$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d95f6bcd-7433-4f66-8a66-2a5599a3f1d6.roa File: d95f6bcd-7433-4f66-8a66-2a5599a3f1d6.roa (raw, json) Hash identifier: dUY21KtmHGG2ekptoJauH23GlyW1ATjvPoWomBuIiy8= Subject key identifier: 00:C6:16:56:02:72:17:35:17:90:E6:BD:7A:02:EC:A9:10:48:45:FA Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3FC60787C456677B8C3030FD55FA43D358EA1171 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d95f6bcd-7433-4f66-8a66-2a5599a3f1d6.roa Signing time: Wed 15 Oct 2025 22:57:20 +0000 ROA not before: Wed 15 Oct 2025 22:57:20 +0000 ROA not after: Wed 19 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 143.204.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:c6:07:87:c4:56:67:7b:8c:30:30:fd:55:fa:43:d3:58:ea:11:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 15 22:57:20 2025 GMT Not After : Nov 19 23:59:59 2025 GMT Subject: serialNumber=4e617e77c323d360bc76e2211a33d3c447a7c5ca4ecb8074ae6c039d2178b9ac, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:28:df:64:03:85:f0:42:a8:1c:4a:0b:0d:06: 57:ea:27:f0:3b:9b:95:c4:44:4e:a2:e6:b3:c3:9c: 1f:08:7e:38:e2:14:27:c6:be:a4:70:62:a4:9f:87: de:0c:e5:4f:06:ba:62:14:50:db:8a:ae:d6:76:d4: d0:69:13:17:eb:34:dc:f5:c7:f6:fb:85:e4:a8:e6: 5e:40:5a:b4:7e:d5:88:6e:85:3a:d7:ca:87:37:f3: c0:17:ad:c8:a0:b0:2f:1b:0f:08:f1:e7:24:0d:61: 71:1a:8f:e4:41:36:fb:5e:23:5c:31:df:1e:98:87: 70:fa:94:ac:ba:85:4b:1a:02:36:29:5b:21:6c:85: 12:6f:ee:ef:a0:35:bf:1d:98:c6:fd:b9:5d:c8:e2: b4:fb:88:ff:88:8a:ca:41:85:6b:02:8c:9a:12:32: 49:90:38:24:26:89:f9:b7:cc:4a:f0:0a:c3:41:50: 3a:59:97:49:20:05:29:15:7c:49:e0:de:5f:8b:62: 89:85:60:f9:00:e7:c9:ca:61:c2:8f:96:2d:bd:2c: 23:33:9b:4b:9b:eb:d5:a1:da:61:44:4f:8e:c9:4e: b2:73:df:72:8d:a8:82:d0:f5:cc:7d:46:4f:b0:e7: 1c:a3:69:f4:21:17:a8:81:4c:1b:02:1d:ee:e9:be: f0:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:C6:16:56:02:72:17:35:17:90:E6:BD:7A:02:EC:A9:10:48:45:FA X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d95f6bcd-7433-4f66-8a66-2a5599a3f1d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.204.208.0/20 Signature Algorithm: sha256WithRSAEncryption 8f:d2:83:63:98:ff:6c:fd:c2:26:2f:a7:3c:74:b8:8b:38:6c: fe:7e:06:93:c4:ab:7d:f8:c5:b8:17:00:6d:0e:51:f3:cd:6f: 07:87:da:22:bc:52:a2:1a:dc:96:d1:f2:f7:d4:97:44:d4:51: 37:61:8d:b1:6b:d3:e6:66:a4:38:61:97:83:8a:46:f2:1c:d9: 35:66:8f:96:a5:66:0e:ec:f5:65:46:87:80:58:47:fa:53:c4: b1:95:a7:d4:02:6e:3f:dc:2f:43:f3:3b:3f:90:f0:a8:12:41: 15:c2:f5:27:c0:01:4e:c7:69:ea:24:6c:00:8e:88:eb:2e:ef: 7d:01:7d:38:72:f2:89:81:0e:bf:88:6b:91:d5:f8:5b:82:a3: 2a:10:92:bb:a0:c9:19:0f:c4:e6:5a:f2:ce:a5:3d:71:b0:76: 5a:11:e1:0e:53:9e:d5:3d:06:4a:be:81:bd:ba:06:c2:55:cf: e4:a5:33:4a:27:15:01:14:c8:9d:fb:e1:5c:17:d1:bb:9e:61: ce:f1:51:58:02:db:e0:15:ec:d0:2d:b2:0d:1b:32:7e:cd:1a: e8:3a:5a:9f:e7:02:56:bb:e2:ba:61:13:31:69:ec:ee:86:3e: 5f:4b:36:6e:7b:f2:13:e6:1d:80:82:93:71:22:08:d4:6f:d1: 51:55:96:4e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUP8YHh8RWZ3uMMDD9VfpD01jqEXEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE1MjI1NzIwWhcNMjUxMTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZTYxN2U3N2MzMjNkMzYwYmM3NmUyMjExYTMzZDNjNDQ3 YTdjNWNhNGVjYjgwNzRhZTZjMDM5ZDIxNzhiOWFjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCiKN9kA4XwQqgcSgsNBlfqJ/A7m5XERE6i5rPDnB8Ifjji FCfGvqRwYqSfh94M5U8GumIUUNuKrtZ21NBpExfrNNz1x/b7heSo5l5AWrR+1Yhu hTrXyoc388AXrcigsC8bDwjx5yQNYXEaj+RBNvteI1wx3x6Yh3D6lKy6hUsaAjYp WyFshRJv7u+gNb8dmMb9uV3I4rT7iP+IispBhWsCjJoSMkmQOCQmifm3zErwCsNB UDpZl0kgBSkVfEng3l+LYomFYPkA58nKYcKPli29LCMzm0ub69Wh2mFET47JTrJz 33KNqILQ9cx9Rk+w5xyjafQhF6iBTBsCHe7pvvBLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUAMYWVgJyFzUXkOa9egLsqRBIRfowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Q5NWY2YmNkLTc0MzMtNGY2Ni04YTY2LTJhNTU5OWEzZjFkNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBASPzNAwDQYJKoZIhvcNAQELBQADggEBAI/Sg2OY/2z9wiYvpzx0uIs4bP5+ BpPEq334xbgXAG0OUfPNbweH2iK8UqIa3JbR8vfUl0TUUTdhjbFr0+ZmpDhhl4OK RvIc2TVmj5alZg7s9WVGh4BYR/pTxLGVp9QCbj/cL0PzOz+Q8KgSQRXC9SfAAU7H aeokbACOiOsu730BfThy8omBDr+Ia5HV+FuCoyoQkrugyRkPxOZa8s6lPXGwdloR 4Q5TntU9Bkq+gb26BsJVz+SlM0onFQEUyJ374VwX0bueYc7xUVgC2+AV7NAtsg0b Mn7NGug6Wp/nAla74rphEzFp7O6GPl9LNm578hPmHYCCk3EiCNRv0VFVlk4= -----END CERTIFICATE-----Generated at Mon Oct 20 15:44:17 2025 by rpki-client