$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/be9eb30f-ca78-4c37-841b-b065eee7b80a.roa File: be9eb30f-ca78-4c37-841b-b065eee7b80a.roa (raw, json) Hash identifier: QqaNU/5UNEcBHJGZCet/jH+xo9Ek/UrOm+vKYKUFb7c= Subject key identifier: D6:B9:3D:28:8B:5F:DF:38:36:AC:C1:BC:33:B0:44:EE:FF:C6:FD:FA Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 504565072828579A9CD9B83B6D652D2A1952A784 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/be9eb30f-ca78-4c37-841b-b065eee7b80a.roa Signing time: Fri 26 Sep 2025 17:27:19 +0000 ROA not before: Fri 26 Sep 2025 17:27:19 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.87.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:45:65:07:28:28:57:9a:9c:d9:b8:3b:6d:65:2d:2a:19:52:a7:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 17:27:19 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=7ebae907238c9a7bb29bdd6761f4966830c92b7616d6150dfbd231168e0e93d7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:3d:29:77:83:38:13:53:ea:48:c7:30:3c:1d: 20:39:95:4f:33:e8:1d:9e:4f:27:46:d1:49:2a:7b: 86:7e:74:04:22:88:b1:24:ff:c3:1c:10:20:3d:30: 22:b1:64:95:87:d9:17:72:ff:d0:d7:9e:d5:b1:11: 02:37:84:93:b7:f9:0a:46:e8:37:e2:5c:d4:44:70: 4d:53:16:42:44:a9:5a:6b:c6:83:ef:35:1f:3a:a9: 6b:b3:99:56:ea:2c:c1:4e:ad:85:8a:8b:57:65:02: 0d:bb:9e:3f:b0:12:95:1b:00:0e:27:c4:90:c6:b0: 4c:7d:a9:1e:de:c9:ea:ac:8c:3b:df:d6:5b:b7:f9: 98:f3:86:7d:4e:14:ca:06:8f:74:8a:95:84:53:56: 04:b7:96:23:b0:53:84:d2:ef:31:4b:fb:d7:8d:aa: 36:36:77:3e:b9:e7:eb:3c:4e:c6:8a:63:b1:32:8f: 10:02:e9:ed:a5:43:2b:25:5a:18:e2:cf:9d:1b:a1: b1:f3:4d:63:68:57:5e:4e:a1:52:be:65:05:05:ea: 75:ba:77:27:26:51:75:6d:94:f3:50:d3:0c:c1:60: 84:c9:8f:7d:b6:f4:9f:18:cb:99:6e:60:0d:ad:06: e3:ca:9b:b1:f2:63:21:40:fe:61:ea:87:46:df:9f: 18:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:B9:3D:28:8B:5F:DF:38:36:AC:C1:BC:33:B0:44:EE:FF:C6:FD:FA X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/be9eb30f-ca78-4c37-841b-b065eee7b80a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.87.64.0/18 Signature Algorithm: sha256WithRSAEncryption 97:e8:7c:ff:cf:dc:da:54:9f:3d:ff:46:b3:bf:1b:c4:e2:36: 97:ac:c5:c7:35:8e:04:3c:9f:58:90:92:45:62:db:4e:8b:1c: b2:94:1d:18:a8:24:10:32:04:c8:95:4e:7f:5b:67:25:55:c2: bc:d2:9b:59:be:7b:42:f3:98:a1:ab:3c:59:24:30:71:0f:3a: 54:4a:d1:13:e4:cc:c9:3d:52:31:7e:2e:e1:1e:fb:8d:4b:b3: 51:4f:3e:78:4e:c6:a7:cf:84:2e:f1:b3:af:c6:97:55:49:c8: cb:05:2c:3b:2d:f6:67:2b:a4:5c:45:fe:51:9e:08:d6:60:db: 6a:d5:70:93:01:78:59:3c:2b:a8:ba:07:ce:69:5c:92:9c:9b: 02:ac:63:f2:df:da:3c:3a:96:6b:cb:69:62:fd:f0:da:96:3e: 4f:ef:58:88:8b:32:5b:1a:df:ec:91:15:61:a8:ad:4f:af:93: a7:a7:0f:29:ad:36:e9:93:4f:97:fa:63:df:2c:ce:2a:c9:b7: 41:e0:42:38:9d:4a:f6:29:7e:78:81:cf:2f:2e:86:dc:5a:e3: 04:53:99:ea:ed:59:92:6e:14:a1:86:7f:c0:67:4b:9f:fa:23: 5a:72:9c:8d:80:36:75:54:10:47:ac:8e:36:60:a5:1a:34:10: 06:33:a1:34 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUEVlBygoV5qc2bg7bWUtKhlSp4QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MTcyNzE5WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZWJhZTkwNzIzOGM5YTdiYjI5YmRkNjc2MWY0OTY2ODMw YzkyYjc2MTZkNjE1MGRmYmQyMzExNjhlMGU5M2Q3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfPSl3gzgTU+pIxzA8HSA5lU8z6B2eTydG0Ukqe4Z+dAQi iLEk/8McECA9MCKxZJWH2Rdy/9DXntWxEQI3hJO3+QpG6DfiXNREcE1TFkJEqVpr xoPvNR86qWuzmVbqLMFOrYWKi1dlAg27nj+wEpUbAA4nxJDGsEx9qR7eyeqsjDvf 1lu3+Zjzhn1OFMoGj3SKlYRTVgS3liOwU4TS7zFL+9eNqjY2dz655+s8TsaKY7Ey jxAC6e2lQyslWhjiz50bobHzTWNoV15OoVK+ZQUF6nW6dycmUXVtlPNQ0wzBYITJ j3229J8Yy5luYA2tBuPKm7HyYyFA/mHqh0bfnxjtAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU1rk9KItf3zg2rMG8M7BE7v/G/fowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2JlOWViMzBmLWNhNzgtNGMzNy04NDFiLWIwNjVlZWU3YjgwYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY2V0AwDQYJKoZIhvcNAQELBQADggEBAJfofP/P3NpUnz3/RrO/G8TiNpes xcc1jgQ8n1iQkkVi206LHLKUHRioJBAyBMiVTn9bZyVVwrzSm1m+e0LzmKGrPFkk MHEPOlRK0RPkzMk9UjF+LuEe+41Ls1FPPnhOxqfPhC7xs6/Gl1VJyMsFLDst9mcr pFxF/lGeCNZg22rVcJMBeFk8K6i6B85pXJKcmwKsY/Lf2jw6lmvLaWL98NqWPk/v WIiLMlsa3+yRFWGorU+vk6enDymtNumTT5f6Y98szirJt0HgQjidSvYpfniBzy8u htxa4wRTmertWZJuFKGGf8BnS5/6I1pynI2ANnVUEEesjjZgpRo0EAYzoTQ= -----END CERTIFICATE-----Generated at Mon Oct 20 03:04:15 2025 by rpki-client