$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eb9986f7-4e23-4de0-9769-2a040c0bbd3b.roa File: eb9986f7-4e23-4de0-9769-2a040c0bbd3b.roa (raw, json) Hash identifier: RLTYQ2+Ucc76X7a8oTuUKewl2AmLBxwAZ8qgDJUKiuw= Subject key identifier: 10:33:A6:CD:8D:15:0D:75:F2:B8:A7:EE:39:09:32:80:37:62:E1:BC Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2A887FC450D2CE75279D11E71F49E739C4449697 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eb9986f7-4e23-4de0-9769-2a040c0bbd3b.roa Signing time: Wed 15 Oct 2025 19:03:50 +0000 ROA not before: Wed 15 Oct 2025 19:03:50 +0000 ROA not after: Wed 19 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 143.204.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:88:7f:c4:50:d2:ce:75:27:9d:11:e7:1f:49:e7:39:c4:44:96:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 15 19:03:50 2025 GMT Not After : Nov 19 23:59:59 2025 GMT Subject: serialNumber=175d60b0e0ae60536b51b0be7edaa8fddfa5eae1e7c6016392ff7e11ae554d89, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:21:10:8b:36:bf:a2:1e:97:d6:cd:cf:04:78: 7e:99:1f:5e:f2:0d:8c:52:f9:ed:1f:b7:0c:ac:18: f8:60:21:75:0a:47:4a:72:b8:75:f2:fc:23:5a:48: 04:89:7a:24:1e:7e:1b:f7:6e:7e:3c:34:4c:3e:ce: 40:02:a8:9f:79:c7:ea:27:de:75:fe:9f:d6:ba:c9: a6:c8:65:75:0b:a9:34:3f:0a:2d:f0:fc:b3:77:64: ce:ab:f1:0d:01:24:67:ba:62:32:80:91:b2:f6:08: 88:f9:70:b5:61:3f:f3:bd:89:77:84:e2:df:b8:0c: 33:01:87:e3:75:94:c3:c6:5c:59:ca:4b:ba:60:8e: 5a:53:35:52:a9:3c:43:48:1b:1c:37:67:38:83:bf: dc:05:66:73:ea:24:80:21:44:95:0e:3b:a1:c8:68: 77:88:23:64:cc:c4:fa:94:5b:42:f5:fd:0c:69:9a: 47:28:7b:ca:5c:e2:e2:04:49:1b:0e:f7:b2:53:41: 5c:81:8e:ef:e5:f0:c1:82:9d:47:58:13:d0:e5:32: 54:6a:c6:60:37:30:30:81:f6:ef:69:d2:2d:40:f4: 11:fc:db:2f:e8:4f:48:e0:74:89:80:47:04:c1:26: 42:58:fb:9b:2c:18:9f:7e:f4:93:f4:15:5b:f3:45: d9:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:33:A6:CD:8D:15:0D:75:F2:B8:A7:EE:39:09:32:80:37:62:E1:BC X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eb9986f7-4e23-4de0-9769-2a040c0bbd3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.204.221.0/24 Signature Algorithm: sha256WithRSAEncryption b1:44:9f:99:0c:24:cd:72:02:78:d5:1d:2f:1b:e9:0c:5f:36: c8:48:7f:ac:c8:53:b2:25:0c:d3:b0:8c:db:e2:df:23:26:07: dd:62:e0:0c:02:e3:a7:5c:ab:61:18:f2:a9:44:0e:ae:4c:e4: 14:07:cf:d9:12:34:37:3e:09:14:f0:e4:4f:b1:a9:d5:5c:9b: ca:85:fa:7e:9b:dc:50:c3:17:d1:cb:21:8b:93:e1:0f:de:d6: 33:31:a0:ae:7c:15:9a:a1:38:b9:38:47:8b:99:23:26:da:56: 1d:77:96:e8:17:91:b0:84:cc:06:a2:02:88:3e:5e:29:9b:be: 4f:12:f9:d3:0a:21:98:dd:2c:a8:ce:ac:1a:38:0d:55:03:87: db:75:68:05:93:a6:58:4f:12:94:70:30:7f:f0:4f:9d:17:6e: 6f:d4:45:3c:9d:a6:6f:02:aa:76:ba:c0:8f:05:0f:c3:bf:47: dd:87:d8:d7:4f:87:32:5c:f3:00:7d:3b:d8:3d:8e:f2:ed:d4: d3:08:39:1c:da:0f:10:cc:eb:ac:0f:93:e9:20:7b:c2:55:49: a8:56:c1:54:8b:e0:48:8c:71:ed:cf:6c:f6:0e:ea:f5:52:41: 87:0c:e1:64:31:af:01:16:78:35:9a:6a:32:b1:3a:dc:e7:b4: e7:90:86:bd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKoh/xFDSznUnnRHnH0nnOcRElpcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE1MTkwMzUwWhcNMjUxMTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0AxNzVkNjBiMGUwYWU2MDUzNmI1MWIwYmU3ZWRhYThmZGRm YTVlYWUxZTdjNjAxNjM5MmZmN2UxMWFlNTU0ZDg5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDVIRCLNr+iHpfWzc8EeH6ZH17yDYxS+e0ftwysGPhgIXUK R0pyuHXy/CNaSASJeiQefhv3bn48NEw+zkACqJ95x+on3nX+n9a6yabIZXULqTQ/ Ci3w/LN3ZM6r8Q0BJGe6YjKAkbL2CIj5cLVhP/O9iXeE4t+4DDMBh+N1lMPGXFnK S7pgjlpTNVKpPENIGxw3ZziDv9wFZnPqJIAhRJUOO6HIaHeII2TMxPqUW0L1/Qxp mkcoe8pc4uIESRsO97JTQVyBju/l8MGCnUdYE9DlMlRqxmA3MDCB9u9p0i1A9BH8 2y/oT0jgdImARwTBJkJY+5ssGJ9+9JP0FVvzRdnnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUEDOmzY0VDXXyuKfuOQkygDdi4bwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2ViOTk4NmY3LTRlMjMtNGRlMC05NzY5LTJhMDQwYzBiYmQzYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACPzN0wDQYJKoZIhvcNAQELBQADggEBALFEn5kMJM1yAnjVHS8b6QxfNshI f6zIU7IlDNOwjNvi3yMmB91i4AwC46dcq2EY8qlEDq5M5BQHz9kSNDc+CRTw5E+x qdVcm8qF+n6b3FDDF9HLIYuT4Q/e1jMxoK58FZqhOLk4R4uZIybaVh13lugXkbCE zAaiAog+Ximbvk8S+dMKIZjdLKjOrBo4DVUDh9t1aAWTplhPEpRwMH/wT50Xbm/U RTydpm8Cqna6wI8FD8O/R92H2NdPhzJc8wB9O9g9jvLt1NMIORzaDxDM66wPk+kg e8JVSahWwVSL4EiMce3PbPYO6vVSQYcM4WQxrwEWeDWaajKxOtzntOeQhr0= -----END CERTIFICATE-----Generated at Mon Oct 20 15:44:24 2025 by rpki-client