$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b6bca6b5-5dab-471e-9fb6-ec379e0a7f53.roa File: b6bca6b5-5dab-471e-9fb6-ec379e0a7f53.roa (raw, json) Hash identifier: J3SABGRdxWLXQnb1613hPfEX1rECIeiQKhZNeay6cNk= Subject key identifier: 0C:6F:2E:B4:39:E3:4D:C9:FD:0B:EC:E2:56:EA:A7:C3:15:A4:92:4E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6740EEEC713F6965AA616630C123B5F4B0080E43 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b6bca6b5-5dab-471e-9fb6-ec379e0a7f53.roa Signing time: Wed 15 Oct 2025 23:17:39 +0000 ROA not before: Wed 15 Oct 2025 23:17:39 +0000 ROA not after: Wed 19 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 143.204.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:40:ee:ec:71:3f:69:65:aa:61:66:30:c1:23:b5:f4:b0:08:0e:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 15 23:17:39 2025 GMT Not After : Nov 19 23:59:59 2025 GMT Subject: serialNumber=91c4cdf83bd60b17dc44bf09a0fd824b522a4b93749333d1c9fbc8c3155f72bc, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e9:8a:55:76:3a:f0:7d:2f:16:42:64:0c:2a: ba:24:7e:90:8a:75:bd:d8:69:9b:d3:20:b6:f9:b4: f3:b4:89:d7:b2:c0:21:6b:ee:c6:9d:ce:36:7b:59: 32:67:91:d7:b0:bf:54:1b:1c:f6:70:82:ef:cf:7e: 71:02:59:42:49:76:b7:86:22:c9:49:bc:5f:b6:90: e4:50:1b:18:8b:f6:a9:cd:35:0c:8e:4e:b3:26:a1: a0:13:5a:8e:9f:aa:f9:40:d1:28:5b:45:31:8b:61: 87:22:ae:98:bc:fc:9d:50:83:7d:12:28:99:5b:6b: a9:63:26:54:b3:84:63:c9:e7:ea:06:fb:d6:0f:af: c7:b3:e3:d6:cb:bc:9f:92:f0:c6:a7:b3:3c:08:57: d8:37:d8:56:92:f9:ff:3e:e6:25:9b:54:e9:57:d7: 44:bc:d5:b5:7f:01:42:3b:29:f5:74:9f:e5:39:fc: 7c:d4:6f:d3:1b:6b:6f:a6:3e:6b:ab:ec:07:91:7a: 70:d4:04:52:f4:c1:58:d5:5e:c7:8d:29:2b:4d:6c: bd:40:d2:fb:e4:00:49:f3:e8:48:ef:67:f2:18:fd: 69:c2:2c:5c:09:b2:39:07:2e:db:41:44:4e:04:51: 60:0d:94:09:c3:61:a1:31:da:09:85:7a:b6:ef:d0: 09:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:6F:2E:B4:39:E3:4D:C9:FD:0B:EC:E2:56:EA:A7:C3:15:A4:92:4E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b6bca6b5-5dab-471e-9fb6-ec379e0a7f53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.204.108.0/23 Signature Algorithm: sha256WithRSAEncryption 40:ee:5a:2a:74:e0:5f:19:3c:21:61:0f:35:78:3e:6a:04:9b: 5c:dc:b2:1d:80:fa:ec:c2:82:67:98:32:5c:1d:51:4c:35:59: 52:e1:37:b9:bd:87:8e:6c:d1:55:cb:0d:dd:8f:33:cc:4b:3a: ec:1c:55:35:40:d9:ba:9c:0a:45:4f:ea:17:cb:00:72:68:0d: 82:8f:bd:37:ba:fa:b9:19:8b:ff:7a:7c:bb:fd:29:43:a7:39: cc:88:f6:0b:e9:45:89:c2:fc:e0:6c:fd:84:eb:0f:89:ec:42: 28:6a:19:57:1b:d1:bb:39:d6:0f:8a:2b:46:f2:94:2a:4a:e7: e7:6a:53:87:c6:15:ae:94:30:f1:16:14:b6:31:1e:f2:38:48: ff:d3:eb:f7:92:ed:7f:a6:a6:5b:76:0e:ff:a0:de:60:1d:cd: ba:36:8d:bd:ce:6d:1d:b1:84:9a:0f:9b:4e:7a:75:1e:c8:aa: f6:c4:ff:81:97:de:61:d4:ea:37:9b:07:ae:f2:d5:8f:5d:5d: 06:00:33:2a:8d:d8:02:c1:2b:13:97:1a:65:91:13:a1:84:f9: e5:0e:a6:8d:9c:46:1b:a3:81:21:47:a5:78:b0:a5:98:9f:83: af:10:23:92:70:b4:3b:7d:6a:ca:43:dc:dd:54:44:3f:2d:da: 4b:57:af:d5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZ0Du7HE/aWWqYWYwwSO19LAIDkMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE1MjMxNzM5WhcNMjUxMTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A5MWM0Y2RmODNiZDYwYjE3ZGM0NGJmMDlhMGZkODI0YjUy MmE0YjkzNzQ5MzMzZDFjOWZiYzhjMzE1NWY3MmJjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCe6YpVdjrwfS8WQmQMKrokfpCKdb3YaZvTILb5tPO0idey wCFr7sadzjZ7WTJnkdewv1QbHPZwgu/PfnECWUJJdreGIslJvF+2kORQGxiL9qnN NQyOTrMmoaATWo6fqvlA0ShbRTGLYYcirpi8/J1Qg30SKJlba6ljJlSzhGPJ5+oG +9YPr8ez49bLvJ+S8ManszwIV9g32FaS+f8+5iWbVOlX10S81bV/AUI7KfV0n+U5 /HzUb9Mba2+mPmur7AeRenDUBFL0wVjVXseNKStNbL1A0vvkAEnz6EjvZ/IY/WnC LFwJsjkHLttBRE4EUWANlAnDYaEx2gmFerbv0AkbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUDG8utDnjTcn9C+ziVuqnwxWkkk4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2I2YmNhNmI1LTVkYWItNDcxZS05ZmI2LWVjMzc5ZTBhN2Y1My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAGPzGwwDQYJKoZIhvcNAQELBQADggEBAEDuWip04F8ZPCFhDzV4PmoEm1zc sh2A+uzCgmeYMlwdUUw1WVLhN7m9h45s0VXLDd2PM8xLOuwcVTVA2bqcCkVP6hfL AHJoDYKPvTe6+rkZi/96fLv9KUOnOcyI9gvpRYnC/OBs/YTrD4nsQihqGVcb0bs5 1g+KK0bylCpK5+dqU4fGFa6UMPEWFLYxHvI4SP/T6/eS7X+mplt2Dv+g3mAdzbo2 jb3ObR2xhJoPm056dR7IqvbE/4GX3mHU6jebB67y1Y9dXQYAMyqN2ALBKxOXGmWR E6GE+eUOpo2cRhujgSFHpXiwpZifg68QI5JwtDt9aspD3N1URD8t2ktXr9U= -----END CERTIFICATE-----Generated at Mon Oct 20 15:45:30 2025 by rpki-client