$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dc9a7302-bfee-427f-8a43-13714b479bcb.roa File: dc9a7302-bfee-427f-8a43-13714b479bcb.roa (raw, json) Hash identifier: SZINncZavDELPQRAE5YtdymOdtlhKAUeIgmiogbgHz0= Subject key identifier: 1B:C9:19:D9:8F:5C:2B:D7:DF:FB:1C:F0:21:0C:32:22:BE:89:A2:7E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0AA966E44D06DF3ED0900B905C83F43FE44776CF Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dc9a7302-bfee-427f-8a43-13714b479bcb.roa Signing time: Fri 10 Oct 2025 15:47:07 +0000 ROA not before: Fri 10 Oct 2025 15:47:07 +0000 ROA not after: Fri 14 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 34.224.0.0/12 maxlen: 12 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:a9:66:e4:4d:06:df:3e:d0:90:0b:90:5c:83:f4:3f:e4:47:76:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 10 15:47:07 2025 GMT Not After : Nov 14 23:59:59 2025 GMT Subject: serialNumber=0c5331ddc958074f6415f6443e3934dade7512432fcfd8e2e8a3600344433d7d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b0:5b:3e:cd:8b:42:a0:2d:d3:a5:a6:30:fa: 20:a6:4f:38:c4:27:00:8c:23:75:81:85:2b:d2:72: a7:02:bf:38:05:a9:bb:93:d3:78:ef:3b:17:cf:e7: 51:03:f5:1b:cc:c7:c6:e7:ec:f5:ab:9f:9e:31:20: 37:3e:6a:73:ec:20:bd:61:6d:b4:02:14:7c:99:08: 88:18:b8:4e:f4:3f:4a:98:26:35:36:4e:1a:a4:7a: 82:6c:5a:1a:be:59:c9:0a:22:e8:75:9c:9b:e9:6e: 8d:8e:8b:8f:cd:5b:e2:3d:45:9a:e6:e8:8a:43:25: dd:17:56:6e:a3:4d:e0:d6:b2:56:71:33:04:34:3c: fd:4e:8b:22:44:fa:0e:b1:67:94:f5:92:d9:21:64: fc:32:bc:78:eb:2e:03:31:5e:fe:33:48:c0:7e:ef: a2:65:f8:27:fe:b6:a3:a4:18:15:c6:8f:b5:a1:fe: d4:5b:4d:b6:44:3b:f4:6a:ef:5d:dd:7f:98:90:47: e9:91:7a:09:9b:8d:78:e8:21:0d:86:c6:08:44:65: a4:97:28:92:01:ca:01:f6:91:53:76:fe:17:4a:e1: 43:65:d0:f4:f8:67:27:ce:93:17:66:c1:95:df:75: e7:6b:47:b9:aa:be:d4:7b:8b:9f:51:72:68:31:8e: 68:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:C9:19:D9:8F:5C:2B:D7:DF:FB:1C:F0:21:0C:32:22:BE:89:A2:7E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dc9a7302-bfee-427f-8a43-13714b479bcb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 34.224.0.0/12 Signature Algorithm: sha256WithRSAEncryption a7:3f:0f:33:63:1b:57:d7:89:16:aa:b4:d5:b8:db:97:b6:c9: 81:71:b5:01:d4:3a:64:b4:4f:f5:90:b0:4e:53:21:9e:eb:90: 04:c1:d1:1f:a5:e2:ce:9f:09:06:80:3d:ce:3f:95:88:1c:ac: 06:7e:df:2d:2d:1d:c6:e3:19:ef:ca:d3:24:46:a1:13:19:3e: d4:cc:d1:e3:8f:cb:c1:8f:3b:10:87:4f:79:3f:4c:c0:18:0a: 04:2b:cc:fa:3d:9d:42:fc:65:d6:eb:1f:69:be:c5:5a:39:d7: bf:13:6e:8c:68:35:b0:4f:3f:57:9c:cb:6b:73:e2:3d:1c:7d: a1:3b:6e:08:80:6c:5a:33:60:c8:3d:91:b7:db:8f:1d:7b:ed: f2:7b:f3:d4:f4:f4:47:21:ba:9c:80:d5:08:18:19:79:0a:8a: a3:69:e3:21:53:9b:31:23:19:f6:93:c6:0a:45:c7:d6:55:c7: 8a:6e:c0:00:61:31:f6:54:e5:97:d1:4f:ba:2b:27:9b:40:5b: a4:e9:13:10:b7:73:c9:41:32:27:66:51:e8:1e:a5:89:0f:52: 71:b6:4c:96:b6:39:8d:2f:b6:11:08:b9:f4:ec:5b:b7:72:29: f6:71:6c:81:b9:5d:50:d7:f4:27:95:00:38:83:70:56:23:83: c5:7d:46:6c -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUCqlm5E0G3z7QkAuQXIP0P+RHds8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDEwMTU0NzA3WhcNMjUxMTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AwYzUzMzFkZGM5NTgwNzRmNjQxNWY2NDQzZTM5MzRkYWRl NzUxMjQzMmZjZmQ4ZTJlOGEzNjAwMzQ0NDMzZDdkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpsFs+zYtCoC3TpaYw+iCmTzjEJwCMI3WBhSvScqcCvzgF qbuT03jvOxfP51ED9RvMx8bn7PWrn54xIDc+anPsIL1hbbQCFHyZCIgYuE70P0qY JjU2ThqkeoJsWhq+WckKIuh1nJvpbo2Oi4/NW+I9RZrm6IpDJd0XVm6jTeDWslZx MwQ0PP1OiyJE+g6xZ5T1ktkhZPwyvHjrLgMxXv4zSMB+76Jl+Cf+tqOkGBXGj7Wh /tRbTbZEO/Rq713df5iQR+mRegmbjXjoIQ2GxghEZaSXKJIBygH2kVN2/hdK4UNl 0PT4ZyfOkxdmwZXfdedrR7mqvtR7i59RcmgxjmjlAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUG8kZ2Y9cK9ff+xzwIQwyIr6Jon4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2RjOWE3MzAyLWJmZWUtNDI3Zi04YTQzLTEzNzE0YjQ3OWJjYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwQi4DANBgkqhkiG9w0BAQsFAAOCAQEApz8PM2MbV9eJFqq01bjbl7bJgXG1 AdQ6ZLRP9ZCwTlMhnuuQBMHRH6Xizp8JBoA9zj+ViBysBn7fLS0dxuMZ78rTJEah Exk+1MzR44/LwY87EIdPeT9MwBgKBCvM+j2dQvxl1usfab7FWjnXvxNujGg1sE8/ V5zLa3PiPRx9oTtuCIBsWjNgyD2Rt9uPHXvt8nvz1PT0RyG6nIDVCBgZeQqKo2nj IVObMSMZ9pPGCkXH1lXHim7AAGEx9lTll9FPuisnm0BbpOkTELdzyUEyJ2ZR6B6l iQ9ScbZMlrY5jS+2EQi59Oxbt3Ip9nFsgbldUNf0J5UAOINwViODxX1GbA== -----END CERTIFICATE-----Generated at Sun Oct 19 23:08:39 2025 by rpki-client