$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dfab859a-9867-45d5-8d51-8a2977f9af49.roa File: dfab859a-9867-45d5-8d51-8a2977f9af49.roa (raw, json) Hash identifier: mVRBEbAtNiuj4Eqxti/1mtgaq2m20pJR15jjtmn29F4= Subject key identifier: AA:F2:24:08:14:21:AE:F8:B9:16:7A:DB:BF:06:AF:C7:19:71:35:DD Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6998B41DD837C6E1326169FFB789DCCE40A99AD4 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dfab859a-9867-45d5-8d51-8a2977f9af49.roa Signing time: Fri 10 Oct 2025 15:36:33 +0000 ROA not before: Fri 10 Oct 2025 15:36:33 +0000 ROA not after: Fri 14 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 34.251.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:98:b4:1d:d8:37:c6:e1:32:61:69:ff:b7:89:dc:ce:40:a9:9a:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 10 15:36:33 2025 GMT Not After : Nov 14 23:59:59 2025 GMT Subject: serialNumber=d262d6c88b754eef9a45742b798077acfdb5c2da0cee92171d22ca130f2cb4b6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:84:8a:af:7c:d9:ec:8e:2f:73:52:3e:93:dc: bd:b3:04:56:c8:86:c2:b4:30:65:47:d5:89:88:80: 55:b1:3f:92:78:d3:37:93:0b:e4:63:c0:33:b9:f0: 21:b4:9d:f3:68:af:bd:eb:1f:8a:9e:9d:d9:51:d4: d7:6f:06:82:0a:a6:86:3b:c3:cd:bd:08:b8:81:f2: d2:df:c9:73:44:ad:c1:a7:7f:e3:9d:2c:fc:91:1f: 68:6c:4e:e7:8e:6e:71:eb:ff:63:d8:27:18:4f:49: 42:22:b8:d6:f7:c8:2f:51:1d:90:72:f0:0b:cc:cf: 6f:5f:b2:72:06:f6:e6:d6:9f:84:79:16:26:ea:ff: 4a:95:69:af:57:5c:f0:e4:8e:cf:08:bc:c7:fc:5f: a0:20:a5:8a:4d:9b:5c:38:19:82:0e:fe:4e:c6:ec: 4b:e5:57:47:70:b7:55:97:56:9c:57:1d:51:9f:4d: 14:4f:f7:d2:cb:bc:41:1d:76:4c:29:10:30:08:f8: f1:02:ff:f1:23:f7:31:26:7d:62:3d:d0:79:80:66: c6:85:30:ac:76:b9:1f:85:7a:7c:12:a0:c6:8c:f6: 2d:ec:9c:5f:fc:34:0b:ba:14:0b:84:8c:fd:e6:a8: 8a:9c:81:48:17:22:db:52:d1:1e:27:2f:cd:2e:d9: 9a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:F2:24:08:14:21:AE:F8:B9:16:7A:DB:BF:06:AF:C7:19:71:35:DD X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dfab859a-9867-45d5-8d51-8a2977f9af49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 34.251.192.0/18 Signature Algorithm: sha256WithRSAEncryption 73:88:1b:8e:27:31:5e:2b:2e:11:18:14:a1:50:6c:db:09:17: 0b:69:7b:9c:6c:38:2b:eb:32:63:c8:38:1f:60:1e:28:9f:9d: dc:8d:30:27:6e:4a:92:7d:0b:e0:3b:3b:58:ef:ca:29:b2:0a: d4:a8:47:a7:bb:93:c8:0b:bd:db:57:af:82:b8:4f:21:18:e4: 09:c5:10:c9:d5:a6:0a:c4:21:90:22:45:bb:0e:16:76:2e:e8: 87:49:1b:a1:bf:71:98:0b:ec:c4:3e:d9:4e:b0:c8:59:68:f6: f7:0c:ae:9d:e0:4d:f9:c6:e5:50:a0:c4:fd:dd:9e:68:61:bb: e5:2e:73:71:27:ed:df:d4:28:e9:cc:69:e4:f5:ce:14:e5:ea: 30:c4:71:1f:db:a3:bf:4e:e8:c0:ee:d2:30:c5:9c:2d:df:2c: 86:70:f5:a4:51:10:bd:c0:0e:de:f5:7d:68:bd:8b:1e:93:76: da:f6:10:cf:64:31:18:0c:1e:85:33:fc:cf:0d:16:c2:dd:a0: 4e:12:10:68:d3:25:ce:39:5c:8c:a1:68:19:36:41:44:62:3a: b3:a1:e8:ec:ff:f2:8a:ab:7a:fe:64:cc:8d:e2:ee:67:90:f4: 06:fd:74:42:90:d6:fe:8d:48:01:e6:f8:82:83:7b:51:70:46: ff:1d:9b:7f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaZi0Hdg3xuEyYWn/t4nczkCpmtQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDEwMTUzNjMzWhcNMjUxMTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMjYyZDZjODhiNzU0ZWVmOWE0NTc0MmI3OTgwNzdhY2Zk YjVjMmRhMGNlZTkyMTcxZDIyY2ExMzBmMmNiNGI2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNhIqvfNnsji9zUj6T3L2zBFbIhsK0MGVH1YmIgFWxP5J4 0zeTC+RjwDO58CG0nfNor73rH4qendlR1NdvBoIKpoY7w829CLiB8tLfyXNErcGn f+OdLPyRH2hsTueObnHr/2PYJxhPSUIiuNb3yC9RHZBy8AvMz29fsnIG9ubWn4R5 Fibq/0qVaa9XXPDkjs8IvMf8X6AgpYpNm1w4GYIO/k7G7EvlV0dwt1WXVpxXHVGf TRRP99LLvEEddkwpEDAI+PEC//Ej9zEmfWI90HmAZsaFMKx2uR+FenwSoMaM9i3s nF/8NAu6FAuEjP3mqIqcgUgXIttS0R4nL80u2ZqdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUqvIkCBQhrvi5FnrbvwavxxlxNd0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2RmYWI4NTlhLTk4NjctNDVkNS04ZDUxLThhMjk3N2Y5YWY0OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYi+8AwDQYJKoZIhvcNAQELBQADggEBAHOIG44nMV4rLhEYFKFQbNsJFwtp e5xsOCvrMmPIOB9gHiifndyNMCduSpJ9C+A7O1jvyimyCtSoR6e7k8gLvdtXr4K4 TyEY5AnFEMnVpgrEIZAiRbsOFnYu6IdJG6G/cZgL7MQ+2U6wyFlo9vcMrp3gTfnG 5VCgxP3dnmhhu+Uuc3En7d/UKOnMaeT1zhTl6jDEcR/bo79O6MDu0jDFnC3fLIZw 9aRREL3ADt71fWi9ix6Tdtr2EM9kMRgMHoUz/M8NFsLdoE4SEGjTJc45XIyhaBk2 QURiOrOh6Oz/8oqrev5kzI3i7meQ9Ab9dEKQ1v6NSAHm+IKDe1FwRv8dm38= -----END CERTIFICATE-----Generated at Mon Oct 20 05:58:54 2025 by rpki-client