$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/59b05ca9-f8f9-4f34-bda8-504b8fe06e85.roa File: 59b05ca9-f8f9-4f34-bda8-504b8fe06e85.roa (raw, json) Hash identifier: qd6a0T4SMIyP0pGaY7/WC8VTzGF1jAcOV9mrzXPiHT0= Subject key identifier: 20:78:8E:58:43:29:F9:3F:2C:EC:AD:05:1C:75:0A:90:EE:19:A1:DB Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4401FDC506E1CF76C4D9BC6869510CCB65641364 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/59b05ca9-f8f9-4f34-bda8-504b8fe06e85.roa Signing time: Wed 15 Oct 2025 23:48:54 +0000 ROA not before: Wed 15 Oct 2025 23:48:54 +0000 ROA not after: Wed 19 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 144.220.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:01:fd:c5:06:e1:cf:76:c4:d9:bc:68:69:51:0c:cb:65:64:13:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 15 23:48:54 2025 GMT Not After : Nov 19 23:59:59 2025 GMT Subject: serialNumber=827b4f9ffe1ca82c1a46ca88f576a719f693502c5699bb4fbf3ca8e291b2e0ed, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:61:76:2f:bf:7c:bc:e6:92:cc:15:11:34:e0: ae:c6:ee:dc:33:45:2f:95:e1:34:d6:1a:5c:a6:8f: 97:1b:fe:59:2a:2f:3e:c4:1e:a1:12:93:81:73:83: a0:91:f9:b6:d5:fa:c0:f2:02:1a:69:ef:ac:1d:c8: 44:3b:e6:97:94:1d:16:63:ac:ae:90:34:f3:27:cf: 71:2a:0e:62:52:5e:46:ce:86:d6:7a:60:b2:21:bd: e3:f6:46:be:08:4f:e9:dc:3e:ec:5e:01:c6:97:68: 36:52:29:9a:aa:36:26:51:2f:6a:6f:c9:56:f3:a7: f9:6a:00:0a:12:c0:59:fc:4a:ae:54:fc:f9:f0:57: ff:7e:f4:26:53:94:dc:f0:1a:66:b7:2b:ac:d2:52: f6:17:a4:36:5f:27:b4:ec:94:12:9a:55:9f:a2:17: 6a:45:df:f4:65:f3:45:a3:b2:34:5b:63:de:c0:3c: f1:8a:38:74:73:76:c7:55:da:0a:bd:e7:6e:e2:e2: 82:7c:b7:df:41:69:a0:a9:5c:a4:c4:4c:b8:ae:eb: 56:8a:74:6d:e1:ba:69:70:04:3d:03:eb:d5:36:3a: c3:0a:cb:23:c4:2c:3d:c3:ee:6a:1e:96:bc:c0:41: aa:f6:6c:58:b6:56:a3:0a:b0:71:17:e4:23:f4:47: dd:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:78:8E:58:43:29:F9:3F:2C:EC:AD:05:1C:75:0A:90:EE:19:A1:DB X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/59b05ca9-f8f9-4f34-bda8-504b8fe06e85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.220.20.0/24 Signature Algorithm: sha256WithRSAEncryption 01:a4:7b:3b:89:e6:0c:f2:38:34:5e:7e:5c:c1:39:8f:7a:40: 03:74:fb:17:a1:39:cd:b3:77:98:f0:34:bb:41:e3:47:95:c2: 0e:4d:70:74:05:a0:90:b5:74:2f:50:d9:c9:f3:9d:ca:1c:cc: c8:3e:85:32:76:e6:bd:47:1b:92:60:5e:0f:d3:1f:52:fe:a8: 0b:97:6f:70:c3:bb:f3:36:0d:b2:37:57:04:f8:08:b9:78:43: ee:b1:d2:1a:24:67:e1:3b:1a:d8:81:88:10:99:eb:79:4f:d3: 07:ff:35:c3:ef:e2:dd:70:54:20:8b:2a:74:e0:64:da:8a:ab: 19:2a:07:06:c6:21:56:a3:a3:cd:d4:27:09:4b:e4:64:fe:16: bd:17:2c:24:02:ee:1a:d6:af:d8:05:7e:dd:e4:ec:d5:6b:58: 43:70:29:c7:01:5e:8a:c1:5f:0f:6f:f8:ec:86:d9:97:32:ee: a0:27:ea:de:e3:05:0b:0d:92:10:14:24:23:a0:83:25:ed:0e: be:6d:7e:3e:43:28:82:96:1c:71:38:b8:33:67:d6:c5:3a:a1: ea:86:97:70:11:cd:e1:31:de:db:7c:b8:d3:5e:0c:e5:18:2b: 69:74:1b:b9:3c:72:3a:9f:58:01:ec:58:65:72:cc:36:da:4f: 03:a7:a7:d3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURAH9xQbhz3bE2bxoaVEMy2VkE2QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE1MjM0ODU0WhcNMjUxMTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A4MjdiNGY5ZmZlMWNhODJjMWE0NmNhODhmNTc2YTcxOWY2 OTM1MDJjNTY5OWJiNGZiZjNjYThlMjkxYjJlMGVkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpYXYvv3y85pLMFRE04K7G7twzRS+V4TTWGlymj5cb/lkq Lz7EHqESk4Fzg6CR+bbV+sDyAhpp76wdyEQ75peUHRZjrK6QNPMnz3EqDmJSXkbO htZ6YLIhveP2Rr4IT+ncPuxeAcaXaDZSKZqqNiZRL2pvyVbzp/lqAAoSwFn8Sq5U /PnwV/9+9CZTlNzwGma3K6zSUvYXpDZfJ7TslBKaVZ+iF2pF3/Rl80WjsjRbY97A PPGKOHRzdsdV2gq9527i4oJ8t99BaaCpXKTETLiu61aKdG3humlwBD0D69U2OsMK yyPELD3D7moelrzAQar2bFi2VqMKsHEX5CP0R90FAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUIHiOWEMp+T8s7K0FHHUKkO4ZodswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzU5YjA1Y2E5LWY4ZjktNGYzNC1iZGE4LTUwNGI4ZmUwNmU4NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACQ3BQwDQYJKoZIhvcNAQELBQADggEBAAGkezuJ5gzyODReflzBOY96QAN0 +xehOc2zd5jwNLtB40eVwg5NcHQFoJC1dC9Q2cnzncoczMg+hTJ25r1HG5JgXg/T H1L+qAuXb3DDu/M2DbI3VwT4CLl4Q+6x0hokZ+E7GtiBiBCZ63lP0wf/NcPv4t1w VCCLKnTgZNqKqxkqBwbGIVajo83UJwlL5GT+Fr0XLCQC7hrWr9gFft3k7NVrWENw KccBXorBXw9v+OyG2Zcy7qAn6t7jBQsNkhAUJCOggyXtDr5tfj5DKIKWHHE4uDNn 1sU6oeqGl3ARzeEx3tt8uNNeDOUYK2l0G7k8cjqfWAHsWGVyzDbaTwOnp9M= -----END CERTIFICATE-----Generated at Fri Oct 17 21:55:13 2025 by rpki-client