$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bfdeb3c5-5799-4ca2-aa20-866b77a0628b.roa File: bfdeb3c5-5799-4ca2-aa20-866b77a0628b.roa (raw, json) Hash identifier: 3bBLnLeZI1RUrpiAtMg2ObT6mwTCuNw1aEHbvrrlL/A= Subject key identifier: AE:6A:24:91:2D:30:2B:BF:D4:5B:CE:9C:61:74:C2:46:DD:45:5D:44 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 523015AC7517214BB85DF72F1073A44EED76BC2B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bfdeb3c5-5799-4ca2-aa20-866b77a0628b.roa Signing time: Sat 18 Oct 2025 06:00:10 +0000 ROA not before: Sat 18 Oct 2025 06:00:10 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.195.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:30:15:ac:75:17:21:4b:b8:5d:f7:2f:10:73:a4:4e:ed:76:bc:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 06:00:10 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=dd1e4dcf47ac171d4ba9838fbfd0cbd1b7a58ffbd868224ebf0c10ac61ff3aed, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:86:16:1d:0e:09:a9:8d:c9:3f:d9:3d:65:39: 30:a2:0f:1a:96:e3:56:fe:53:3a:2c:4e:6d:1a:46: fe:c9:1b:18:2f:c6:2a:6b:d6:bd:35:3c:30:48:79: c0:0f:59:20:9b:b8:47:50:7e:6f:1b:30:ce:0f:5d: cd:c0:05:93:3d:48:ee:93:34:1d:0f:42:d6:9c:d0: 83:03:af:e8:9a:d8:b7:02:58:15:3a:01:c1:66:44: c4:65:dd:13:45:dd:c6:bc:90:37:b9:48:e4:9d:a5: 38:0a:57:59:46:72:ea:e1:70:20:d2:19:3a:ea:44: ed:95:fb:52:00:3d:53:04:55:09:48:58:23:7c:70: ac:15:88:34:4a:d9:55:b9:23:c8:09:d6:78:2a:b9: 76:26:60:4f:3c:93:98:1c:c0:1c:c2:e6:06:dd:23: 4d:27:1f:69:bb:e9:bd:de:b0:7c:75:bc:38:ed:8e: 84:6c:8e:2c:6b:0f:26:b6:b9:7a:21:c5:7a:de:ea: 97:d2:c6:14:b1:af:d8:54:38:78:4e:b3:ce:74:b5: ee:07:c8:f8:38:9c:56:79:27:41:27:a5:8e:f4:32: 57:cf:c8:a9:3a:0c:7c:75:86:79:cc:7d:33:dc:24: d9:80:00:f8:38:0e:b7:26:ef:c0:eb:f9:c4:5b:cd: 61:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:6A:24:91:2D:30:2B:BF:D4:5B:CE:9C:61:74:C2:46:DD:45:5D:44 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bfdeb3c5-5799-4ca2-aa20-866b77a0628b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.195.232.0/22 Signature Algorithm: sha256WithRSAEncryption 5e:7c:da:ca:10:96:01:a4:e1:59:f2:e1:81:97:38:62:a8:67: 5a:9f:99:6d:b5:30:fc:ea:bd:2d:e2:95:a4:b1:74:ab:f5:24: 82:07:48:0f:23:a3:dd:28:7c:b8:a4:d1:61:10:3f:20:34:eb: 27:e3:90:2b:35:11:ee:20:33:df:be:dd:17:02:e2:94:a7:59: fc:f1:95:99:22:6c:72:17:0d:93:c5:f5:f9:87:55:33:9d:e4: 68:41:e3:a6:1b:6e:4c:a9:a4:33:97:22:a0:86:82:8b:d4:93: 28:c4:35:51:9a:6b:37:d5:d5:0b:87:df:b2:fc:10:64:1c:b4: 8f:75:0f:f0:a6:a0:cd:fc:43:58:fe:58:ef:b8:d7:bb:ee:bc: 11:f8:dc:a1:db:4f:37:f2:66:a0:fe:ed:44:25:20:35:4b:80: 33:51:95:7a:cf:cf:eb:8e:f5:17:a2:34:64:4d:71:ea:17:a3: 84:52:5d:e4:b2:29:75:63:cc:1c:4d:5c:f1:f7:4e:13:dc:60: 04:9a:2b:6e:d7:1d:1c:bf:86:51:69:f2:69:81:1c:a8:f0:b3: 81:f3:11:32:ae:da:94:0c:77:3f:62:a9:ce:d7:dd:59:8e:9d: 74:db:99:05:d9:db:45:89:8e:ea:7e:d9:c9:99:3b:f6:90:1b: 8c:59:68:29 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUjAVrHUXIUu4XfcvEHOkTu12vCswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MDYwMDEwWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BkZDFlNGRjZjQ3YWMxNzFkNGJhOTgzOGZiZmQwY2JkMWI3 YTU4ZmZiZDg2ODIyNGViZjBjMTBhYzYxZmYzYWVkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJhhYdDgmpjck/2T1lOTCiDxqW41b+UzosTm0aRv7JGxgv xipr1r01PDBIecAPWSCbuEdQfm8bMM4PXc3ABZM9SO6TNB0PQtac0IMDr+ia2LcC WBU6AcFmRMRl3RNF3ca8kDe5SOSdpTgKV1lGcurhcCDSGTrqRO2V+1IAPVMEVQlI WCN8cKwViDRK2VW5I8gJ1ngquXYmYE88k5gcwBzC5gbdI00nH2m76b3esHx1vDjt joRsjixrDya2uXohxXre6pfSxhSxr9hUOHhOs850te4HyPg4nFZ5J0EnpY70MlfP yKk6DHx1hnnMfTPcJNmAAPg4Drcm78Dr+cRbzWEXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUrmokkS0wK7/UW86cYXTCRt1FXUQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2JmZGViM2M1LTU3OTktNGNhMi1hYTIwLTg2NmI3N2EwNjI4Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI2w+gwDQYJKoZIhvcNAQELBQADggEBAF582soQlgGk4Vny4YGXOGKoZ1qf mW21MPzqvS3ilaSxdKv1JIIHSA8jo90ofLik0WEQPyA06yfjkCs1Ee4gM9++3RcC 4pSnWfzxlZkibHIXDZPF9fmHVTOd5GhB46YbbkyppDOXIqCGgovUkyjENVGaazfV 1QuH37L8EGQctI91D/CmoM38Q1j+WO+417vuvBH43KHbTzfyZqD+7UQlIDVLgDNR lXrPz+uO9ReiNGRNceoXo4RSXeSyKXVjzBxNXPH3ThPcYASaK27XHRy/hlFp8mmB HKjws4HzETKu2pQMdz9iqc7X3VmOnXTbmQXZ20WJjup+2cmZO/aQG4xZaCk= -----END CERTIFICATE-----Generated at Mon Oct 20 03:03:13 2025 by rpki-client