$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0f443da0-3511-4827-bea5-1b58d3029dc6.roa File: 0f443da0-3511-4827-bea5-1b58d3029dc6.roa (raw, json) Hash identifier: RT3sV9QHjdLw3fIXYsoWkvKhNHunkio09bnBt7zqz24= Subject key identifier: 3E:B7:98:99:6B:AD:45:ED:A0:42:EB:A9:60:24:52:D8:C6:98:B7:B8 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4A8872CA103081C9CC4BF71BE0C483B59400B3F9 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0f443da0-3511-4827-bea5-1b58d3029dc6.roa Signing time: Wed 15 Oct 2025 20:56:54 +0000 ROA not before: Wed 15 Oct 2025 20:56:54 +0000 ROA not after: Wed 19 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 143.204.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:88:72:ca:10:30:81:c9:cc:4b:f7:1b:e0:c4:83:b5:94:00:b3:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 15 20:56:54 2025 GMT Not After : Nov 19 23:59:59 2025 GMT Subject: serialNumber=d6c9f0608d70e44e90b4c5bf1b621b0e6af6525d80378522ef6af8f84d9bd5dc, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:97:50:da:a3:b6:3b:08:2b:65:99:e1:7a:26: 46:f3:f1:96:01:5c:da:6c:a6:33:6c:31:8b:fc:9f: a8:99:71:15:7f:bf:58:59:39:9e:67:f2:ba:88:c6: eb:67:e7:8f:42:89:86:55:ee:80:c5:8b:84:e7:99: cd:a1:7f:89:7f:17:a4:b1:b2:f6:71:8a:1c:96:fc: 98:62:5f:98:3e:c2:5a:2d:88:62:69:d4:c0:ef:88: 1f:fc:be:c7:56:af:34:e9:6f:42:f1:bc:46:32:ab: 2c:f4:d5:25:00:3c:07:40:5a:6f:06:9f:ee:ad:3b: a0:b9:a9:77:2e:5c:71:6a:e1:23:c8:87:a1:17:81: 42:17:40:28:15:c9:8e:88:02:47:8b:96:08:fd:27: bc:93:a8:11:62:06:2d:61:43:17:70:fe:04:bd:ab: aa:fd:fd:9e:31:01:91:bb:dd:5f:2e:7f:f0:97:04: 25:de:85:c7:49:ed:dd:f4:1a:c3:4f:20:9f:01:a9: 3c:91:63:62:9d:99:22:24:62:1b:41:2e:02:e4:7d: e0:75:32:64:c7:3e:e1:e8:3c:4b:23:a6:07:b0:a6: 3f:85:42:d0:ce:08:b6:d0:76:a4:4f:f5:87:fb:0a: be:cd:0c:6b:4c:67:a6:1c:0b:9f:56:c2:ba:97:84: e5:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:B7:98:99:6B:AD:45:ED:A0:42:EB:A9:60:24:52:D8:C6:98:B7:B8 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0f443da0-3511-4827-bea5-1b58d3029dc6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.204.31.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:a5:0f:46:52:f3:c7:fb:5c:c8:bc:51:3c:72:94:88:49:47: 62:94:8a:63:54:8b:10:82:50:e9:9a:5a:34:82:86:2e:9a:e3: b7:03:dc:c6:20:ef:24:cb:b5:a0:08:f9:54:00:f8:74:6a:b7: 7a:e3:b9:22:54:45:9e:f6:7c:f9:2b:1b:4d:a5:cb:7f:92:ed: 03:0d:6b:4d:a7:24:df:13:59:e0:de:f1:12:89:68:7b:ad:04: 25:9e:31:6b:a4:0f:5d:f0:50:d8:8c:5e:cc:30:54:58:91:d7: 9a:58:36:d0:0b:6b:ef:cd:f1:38:03:3c:7a:44:23:29:2a:ea: 0f:d6:f3:58:13:b2:99:9c:fc:4b:e5:e1:38:df:7c:91:e1:e3: 25:b7:88:c6:e1:d6:4d:39:5d:bb:15:2c:ad:f3:cd:3b:d3:89: 7c:d3:b4:b2:e4:c3:15:f4:e7:b1:35:59:ec:e1:7c:84:8d:4f: 2e:3c:84:e3:19:9e:0b:17:a4:31:02:01:9b:0e:86:69:f1:c9: f2:ea:7f:15:b2:f8:da:53:12:a9:55:08:59:2b:a7:7f:1a:a0: 17:8b:ef:ce:dc:54:df:f3:d8:fa:3d:b3:3e:51:cc:a5:28:c3: 65:aa:f2:bb:7a:f5:d2:c7:0c:84:10:8d:e9:24:00:81:25:be: 06:3f:d0:7a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSohyyhAwgcnMS/cb4MSDtZQAs/kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE1MjA1NjU0WhcNMjUxMTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNmM5ZjA2MDhkNzBlNDRlOTBiNGM1YmYxYjYyMWIwZTZh ZjY1MjVkODAzNzg1MjJlZjZhZjhmODRkOWJkNWRjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1l1Dao7Y7CCtlmeF6Jkbz8ZYBXNpspjNsMYv8n6iZcRV/ v1hZOZ5n8rqIxutn549CiYZV7oDFi4Tnmc2hf4l/F6SxsvZxihyW/JhiX5g+wlot iGJp1MDviB/8vsdWrzTpb0LxvEYyqyz01SUAPAdAWm8Gn+6tO6C5qXcuXHFq4SPI h6EXgUIXQCgVyY6IAkeLlgj9J7yTqBFiBi1hQxdw/gS9q6r9/Z4xAZG73V8uf/CX BCXehcdJ7d30GsNPIJ8BqTyRY2KdmSIkYhtBLgLkfeB1MmTHPuHoPEsjpgewpj+F QtDOCLbQdqRP9Yf7Cr7NDGtMZ6YcC59WwrqXhOXFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUPreYmWutRe2gQuupYCRS2MaYt7gwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzBmNDQzZGEwLTM1MTEtNDgyNy1iZWE1LTFiNThkMzAyOWRjNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACPzB8wDQYJKoZIhvcNAQELBQADggEBAA6lD0ZS88f7XMi8UTxylIhJR2KU imNUixCCUOmaWjSChi6a47cD3MYg7yTLtaAI+VQA+HRqt3rjuSJURZ72fPkrG02l y3+S7QMNa02nJN8TWeDe8RKJaHutBCWeMWukD13wUNiMXswwVFiR15pYNtALa+/N 8TgDPHpEIykq6g/W81gTspmc/Evl4TjffJHh4yW3iMbh1k05XbsVLK3zzTvTiXzT tLLkwxX057E1WezhfISNTy48hOMZngsXpDECAZsOhmnxyfLqfxWy+NpTEqlVCFkr p38aoBeL787cVN/z2Po9sz5RzKUow2Wq8rt69dLHDIQQjekkAIElvgY/0Ho= -----END CERTIFICATE-----Generated at Fri Oct 17 22:18:48 2025 by rpki-client