$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/556ece07-df75-4b8c-a355-e500e5a07988.roa File: 556ece07-df75-4b8c-a355-e500e5a07988.roa (raw, json) Hash identifier: PmIL2W96YHA87kGEvGg5hSkFPKHhxx9u3woHlQiMyHU= Subject key identifier: FF:7E:23:0C:F5:E9:53:84:36:1A:0E:F7:8C:5C:E5:0E:2F:26:20:17 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6EDC31D55F553C3746BE0C99D7D7E8B24324657C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/556ece07-df75-4b8c-a355-e500e5a07988.roa Signing time: Sun 19 Oct 2025 07:30:17 +0000 ROA not before: Sun 19 Oct 2025 07:30:17 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 161.188.128.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:dc:31:d5:5f:55:3c:37:46:be:0c:99:d7:d7:e8:b2:43:24:65:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 07:30:17 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=9f4a40e10db18bfe216bc3d519711c4b973027d7dbeac68415cd00f2b425dc46, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:1b:45:bd:01:8e:84:6b:52:32:26:76:99:74: ad:bd:7a:29:ec:6a:89:a0:ce:ac:ed:2a:12:c7:83: d9:bb:7d:2f:67:e5:a2:79:67:2d:33:5a:a7:92:89: 82:2d:52:e0:67:78:30:df:7a:6b:f9:17:30:e9:3b: 2e:d9:f2:5f:15:b5:dd:c2:9e:61:6a:10:8d:41:34: a8:49:5b:c5:3f:18:f2:45:98:e7:80:a5:da:4c:3a: 30:c8:78:da:a2:00:55:84:75:72:48:50:f8:3d:63: 82:4a:d8:10:df:43:fb:2a:21:0d:42:ba:8c:51:4e: ba:e8:88:e6:52:c5:7f:29:53:75:6f:60:ec:3f:b0: d1:dc:3c:65:61:d8:64:c4:35:e5:c2:e6:80:03:b1: 05:f1:ec:54:9c:d7:4c:80:ab:dc:2e:d8:e1:ec:e7: 3d:01:61:64:05:49:18:4f:1c:eb:aa:e0:64:a5:9d: 61:34:e6:a9:d6:4f:d2:97:af:53:61:92:f2:0d:b6: 8e:99:2a:0c:be:2a:a4:74:b2:4d:6d:ad:4d:a3:0f: 22:be:0e:bb:64:36:47:e1:a0:69:50:9a:af:28:12: dd:52:32:7b:b6:cf:9b:cf:21:b4:dc:fb:d7:bd:2a: 03:09:88:30:f7:bb:e7:7e:e5:33:dd:d2:f2:cf:9a: d6:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:7E:23:0C:F5:E9:53:84:36:1A:0E:F7:8C:5C:E5:0E:2F:26:20:17 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/556ece07-df75-4b8c-a355-e500e5a07988.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.188.128.0/23 Signature Algorithm: sha256WithRSAEncryption 1b:0a:3e:04:58:38:b6:12:20:1e:25:4c:9a:b1:51:44:78:0c: 3e:43:4d:5f:03:6e:dd:76:35:5a:d9:9a:bd:71:e8:1e:83:0b: 93:d9:f7:9e:27:96:13:6c:1f:13:06:2a:f7:4c:e5:dc:e8:29: be:31:cd:28:2e:7d:0a:db:47:f4:b7:83:ff:b5:f3:b4:40:91: 9c:94:38:19:a3:89:cb:26:a0:ab:95:98:40:f0:d9:44:04:cb: 70:77:a6:96:22:0c:ba:d1:09:0d:31:45:51:41:b3:9f:eb:85: 8c:cc:c4:2e:41:d6:ef:18:87:a9:4e:3f:f3:14:ed:57:66:b9: 19:62:23:80:fd:88:1b:1c:7c:4d:76:1a:f2:b0:82:8d:89:58: a3:25:1a:d9:f7:94:4c:3c:90:d9:3a:8a:cc:36:92:63:65:15: 14:04:7e:51:b8:69:d3:8d:c5:71:36:1d:3c:dd:cc:dd:58:54: 7f:66:4f:43:ec:73:df:03:ad:8d:92:0e:b9:1b:39:22:a9:31: 1b:9f:b9:f0:f1:e2:72:c7:7a:d0:fd:94:f8:c8:d2:ca:33:6e: 48:4d:7d:d1:8a:cf:b7:af:2d:3e:55:2a:18:db:d8:0f:32:dc: 86:36:fe:c4:a6:f9:75:13:fb:76:d9:57:5c:44:77:17:4a:95: 35:c8:2c:83 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbtwx1V9VPDdGvgyZ19foskMkZXwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MDczMDE3WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZjRhNDBlMTBkYjE4YmZlMjE2YmMzZDUxOTcxMWM0Yjk3 MzAyN2Q3ZGJlYWM2ODQxNWNkMDBmMmI0MjVkYzQ2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDqG0W9AY6Ea1IyJnaZdK29einsaomgzqztKhLHg9m7fS9n 5aJ5Zy0zWqeSiYItUuBneDDfemv5FzDpOy7Z8l8Vtd3CnmFqEI1BNKhJW8U/GPJF mOeApdpMOjDIeNqiAFWEdXJIUPg9Y4JK2BDfQ/sqIQ1CuoxRTrroiOZSxX8pU3Vv YOw/sNHcPGVh2GTENeXC5oADsQXx7FSc10yAq9wu2OHs5z0BYWQFSRhPHOuq4GSl nWE05qnWT9KXr1NhkvINto6ZKgy+KqR0sk1trU2jDyK+DrtkNkfhoGlQmq8oEt1S Mnu2z5vPIbTc+9e9KgMJiDD3u+d+5TPd0vLPmtahAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU/34jDPXpU4Q2Gg73jFzlDi8mIBcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzU1NmVjZTA3LWRmNzUtNGI4Yy1hMzU1LWU1MDBlNWEwNzk4OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAGhvIAwDQYJKoZIhvcNAQELBQADggEBABsKPgRYOLYSIB4lTJqxUUR4DD5D TV8Dbt12NVrZmr1x6B6DC5PZ954nlhNsHxMGKvdM5dzoKb4xzSgufQrbR/S3g/+1 87RAkZyUOBmjicsmoKuVmEDw2UQEy3B3ppYiDLrRCQ0xRVFBs5/rhYzMxC5B1u8Y h6lOP/MU7VdmuRliI4D9iBscfE12GvKwgo2JWKMlGtn3lEw8kNk6isw2kmNlFRQE flG4adONxXE2HTzdzN1YVH9mT0Psc98DrY2SDrkbOSKpMRufufDx4nLHetD9lPjI 0sozbkhNfdGKz7evLT5VKhjb2A8y3IY2/sSm+XUT+3bZV1xEdxdKlTXILIM= -----END CERTIFICATE-----Generated at Mon Oct 20 03:04:55 2025 by rpki-client