$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4b563592-874f-4e43-86f2-b24034c936f2.roa File: 4b563592-874f-4e43-86f2-b24034c936f2.roa (raw, json) Hash identifier: 28fNazCvUeBhuMdiFfnHiX1Ghv0P3wecPu3hYKOHEMA= Subject key identifier: 07:DE:C7:F7:A0:81:DB:39:31:F9:6D:DF:80:19:42:75:1B:36:D4:A3 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 50C7CECC1CCA2741BF19B0B522C418178EA1626F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4b563592-874f-4e43-86f2-b24034c936f2.roa Signing time: Wed 15 Oct 2025 23:06:10 +0000 ROA not before: Wed 15 Oct 2025 23:06:10 +0000 ROA not after: Wed 19 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 143.204.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:c7:ce:cc:1c:ca:27:41:bf:19:b0:b5:22:c4:18:17:8e:a1:62:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 15 23:06:10 2025 GMT Not After : Nov 19 23:59:59 2025 GMT Subject: serialNumber=edc41f0c4ad416226384621a5d34e483f6cbf8dcf976f6c6d0d04fb697d544f5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:89:e9:c3:24:77:6a:fb:c5:8e:3c:f2:b4:58: 8b:ba:f8:1d:2b:fa:d5:fe:a9:40:dc:82:de:34:84: 6c:44:a1:b3:83:20:07:ea:15:1c:b5:41:68:3d:ae: dd:80:80:92:df:5a:f4:5f:54:cb:2a:f5:eb:ad:f6: 19:86:ed:cc:32:33:b7:2f:62:0b:0e:f1:43:73:b6: aa:9e:34:db:6b:20:bc:f4:36:6e:96:03:ea:35:18: 9f:19:e0:a7:f5:7d:9c:d6:78:b6:91:ad:64:0f:a2: d1:2f:df:e1:ce:b5:72:23:98:17:f2:5a:a6:87:58: 8b:6d:5a:e0:93:dd:49:b8:74:45:63:81:c5:8b:fb: 8d:14:fb:9d:4a:1c:92:53:78:b0:17:1b:ee:73:99: 88:d5:bc:9d:05:c7:18:ec:6c:f0:53:1d:e3:58:14: a8:4b:47:4c:a6:fb:66:7e:47:79:74:74:97:9a:6c: 4b:4a:df:d3:74:4a:1e:ca:d0:87:2d:ab:2f:4f:ba: 0f:dd:f2:a5:3d:9c:52:33:b0:48:34:6e:1c:c2:f6: 2f:8a:35:c3:7d:95:42:56:34:a4:0c:55:02:b7:ee: bd:54:60:55:27:05:90:67:49:b3:b9:77:8b:04:92: 38:fe:88:56:9f:17:82:36:5a:70:48:ff:03:fc:4e: 4b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:DE:C7:F7:A0:81:DB:39:31:F9:6D:DF:80:19:42:75:1B:36:D4:A3 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4b563592-874f-4e43-86f2-b24034c936f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.204.116.0/22 Signature Algorithm: sha256WithRSAEncryption 34:b7:42:bc:c9:e5:25:76:7f:a6:f5:48:30:5b:32:8f:77:9d: ae:a4:26:bf:09:29:a0:e6:79:c2:a5:a6:fe:e4:22:c5:9f:0d: 27:05:f4:c8:f4:95:09:4e:c5:c1:8c:aa:53:6d:3c:49:be:ec: 8b:b3:e6:cd:d3:74:f4:77:ce:33:cf:71:6a:66:b2:54:72:32: 08:64:c7:fb:f2:77:7d:6d:f7:37:dc:99:f2:47:2d:01:25:62: 25:69:ce:cd:81:98:d5:83:33:4c:7d:8b:ab:bb:a2:81:9b:7d: eb:bf:b9:9f:ce:52:e0:e0:00:9e:cc:2b:7d:c1:22:f8:8b:cc: a2:c1:48:17:94:c0:e9:d3:7f:bb:6f:57:79:37:51:db:0d:be: 09:0d:6d:51:07:82:61:57:4f:d9:05:a4:7c:66:e8:61:30:be: d7:1d:90:4f:47:43:10:c8:13:65:a7:22:2a:f9:0f:c3:3e:ac: 3d:84:31:f5:19:a0:bd:f7:cd:b9:b6:f9:4c:16:0a:85:5c:9f: e2:38:e9:f0:31:97:8d:f2:a5:59:6c:ee:f4:61:64:2e:e4:c6: 2e:b3:c7:88:11:65:a2:3b:d1:e1:89:71:4e:e7:54:1d:ee:90: 39:ae:df:05:64:02:c9:d3:67:c0:09:d9:3a:f4:81:10:02:d3: 93:9a:24:87 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUMfOzBzKJ0G/GbC1IsQYF46hYm8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE1MjMwNjEwWhcNMjUxMTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BlZGM0MWYwYzRhZDQxNjIyNjM4NDYyMWE1ZDM0ZTQ4M2Y2 Y2JmOGRjZjk3NmY2YzZkMGQwNGZiNjk3ZDU0NGY1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfienDJHdq+8WOPPK0WIu6+B0r+tX+qUDcgt40hGxEobOD IAfqFRy1QWg9rt2AgJLfWvRfVMsq9eut9hmG7cwyM7cvYgsO8UNztqqeNNtrILz0 Nm6WA+o1GJ8Z4Kf1fZzWeLaRrWQPotEv3+HOtXIjmBfyWqaHWIttWuCT3Um4dEVj gcWL+40U+51KHJJTeLAXG+5zmYjVvJ0FxxjsbPBTHeNYFKhLR0ym+2Z+R3l0dJea bEtK39N0Sh7K0Ictqy9Pug/d8qU9nFIzsEg0bhzC9i+KNcN9lUJWNKQMVQK37r1U YFUnBZBnSbO5d4sEkjj+iFafF4I2WnBI/wP8TktrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUB97H96CB2zkx+W3fgBlCdRs21KMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzRiNTYzNTkyLTg3NGYtNGU0My04NmYyLWIyNDAzNGM5MzZmMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAKPzHQwDQYJKoZIhvcNAQELBQADggEBADS3QrzJ5SV2f6b1SDBbMo93na6k Jr8JKaDmecKlpv7kIsWfDScF9Mj0lQlOxcGMqlNtPEm+7Iuz5s3TdPR3zjPPcWpm slRyMghkx/vyd31t9zfcmfJHLQElYiVpzs2BmNWDM0x9i6u7ooGbfeu/uZ/OUuDg AJ7MK33BIviLzKLBSBeUwOnTf7tvV3k3UdsNvgkNbVEHgmFXT9kFpHxm6GEwvtcd kE9HQxDIE2WnIir5D8M+rD2EMfUZoL33zbm2+UwWCoVcn+I46fAxl43ypVls7vRh ZC7kxi6zx4gRZaI70eGJcU7nVB3ukDmu3wVkAsnTZ8AJ2Tr0gRAC05OaJIc= -----END CERTIFICATE-----Generated at Sat Oct 18 00:13:31 2025 by rpki-client