$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c348c7d2-9a49-40d4-b868-d44d659c7272.roa File: c348c7d2-9a49-40d4-b868-d44d659c7272.roa (raw, json) Hash identifier: +9nZq+c4C2khpijGCpAb1+PiC6lrvJu+nDXMW1uZZwk= Subject key identifier: 46:3C:11:E1:BD:FE:5E:5F:31:6D:37:28:F8:66:5D:67:DE:30:7B:A5 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 30AC90E295885C87F7662B26EBC19FED49284BF0 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c348c7d2-9a49-40d4-b868-d44d659c7272.roa Signing time: Wed 15 Oct 2025 22:47:36 +0000 ROA not before: Wed 15 Oct 2025 22:47:36 +0000 ROA not after: Wed 19 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 143.204.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:ac:90:e2:95:88:5c:87:f7:66:2b:26:eb:c1:9f:ed:49:28:4b:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 15 22:47:36 2025 GMT Not After : Nov 19 23:59:59 2025 GMT Subject: serialNumber=c171232d270fccfef5eabbb817cc25ee29c6bbbaf37f97fda014e8c50063cced, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:06:67:2d:cd:da:b0:65:c8:ea:d2:0b:ec:e9: 90:2e:39:88:71:a8:1b:ca:00:66:93:51:a9:7a:68: 30:ae:44:bc:91:6b:cd:97:37:aa:ee:6d:48:9d:c5: c5:4c:f8:bb:97:c2:09:ea:37:bd:48:bb:26:82:c8: 34:8e:08:91:1e:ec:52:b8:78:7e:67:c3:63:9c:ae: db:0c:54:c4:be:1e:ad:94:69:37:96:66:8b:88:f4: 6e:8d:f4:37:95:8e:f5:fd:1d:d8:29:34:73:d1:ec: ee:e5:c5:1a:9e:30:cd:be:14:31:5d:66:75:11:e4: 11:a5:66:06:c4:ca:b1:65:ff:d4:ba:86:da:71:2a: a8:54:bb:d3:83:e7:57:6f:6c:41:99:d3:97:de:92: 79:f1:f1:06:fb:5a:64:9a:20:18:cf:c0:24:29:df: 17:30:20:04:6a:cb:43:41:66:5f:fe:32:42:d1:82: a7:3b:11:00:83:d0:8a:03:a8:17:ce:dd:ee:23:1b: 9c:a6:ec:0b:8d:db:40:6c:92:79:24:98:c0:09:73: 24:2c:cd:22:f3:3f:f8:a9:3c:f5:bb:71:ef:21:99: 1a:46:74:7f:d3:db:20:f6:88:86:e0:d2:fd:b6:34: df:e0:ea:65:94:32:ce:0e:6b:fe:41:d9:84:1c:da: f0:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:3C:11:E1:BD:FE:5E:5F:31:6D:37:28:F8:66:5D:67:DE:30:7B:A5 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c348c7d2-9a49-40d4-b868-d44d659c7272.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.204.44.0/22 Signature Algorithm: sha256WithRSAEncryption 1c:fd:87:67:7a:73:f0:92:c3:0d:4e:9f:09:86:ea:b2:55:f1: 77:f6:ac:08:0a:a2:d8:bc:9c:56:33:e3:12:0e:9e:f8:d6:7a: 03:5c:ff:b6:e9:58:08:25:d9:cc:0e:5a:56:1b:e9:e0:51:c6: 7a:49:63:c0:9f:1b:3c:f7:21:57:99:c8:92:d5:50:1e:b9:75: e9:42:c0:cc:3e:f9:3c:d6:62:a8:fd:a9:d6:c5:8d:41:99:1c: f0:82:4f:01:dc:2a:53:6f:e3:39:e1:b1:4d:ee:a5:df:fc:d0: 00:5e:23:a3:87:dd:3b:a0:6c:d7:f0:df:ad:06:ce:d9:1e:88: 30:da:05:ba:3d:4f:e0:17:bc:a3:45:20:0d:c7:04:61:f7:b4: da:29:48:82:41:4e:d5:69:db:a8:ef:90:ea:54:9c:73:b0:b8: c3:88:1e:a5:87:4f:81:08:a2:2a:a0:3c:c9:0f:c8:54:aa:65: a1:90:6c:7e:48:fd:ec:a2:59:c9:81:9d:d6:18:d1:3e:7e:b2: e6:37:44:a7:ad:03:b4:cf:21:ee:9b:ae:97:fe:d8:ad:22:57: 13:a8:c7:c2:9b:04:9d:b2:22:cc:4c:18:04:67:b6:a6:e5:02: 2d:bc:e0:2b:d5:f5:0f:bc:77:06:cb:73:2a:15:b9:af:fb:1a: ad:6a:07:0d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMKyQ4pWIXIf3Zism68Gf7UkoS/AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE1MjI0NzM2WhcNMjUxMTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BjMTcxMjMyZDI3MGZjY2ZlZjVlYWJiYjgxN2NjMjVlZTI5 YzZiYmJhZjM3Zjk3ZmRhMDE0ZThjNTAwNjNjY2VkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHBmctzdqwZcjq0gvs6ZAuOYhxqBvKAGaTUal6aDCuRLyR a82XN6rubUidxcVM+LuXwgnqN71IuyaCyDSOCJEe7FK4eH5nw2OcrtsMVMS+Hq2U aTeWZouI9G6N9DeVjvX9HdgpNHPR7O7lxRqeMM2+FDFdZnUR5BGlZgbEyrFl/9S6 htpxKqhUu9OD51dvbEGZ05feknnx8Qb7WmSaIBjPwCQp3xcwIARqy0NBZl/+MkLR gqc7EQCD0IoDqBfO3e4jG5ym7AuN20BsknkkmMAJcyQszSLzP/ipPPW7ce8hmRpG dH/T2yD2iIbg0v22NN/g6mWUMs4Oa/5B2YQc2vCnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQURjwR4b3+Xl8xbTco+GZdZ94we6UwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2MzNDhjN2QyLTlhNDktNDBkNC1iODY4LWQ0NGQ2NTljNzI3Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAKPzCwwDQYJKoZIhvcNAQELBQADggEBABz9h2d6c/CSww1OnwmG6rJV8Xf2 rAgKoti8nFYz4xIOnvjWegNc/7bpWAgl2cwOWlYb6eBRxnpJY8CfGzz3IVeZyJLV UB65delCwMw++TzWYqj9qdbFjUGZHPCCTwHcKlNv4znhsU3upd/80ABeI6OH3Tug bNfw360GztkeiDDaBbo9T+AXvKNFIA3HBGH3tNopSIJBTtVp26jvkOpUnHOwuMOI HqWHT4EIoiqgPMkPyFSqZaGQbH5I/eyiWcmBndYY0T5+suY3RKetA7TPIe6brpf+ 2K0iVxOox8KbBJ2yIsxMGARntqblAi284CvV9Q+8dwbLcyoVua/7Gq1qBw0= -----END CERTIFICATE-----Generated at Mon Oct 20 05:17:25 2025 by rpki-client