$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bfcf6c84-3d3d-49cc-a8e6-ee81755d4acf.roa File: bfcf6c84-3d3d-49cc-a8e6-ee81755d4acf.roa (raw, json) Hash identifier: njES69k/dLtzfsLaEogmLJEE8FvzKF7XQ5oUcPLYDas= Subject key identifier: DF:7E:C2:7E:B0:8C:A4:3E:22:DC:62:4B:F6:4E:51:66:E8:48:82:18 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 342D8ED7538477B73FB8B8F69ECD997B66381ECD Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bfcf6c84-3d3d-49cc-a8e6-ee81755d4acf.roa Signing time: Sun 19 Oct 2025 07:30:18 +0000 ROA not before: Sun 19 Oct 2025 07:30:18 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.84.130.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:2d:8e:d7:53:84:77:b7:3f:b8:b8:f6:9e:cd:99:7b:66:38:1e:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 07:30:18 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=85cd9abd4122945821fb69a440568d17e4e7df67aa0b054f64f7ef57a705df18, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:bf:9d:02:25:f2:6e:9b:cc:b7:3d:02:2d:66: f3:54:cf:5a:e3:ed:7a:d6:79:25:9f:66:56:79:33: f4:80:07:40:bc:0d:2c:1f:b0:cf:25:0a:29:ec:dd: 03:0f:97:d7:ac:88:9d:e9:d2:a6:44:50:7f:80:ff: ca:32:b2:09:36:33:47:8a:b9:6e:a4:d7:bd:12:87: e0:7c:a4:18:9f:7a:ab:56:da:e0:19:0c:9b:72:dd: c0:e3:34:fb:84:dc:99:b5:be:d0:23:58:a0:cb:36: cd:6b:93:f5:6a:25:68:e5:ce:68:a9:39:c2:42:05: 5a:c2:56:20:29:bf:d8:fe:98:76:1e:37:0d:a6:56: 77:2e:31:01:36:ca:18:95:ba:c9:8a:d2:17:62:58: e5:ec:76:25:2a:40:8a:fa:c9:e0:45:a2:8d:e5:bd: c9:e9:79:7d:5e:3f:4c:1e:a1:93:ee:eb:55:35:85: 9f:be:dd:d4:bd:df:9c:a6:f7:54:5d:55:c1:51:c3: 3b:e0:62:2f:2e:0a:b7:77:bd:0e:ae:cc:21:73:0c: 79:f0:4c:a4:9f:49:43:26:c4:7a:3a:b3:14:60:b0: 2c:ff:fd:bb:5b:2d:4f:1f:6b:23:eb:9b:d4:74:10: ec:a4:96:fd:ad:57:82:a0:73:d7:1a:9e:54:d4:db: aa:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:7E:C2:7E:B0:8C:A4:3E:22:DC:62:4B:F6:4E:51:66:E8:48:82:18 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bfcf6c84-3d3d-49cc-a8e6-ee81755d4acf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.84.130.0/23 Signature Algorithm: sha256WithRSAEncryption 12:ef:f6:46:5e:22:4f:fa:78:a6:d3:95:16:b1:56:df:0f:e9: 34:e8:df:f0:c2:85:18:fe:05:87:94:f2:08:28:84:52:ed:ec: e4:57:07:02:9d:42:0e:9b:b9:4e:2d:13:7a:46:fd:df:71:1d: d6:7b:b1:6d:b4:ee:36:6e:a8:40:30:4e:15:b0:5c:47:ab:66: 98:e5:d0:bc:73:cb:03:d5:cf:bf:55:1c:33:a6:2e:b6:60:85: 97:0a:33:9f:62:8b:8b:94:a0:06:7b:7d:47:50:91:25:d6:fe: 9b:85:a7:a2:d6:4d:7d:09:cb:c1:10:4c:29:71:03:e2:98:74: ab:14:b4:32:73:c9:b7:17:a4:c4:be:a2:c0:c8:2a:e1:7e:d1: b6:93:ed:22:b4:d5:f2:3e:8f:ed:47:7a:83:bf:71:df:b0:37: b0:d2:08:18:26:aa:c1:76:66:c9:78:12:26:bc:74:48:c2:79: a3:ee:a8:81:19:42:4c:0c:71:73:f7:fc:48:40:64:9c:53:75: 4f:55:28:75:da:9b:31:ac:56:eb:50:5a:68:57:b0:45:e6:a6: 09:9c:10:04:4c:d5:71:3b:a8:7c:90:d5:c3:ee:b1:0c:9a:ce: d6:63:b4:a7:d5:b6:87:82:25:25:c9:61:8f:69:cf:52:8d:62: 24:2b:3d:9e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNC2O11OEd7c/uLj2ns2Ze2Y4Hs0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MDczMDE4WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4NWNkOWFiZDQxMjI5NDU4MjFmYjY5YTQ0MDU2OGQxN2U0 ZTdkZjY3YWEwYjA1NGY2NGY3ZWY1N2E3MDVkZjE4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5v50CJfJum8y3PQItZvNUz1rj7XrWeSWfZlZ5M/SAB0C8 DSwfsM8lCins3QMPl9esiJ3p0qZEUH+A/8oysgk2M0eKuW6k170Sh+B8pBifeqtW 2uAZDJty3cDjNPuE3Jm1vtAjWKDLNs1rk/VqJWjlzmipOcJCBVrCViApv9j+mHYe Nw2mVncuMQE2yhiVusmK0hdiWOXsdiUqQIr6yeBFoo3lvcnpeX1eP0weoZPu61U1 hZ++3dS935ym91RdVcFRwzvgYi8uCrd3vQ6uzCFzDHnwTKSfSUMmxHo6sxRgsCz/ /btbLU8fayPrm9R0EOyklv2tV4Kgc9canlTU26qjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU337CfrCMpD4i3GJL9k5RZuhIghgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2JmY2Y2Yzg0LTNkM2QtNDljYy1hOGU2LWVlODE3NTVkNGFjZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE0VIIwDQYJKoZIhvcNAQELBQADggEBABLv9kZeIk/6eKbTlRaxVt8P6TTo 3/DChRj+BYeU8ggohFLt7ORXBwKdQg6buU4tE3pG/d9xHdZ7sW207jZuqEAwThWw XEerZpjl0LxzywPVz79VHDOmLrZghZcKM59ii4uUoAZ7fUdQkSXW/puFp6LWTX0J y8EQTClxA+KYdKsUtDJzybcXpMS+osDIKuF+0baT7SK01fI+j+1HeoO/cd+wN7DS CBgmqsF2Zsl4Eia8dEjCeaPuqIEZQkwMcXP3/EhAZJxTdU9VKHXamzGsVutQWmhX sEXmpgmcEARM1XE7qHyQ1cPusQyaztZjtKfVtoeCJSXJYY9pz1KNYiQrPZ4= -----END CERTIFICATE-----Generated at Mon Oct 20 02:56:03 2025 by rpki-client