$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/15f2676c-81d0-4750-b61f-20bafb77d0a4.roa File: 15f2676c-81d0-4750-b61f-20bafb77d0a4.roa (raw, json) Hash identifier: lOFbbM7Cy3kMlCSBYhUDZdaBsvzYFzTJAUFwSXv8LZs= Subject key identifier: 42:8A:1A:A5:10:D4:B9:CB:7E:9E:80:DF:5C:4A:B0:C4:4E:70:EC:45 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1E31B3CAAF65D3F2E24D88E286523E1B7185AFF8 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/15f2676c-81d0-4750-b61f-20bafb77d0a4.roa Signing time: Wed 15 Oct 2025 21:22:58 +0000 ROA not before: Wed 15 Oct 2025 21:22:58 +0000 ROA not after: Wed 19 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 143.204.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:31:b3:ca:af:65:d3:f2:e2:4d:88:e2:86:52:3e:1b:71:85:af:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 15 21:22:58 2025 GMT Not After : Nov 19 23:59:59 2025 GMT Subject: serialNumber=9b8c64edb5c65512ce3f0356a900d48e5cb648e6a805634bba3b963f9a2072b5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:22:a0:2f:a2:eb:8b:1f:ae:11:ad:88:e4:b5: da:f9:22:64:08:f5:23:fb:85:e1:5a:15:9b:03:3e: 3b:22:3c:7e:d1:55:41:85:2f:a0:d5:2a:a4:ce:b8: d2:5e:a1:7f:ee:e8:33:93:b0:b4:fc:b8:31:e0:26: ea:93:2c:d8:90:28:6c:78:88:78:78:96:ff:07:ce: 08:9a:b5:af:73:d3:18:db:42:c6:89:8e:a2:20:e5: 88:52:c1:87:da:ea:45:55:12:8e:da:60:27:1a:e2: 2a:fd:94:59:fe:5a:cd:79:f5:81:aa:9a:c2:e4:24: e5:22:2e:61:3c:58:78:96:20:5e:fc:7a:4b:45:03: 2f:02:f6:19:02:8a:84:ba:7d:12:08:bf:4c:ca:69: 4b:8f:ff:86:d7:8c:2b:71:85:3e:48:61:57:5e:9f: 07:f9:e4:1f:e7:99:78:ad:05:39:27:50:e1:61:cb: e5:1e:80:9f:05:c5:f2:97:3b:53:42:02:d7:f7:8f: 81:16:bd:db:8d:38:78:16:48:9a:88:ad:cd:f4:69: cc:7b:60:3d:27:7e:7c:04:0b:c1:31:11:b4:fe:e2: b6:19:8a:66:b3:d5:ac:17:ea:d6:61:ec:45:e8:05: 7c:26:85:44:b2:3f:8d:44:d6:5f:ef:bb:ec:f2:0c: c4:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:8A:1A:A5:10:D4:B9:CB:7E:9E:80:DF:5C:4A:B0:C4:4E:70:EC:45 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/15f2676c-81d0-4750-b61f-20bafb77d0a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.204.68.0/22 Signature Algorithm: sha256WithRSAEncryption 1b:6b:34:55:f2:33:63:77:50:6c:67:d4:aa:2c:bf:50:c1:ca: f0:ab:e9:e1:7a:24:65:b2:86:60:9a:01:36:af:f3:00:c3:5c: a9:ff:4f:8e:aa:f5:4c:47:24:81:e3:4a:47:0b:e0:0d:94:33: 74:23:02:28:86:5c:b9:d9:85:6c:75:d6:09:c5:9b:06:c8:a1: 7b:51:ff:17:1a:c2:04:f9:ec:22:e0:b5:02:49:44:74:64:5f: 9f:3f:43:ad:f1:f2:36:22:cb:ee:d8:fe:95:e6:5b:d9:96:f8: 8a:f7:dd:c6:06:52:9f:f6:d7:73:5f:93:c0:74:85:62:3a:e5: 8f:26:a2:c7:24:0f:7a:e4:49:82:c8:4a:b1:8f:58:fb:1f:a8: a8:8d:e2:fd:8c:05:9b:e7:16:95:58:40:ad:44:f2:47:07:57: ec:15:49:62:33:f9:39:37:87:62:2e:bc:45:84:2c:62:dd:56: eb:10:46:4a:fe:31:b6:16:75:ac:0d:3d:59:48:45:f0:9d:2f: e1:e7:4f:0a:9c:19:f9:ac:60:46:cd:94:88:9b:04:68:50:32: 06:2d:d0:01:b1:c5:2f:d7:22:8f:a6:2e:14:28:64:19:2f:25: b1:61:8c:5a:34:81:c7:e0:0d:57:45:97:c5:47:31:43:36:d6: 7b:38:05:77 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHjGzyq9l0/LiTYjihlI+G3GFr/gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE1MjEyMjU4WhcNMjUxMTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A5YjhjNjRlZGI1YzY1NTEyY2UzZjAzNTZhOTAwZDQ4ZTVj YjY0OGU2YTgwNTYzNGJiYTNiOTYzZjlhMjA3MmI1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDcIqAvouuLH64RrYjktdr5ImQI9SP7heFaFZsDPjsiPH7R VUGFL6DVKqTOuNJeoX/u6DOTsLT8uDHgJuqTLNiQKGx4iHh4lv8Hzgiata9z0xjb QsaJjqIg5YhSwYfa6kVVEo7aYCca4ir9lFn+Ws159YGqmsLkJOUiLmE8WHiWIF78 ektFAy8C9hkCioS6fRIIv0zKaUuP/4bXjCtxhT5IYVdenwf55B/nmXitBTknUOFh y+UegJ8FxfKXO1NCAtf3j4EWvduNOHgWSJqIrc30acx7YD0nfnwEC8ExEbT+4rYZ imaz1awX6tZh7EXoBXwmhUSyP41E1l/vu+zyDMRZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUQooapRDUuct+noDfXEqwxE5w7EUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzE1ZjI2NzZjLTgxZDAtNDc1MC1iNjFmLTIwYmFmYjc3ZDBhNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAKPzEQwDQYJKoZIhvcNAQELBQADggEBABtrNFXyM2N3UGxn1Kosv1DByvCr 6eF6JGWyhmCaATav8wDDXKn/T46q9UxHJIHjSkcL4A2UM3QjAiiGXLnZhWx11gnF mwbIoXtR/xcawgT57CLgtQJJRHRkX58/Q63x8jYiy+7Y/pXmW9mW+Ir33cYGUp/2 13Nfk8B0hWI65Y8mosckD3rkSYLISrGPWPsfqKiN4v2MBZvnFpVYQK1E8kcHV+wV SWIz+Tk3h2IuvEWELGLdVusQRkr+MbYWdawNPVlIRfCdL+HnTwqcGfmsYEbNlIib BGhQMgYt0AGxxS/XIo+mLhQoZBkvJbFhjFo0gcfgDVdFl8VHMUM21ns4BXc= -----END CERTIFICATE-----Generated at Fri Oct 17 23:57:46 2025 by rpki-client