$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/df8dba07-310a-4b8a-8825-01ce44c750ab.roa File: df8dba07-310a-4b8a-8825-01ce44c750ab.roa (raw, json) Hash identifier: XSvc66ptV9Rnxl2ht45Zk4X+7BcxlPSq+gjMSXa/Zqg= Subject key identifier: 01:FE:1D:C8:A8:A5:2D:5E:10:60:E8:44:53:78:5B:AC:92:01:E3:83 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5AA3FC6FD961C78930D02EC5C11F5D05DFEB70B0 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/df8dba07-310a-4b8a-8825-01ce44c750ab.roa Signing time: Fri 10 Oct 2025 15:36:32 +0000 ROA not before: Fri 10 Oct 2025 15:36:32 +0000 ROA not after: Fri 14 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 34.252.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:a3:fc:6f:d9:61:c7:89:30:d0:2e:c5:c1:1f:5d:05:df:eb:70:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 10 15:36:32 2025 GMT Not After : Nov 14 23:59:59 2025 GMT Subject: serialNumber=a1be9370d2a66318075db73b5842c92e6e7047c49e9d35c93ee2799a6196cb31, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e9:c6:c6:57:c5:c0:86:f1:8a:c2:5c:b1:b7: 07:9a:a6:a5:b1:8a:f6:e6:7e:7a:97:48:6b:59:51: c0:3a:d1:02:b8:4b:56:a3:0a:0e:e0:34:ca:64:5a: 2d:84:a9:57:c9:f0:06:c6:ca:4f:f0:31:96:f0:92: 0a:89:9f:af:8e:0a:bb:95:f0:28:4e:b6:68:bc:dd: 90:69:ed:fb:d5:61:78:26:f0:57:12:d5:92:30:22: 4b:6c:b4:01:17:e3:e8:80:ab:26:65:d7:5e:7f:9c: 29:ed:63:bb:f2:01:ac:c6:58:f7:fa:59:c4:f7:ff: 59:ef:6e:e4:ec:7f:72:84:7b:3c:7f:93:ab:35:a5: fd:a6:2e:a0:ad:da:9a:e9:b4:53:2b:d6:bd:9f:df: 60:92:eb:e9:a4:bc:6e:5b:9d:b6:39:43:30:52:de: e4:5d:98:61:1f:54:5b:8f:3e:15:08:d8:47:fb:f5: b9:33:10:8c:05:df:1c:95:2b:46:0d:f2:21:aa:76: f9:14:41:97:e4:a2:fd:4a:cc:59:e6:12:41:52:65: c6:65:9d:b6:fc:08:eb:68:7e:c0:9b:10:fa:03:7b: 4b:6a:be:c9:8e:9a:33:7c:6f:be:ac:e2:34:04:9d: 6b:5b:ae:26:2c:c9:05:3d:fe:e5:b3:fb:56:3e:79: 55:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:FE:1D:C8:A8:A5:2D:5E:10:60:E8:44:53:78:5B:AC:92:01:E3:83 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/df8dba07-310a-4b8a-8825-01ce44c750ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 34.252.64.0/18 Signature Algorithm: sha256WithRSAEncryption 10:f1:2f:fc:bf:2b:79:04:7c:dc:df:90:9f:4d:37:7d:50:22: 69:52:3d:03:a0:9a:db:8b:29:19:cb:40:35:66:f3:01:1b:74: a3:15:a4:69:87:92:7c:b4:ff:27:45:d0:0c:3e:de:6b:a1:00: cd:f8:f8:c5:ee:77:5c:33:f9:fb:79:4b:42:23:bb:44:e1:0b: ab:67:85:b6:4e:95:72:e9:ec:c6:19:ad:ce:2c:ee:b8:ce:30: 34:70:99:df:57:f1:ae:7b:41:3b:c4:7b:8d:72:01:4b:44:1d: 59:7b:65:16:73:60:04:2a:6a:17:15:1c:10:14:7f:a2:36:d4: f3:d3:24:f0:85:d1:9c:9a:2b:3e:b3:19:c3:e7:b4:4f:71:45: c9:78:78:ff:38:36:7e:f2:c9:d6:89:9c:f2:0a:81:0b:d1:2b: 4b:32:c5:f0:bb:64:9a:9a:c2:6d:80:36:8f:cc:93:1a:16:b6: 4e:12:6c:1d:4e:ab:35:c1:89:9a:95:e0:04:90:40:02:01:b4: 09:20:54:fb:09:2e:a4:aa:32:6f:78:4c:17:02:a0:88:d0:ae: 48:50:cd:4c:3b:d6:85:e4:ba:f1:c6:0c:46:87:cb:54:1d:1c: e2:10:0e:bb:ba:36:ad:0e:64:d4:86:89:c8:2e:de:7f:49:c1: ee:3a:9f:40 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWqP8b9lhx4kw0C7FwR9dBd/rcLAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDEwMTUzNjMyWhcNMjUxMTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMWJlOTM3MGQyYTY2MzE4MDc1ZGI3M2I1ODQyYzkyZTZl NzA0N2M0OWU5ZDM1YzkzZWUyNzk5YTYxOTZjYjMxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCx6cbGV8XAhvGKwlyxtweapqWxivbmfnqXSGtZUcA60QK4 S1ajCg7gNMpkWi2EqVfJ8AbGyk/wMZbwkgqJn6+OCruV8ChOtmi83ZBp7fvVYXgm 8FcS1ZIwIktstAEX4+iAqyZl115/nCntY7vyAazGWPf6WcT3/1nvbuTsf3KEezx/ k6s1pf2mLqCt2prptFMr1r2f32CS6+mkvG5bnbY5QzBS3uRdmGEfVFuPPhUI2Ef7 9bkzEIwF3xyVK0YN8iGqdvkUQZfkov1KzFnmEkFSZcZlnbb8COtofsCbEPoDe0tq vsmOmjN8b76s4jQEnWtbriYsyQU9/uWz+1Y+eVUjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUAf4dyKilLV4QYOhEU3hbrJIB44MwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2RmOGRiYTA3LTMxMGEtNGI4YS04ODI1LTAxY2U0NGM3NTBhYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYi/EAwDQYJKoZIhvcNAQELBQADggEBABDxL/y/K3kEfNzfkJ9NN31QImlS PQOgmtuLKRnLQDVm8wEbdKMVpGmHkny0/ydF0Aw+3muhAM34+MXud1wz+ft5S0Ij u0ThC6tnhbZOlXLp7MYZrc4s7rjOMDRwmd9X8a57QTvEe41yAUtEHVl7ZRZzYAQq ahcVHBAUf6I21PPTJPCF0ZyaKz6zGcPntE9xRcl4eP84Nn7yydaJnPIKgQvRK0sy xfC7ZJqawm2ANo/MkxoWtk4SbB1OqzXBiZqV4ASQQAIBtAkgVPsJLqSqMm94TBcC oIjQrkhQzUw71oXkuvHGDEaHy1QdHOIQDru6Nq0OZNSGicgu3n9Jwe46n0A= -----END CERTIFICATE-----Generated at Mon Oct 20 08:51:51 2025 by rpki-client