$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bc8c7e84-7661-4b3b-bf91-09ac39957a42.roa File: bc8c7e84-7661-4b3b-bf91-09ac39957a42.roa (raw, json) Hash identifier: gpm20JanI3iHzuMwVKawBObXWCtJBmq9qOtmLmaY+Ao= Subject key identifier: 17:B0:A0:74:C7:03:04:A0:F1:13:65:CC:1E:44:D9:90:27:AA:DE:95 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 53F34F1F7D8985B790075C8B73D07F911C97BEE5 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bc8c7e84-7661-4b3b-bf91-09ac39957a42.roa Signing time: Sat 18 Oct 2025 22:31:36 +0000 ROA not before: Sat 18 Oct 2025 22:31:36 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.245.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:f3:4f:1f:7d:89:85:b7:90:07:5c:8b:73:d0:7f:91:1c:97:be:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 22:31:36 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=59f09799a6579161b9938b424d44942bb9b3e7fbad17d8a7cb54342524a94a55, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d4:13:ab:bc:95:3e:be:b5:27:aa:ad:38:dd: 1e:67:df:3b:3a:59:75:08:1c:9e:80:23:94:23:b0: 3f:85:00:5d:1d:6b:79:9e:b4:1c:01:7e:1d:21:a2: 40:f3:05:32:10:6e:ae:dd:a7:96:31:c3:4a:19:e6: 37:53:1c:93:ab:4d:1c:7c:e5:b2:23:9b:ef:24:eb: 1b:4a:a1:0a:21:8e:4f:40:a2:89:bd:e2:8f:e8:61: 93:52:3d:16:2c:08:23:ab:61:ed:84:80:2e:d7:8b: 9d:14:ae:c0:9d:24:79:22:18:21:04:50:ac:d5:e5: 33:b1:a0:c0:ac:28:c9:31:63:91:be:6b:c6:41:a4: 23:ef:f0:1a:ee:6e:09:15:b3:ef:fb:9b:03:b6:96: 8d:ea:55:4a:d3:2e:ab:cc:0f:19:f6:02:46:a8:34: 7b:e0:52:a3:89:2e:e9:65:61:3c:2f:de:d6:40:d4: 57:2d:30:62:b8:bb:50:0c:a2:0b:64:52:e4:cf:c9: c9:2b:35:59:18:ee:ae:12:2a:66:dd:a0:da:d4:58: 68:75:84:b2:aa:4e:c5:50:d0:8e:0f:a8:3e:a4:8d: 3d:a1:29:63:18:2a:8f:72:86:c6:0a:7d:17:13:7d: f1:ae:08:ad:41:1e:d1:eb:1e:b2:b0:0e:3f:7b:8f: 35:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:B0:A0:74:C7:03:04:A0:F1:13:65:CC:1E:44:D9:90:27:AA:DE:95 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bc8c7e84-7661-4b3b-bf91-09ac39957a42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.245.104.0/24 Signature Algorithm: sha256WithRSAEncryption a0:7d:37:ca:3d:1c:07:e7:1a:d6:48:11:39:ff:75:c4:da:ca: 30:fb:ed:c4:ef:bc:47:1f:2e:e8:03:08:ec:65:f2:8b:c3:c5: f3:91:02:64:95:02:54:90:c3:d0:71:18:9e:e3:ba:13:95:1a: 9f:26:58:00:fa:19:9d:18:96:9e:2b:8e:bb:9f:2c:fb:16:8d: 08:19:74:3b:0f:02:97:ed:0d:f9:78:b6:94:68:de:ba:be:67: 29:08:ee:74:d5:ed:7e:16:96:5b:1d:41:e8:c7:05:d0:1c:75: af:e5:74:22:f3:5d:88:3f:bc:d2:20:98:d4:ee:ec:8a:de:1f: 82:95:ed:4a:e1:00:30:e2:e6:95:60:31:ef:54:41:fd:02:da: d6:9b:9c:90:01:14:c6:73:31:e3:0b:18:21:ae:68:5b:8e:87: f2:af:97:5e:8b:3f:2b:ff:2f:1e:19:e8:eb:75:24:e0:a7:c8: fb:e1:84:9b:ca:95:7f:0f:fa:8c:ae:56:c3:87:8d:f1:e5:a6: 1f:73:a5:84:cf:8b:16:45:c3:1b:08:53:4c:95:78:4f:92:83: 15:c2:73:45:f0:fd:aa:6d:7f:82:09:cf:2f:6c:fd:c0:de:cb: 0c:ff:0b:bb:46:85:2c:95:3d:66:d0:05:46:77:e4:d0:1d:94: 7d:23:18:09 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUU/NPH32JhbeQB1yLc9B/kRyXvuUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MjIzMTM2WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A1OWYwOTc5OWE2NTc5MTYxYjk5MzhiNDI0ZDQ0OTQyYmI5 YjNlN2ZiYWQxN2Q4YTdjYjU0MzQyNTI0YTk0YTU1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/1BOrvJU+vrUnqq043R5n3zs6WXUIHJ6AI5QjsD+FAF0d a3metBwBfh0hokDzBTIQbq7dp5Yxw0oZ5jdTHJOrTRx85bIjm+8k6xtKoQohjk9A oom94o/oYZNSPRYsCCOrYe2EgC7Xi50UrsCdJHkiGCEEUKzV5TOxoMCsKMkxY5G+ a8ZBpCPv8BrubgkVs+/7mwO2lo3qVUrTLqvMDxn2AkaoNHvgUqOJLullYTwv3tZA 1FctMGK4u1AMogtkUuTPyckrNVkY7q4SKmbdoNrUWGh1hLKqTsVQ0I4PqD6kjT2h KWMYKo9yhsYKfRcTffGuCK1BHtHrHrKwDj97jzXxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUF7CgdMcDBKDxE2XMHkTZkCeq3pUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2JjOGM3ZTg0LTc2NjEtNGIzYi1iZjkxLTA5YWMzOTk1N2E0Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAS9WgwDQYJKoZIhvcNAQELBQADggEBAKB9N8o9HAfnGtZIETn/dcTayjD7 7cTvvEcfLugDCOxl8ovDxfORAmSVAlSQw9BxGJ7juhOVGp8mWAD6GZ0Ylp4rjruf LPsWjQgZdDsPApftDfl4tpRo3rq+ZykI7nTV7X4WllsdQejHBdAcda/ldCLzXYg/ vNIgmNTu7IreH4KV7UrhADDi5pVgMe9UQf0C2tabnJABFMZzMeMLGCGuaFuOh/Kv l16LPyv/Lx4Z6Ot1JOCnyPvhhJvKlX8P+oyuVsOHjfHlph9zpYTPixZFwxsIU0yV eE+SgxXCc0Xw/aptf4IJzy9s/cDeywz/C7tGhSyVPWbQBUZ35NAdlH0jGAk= -----END CERTIFICATE-----Generated at Mon Oct 20 08:41:59 2025 by rpki-client