$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a57923e9-8b01-4c15-b160-436a8460b155.roa File: a57923e9-8b01-4c15-b160-436a8460b155.roa (raw, json) Hash identifier: ILeU+J1DZHfkjaB8LDjg+N8pWTKJNhq0Pqs0q48oqiE= Subject key identifier: 4F:99:A4:42:22:08:AE:5A:8F:78:39:A0:19:06:F5:01:76:A8:97:4E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6BEB70C95A81EADECBB048B5E9885B4CEC830C0F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a57923e9-8b01-4c15-b160-436a8460b155.roa Signing time: Tue 23 Sep 2025 17:02:43 +0000 ROA not before: Tue 23 Sep 2025 17:02:43 +0000 ROA not after: Tue 28 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 161.188.174.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:eb:70:c9:5a:81:ea:de:cb:b0:48:b5:e9:88:5b:4c:ec:83:0c:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 23 17:02:43 2025 GMT Not After : Oct 28 23:59:59 2025 GMT Subject: serialNumber=1951db158b7f7c49bb3cb50773f538fcb188d1472a7c43639c505da923880238, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f4:e2:59:2c:e4:12:38:32:63:96:ed:bc:5f: 99:9d:df:80:8a:c9:ac:73:f9:93:db:b5:be:a7:31: 87:62:78:1f:f9:7c:38:65:8f:77:c0:e6:b4:01:22: c9:0e:60:db:f7:28:2b:06:3e:6f:8e:58:ce:41:eb: 82:2b:fa:ca:ed:91:f8:e4:68:06:d3:39:c2:66:db: f6:05:c1:c1:78:5a:a7:70:35:22:6d:cb:6d:af:10: fb:14:0f:61:b3:4f:98:97:66:10:90:bb:f9:27:06: bd:2e:2e:80:62:ad:e3:3b:4a:84:12:03:0b:cc:42: d0:ab:0e:ea:ca:62:cc:fe:87:fd:5e:f5:4d:8f:c7: 16:5d:0b:19:23:ab:4b:76:3b:8d:f0:73:a0:64:49: 5d:c1:33:ae:f6:c9:26:b6:31:43:78:27:72:3a:99: c2:71:61:1a:22:66:ca:67:97:7d:40:4c:cf:b4:e0: df:cf:50:a0:8c:1d:72:bf:f9:b8:ac:97:16:a2:16: 0e:33:ee:0f:32:52:a1:9d:8a:0a:80:cb:d7:73:24: 04:e7:59:22:04:55:39:68:74:fe:c4:a3:da:ac:12: c0:2b:38:24:c4:27:1d:5f:11:84:a0:98:27:f3:1f: cd:aa:f5:fa:7f:bc:8a:b7:84:f6:8a:7c:ef:c4:96: 8f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:99:A4:42:22:08:AE:5A:8F:78:39:A0:19:06:F5:01:76:A8:97:4E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a57923e9-8b01-4c15-b160-436a8460b155.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.188.174.0/23 Signature Algorithm: sha256WithRSAEncryption 09:1a:cd:94:00:60:52:c3:31:c0:e8:db:42:fc:42:01:68:5f: 3a:54:7f:90:d7:47:4e:cf:37:57:07:09:20:c5:aa:7a:5c:cc: f6:6f:95:08:45:d2:20:56:ae:4b:dc:cd:4a:42:df:c6:d9:73: 82:f7:38:9c:5c:ae:0c:c4:e3:45:75:71:5e:36:48:19:d0:5d: 5f:11:5c:52:c2:af:22:62:d0:a2:ff:30:22:83:a1:64:c8:a6: fb:d6:16:03:df:f9:eb:fa:82:87:4d:72:f7:9d:05:4b:41:7c: 4c:1c:05:8d:6c:4c:67:69:9b:31:a0:db:10:e4:fc:e2:87:51: 94:4e:a6:a3:d5:f4:cb:5b:d7:38:b7:f0:2a:c1:0c:85:49:77: 0a:1d:34:76:a0:bb:13:38:1c:ae:e0:37:11:10:41:be:3d:59: 83:ef:32:37:23:aa:73:1d:c3:54:8c:35:c6:7b:3b:65:5e:f9: 24:95:e3:9a:40:cb:61:02:a3:f9:38:09:04:45:92:f5:4a:cc: 04:64:c1:f8:23:ca:fd:ed:18:d5:ff:02:e1:ee:3c:a0:78:0b: b2:91:35:4b:cc:86:24:63:5f:ac:12:d4:98:26:b9:ed:35:fc: 64:22:9a:92:1c:0e:2c:f4:c9:92:d5:4e:29:f5:d8:62:b7:e7: 76:c1:82:c3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUa+twyVqB6t7LsEi16YhbTOyDDA8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIzMTcwMjQzWhcNMjUxMDI4MjM1OTU5 WjB6MUkwRwYDVQQFE0AxOTUxZGIxNThiN2Y3YzQ5YmIzY2I1MDc3M2Y1MzhmY2Ix ODhkMTQ3MmE3YzQzNjM5YzUwNWRhOTIzODgwMjM4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCv9OJZLOQSODJjlu28X5md34CKyaxz+ZPbtb6nMYdieB/5 fDhlj3fA5rQBIskOYNv3KCsGPm+OWM5B64Ir+srtkfjkaAbTOcJm2/YFwcF4Wqdw NSJty22vEPsUD2GzT5iXZhCQu/knBr0uLoBireM7SoQSAwvMQtCrDurKYsz+h/1e 9U2PxxZdCxkjq0t2O43wc6BkSV3BM672ySa2MUN4J3I6mcJxYRoiZspnl31ATM+0 4N/PUKCMHXK/+bislxaiFg4z7g8yUqGdigqAy9dzJATnWSIEVTlodP7Eo9qsEsAr OCTEJx1fEYSgmCfzH82q9fp/vIq3hPaKfO/Elo+/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUT5mkQiIIrlqPeDmgGQb1AXaol04wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2E1NzkyM2U5LThiMDEtNGMxNS1iMTYwLTQzNmE4NDYwYjE1NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAGhvK4wDQYJKoZIhvcNAQELBQADggEBAAkazZQAYFLDMcDo20L8QgFoXzpU f5DXR07PN1cHCSDFqnpczPZvlQhF0iBWrkvczUpC38bZc4L3OJxcrgzE40V1cV42 SBnQXV8RXFLCryJi0KL/MCKDoWTIpvvWFgPf+ev6godNcvedBUtBfEwcBY1sTGdp mzGg2xDk/OKHUZROpqPV9Mtb1zi38CrBDIVJdwodNHaguxM4HK7gNxEQQb49WYPv MjcjqnMdw1SMNcZ7O2Ve+SSV45pAy2ECo/k4CQRFkvVKzARkwfgjyv3tGNX/AuHu PKB4C7KRNUvMhiRjX6wS1Jgmue01/GQimpIcDiz0yZLVTin12GK353bBgsM= -----END CERTIFICATE-----Generated at Wed Oct 8 21:30:52 2025 by rpki-client