$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/27247bd9-2a37-4fe7-885d-ca0c9118c91c.roa File: 27247bd9-2a37-4fe7-885d-ca0c9118c91c.roa (raw, json) Hash identifier: kcwcupPK4NpVh3KINXuukpRP+NQYf+4W75/medyTfso= Subject key identifier: 30:AC:01:0B:4C:16:EF:D3:0E:80:EE:8F:F2:B3:20:31:4F:84:02:39 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0C996142AEF586C8306FA01F17879592D3313D11 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/27247bd9-2a37-4fe7-885d-ca0c9118c91c.roa Signing time: Fri 10 Oct 2025 01:04:24 +0000 ROA not before: Fri 10 Oct 2025 01:04:24 +0000 ROA not after: Fri 14 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 161.188.176.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:99:61:42:ae:f5:86:c8:30:6f:a0:1f:17:87:95:92:d3:31:3d:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 10 01:04:24 2025 GMT Not After : Nov 14 23:59:59 2025 GMT Subject: serialNumber=407d148c741c30b082feecdd252e4e9e6967b958e869b8270871b83d0c78cc4f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:5d:fb:db:d3:bb:e0:85:79:26:45:0d:76:14: 05:cc:b4:6c:47:6a:d8:5d:f6:c2:ac:7d:27:ef:1b: c9:ca:b7:7c:ed:85:e8:ca:6a:eb:18:79:12:19:8c: 66:d3:ca:06:a5:53:86:30:ce:90:d5:34:14:57:a2: 8d:07:31:f3:ae:e8:0f:01:f1:55:d6:7d:d9:cb:d5: 92:3e:59:61:59:02:df:5a:d5:31:a5:30:06:14:8a: 54:ae:d2:b4:57:aa:36:bd:28:7a:05:3a:cb:58:aa: 3e:4b:39:68:b9:f7:36:88:5a:bf:89:20:a5:a2:33: a6:06:72:4d:e6:7d:2e:e5:10:19:1d:07:a8:d3:0f: 49:49:35:f3:68:08:47:02:7f:68:0c:a8:7f:2f:9d: eb:22:4c:03:27:3b:48:14:44:84:0e:85:90:9c:b8: 17:41:bd:74:dd:d6:eb:c8:f0:78:59:6a:65:36:40: 04:a8:74:28:01:fb:06:2e:8d:04:a4:1b:22:0f:92: c1:3f:8d:3a:b2:f7:08:bc:67:dc:f7:a1:38:40:c1: 65:20:7d:41:72:c8:c8:06:19:4d:1f:df:7f:50:32: 7d:58:37:c2:99:16:b5:2a:fc:f6:95:e9:ef:36:ce: e1:8b:66:3c:08:0b:a5:f4:2e:65:f3:7a:09:ef:cc: 43:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:AC:01:0B:4C:16:EF:D3:0E:80:EE:8F:F2:B3:20:31:4F:84:02:39 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/27247bd9-2a37-4fe7-885d-ca0c9118c91c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.188.176.0/23 Signature Algorithm: sha256WithRSAEncryption 8d:49:63:ab:fe:d0:09:7a:24:2c:59:26:d3:7f:93:c9:75:c1: ec:fc:b0:6c:2c:fa:b5:da:89:d1:2f:cb:0a:d2:e4:f8:51:bf: 8a:0a:12:58:be:4c:4e:05:03:e8:3f:32:0d:3d:c2:a1:cf:d8: e8:88:d1:e3:45:1d:48:d6:ae:c7:c3:f2:39:d0:80:8d:4e:38: 66:eb:ec:fd:50:65:bd:fc:b6:f0:cb:0f:98:a3:78:b2:c1:33: 75:7b:1d:70:ee:bf:2f:21:b0:48:d7:45:3d:06:20:db:12:18: 6d:84:3c:81:76:a3:c4:fc:c5:e3:2b:09:e6:aa:15:51:56:55: 51:11:48:ce:2b:06:79:a3:de:78:7f:fc:49:dc:85:ea:b0:63: 06:ad:2f:db:d0:e1:fb:34:9b:53:df:a3:11:6c:ad:d4:93:c0: e2:b2:e3:c6:d1:de:3c:4d:80:12:9b:ea:f4:48:d5:6d:ff:b9: 12:fc:d9:e3:2e:e9:76:ee:b6:44:3d:3e:77:22:13:4e:d9:b5: bb:28:9e:a6:1a:8c:ce:db:5f:2d:b1:71:1c:c8:ae:86:d1:41: 73:b4:2c:7e:59:58:06:17:f0:f8:61:04:d6:44:b8:61:c0:04: c1:e0:d9:b1:44:6d:96:7a:1a:21:de:ea:84:64:7e:07:9f:f3: c7:28:06:b6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDJlhQq71hsgwb6AfF4eVktMxPREwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDEwMDEwNDI0WhcNMjUxMTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MDdkMTQ4Yzc0MWMzMGIwODJmZWVjZGQyNTJlNGU5ZTY5 NjdiOTU4ZTg2OWI4MjcwODcxYjgzZDBjNzhjYzRmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDoXfvb07vghXkmRQ12FAXMtGxHathd9sKsfSfvG8nKt3zt hejKausYeRIZjGbTygalU4YwzpDVNBRXoo0HMfOu6A8B8VXWfdnL1ZI+WWFZAt9a 1TGlMAYUilSu0rRXqja9KHoFOstYqj5LOWi59zaIWr+JIKWiM6YGck3mfS7lEBkd B6jTD0lJNfNoCEcCf2gMqH8vnesiTAMnO0gURIQOhZCcuBdBvXTd1uvI8HhZamU2 QASodCgB+wYujQSkGyIPksE/jTqy9wi8Z9z3oThAwWUgfUFyyMgGGU0f339QMn1Y N8KZFrUq/PaV6e82zuGLZjwIC6X0LmXzegnvzEPdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUMKwBC0wW79MOgO6P8rMgMU+EAjkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzI3MjQ3YmQ5LTJhMzctNGZlNy04ODVkLWNhMGM5MTE4YzkxYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAGhvLAwDQYJKoZIhvcNAQELBQADggEBAI1JY6v+0Al6JCxZJtN/k8l1wez8 sGws+rXaidEvywrS5PhRv4oKEli+TE4FA+g/Mg09wqHP2OiI0eNFHUjWrsfD8jnQ gI1OOGbr7P1QZb38tvDLD5ijeLLBM3V7HXDuvy8hsEjXRT0GINsSGG2EPIF2o8T8 xeMrCeaqFVFWVVERSM4rBnmj3nh//EncheqwYwatL9vQ4fs0m1PfoxFsrdSTwOKy 48bR3jxNgBKb6vRI1W3/uRL82eMu6XbutkQ9PnciE07ZtbsonqYajM7bXy2xcRzI robRQXO0LH5ZWAYX8PhhBNZEuGHABMHg2bFEbZZ6GiHe6oRkfgef88coBrY= -----END CERTIFICATE-----Generated at Sat Oct 18 00:18:23 2025 by rpki-client