$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bec07c45-8e83-42f9-9024-711f7c5a98c4.roa File: bec07c45-8e83-42f9-9024-711f7c5a98c4.roa (raw, json) Hash identifier: 91XjV66muom0nRfwpU9ctju2dCg5qjhr89Pos7DrE2Y= Subject key identifier: 9F:8A:68:44:65:F6:98:CF:9A:51:7F:37:DF:23:4B:C1:0C:06:A5:BC Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3AB80B435D5061D4320A7DE69F02ED462EFD0294 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bec07c45-8e83-42f9-9024-711f7c5a98c4.roa Signing time: Fri 17 Oct 2025 22:02:32 +0000 ROA not before: Fri 17 Oct 2025 22:02:32 +0000 ROA not after: Fri 21 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.232.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:b8:0b:43:5d:50:61:d4:32:0a:7d:e6:9f:02:ed:46:2e:fd:02:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 17 22:02:32 2025 GMT Not After : Nov 21 23:59:59 2025 GMT Subject: serialNumber=b65672ade0e087cea44c703446bcd966257f366ec5823d5c77bb597ee7eafdf6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:67:8c:55:9e:ba:49:a5:0a:9a:db:e0:26:2b: 2d:b6:63:30:88:54:c7:86:13:21:ee:0d:28:b3:82: 51:da:aa:dd:c8:e4:e1:95:49:de:c3:7d:0c:0b:d8: 69:9d:cb:cc:a6:fd:b5:b8:a2:21:d2:13:64:e4:c4: 2b:d2:d2:35:e9:3c:25:00:d7:c6:57:bc:96:12:e9: 4b:c6:a6:69:11:dc:48:f4:79:83:2a:57:d7:a8:b6: 5a:99:08:3e:76:f4:75:87:9b:1e:7b:28:b7:de:43: 1c:bf:fb:0b:da:c3:d3:04:53:8b:82:78:3c:0d:18: b0:c2:78:1e:11:f5:fd:b8:a1:b6:81:45:2b:3d:2c: ca:f8:a5:98:c7:85:71:c3:e8:3f:1f:44:79:72:35: 5e:20:42:ad:c7:8d:dd:19:55:d5:e4:6a:9f:16:f4: 5b:54:a6:d7:f3:29:f8:75:83:54:bc:e3:2a:0f:fa: 3a:0f:92:bf:4c:c9:35:0c:fa:92:86:75:9f:16:d1: 59:41:80:3d:be:76:f8:a7:47:65:a3:4e:7f:05:90: d0:2e:f6:04:cd:de:dd:59:25:32:0e:67:3a:28:e3: da:c4:ef:60:42:46:5c:3b:f7:2b:7c:eb:e6:03:3f: fe:64:80:10:cf:81:c8:ea:65:98:3a:e9:cd:62:50: ef:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:8A:68:44:65:F6:98:CF:9A:51:7F:37:DF:23:4B:C1:0C:06:A5:BC X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bec07c45-8e83-42f9-9024-711f7c5a98c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.232.32.0/21 Signature Algorithm: sha256WithRSAEncryption 7c:61:f9:86:ed:b3:1d:a6:3d:92:37:7f:4c:0a:26:aa:75:bd: 5b:bb:a2:ba:64:02:a6:6a:42:f3:91:cc:e2:3b:b9:c9:74:f9: f3:b8:f2:2e:4f:98:de:a7:f1:b4:d0:2f:84:93:1c:cf:38:64: db:f7:ed:64:c4:b2:ac:da:0b:b8:0e:54:ad:fa:c3:f6:e3:f8: 70:4c:08:45:cd:8a:f3:83:6a:8c:11:00:77:5f:de:f8:24:8c: be:58:09:ad:bd:c7:6b:2b:04:8d:e1:dc:59:6c:7f:73:da:42: 70:74:4b:96:d7:24:66:eb:8c:22:96:e0:ec:96:ad:f1:52:d8: 9a:84:b6:22:6a:46:3a:7a:38:61:4f:38:a9:c3:84:86:dd:02: cc:c8:2e:7e:64:64:6d:81:f5:fe:55:d1:0c:f3:30:5f:ba:10: 4e:50:a5:c9:c6:72:9c:25:55:ab:44:e9:c1:35:b5:44:05:ea: 15:bc:97:e3:ff:0e:4f:66:c4:6e:94:cc:4d:62:41:1a:36:da: ac:91:e2:33:e9:0f:b2:5c:f3:b3:ed:49:28:c7:0b:83:93:20: 67:af:f7:29:2e:df:c0:c1:8f:a2:41:5b:4f:3e:d2:1e:66:d7: 83:11:7d:4a:82:9e:b6:c2:45:97:2b:69:21:a6:7c:c0:b7:52: 96:d1:b6:2c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOrgLQ11QYdQyCn3mnwLtRi79ApQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE3MjIwMjMyWhcNMjUxMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BiNjU2NzJhZGUwZTA4N2NlYTQ0YzcwMzQ0NmJjZDk2NjI1 N2YzNjZlYzU4MjNkNWM3N2JiNTk3ZWU3ZWFmZGY2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDcZ4xVnrpJpQqa2+AmKy22YzCIVMeGEyHuDSizglHaqt3I 5OGVSd7DfQwL2Gmdy8ym/bW4oiHSE2TkxCvS0jXpPCUA18ZXvJYS6UvGpmkR3Ej0 eYMqV9eotlqZCD529HWHmx57KLfeQxy/+wvaw9MEU4uCeDwNGLDCeB4R9f24obaB RSs9LMr4pZjHhXHD6D8fRHlyNV4gQq3Hjd0ZVdXkap8W9FtUptfzKfh1g1S84yoP +joPkr9MyTUM+pKGdZ8W0VlBgD2+dvinR2WjTn8FkNAu9gTN3t1ZJTIOZzoo49rE 72BCRlw79yt86+YDP/5kgBDPgcjqZZg66c1iUO+RAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUn4poRGX2mM+aUX833yNLwQwGpbwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2JlYzA3YzQ1LThlODMtNDJmOS05MDI0LTcxMWY3YzVhOThjNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAM26CAwDQYJKoZIhvcNAQELBQADggEBAHxh+Ybtsx2mPZI3f0wKJqp1vVu7 orpkAqZqQvORzOI7ucl0+fO48i5PmN6n8bTQL4STHM84ZNv37WTEsqzaC7gOVK36 w/bj+HBMCEXNivODaowRAHdf3vgkjL5YCa29x2srBI3h3Flsf3PaQnB0S5bXJGbr jCKW4OyWrfFS2JqEtiJqRjp6OGFPOKnDhIbdAszILn5kZG2B9f5V0QzzMF+6EE5Q pcnGcpwlVatE6cE1tUQF6hW8l+P/Dk9mxG6UzE1iQRo22qyR4jPpD7Jc87PtSSjH C4OTIGev9yku38DBj6JBW08+0h5m14MRfUqCnrbCRZcraSGmfMC3UpbRtiw= -----END CERTIFICATE-----Generated at Mon Oct 20 05:58:51 2025 by rpki-client