$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e2d2e66b-10c4-4b51-a858-d96324797a19.roa File: e2d2e66b-10c4-4b51-a858-d96324797a19.roa (raw, json) Hash identifier: Q3o/j3+qr2aa+SN9Vs0MF96F7itYQuYwkvgnBf7RrqY= Subject key identifier: F1:7A:4A:86:39:8D:9C:A3:17:EE:34:87:50:FF:39:34:CE:8D:FD:70 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 595E871064B70BA1060DF8B368584CF615BB7CB8 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e2d2e66b-10c4-4b51-a858-d96324797a19.roa Signing time: Wed 15 Oct 2025 22:57:18 +0000 ROA not before: Wed 15 Oct 2025 22:57:18 +0000 ROA not after: Wed 19 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 143.204.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:5e:87:10:64:b7:0b:a1:06:0d:f8:b3:68:58:4c:f6:15:bb:7c:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 15 22:57:18 2025 GMT Not After : Nov 19 23:59:59 2025 GMT Subject: serialNumber=8e1ad754723a473c8b0c34b6d6f64877710a11ac648e566d34fa825460cd1d05, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:35:5c:4b:5d:99:f7:1f:13:99:81:fd:90:1f: 32:b6:42:f4:a3:34:a8:61:b1:d6:fb:08:31:cb:18: e5:5d:32:c2:d0:18:18:8b:df:72:7c:80:88:23:ca: 0c:0f:ac:72:e5:48:e6:f3:bd:b6:ae:a9:87:85:34: 42:d8:39:4f:9f:96:50:51:1b:0b:95:72:2e:14:a1: a5:8a:57:1e:e6:95:40:49:36:2a:ca:bc:e4:a0:9e: ad:1e:a7:f6:08:a0:83:f1:ca:57:4a:39:7a:5c:31: 8c:ad:80:85:27:55:9b:51:f8:a3:78:6a:aa:cf:cf: 9d:3a:d1:4e:58:2a:60:e2:e3:df:11:79:50:60:e2: a0:03:ac:58:13:14:60:ba:78:f4:a2:11:9f:63:f4: 4d:c9:26:81:27:e1:da:52:ed:c5:c1:c6:6a:70:ce: ab:f3:55:c5:51:8f:36:2b:9c:04:23:dd:9f:8e:ae: 6c:10:c3:88:34:b5:b2:28:18:5b:7a:de:0c:63:63: a4:a6:6d:5c:25:8e:2d:47:60:70:f4:7e:cc:b1:f6: 1d:a2:b7:08:50:91:c3:8d:fd:91:11:68:81:cf:c3: a6:ca:34:9b:59:b0:ef:8d:c8:00:99:85:a9:de:63: 39:de:ef:b8:4a:45:75:0e:55:f3:43:0c:92:6f:3d: 08:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:7A:4A:86:39:8D:9C:A3:17:EE:34:87:50:FF:39:34:CE:8D:FD:70 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e2d2e66b-10c4-4b51-a858-d96324797a19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.204.20.0/23 Signature Algorithm: sha256WithRSAEncryption a6:5f:ea:70:63:58:8e:ab:94:46:50:62:db:06:a4:de:f3:0b: 5c:69:3e:f9:2e:43:bc:03:dd:e6:69:59:94:27:4c:1c:9f:c7: 17:30:dd:47:6b:5a:c2:0a:aa:3d:42:b2:8d:2f:1d:f3:90:cb: ca:6f:5d:ca:13:f3:ea:4a:c5:62:d0:d8:31:9d:e3:e4:f1:d4: da:ff:cb:05:4f:7a:11:52:3d:34:34:e4:bc:8f:10:53:d7:3d: d5:a7:55:eb:74:96:13:88:b7:0c:f9:ab:31:d8:01:b2:41:8d: 7c:e9:6f:f8:95:9b:30:3f:11:1b:3e:03:63:48:a0:4e:ae:3a: 56:36:2e:f4:a8:8e:0e:a5:cf:99:c0:c0:b4:d1:1f:da:9f:2e: ee:10:2c:e0:24:1c:f2:30:b7:36:51:c4:b4:66:df:61:89:a6: 8a:5b:29:ef:99:25:15:17:ff:6f:30:31:71:2c:16:ad:a5:0c: 7a:8b:85:05:55:b0:fa:6e:33:1a:f4:be:03:af:b4:e9:59:4a: f3:11:5b:cc:e8:df:23:23:f1:cb:14:9b:38:d1:92:31:6a:b6: fc:d8:0c:a5:45:de:51:00:96:45:7a:d3:10:96:36:64:87:7a: af:45:b4:77:db:24:50:b5:be:51:6c:64:bf:9a:6f:9b:32:5d: 6c:c3:fc:63 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWV6HEGS3C6EGDfizaFhM9hW7fLgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE1MjI1NzE4WhcNMjUxMTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZTFhZDc1NDcyM2E0NzNjOGIwYzM0YjZkNmY2NDg3Nzcx MGExMWFjNjQ4ZTU2NmQzNGZhODI1NDYwY2QxZDA1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDENVxLXZn3HxOZgf2QHzK2QvSjNKhhsdb7CDHLGOVdMsLQ GBiL33J8gIgjygwPrHLlSObzvbauqYeFNELYOU+fllBRGwuVci4UoaWKVx7mlUBJ NirKvOSgnq0ep/YIoIPxyldKOXpcMYytgIUnVZtR+KN4aqrPz5060U5YKmDi498R eVBg4qADrFgTFGC6ePSiEZ9j9E3JJoEn4dpS7cXBxmpwzqvzVcVRjzYrnAQj3Z+O rmwQw4g0tbIoGFt63gxjY6SmbVwlji1HYHD0fsyx9h2itwhQkcON/ZERaIHPw6bK NJtZsO+NyACZhaneYzne77hKRXUOVfNDDJJvPQjNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU8XpKhjmNnKMX7jSHUP85NM6N/XAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2UyZDJlNjZiLTEwYzQtNGI1MS1hODU4LWQ5NjMyNDc5N2ExOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAGPzBQwDQYJKoZIhvcNAQELBQADggEBAKZf6nBjWI6rlEZQYtsGpN7zC1xp PvkuQ7wD3eZpWZQnTByfxxcw3UdrWsIKqj1Cso0vHfOQy8pvXcoT8+pKxWLQ2DGd 4+Tx1Nr/ywVPehFSPTQ05LyPEFPXPdWnVet0lhOItwz5qzHYAbJBjXzpb/iVmzA/ ERs+A2NIoE6uOlY2LvSojg6lz5nAwLTRH9qfLu4QLOAkHPIwtzZRxLRm32GJpopb Ke+ZJRUX/28wMXEsFq2lDHqLhQVVsPpuMxr0vgOvtOlZSvMRW8zo3yMj8csUmzjR kjFqtvzYDKVF3lEAlkV60xCWNmSHeq9FtHfbJFC1vlFsZL+ab5syXWzD/GM= -----END CERTIFICATE-----Generated at Mon Oct 20 17:30:19 2025 by rpki-client