$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6c669244-adce-44d3-ac8e-2b9e87064a76.roa File: 6c669244-adce-44d3-ac8e-2b9e87064a76.roa (raw, json) Hash identifier: TFN6oul1OzU4olUkm3PZUtQBr1nSCB5KkhU2xqiFcno= Subject key identifier: 01:20:78:62:01:3E:17:24:EF:32:E5:50:AC:4A:72:07:EC:37:AA:B5 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 71DA9D699CC9874791024400A98696BFD9AC3563 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6c669244-adce-44d3-ac8e-2b9e87064a76.roa Signing time: Tue 23 Sep 2025 17:03:35 +0000 ROA not before: Tue 23 Sep 2025 17:03:35 +0000 ROA not after: Tue 28 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 161.188.162.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:da:9d:69:9c:c9:87:47:91:02:44:00:a9:86:96:bf:d9:ac:35:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 23 17:03:35 2025 GMT Not After : Oct 28 23:59:59 2025 GMT Subject: serialNumber=86d509e17a0be7985239a41225ca42460d75408c974e4afaaf83cd2ca2682b38, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ac:3a:68:5f:9e:e9:80:b9:88:41:5d:a3:54: a2:cf:98:12:29:08:68:00:f5:a4:0a:f6:0d:16:80: ab:25:e4:60:7e:e8:0e:cc:7a:96:42:68:23:24:92: 52:18:43:d3:20:76:b4:5c:bd:d5:1e:d2:0d:4d:bb: 18:90:da:df:f1:a1:85:e1:26:bd:ac:0e:5a:c3:88: 5d:cb:29:5b:e9:f2:de:bb:15:d9:57:6a:b1:05:f7: d9:ee:40:8d:01:5d:ec:25:ca:f2:23:55:b4:98:92: 42:11:74:55:a9:d8:d0:0d:f0:4d:70:92:ae:aa:38: 0d:ff:fc:07:47:47:b3:ab:c4:9e:1b:39:5e:f4:61: d5:ee:e9:05:37:50:92:ad:d1:1f:70:ea:01:cc:ee: 5f:2a:3c:65:33:0c:ac:c9:d9:59:ac:f2:7a:a6:ea: e9:a8:f3:5d:5b:54:ae:8d:f7:1d:e6:d0:81:bd:5e: cc:5b:42:56:e8:05:90:b9:ee:f6:1d:e3:a0:fc:f0: 45:4a:cf:52:3d:24:6e:57:75:87:d4:c7:52:af:8e: 4a:12:75:2d:4b:d3:4d:95:51:8f:c2:d6:31:a3:15: 4b:13:60:f8:48:38:0f:34:d0:ea:0d:cc:cf:07:bf: a7:6b:87:c3:d9:14:b0:5a:1e:fb:40:ea:6f:1c:31: 5b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:20:78:62:01:3E:17:24:EF:32:E5:50:AC:4A:72:07:EC:37:AA:B5 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6c669244-adce-44d3-ac8e-2b9e87064a76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.188.162.0/23 Signature Algorithm: sha256WithRSAEncryption 43:8c:c4:1a:ff:28:6e:cf:96:02:a2:84:da:09:c4:bb:b6:7f: 95:df:a8:95:8d:d0:22:e1:3d:c1:d1:5b:2e:a2:45:b2:15:01: 4f:b4:25:66:fd:c5:96:5d:d3:4a:28:f9:00:b3:a8:b6:62:f2: 82:94:5c:ac:3e:21:ff:48:22:11:8e:99:5c:ec:a3:d0:c8:26: 81:62:92:58:eb:20:3e:7f:5b:86:4a:4c:58:13:3b:b5:d6:c1: 21:33:c0:c5:60:c7:ec:5d:5a:d9:95:ed:55:b3:3b:d0:65:82: 88:d9:fc:9b:d3:50:b3:7c:ad:5f:c9:06:45:0b:c5:15:b8:03: 5b:d9:de:2f:36:cb:82:32:f2:09:3c:a1:bd:f6:7b:cc:89:4e: 9c:59:be:a0:d6:23:29:05:11:ff:84:d9:7f:d5:c3:55:02:7a: 47:c3:20:58:71:17:33:61:cf:e3:32:e2:b4:3f:1c:b0:54:81: cb:27:44:ef:dc:0a:45:68:5d:94:d4:36:15:c6:9e:12:0e:58: 16:74:ff:24:e1:e6:2e:3f:c6:ae:8b:ba:00:f9:ae:74:41:b8: 5c:d0:ed:06:28:38:60:ba:ee:bc:89:30:10:30:2a:e0:18:5e: 6c:02:3e:8c:e5:a3:68:84:07:ac:bb:37:13:35:bd:3c:68:37: 64:c1:d8:12 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcdqdaZzJh0eRAkQAqYaWv9msNWMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIzMTcwMzM1WhcNMjUxMDI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A4NmQ1MDllMTdhMGJlNzk4NTIzOWE0MTIyNWNhNDI0NjBk NzU0MDhjOTc0ZTRhZmFhZjgzY2QyY2EyNjgyYjM4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwrDpoX57pgLmIQV2jVKLPmBIpCGgA9aQK9g0WgKsl5GB+ 6A7MepZCaCMkklIYQ9MgdrRcvdUe0g1NuxiQ2t/xoYXhJr2sDlrDiF3LKVvp8t67 FdlXarEF99nuQI0BXewlyvIjVbSYkkIRdFWp2NAN8E1wkq6qOA3//AdHR7OrxJ4b OV70YdXu6QU3UJKt0R9w6gHM7l8qPGUzDKzJ2Vms8nqm6umo811bVK6N9x3m0IG9 XsxbQlboBZC57vYd46D88EVKz1I9JG5XdYfUx1KvjkoSdS1L002VUY/C1jGjFUsT YPhIOA800OoNzM8Hv6drh8PZFLBaHvtA6m8cMVvdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUASB4YgE+FyTvMuVQrEpyB+w3qrUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzZjNjY5MjQ0LWFkY2UtNDRkMy1hYzhlLTJiOWU4NzA2NGE3Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAGhvKIwDQYJKoZIhvcNAQELBQADggEBAEOMxBr/KG7PlgKihNoJxLu2f5Xf qJWN0CLhPcHRWy6iRbIVAU+0JWb9xZZd00oo+QCzqLZi8oKUXKw+If9IIhGOmVzs o9DIJoFikljrID5/W4ZKTFgTO7XWwSEzwMVgx+xdWtmV7VWzO9BlgojZ/JvTULN8 rV/JBkULxRW4A1vZ3i82y4Iy8gk8ob32e8yJTpxZvqDWIykFEf+E2X/Vw1UCekfD IFhxFzNhz+My4rQ/HLBUgcsnRO/cCkVoXZTUNhXGnhIOWBZ0/yTh5i4/xq6LugD5 rnRBuFzQ7QYoOGC67ryJMBAwKuAYXmwCPozlo2iEB6y7NxM1vTxoN2TB2BI= -----END CERTIFICATE-----Generated at Wed Oct 8 21:30:58 2025 by rpki-client