$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fbc01462-842d-4ccf-b248-23807d92d9fd.roa File: fbc01462-842d-4ccf-b248-23807d92d9fd.roa (raw, json) Hash identifier: BX67Xh4braDL/IVEH57m3R2u011PVVa4/m0/f6jGpjE= Subject key identifier: FC:B0:9A:39:AD:FC:03:53:66:8D:C8:BE:7C:14:A7:D6:6C:33:91:85 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 76590CB215B9DED520EF3902B534231AC3257B8A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fbc01462-842d-4ccf-b248-23807d92d9fd.roa Signing time: Tue 04 Nov 2025 01:50:57 +0000 ROA not before: Tue 04 Nov 2025 01:50:57 +0000 ROA not after: Tue 09 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.219.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:59:0c:b2:15:b9:de:d5:20:ef:39:02:b5:34:23:1a:c3:25:7b:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Nov 4 01:50:57 2025 GMT Not After : Dec 9 23:59:59 2025 GMT Subject: serialNumber=1538938f5193476aca146664786173e9090038e355e7c1454e9e12b10a6346b2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:67:85:82:51:ed:c3:20:f4:6c:f1:85:82:0e: cf:19:c6:d1:ed:3d:40:93:4c:60:08:70:b0:aa:9a: a9:20:8d:f9:f5:70:a4:c3:2d:3e:39:95:04:a1:55: 5d:80:ec:9d:e3:29:c4:d5:91:ec:a1:fb:45:e3:54: 8b:10:33:3b:45:f4:bc:7a:a0:b1:40:1f:2e:22:1d: e8:ed:f3:cf:42:38:09:e7:af:84:25:15:8f:61:c3: a1:11:1c:00:bb:dc:12:c6:8f:8e:09:66:ea:44:02: c8:f9:6a:01:87:a0:6d:b2:d7:13:31:bd:2e:cc:f3: d7:8e:00:e9:2e:f5:41:f6:e0:0b:0b:b8:a2:f2:ea: e6:4e:0a:69:29:6e:1b:84:df:5b:d4:61:97:be:0b: 46:c2:f3:b6:4b:04:be:ce:ad:a8:8e:a3:5a:a9:52: 69:cf:22:76:3b:15:b7:16:a1:0e:29:0a:a9:f0:6c: c8:f7:6e:28:84:34:17:3a:02:b0:e1:2e:c6:6b:a9: 57:0c:1f:ba:4a:13:98:45:44:1a:a5:0c:62:02:5b: 6c:1d:e6:d9:e2:36:9c:ea:65:e7:98:6b:2e:16:f7: 18:3a:07:b2:3d:9e:d8:b1:55:e3:72:72:41:2c:d9: 43:4c:59:96:e3:b7:2e:3d:59:a2:7f:27:24:b4:7b: c8:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:B0:9A:39:AD:FC:03:53:66:8D:C8:BE:7C:14:A7:D6:6C:33:91:85 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fbc01462-842d-4ccf-b248-23807d92d9fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.219.254.0/24 Signature Algorithm: sha256WithRSAEncryption 35:a7:d4:dd:75:53:7d:96:a3:1e:f7:fb:0f:60:70:cc:c0:54: 92:38:fe:d4:e6:1e:7c:0f:67:fe:95:bb:ce:b3:16:53:41:f9: f0:66:7c:61:28:00:27:70:48:ca:e1:67:07:87:78:e4:bb:6f: 1e:8b:48:a8:7f:90:6a:48:72:f3:17:54:5d:28:e9:28:02:4d: b8:71:ea:e2:91:ed:bf:c0:bc:5a:b8:4b:e0:c5:ee:d5:ef:18: 10:73:7b:77:49:dc:23:bc:a3:56:0b:42:dc:ec:b9:45:c4:f4: 89:2f:4a:ea:1e:75:6e:de:f6:5d:24:85:89:55:1a:e0:41:d4: f1:25:6c:cf:37:4e:bd:f8:d1:b5:ab:6b:62:f4:d3:9d:99:08: 0b:94:fb:63:d7:e5:77:85:45:3e:4d:09:2e:19:62:f8:de:91: 32:c2:21:03:f9:5e:b6:aa:bb:1a:f6:37:c6:28:d0:37:e3:71: 4f:ec:04:03:63:d5:e0:e2:05:d4:63:07:7b:e4:91:e6:68:7b: 2a:ad:15:99:48:5d:37:ce:cf:4f:bd:6f:22:62:51:fb:ae:69: 3e:80:30:1a:67:c2:bf:72:34:17:e2:32:ff:68:db:9f:ff:a4: c8:ec:22:fe:79:50:7b:8e:fd:0e:db:93:af:74:2a:60:fd:62: ba:7a:61:94 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdlkMshW53tUg7zkCtTQjGsMle4owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMTA0MDE1MDU3WhcNMjUxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AxNTM4OTM4ZjUxOTM0NzZhY2ExNDY2NjQ3ODYxNzNlOTA5 MDAzOGUzNTVlN2MxNDU0ZTllMTJiMTBhNjM0NmIyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9Z4WCUe3DIPRs8YWCDs8ZxtHtPUCTTGAIcLCqmqkgjfn1 cKTDLT45lQShVV2A7J3jKcTVkeyh+0XjVIsQMztF9Lx6oLFAHy4iHejt889COAnn r4QlFY9hw6ERHAC73BLGj44JZupEAsj5agGHoG2y1xMxvS7M89eOAOku9UH24AsL uKLy6uZOCmkpbhuE31vUYZe+C0bC87ZLBL7OraiOo1qpUmnPInY7FbcWoQ4pCqnw bMj3biiENBc6ArDhLsZrqVcMH7pKE5hFRBqlDGICW2wd5tniNpzqZeeYay4W9xg6 B7I9ntixVeNyckEs2UNMWZbjty49WaJ/JyS0e8ixAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU/LCaOa38A1Nmjci+fBSn1mwzkYUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2ZiYzAxNDYyLTg0MmQtNGNjZi1iMjQ4LTIzODA3ZDkyZDlmZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA22/4wDQYJKoZIhvcNAQELBQADggEBADWn1N11U32Wox73+w9gcMzAVJI4 /tTmHnwPZ/6Vu86zFlNB+fBmfGEoACdwSMrhZweHeOS7bx6LSKh/kGpIcvMXVF0o 6SgCTbhx6uKR7b/AvFq4S+DF7tXvGBBze3dJ3CO8o1YLQtzsuUXE9IkvSuoedW7e 9l0khYlVGuBB1PElbM83Tr340bWra2L0052ZCAuU+2PX5XeFRT5NCS4ZYvjekTLC IQP5Xraquxr2N8Yo0DfjcU/sBANj1eDiBdRjB3vkkeZoeyqtFZlIXTfOz0+9byJi UfuuaT6AMBpnwr9yNBfiMv9o25//pMjsIv55UHuO/Q7bk690KmD9Yrp6YZQ= -----END CERTIFICATE-----Generated at Wed Nov 5 09:33:42 2025 by rpki-client