$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/21aaafae-236c-4523-85d0-8899a51a6906.roa File: 21aaafae-236c-4523-85d0-8899a51a6906.roa (raw, json) Hash identifier: LGZuETqS2lnrlsJx2G61ISAT1ligYyXL8dj4jRPPDPQ= Subject key identifier: 5B:66:B7:26:7E:6C:AD:8C:1D:D4:58:7F:8A:DB:BB:B9:C3:09:FC:44 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 387AE1D340860C2A4426623B2582DFA36F3FD73D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/21aaafae-236c-4523-85d0-8899a51a6906.roa Signing time: Wed 15 Oct 2025 20:21:20 +0000 ROA not before: Wed 15 Oct 2025 20:21:20 +0000 ROA not after: Wed 19 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 143.204.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:7a:e1:d3:40:86:0c:2a:44:26:62:3b:25:82:df:a3:6f:3f:d7:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 15 20:21:20 2025 GMT Not After : Nov 19 23:59:59 2025 GMT Subject: serialNumber=109011a8c6a4ea71cb841bb2cc3a3e036c51c461240fd1a81681ab5d20afc23d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:cc:bc:fc:93:39:be:12:51:42:42:fc:e8:3c: 9d:fe:48:24:56:05:40:ac:16:f1:51:a4:ad:f2:d6: b0:f7:cd:f7:22:a3:7b:bf:89:04:ac:53:e8:54:d9: 7b:b8:16:ac:8f:66:36:64:1b:63:96:a5:ae:88:07: de:08:b1:58:1d:e9:f4:d3:f0:b9:1b:99:49:52:f6: 29:e7:30:c5:7f:ed:d6:51:80:35:45:0a:10:d4:6c: 6b:7f:a9:c0:e4:55:78:22:ea:14:ec:99:df:ec:ab: f3:94:02:fd:91:23:b8:69:4a:28:6e:52:4e:12:36: a5:06:c5:f8:f6:9c:50:84:18:a8:ca:41:dd:65:97: 54:95:05:59:1c:69:b8:30:f4:23:ed:f0:68:db:be: ac:60:bf:e1:ae:6e:25:26:43:fb:fa:10:a3:62:62: d2:49:c7:a4:64:c1:10:76:c7:8f:24:54:f0:b2:aa: 23:9f:40:b3:ff:ff:3c:09:c1:1a:37:5e:eb:89:87: 60:a5:e6:60:5f:4e:18:7c:3b:de:5c:74:4a:62:19: 51:7e:3b:b4:35:4c:95:3f:db:90:12:38:ab:2d:68: 3c:18:2f:cd:0c:ab:0f:a9:f8:b6:d4:5a:ca:34:47: 4d:e1:1c:05:6f:b5:b7:6b:28:d6:a9:35:cb:83:63: 4a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:66:B7:26:7E:6C:AD:8C:1D:D4:58:7F:8A:DB:BB:B9:C3:09:FC:44 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/21aaafae-236c-4523-85d0-8899a51a6906.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.204.210.0/24 Signature Algorithm: sha256WithRSAEncryption 67:4a:d7:36:94:5f:e2:bb:79:a4:38:90:80:12:18:58:95:7d: f4:c4:61:c2:1b:06:a3:4c:d5:78:02:3f:fe:14:c3:c8:63:b3: 6e:68:0a:7c:36:ef:3c:3e:98:d5:d5:9c:a0:bf:3e:5b:5a:78: 20:d5:15:fa:57:78:fa:2b:0c:81:26:9f:cf:ce:20:84:bd:87: c7:64:7e:74:d9:c0:a7:4c:73:f2:2c:18:4d:0c:a8:e8:d8:51: c9:81:45:63:a1:5f:fa:33:9d:a2:1b:1c:56:92:8c:1e:b7:b6: cd:31:09:e7:47:50:fd:17:25:60:af:51:d0:e8:24:7b:eb:da: c5:a5:0a:7f:d7:eb:ba:5d:86:af:9a:e0:6a:58:80:a6:6f:ee: d5:4a:df:27:2d:08:1b:0e:a9:52:8d:26:0a:01:58:69:d8:d5: 04:10:17:b3:71:34:59:d5:c8:1c:a5:11:d3:31:e9:2d:b1:32: 74:2c:74:b5:e0:8c:a3:e1:a1:66:ef:f5:15:80:f3:1f:7f:62: 92:be:e5:e4:30:58:cc:1f:3d:0e:2c:ff:05:d3:0e:30:77:13: 16:a4:aa:53:06:d2:79:9a:77:ab:cb:64:7a:bd:01:fa:1c:6b: 00:66:91:fd:6a:6c:70:51:2f:07:0f:a5:6c:dc:b2:e6:2b:c1: b3:a8:fd:c1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOHrh00CGDCpEJmI7JYLfo28/1z0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE1MjAyMTIwWhcNMjUxMTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0AxMDkwMTFhOGM2YTRlYTcxY2I4NDFiYjJjYzNhM2UwMzZj NTFjNDYxMjQwZmQxYTgxNjgxYWI1ZDIwYWZjMjNkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBzLz8kzm+ElFCQvzoPJ3+SCRWBUCsFvFRpK3y1rD3zfci o3u/iQSsU+hU2Xu4FqyPZjZkG2OWpa6IB94IsVgd6fTT8LkbmUlS9innMMV/7dZR gDVFChDUbGt/qcDkVXgi6hTsmd/sq/OUAv2RI7hpSihuUk4SNqUGxfj2nFCEGKjK Qd1ll1SVBVkcabgw9CPt8Gjbvqxgv+GubiUmQ/v6EKNiYtJJx6RkwRB2x48kVPCy qiOfQLP//zwJwRo3XuuJh2Cl5mBfThh8O95cdEpiGVF+O7Q1TJU/25ASOKstaDwY L80Mqw+p+LbUWso0R03hHAVvtbdrKNapNcuDY0pVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUW2a3Jn5srYwd1Fh/itu7ucMJ/EQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzIxYWFhZmFlLTIzNmMtNDUyMy04NWQwLTg4OTlhNTFhNjkwNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACPzNIwDQYJKoZIhvcNAQELBQADggEBAGdK1zaUX+K7eaQ4kIASGFiVffTE YcIbBqNM1XgCP/4Uw8hjs25oCnw27zw+mNXVnKC/PltaeCDVFfpXePorDIEmn8/O IIS9h8dkfnTZwKdMc/IsGE0MqOjYUcmBRWOhX/oznaIbHFaSjB63ts0xCedHUP0X JWCvUdDoJHvr2sWlCn/X67pdhq+a4GpYgKZv7tVK3yctCBsOqVKNJgoBWGnY1QQQ F7NxNFnVyBylEdMx6S2xMnQsdLXgjKPhoWbv9RWA8x9/YpK+5eQwWMwfPQ4s/wXT DjB3ExakqlMG0nmad6vLZHq9AfocawBmkf1qbHBRLwcPpWzcsuYrwbOo/cE= -----END CERTIFICATE-----Generated at Sat Oct 18 02:13:06 2025 by rpki-client