$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eff649ea-d3f2-41b8-b4aa-3f00178fd60b.roa File: eff649ea-d3f2-41b8-b4aa-3f00178fd60b.roa (raw, json) Hash identifier: QiaPhC6iqH7YhpuK1jeEi3/zdSip/VqkKCosVhMTDkw= Subject key identifier: FA:34:84:42:6C:BA:AF:DD:2D:BB:C7:9F:DD:B2:BD:CA:3D:D1:0B:08 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 19AB30569FE5D743668F4BF131640B2194E753BE Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eff649ea-d3f2-41b8-b4aa-3f00178fd60b.roa Signing time: Wed 15 Oct 2025 22:34:14 +0000 ROA not before: Wed 15 Oct 2025 22:34:14 +0000 ROA not after: Wed 19 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 143.204.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:ab:30:56:9f:e5:d7:43:66:8f:4b:f1:31:64:0b:21:94:e7:53:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 15 22:34:14 2025 GMT Not After : Nov 19 23:59:59 2025 GMT Subject: serialNumber=c8a1818e776622d5605c669a2559d6cff274929850bd344b13b23b6df01abd49, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:92:08:2b:05:b2:9e:29:b2:8b:60:55:10:d9: c9:1d:1d:cb:18:a3:08:d4:a2:f1:47:a4:77:5a:a4: 22:ef:8e:c3:1f:9f:d8:22:74:46:7b:bc:81:4a:eb: f6:6d:c4:f6:92:d5:c1:2d:91:2f:e4:a1:2f:48:91: 89:d4:65:d9:6f:0a:c3:3c:dc:99:cf:c0:7d:79:d0: 92:1c:c7:77:06:55:f9:77:92:b6:a8:9d:98:39:e4: 59:ce:f3:ad:f8:8f:4f:db:f5:bc:70:4f:08:0c:d9: aa:f8:32:1f:21:09:7c:7f:39:80:74:a5:57:9b:9d: 5d:9b:77:fd:07:fc:16:71:3f:65:a3:9f:00:59:88: ac:c9:7b:19:9a:62:da:b9:ed:ec:d3:ac:4e:cd:a9: e3:7b:8b:dc:30:03:fe:b7:e4:a0:07:a7:55:cc:21: e5:2f:96:df:39:90:28:fa:7b:f1:2d:63:39:90:89: 52:57:9d:26:45:84:f9:c2:86:62:73:9d:7c:3f:8b: f8:0b:11:61:51:34:f7:23:1f:85:fc:79:9b:5d:9d: 51:63:27:b3:0c:0e:05:c5:61:03:93:58:33:f4:82: 1f:03:98:22:2c:51:9b:03:f0:38:e8:53:47:e5:85: e9:8c:a1:8c:e5:7a:84:df:56:d8:d6:f9:76:e6:75: dc:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:34:84:42:6C:BA:AF:DD:2D:BB:C7:9F:DD:B2:BD:CA:3D:D1:0B:08 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eff649ea-d3f2-41b8-b4aa-3f00178fd60b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.204.48.0/22 Signature Algorithm: sha256WithRSAEncryption 18:29:d4:60:17:08:71:b5:61:4a:7a:0b:df:69:ae:fb:f3:4a: f3:61:89:7a:cf:bb:97:c0:6e:a5:14:40:e5:5d:73:76:ee:6e: ac:a3:cf:0b:73:d3:61:f0:2a:ae:80:c4:79:21:84:17:46:b1: c0:b6:7c:27:50:35:be:2f:de:ba:81:23:b2:b0:b6:33:2c:a5: 68:fe:86:ff:fc:88:66:9b:2e:f2:59:90:06:d6:eb:85:01:7f: 75:ef:7d:1f:93:97:58:ad:a4:d9:f9:8f:7e:48:a0:43:4a:f3: ed:f4:fc:a1:de:72:25:24:3c:05:61:61:a6:f9:b0:de:3b:1d: cf:da:81:9b:c2:e3:57:fc:dc:a2:dd:55:92:48:e3:53:9f:fb: 43:6b:c1:02:38:f7:9d:78:de:0a:b8:28:b2:7c:b5:d3:64:9b: 31:84:c0:55:71:6a:9e:18:71:ec:41:b3:26:8f:29:c7:b7:50: 39:a8:2a:a8:f0:03:8c:af:36:b7:e3:fe:67:eb:24:1e:67:59: 2c:fd:90:24:57:db:01:dc:45:a4:bc:5b:76:37:0c:82:ff:a2: 5e:37:14:ad:71:93:11:f8:12:99:0d:03:3d:be:5b:fe:37:51: 84:3f:5d:36:81:53:e7:13:00:52:e7:12:fd:b6:d8:63:31:bf: 16:27:57:e3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGaswVp/l10Nmj0vxMWQLIZTnU74wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE1MjIzNDE0WhcNMjUxMTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BjOGExODE4ZTc3NjYyMmQ1NjA1YzY2OWEyNTU5ZDZjZmYy NzQ5Mjk4NTBiZDM0NGIxM2IyM2I2ZGYwMWFiZDQ5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBkggrBbKeKbKLYFUQ2ckdHcsYowjUovFHpHdapCLvjsMf n9gidEZ7vIFK6/ZtxPaS1cEtkS/koS9IkYnUZdlvCsM83JnPwH150JIcx3cGVfl3 kraonZg55FnO8634j0/b9bxwTwgM2ar4Mh8hCXx/OYB0pVebnV2bd/0H/BZxP2Wj nwBZiKzJexmaYtq57ezTrE7NqeN7i9wwA/635KAHp1XMIeUvlt85kCj6e/EtYzmQ iVJXnSZFhPnChmJznXw/i/gLEWFRNPcjH4X8eZtdnVFjJ7MMDgXFYQOTWDP0gh8D mCIsUZsD8DjoU0flhemMoYzleoTfVtjW+Xbmddz3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU+jSEQmy6r90tu8ef3bK9yj3RCwgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2VmZjY0OWVhLWQzZjItNDFiOC1iNGFhLTNmMDAxNzhmZDYwYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAKPzDAwDQYJKoZIhvcNAQELBQADggEBABgp1GAXCHG1YUp6C99prvvzSvNh iXrPu5fAbqUUQOVdc3bubqyjzwtz02HwKq6AxHkhhBdGscC2fCdQNb4v3rqBI7Kw tjMspWj+hv/8iGabLvJZkAbW64UBf3XvfR+Tl1itpNn5j35IoENK8+30/KHeciUk PAVhYab5sN47Hc/agZvC41f83KLdVZJI41Of+0NrwQI495143gq4KLJ8tdNkmzGE wFVxap4YcexBsyaPKce3UDmoKqjwA4yvNrfj/mfrJB5nWSz9kCRX2wHcRaS8W3Y3 DIL/ol43FK1xkxH4EpkNAz2+W/43UYQ/XTaBU+cTAFLnEv222GMxvxYnV+M= -----END CERTIFICATE-----Generated at Mon Oct 20 13:17:41 2025 by rpki-client