$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e5e00d75-a09c-4a21-bd3b-5871dcc753c5.roa File: e5e00d75-a09c-4a21-bd3b-5871dcc753c5.roa (raw, json) Hash identifier: kCfH0BRwBv5CFEOScS2L/M/5Rp7+xPctAYRWhpzX0FA= Subject key identifier: 15:42:F6:44:69:F7:71:51:12:50:D8:D1:A6:2E:29:CE:A2:5F:9C:94 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 79F65FC3C8BE963DA8B3AD13F784A946666FE4B7 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e5e00d75-a09c-4a21-bd3b-5871dcc753c5.roa Signing time: Wed 15 Oct 2025 20:11:26 +0000 ROA not before: Wed 15 Oct 2025 20:11:26 +0000 ROA not after: Wed 19 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 143.204.188.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:f6:5f:c3:c8:be:96:3d:a8:b3:ad:13:f7:84:a9:46:66:6f:e4:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 15 20:11:26 2025 GMT Not After : Nov 19 23:59:59 2025 GMT Subject: serialNumber=4c4484d76d6ac92785ab7172544ef4e6301b6e548e8bfad72ec21ef30cf0e1c1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:32:20:ff:62:a5:f6:ff:18:5c:da:2d:28:78: df:c8:05:1e:b8:a9:ba:19:91:db:35:ca:79:4c:13: 09:06:fb:14:b7:e9:26:ff:5f:6e:92:17:cc:7c:0b: 75:cb:4d:20:2d:a8:d8:eb:16:d1:68:f2:26:5b:12: a0:1f:1f:78:ab:cc:e6:82:ee:83:2b:0f:48:49:e8: 5c:f9:4c:2e:f0:65:9d:d6:f9:c6:8e:af:56:c5:92: 67:41:8c:b5:a1:2c:14:7e:44:56:78:08:09:e1:f8: 7f:bb:dd:42:c3:eb:88:9e:dc:b1:27:59:7a:94:1b: 3c:e1:6d:78:8e:f0:f1:b9:50:e8:b1:6f:38:3b:66: 5e:dd:0e:9d:d4:ca:2f:e6:3e:9e:5e:16:f1:f1:1f: 9c:4f:d3:ff:41:aa:63:02:7a:d8:b4:9b:5e:8e:30: fa:ab:f7:71:f6:cb:fc:e2:cd:a5:fe:e3:1e:22:a7: e2:d2:0e:75:60:5b:cb:c3:0f:e8:d7:c2:16:2b:75: 9e:c6:a4:13:a9:a4:5d:ef:28:ec:30:b7:22:a9:e2: 08:89:26:2b:18:d9:d7:96:70:d5:c7:22:fa:ab:a9: e3:5a:96:88:2c:86:22:95:95:5f:75:fd:fb:12:52: 11:88:48:ac:97:61:52:f1:c1:d8:ec:2f:fd:26:72: 5e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:42:F6:44:69:F7:71:51:12:50:D8:D1:A6:2E:29:CE:A2:5F:9C:94 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e5e00d75-a09c-4a21-bd3b-5871dcc753c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.204.188.0/23 Signature Algorithm: sha256WithRSAEncryption 58:24:36:56:a6:22:e7:35:d6:33:39:e7:1c:5b:55:39:bd:68: d9:1a:78:dc:d9:6e:e8:52:9b:03:8b:2a:51:4e:de:3f:45:cf: a0:fd:a9:30:f0:ce:44:be:99:d6:f5:2c:98:1f:f5:c3:5c:9d: d7:f3:2b:ca:d2:47:6d:9d:fd:db:ec:5b:ed:38:ce:31:64:c2: 71:e1:bb:04:c2:61:01:4f:f4:af:01:f3:a8:e2:3d:c1:1b:7b: 62:c5:25:de:87:05:93:ee:00:e0:35:e5:b2:0f:b2:3c:8d:24: 61:4e:f0:f4:c6:07:df:24:8f:4e:1b:3b:2c:06:f4:bb:7a:3a: a8:b4:b6:aa:59:fd:a9:77:20:61:52:56:8a:57:b2:5b:3f:e5: 1f:02:81:ef:a5:e1:17:21:16:3d:f0:73:e2:d6:57:ef:25:77: 5d:2d:f7:f7:3d:c4:2e:89:b4:1a:06:a1:e0:0a:3b:a7:11:46: b0:63:2c:eb:5a:b9:16:ca:15:66:36:bf:aa:b6:9a:a9:88:90: ad:6b:10:45:26:04:3e:d4:8b:10:55:57:ea:ca:7a:46:91:18: 85:b6:1e:f4:b8:7f:6c:69:68:d8:6e:de:5e:66:e5:90:a7:ca: 9f:e2:f2:0d:68:27:54:00:d6:4b:f1:d5:76:eb:58:91:dc:c0: 9d:a0:5e:20 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUefZfw8i+lj2os60T94SpRmZv5LcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE1MjAxMTI2WhcNMjUxMTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A0YzQ0ODRkNzZkNmFjOTI3ODVhYjcxNzI1NDRlZjRlNjMw MWI2ZTU0OGU4YmZhZDcyZWMyMWVmMzBjZjBlMWMxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDmMiD/YqX2/xhc2i0oeN/IBR64qboZkds1ynlMEwkG+xS3 6Sb/X26SF8x8C3XLTSAtqNjrFtFo8iZbEqAfH3irzOaC7oMrD0hJ6Fz5TC7wZZ3W +caOr1bFkmdBjLWhLBR+RFZ4CAnh+H+73ULD64ie3LEnWXqUGzzhbXiO8PG5UOix bzg7Zl7dDp3Uyi/mPp5eFvHxH5xP0/9BqmMCeti0m16OMPqr93H2y/zizaX+4x4i p+LSDnVgW8vDD+jXwhYrdZ7GpBOppF3vKOwwtyKp4giJJisY2deWcNXHIvqrqeNa logshiKVlV91/fsSUhGISKyXYVLxwdjsL/0mcl5JAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUFUL2RGn3cVESUNjRpi4pzqJfnJQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2U1ZTAwZDc1LWEwOWMtNGEyMS1iZDNiLTU4NzFkY2M3NTNjNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAGPzLwwDQYJKoZIhvcNAQELBQADggEBAFgkNlamIuc11jM55xxbVTm9aNka eNzZbuhSmwOLKlFO3j9Fz6D9qTDwzkS+mdb1LJgf9cNcndfzK8rSR22d/dvsW+04 zjFkwnHhuwTCYQFP9K8B86jiPcEbe2LFJd6HBZPuAOA15bIPsjyNJGFO8PTGB98k j04bOywG9Lt6Oqi0tqpZ/al3IGFSVopXsls/5R8Cge+l4RchFj3wc+LWV+8ld10t 9/c9xC6JtBoGoeAKO6cRRrBjLOtauRbKFWY2v6q2mqmIkK1rEEUmBD7UixBVV+rK ekaRGIW2HvS4f2xpaNhu3l5m5ZCnyp/i8g1oJ1QA1kvx1XbrWJHcwJ2gXiA= -----END CERTIFICATE-----Generated at Mon Oct 20 11:01:35 2025 by rpki-client