoLptt9ii1vtNtGefcEb6llQ/4RJ+PEBfI2XaAEGTml8psEGISe5xsRqGzMqF yDhNpru8ne5K27IYKUnNVUyjUyRIAI7AtLpgVaFtcgnl5XIOjEdVrD0cRvurHN6H orqn2wbCfGW3eVbgK1cpznpRiXJsb2ASDtIkrFFaohTxM2aNxeYrvfoP3T6JIiS8 OkA2HBp+ETJopqfpTGI1MbY6x/yhEJhmjNunG7cWXiT3gXqN1Z85m4Mb/bkv/NK8 TgA/hioDosxk/zxJeDhb4xLU+vSo29/ZvxWZESQqGPfObp9bzPq4YPAXf1c= -----END CERTIFICATE-----Generated at Wed Nov 5 03:27:14 2025 by rpki-client