$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f8257f60-2b0f-47b1-a39e-5489b60b6b42.roa File: f8257f60-2b0f-47b1-a39e-5489b60b6b42.roa (raw, json) Hash identifier: xrSy8c7GVPAz7aMyGUkul/SoEV6j2k9rZYgk/STbGCU= Subject key identifier: 38:6B:BD:72:D7:2F:76:5E:76:2F:EF:02:F3:63:D9:A1:93:E9:43:38 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2350AE02DF010CD767F01E31DD39FB30799366AE Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f8257f60-2b0f-47b1-a39e-5489b60b6b42.roa Signing time: Wed 15 Oct 2025 22:54:59 +0000 ROA not before: Wed 15 Oct 2025 22:54:59 +0000 ROA not after: Wed 19 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 143.204.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:50:ae:02:df:01:0c:d7:67:f0:1e:31:dd:39:fb:30:79:93:66:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 15 22:54:59 2025 GMT Not After : Nov 19 23:59:59 2025 GMT Subject: serialNumber=7a5f7a2035598c52c56168ce3f1a0e023e6dec6c68eda7ea70fb3f53529bc161, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:94:84:f2:1f:fa:d9:95:14:51:46:57:0c:18: e6:6f:07:f0:b9:04:c9:a6:0c:94:ff:a7:d7:0a:fb: fe:ed:79:5d:50:5c:70:81:16:14:b0:3e:0a:de:63: 42:95:4e:27:b3:45:0d:d8:44:99:61:3c:a3:79:78: b4:60:62:0a:20:a2:9a:dd:f3:06:5c:32:ec:ac:9d: f4:0d:3e:b2:9e:7c:b5:e5:e9:d3:88:24:ee:96:c4: a4:b0:3c:bb:df:32:6b:8c:61:7a:06:0a:31:27:b4: ac:e8:c4:67:ce:03:e2:31:ee:fe:f3:18:69:b8:0c: 7b:26:21:5d:3f:5d:2f:78:48:67:96:ca:0b:95:e6: 82:b2:84:c3:89:e4:24:25:31:31:6f:15:11:89:06: 2a:92:06:5c:9d:97:76:b8:7c:04:ea:b2:ea:aa:6d: 9f:50:9b:bd:86:b7:71:9b:d3:a8:20:86:c1:58:0c: 45:11:25:1d:5a:b1:fd:73:37:3d:ef:e8:1f:2b:3b: 91:ea:b0:97:aa:ec:9e:9b:a4:95:a9:01:38:c5:bc: 19:60:ac:02:b4:f8:4a:1e:e8:f4:c9:38:16:2a:68: 58:00:8d:81:fe:8f:b7:ca:81:b5:1a:dd:cf:4d:35: 0f:c5:56:58:23:a9:e5:12:37:3f:6e:35:27:f7:52: 82:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:6B:BD:72:D7:2F:76:5E:76:2F:EF:02:F3:63:D9:A1:93:E9:43:38 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f8257f60-2b0f-47b1-a39e-5489b60b6b42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.204.0.0/21 Signature Algorithm: sha256WithRSAEncryption 00:5a:c9:ee:4d:4b:06:7e:b8:c0:97:53:f5:8a:56:66:1e:06: 10:62:f1:94:95:8a:8d:1a:7d:52:ea:70:be:94:e3:3b:99:43: 13:2d:7e:21:08:ba:7e:d1:e2:81:f4:6c:1a:1a:59:18:1e:3b: b1:fa:02:97:80:8a:d1:89:66:29:fc:a1:10:e9:68:19:5f:01: 6f:2d:c0:55:f6:d8:41:ff:e2:ce:1c:97:7a:64:45:e1:9a:8f: bd:9c:7e:6f:d8:02:60:60:73:ae:ea:65:ba:1d:44:7c:c6:72: 77:70:48:99:10:b6:c1:aa:63:f4:b9:4d:38:5f:79:b0:fe:a6: 78:a5:02:29:28:9a:95:03:63:ef:73:61:2a:6b:af:1c:14:46: b0:83:90:f0:0c:30:38:65:dd:00:0f:c8:a2:9c:c5:4b:6f:aa: a0:72:e3:1b:4b:8d:16:eb:76:6f:69:cb:fd:21:dc:c2:92:f1: be:14:bf:85:0f:b0:c4:ba:3b:32:c9:0a:85:16:35:f5:68:dd: 2a:47:98:97:48:fc:41:fa:5f:75:e4:6a:10:bb:2d:6b:ab:32: ed:a6:54:e2:a9:fc:a6:4a:f6:3f:6d:9b:f8:2f:36:85:40:1d: f8:00:f1:49:c8:32:c9:06:c0:16:6d:1d:c2:b0:2f:77:e8:50: e5:01:58:3a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUI1CuAt8BDNdn8B4x3Tn7MHmTZq4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE1MjI1NDU5WhcNMjUxMTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A3YTVmN2EyMDM1NTk4YzUyYzU2MTY4Y2UzZjFhMGUwMjNl NmRlYzZjNjhlZGE3ZWE3MGZiM2Y1MzUyOWJjMTYxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCilITyH/rZlRRRRlcMGOZvB/C5BMmmDJT/p9cK+/7teV1Q XHCBFhSwPgreY0KVTiezRQ3YRJlhPKN5eLRgYgogoprd8wZcMuysnfQNPrKefLXl 6dOIJO6WxKSwPLvfMmuMYXoGCjEntKzoxGfOA+Ix7v7zGGm4DHsmIV0/XS94SGeW yguV5oKyhMOJ5CQlMTFvFRGJBiqSBlydl3a4fATqsuqqbZ9Qm72Gt3Gb06gghsFY DEURJR1asf1zNz3v6B8rO5HqsJeq7J6bpJWpATjFvBlgrAK0+Eoe6PTJOBYqaFgA jYH+j7fKgbUa3c9NNQ/FVlgjqeUSNz9uNSf3UoJdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUOGu9ctcvdl52L+8C82PZoZPpQzgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Y4MjU3ZjYwLTJiMGYtNDdiMS1hMzllLTU0ODliNjBiNmI0Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAOPzAAwDQYJKoZIhvcNAQELBQADggEBAABaye5NSwZ+uMCXU/WKVmYeBhBi 8ZSVio0afVLqcL6U4zuZQxMtfiEIun7R4oH0bBoaWRgeO7H6ApeAitGJZin8oRDp aBlfAW8twFX22EH/4s4cl3pkReGaj72cfm/YAmBgc67qZbodRHzGcndwSJkQtsGq Y/S5TThfebD+pnilAikompUDY+9zYSprrxwURrCDkPAMMDhl3QAPyKKcxUtvqqBy 4xtLjRbrdm9py/0h3MKS8b4Uv4UPsMS6OzLJCoUWNfVo3SpHmJdI/EH6X3XkahC7 LWurMu2mVOKp/KZK9j9tm/gvNoVAHfgA8UnIMskGwBZtHcKwL3foUOUBWDo= -----END CERTIFICATE-----Generated at Mon Oct 20 05:17:57 2025 by rpki-client