$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4e69865b-6b64-44a7-959f-d03b5fe9be6a.roa File: 4e69865b-6b64-44a7-959f-d03b5fe9be6a.roa (raw, json) Hash identifier: h0nxgwgrREz63CpYsN4cQZGkRY0oY3XmfvyodqFXulI= Subject key identifier: EE:B5:9F:06:2B:F0:29:2F:93:A4:9E:15:2F:A2:E3:14:F1:DA:DF:B0 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3D4C35C4BDDEA780E1B05FF72682FA52B7EE103A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4e69865b-6b64-44a7-959f-d03b5fe9be6a.roa Signing time: Wed 15 Oct 2025 20:56:44 +0000 ROA not before: Wed 15 Oct 2025 20:56:44 +0000 ROA not after: Wed 19 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 143.204.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:4c:35:c4:bd:de:a7:80:e1:b0:5f:f7:26:82:fa:52:b7:ee:10:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 15 20:56:44 2025 GMT Not After : Nov 19 23:59:59 2025 GMT Subject: serialNumber=e2d70b6297a4355bb740e7300d7346273a617e6ec1b6cc4a266a5e3bab8e79f5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:5b:ab:b3:1a:3e:40:2a:f9:d7:e0:d6:95:84: 5d:f2:71:9c:1e:06:e0:3a:83:d6:ab:f6:26:05:2e: e2:32:2f:69:f3:8e:46:53:a7:2b:c1:eb:d1:e1:2f: 3d:20:27:42:8a:5d:34:61:4e:4f:45:f8:0a:e2:57: 8d:f5:bd:5a:3a:95:80:69:28:e7:4e:8b:52:d8:3a: 0b:32:c2:ad:61:24:c0:8c:31:21:8c:4f:83:73:a1: 7f:fd:91:e6:0d:ae:e5:5e:8a:48:d1:2f:e7:11:17: f4:71:8d:cd:ce:d7:b1:2e:ef:c1:79:cc:f3:bb:f9: ea:c3:0e:b9:5d:8b:81:1f:b4:07:32:8f:ca:16:4b: 0d:54:00:e5:fa:6e:79:ae:4e:72:43:8d:f8:39:5c: 7d:a2:24:cf:f6:23:83:76:21:5e:51:24:dc:7f:b4: 4d:57:3c:a7:f4:e5:5b:d4:b0:31:3c:a7:8b:8b:8e: cc:4f:6e:eb:39:c8:82:e7:2e:eb:ba:c5:60:64:fc: 8d:ee:60:de:5c:52:2c:59:f0:89:99:39:1d:87:8d: fc:68:f2:8e:5a:c6:9a:cb:df:ba:17:f2:d1:7a:9d: fe:6e:8b:f0:2c:c3:b2:02:e8:47:1d:f2:1d:3d:51: 0e:64:96:aa:b1:97:81:15:9f:d6:10:33:82:48:7f: a9:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:B5:9F:06:2B:F0:29:2F:93:A4:9E:15:2F:A2:E3:14:F1:DA:DF:B0 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4e69865b-6b64-44a7-959f-d03b5fe9be6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.204.66.0/24 Signature Algorithm: sha256WithRSAEncryption 74:05:9c:27:3e:14:92:0a:2f:8b:16:c8:eb:5f:d1:17:6a:73: 46:1c:23:64:d2:34:fe:3f:a8:eb:6a:e0:57:ac:36:14:3b:c6: fa:cd:80:82:ad:07:f7:08:fe:bf:fa:00:66:d9:02:b1:bc:46: ac:34:60:17:43:c9:cf:fc:d4:d5:b8:ac:a4:68:b9:03:60:62: eb:8f:c6:aa:08:bf:b6:29:c0:60:56:c8:ba:96:43:a0:88:8c: 62:f1:83:1c:dc:32:57:6e:70:b1:05:1a:a4:a4:ed:64:ca:ac: c0:8e:c8:03:a6:88:c6:ff:24:2c:ee:9f:74:25:7d:c8:5d:b0: 07:15:3b:f6:35:48:3c:29:64:6f:1a:7d:87:d7:cb:68:92:bb: 87:1f:03:03:45:a5:b3:b5:fc:c5:f5:c0:b8:4f:55:ed:f5:72: 78:d7:4c:f8:65:c0:0b:a0:d8:34:ac:af:62:91:97:97:3f:38: 2e:eb:8d:42:09:cd:e4:d4:2f:00:4f:e3:79:ff:e2:15:92:f8: 33:71:8e:b0:b5:23:89:ce:fb:64:86:c4:a4:8d:c1:09:c4:f9: 80:a9:8e:da:57:a1:7b:7d:33:7e:ef:2d:9d:a4:c7:9f:61:e3: 7d:95:5d:21:b6:d2:76:bc:b5:76:be:06:be:aa:52:c2:32:2b: 9d:c5:92:cb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPUw1xL3ep4DhsF/3JoL6UrfuEDowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE1MjA1NjQ0WhcNMjUxMTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BlMmQ3MGI2Mjk3YTQzNTViYjc0MGU3MzAwZDczNDYyNzNh NjE3ZTZlYzFiNmNjNGEyNjZhNWUzYmFiOGU3OWY1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDWW6uzGj5AKvnX4NaVhF3ycZweBuA6g9ar9iYFLuIyL2nz jkZTpyvB69HhLz0gJ0KKXTRhTk9F+AriV431vVo6lYBpKOdOi1LYOgsywq1hJMCM MSGMT4NzoX/9keYNruVeikjRL+cRF/Rxjc3O17Eu78F5zPO7+erDDrldi4EftAcy j8oWSw1UAOX6bnmuTnJDjfg5XH2iJM/2I4N2IV5RJNx/tE1XPKf05VvUsDE8p4uL jsxPbus5yILnLuu6xWBk/I3uYN5cUixZ8ImZOR2Hjfxo8o5axprL37oX8tF6nf5u i/Asw7IC6Ecd8h09UQ5klqqxl4EVn9YQM4JIf6lvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU7rWfBivwKS+TpJ4VL6LjFPHa37AwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzRlNjk4NjViLTZiNjQtNDRhNy05NTlmLWQwM2I1ZmU5YmU2YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACPzEIwDQYJKoZIhvcNAQELBQADggEBAHQFnCc+FJIKL4sWyOtf0Rdqc0Yc I2TSNP4/qOtq4FesNhQ7xvrNgIKtB/cI/r/6AGbZArG8Rqw0YBdDyc/81NW4rKRo uQNgYuuPxqoIv7YpwGBWyLqWQ6CIjGLxgxzcMlducLEFGqSk7WTKrMCOyAOmiMb/ JCzun3QlfchdsAcVO/Y1SDwpZG8afYfXy2iSu4cfAwNFpbO1/MX1wLhPVe31cnjX TPhlwAug2DSsr2KRl5c/OC7rjUIJzeTULwBP43n/4hWS+DNxjrC1I4nO+2SGxKSN wQnE+YCpjtpXoXt9M37vLZ2kx59h432VXSG20na8tXa+Br6qUsIyK53Fkss= -----END CERTIFICATE-----Generated at Sat Oct 18 04:21:47 2025 by rpki-client