$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b9bf3e6a-6c73-4eba-8a85-0fdc3539ebc8.roa File: b9bf3e6a-6c73-4eba-8a85-0fdc3539ebc8.roa (raw, json) Hash identifier: WiY/3bQ8YUdmSPI+bulGxgtA/sPZDFFfriVIpRWkmEc= Subject key identifier: 2F:C4:CC:A4:EA:7E:71:91:0D:60:3A:03:DE:C3:33:1B:CA:FF:BA:9E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 539F33EC9A17F1B23B0E5E89B5C6978B07CB289A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b9bf3e6a-6c73-4eba-8a85-0fdc3539ebc8.roa Signing time: Wed 15 Oct 2025 18:29:47 +0000 ROA not before: Wed 15 Oct 2025 18:29:47 +0000 ROA not after: Wed 19 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 143.204.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:9f:33:ec:9a:17:f1:b2:3b:0e:5e:89:b5:c6:97:8b:07:cb:28:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 15 18:29:47 2025 GMT Not After : Nov 19 23:59:59 2025 GMT Subject: serialNumber=ab9d62b8adf6fdee5c85e0ae46314827a7ccec59eb2fdba3003e4d851c61fb41, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:22:38:4e:1d:6d:8e:5f:e8:5d:b5:7f:46:86: 45:ca:af:17:78:2c:ea:39:d7:f8:fd:7e:31:d7:d9: 89:db:89:af:72:2c:e6:f2:fa:7b:f3:be:92:8c:0a: 65:02:5f:b0:65:d0:44:30:59:20:f2:57:0f:e5:27: 5f:8f:00:d0:05:44:ca:c4:d2:77:1f:08:e5:c5:09: a0:85:b3:44:a2:fa:c0:6f:4c:a6:fd:46:5d:c0:06: 51:94:50:78:15:ea:3d:ac:1a:e4:bc:62:a1:9d:1f: 87:be:e6:c0:a0:1e:8a:63:7c:57:ee:1f:08:14:69: c7:77:02:9a:4d:50:29:ff:a1:f9:66:a1:41:5d:71: 6e:9a:4b:79:35:7b:6a:67:da:2b:54:92:71:90:c7: f2:b0:88:76:0e:9b:c7:97:7e:6d:62:a1:0b:71:ec: d5:23:3c:41:f4:2d:e4:7a:8b:29:67:1f:27:7b:e3: 73:b2:84:10:0b:e3:fc:3e:5c:d9:78:50:b6:85:21: fc:8c:c9:60:7c:7d:23:8f:a2:3a:c4:35:e2:45:d2: 28:18:24:59:25:cf:5c:8c:c0:fb:24:05:4f:04:3f: 26:52:bd:7b:35:d1:f3:bd:de:86:8d:67:a8:b1:66: 83:ec:7a:ea:82:d5:64:2e:1b:fa:1e:fa:68:c7:c7: 12:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:C4:CC:A4:EA:7E:71:91:0D:60:3A:03:DE:C3:33:1B:CA:FF:BA:9E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b9bf3e6a-6c73-4eba-8a85-0fdc3539ebc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.204.217.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:db:b6:b6:46:35:51:8f:78:5c:c3:af:10:18:d1:e4:91:16: 39:90:ea:86:b6:b4:24:aa:40:75:c0:60:3b:3c:57:03:fb:39: 6e:d5:01:ff:ce:31:02:96:8c:4f:20:0f:c1:c0:5a:86:71:d2: 47:4a:88:51:18:31:d0:9b:3f:04:9c:fc:51:73:48:bc:c6:5c: 5b:8a:42:29:0d:e8:22:94:95:41:98:ed:90:62:37:ae:4e:7e: b0:e3:d9:c7:09:01:d1:7c:5a:1b:08:98:c1:41:18:5c:65:97: 3d:89:bd:30:5e:c6:79:0a:b0:bb:92:71:5b:72:14:2c:9e:2e: 5f:de:3c:6b:0c:e6:da:ae:8f:13:90:2f:ba:1f:45:fe:e4:33: f8:48:35:41:22:87:fe:6d:13:1b:f5:91:9a:b0:08:15:30:40: cf:b6:81:7b:86:d8:cf:e5:06:bc:3b:5d:85:4a:67:ed:e6:6d: 29:90:5f:75:53:91:1f:81:dd:4d:33:ff:99:3f:ef:56:8a:74: bc:ec:27:75:1e:07:f4:87:fc:34:a1:cf:bb:96:b3:b5:24:fc: 3a:d1:32:00:f2:c7:88:5d:33:d5:c6:94:f9:f9:68:97:e0:95: 09:7d:24:00:05:14:de:68:0b:3d:cf:99:e8:f6:24:8c:ea:b3: 73:48:dd:ca -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUU58z7JoX8bI7Dl6JtcaXiwfLKJowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE1MTgyOTQ3WhcNMjUxMTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BhYjlkNjJiOGFkZjZmZGVlNWM4NWUwYWU0NjMxNDgyN2E3 Y2NlYzU5ZWIyZmRiYTMwMDNlNGQ4NTFjNjFmYjQxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZIjhOHW2OX+hdtX9GhkXKrxd4LOo51/j9fjHX2Ynbia9y LOby+nvzvpKMCmUCX7Bl0EQwWSDyVw/lJ1+PANAFRMrE0ncfCOXFCaCFs0Si+sBv TKb9Rl3ABlGUUHgV6j2sGuS8YqGdH4e+5sCgHopjfFfuHwgUacd3AppNUCn/oflm oUFdcW6aS3k1e2pn2itUknGQx/KwiHYOm8eXfm1ioQtx7NUjPEH0LeR6iylnHyd7 43OyhBAL4/w+XNl4ULaFIfyMyWB8fSOPojrENeJF0igYJFklz1yMwPskBU8EPyZS vXs10fO93oaNZ6ixZoPseuqC1WQuG/oe+mjHxxJ/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUL8TMpOp+cZENYDoD3sMzG8r/up4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2I5YmYzZTZhLTZjNzMtNGViYS04YTg1LTBmZGMzNTM5ZWJjOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACPzNkwDQYJKoZIhvcNAQELBQADggEBAFvbtrZGNVGPeFzDrxAY0eSRFjmQ 6oa2tCSqQHXAYDs8VwP7OW7VAf/OMQKWjE8gD8HAWoZx0kdKiFEYMdCbPwSc/FFz SLzGXFuKQikN6CKUlUGY7ZBiN65OfrDj2ccJAdF8WhsImMFBGFxllz2JvTBexnkK sLuScVtyFCyeLl/ePGsM5tqujxOQL7ofRf7kM/hINUEih/5tExv1kZqwCBUwQM+2 gXuG2M/lBrw7XYVKZ+3mbSmQX3VTkR+B3U0z/5k/71aKdLzsJ3UeB/SH/DShz7uW s7Uk/DrRMgDyx4hdM9XGlPn5aJfglQl9JAAFFN5oCz3Pmej2JIzqs3NI3co= -----END CERTIFICATE-----Generated at Mon Oct 20 03:07:35 2025 by rpki-client