$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/68dba900-0ab2-4737-a62b-1f1f93141cfa.roa File: 68dba900-0ab2-4737-a62b-1f1f93141cfa.roa (raw, json) Hash identifier: RD0fuAWr3zxhMxQ1YsqzBWbL8jlq72u7GiyK903uxkc= Subject key identifier: C8:D0:A8:F6:3B:F7:80:84:FC:5B:29:74:E6:AE:6C:92:AA:11:B7:30 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 02BED5F72AAC16A36442134BAB650F48DA1F82A5 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/68dba900-0ab2-4737-a62b-1f1f93141cfa.roa Signing time: Wed 15 Oct 2025 22:57:22 +0000 ROA not before: Wed 15 Oct 2025 22:57:22 +0000 ROA not after: Wed 19 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 143.204.218.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:be:d5:f7:2a:ac:16:a3:64:42:13:4b:ab:65:0f:48:da:1f:82:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 15 22:57:22 2025 GMT Not After : Nov 19 23:59:59 2025 GMT Subject: serialNumber=d732d2fba346c35f6fdbe9931e39dd24ab70466b7a3e6dfc75d4a6d3adc56956, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e8:40:39:e7:25:49:58:0a:c6:50:da:d2:1f: cc:f4:7a:6b:f9:2f:09:b5:70:96:35:22:22:c2:7a: 40:20:71:4f:51:6c:f0:99:fc:0f:08:91:1b:50:e9: e5:ec:3c:17:57:51:c0:20:fd:b0:f4:9c:7c:f5:f8: 47:a4:01:17:00:87:a4:89:55:74:f6:ba:63:0a:78: 86:30:9d:d9:9c:da:76:67:75:2d:f9:73:e2:54:c4: 1b:bc:f1:b6:88:b0:d0:0e:15:89:aa:5c:0a:4d:72: 44:56:f8:95:75:cc:86:1d:44:5b:c7:bf:49:85:d6: fd:9a:74:b5:58:0f:c8:e9:c4:8b:77:7d:94:01:1e: 05:5b:86:30:45:28:3a:eb:15:9d:66:13:4f:d2:df: 06:b7:29:13:0c:1c:5e:db:67:fb:ea:ab:6e:26:77: 0e:a8:25:f3:05:38:4a:7a:4d:56:37:87:b0:da:46: d0:0a:03:c6:25:4d:01:d0:8e:cd:af:cd:6c:66:57: 1e:5d:fa:0c:00:36:5e:19:86:61:7d:2d:9e:e5:91: 2e:46:0f:54:ef:0d:62:60:dc:29:8a:de:74:db:44: 10:ce:fa:cb:01:a8:b1:74:95:c0:cb:34:42:6c:17: c9:7c:cd:a4:7e:b4:5e:a3:a2:bf:0c:23:db:3c:26: a1:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:D0:A8:F6:3B:F7:80:84:FC:5B:29:74:E6:AE:6C:92:AA:11:B7:30 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/68dba900-0ab2-4737-a62b-1f1f93141cfa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.204.218.0/23 Signature Algorithm: sha256WithRSAEncryption 48:0a:75:6e:f6:da:2f:e2:42:dc:ce:82:4f:af:79:36:00:96: d2:27:f7:ce:c9:5a:40:98:04:fd:9a:2b:48:94:23:7c:8f:fc: dd:ed:ac:25:6a:f7:47:cb:b2:0c:33:fe:9f:8e:35:f7:ad:39: b7:92:fa:42:66:58:aa:8e:9e:2f:fb:a7:89:84:50:9e:b7:84: 52:b0:03:f6:29:c7:26:3d:91:88:e4:9b:b3:8f:c7:ef:39:8e: 15:19:a9:2d:ea:c5:48:42:23:e4:6a:b8:77:e8:84:ff:18:f5: d8:0c:6c:f8:f6:6f:54:76:84:49:2d:a9:35:6d:1b:af:04:26: b3:46:6a:86:7c:11:97:88:9c:30:7f:2e:db:e4:a4:2e:4a:94: 9c:25:50:2d:6e:57:92:46:95:bd:c1:9b:af:7d:8b:3d:63:83: ac:2d:b8:e0:bd:f5:1c:5a:69:7a:d1:2b:84:91:49:0b:00:14: 45:d4:9b:73:e6:58:ed:72:73:cf:49:91:ed:3a:93:f5:6a:1b: 7f:a2:90:42:ce:47:a7:b9:a1:07:b6:7a:34:28:ce:db:e7:dc: f5:ec:c6:49:64:d1:23:43:ff:87:80:76:e5:2e:fe:d0:30:cf: 77:e9:2c:bf:30:8e:e5:64:fc:89:13:22:a1:02:a8:67:11:5a: b6:5d:ad:8d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAr7V9yqsFqNkQhNLq2UPSNofgqUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE1MjI1NzIyWhcNMjUxMTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNzMyZDJmYmEzNDZjMzVmNmZkYmU5OTMxZTM5ZGQyNGFi NzA0NjZiN2EzZTZkZmM3NWQ0YTZkM2FkYzU2OTU2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDO6EA55yVJWArGUNrSH8z0emv5Lwm1cJY1IiLCekAgcU9R bPCZ/A8IkRtQ6eXsPBdXUcAg/bD0nHz1+EekARcAh6SJVXT2umMKeIYwndmc2nZn dS35c+JUxBu88baIsNAOFYmqXApNckRW+JV1zIYdRFvHv0mF1v2adLVYD8jpxIt3 fZQBHgVbhjBFKDrrFZ1mE0/S3wa3KRMMHF7bZ/vqq24mdw6oJfMFOEp6TVY3h7Da RtAKA8YlTQHQjs2vzWxmVx5d+gwANl4ZhmF9LZ7lkS5GD1TvDWJg3CmK3nTbRBDO +ssBqLF0lcDLNEJsF8l8zaR+tF6jor8MI9s8JqHLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUyNCo9jv3gIT8Wyl05q5skqoRtzAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzY4ZGJhOTAwLTBhYjItNDczNy1hNjJiLTFmMWY5MzE0MWNmYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAGPzNowDQYJKoZIhvcNAQELBQADggEBAEgKdW722i/iQtzOgk+veTYAltIn 987JWkCYBP2aK0iUI3yP/N3trCVq90fLsgwz/p+ONfetObeS+kJmWKqOni/7p4mE UJ63hFKwA/YpxyY9kYjkm7OPx+85jhUZqS3qxUhCI+RquHfohP8Y9dgMbPj2b1R2 hEktqTVtG68EJrNGaoZ8EZeInDB/LtvkpC5KlJwlUC1uV5JGlb3Bm699iz1jg6wt uOC99RxaaXrRK4SRSQsAFEXUm3PmWO1yc89Jke06k/VqG3+ikELOR6e5oQe2ejQo ztvn3PXsxklk0SND/4eAduUu/tAwz3fpLL8wjuVk/IkTIqECqGcRWrZdrY0= -----END CERTIFICATE-----Generated at Fri Oct 17 22:02:36 2025 by rpki-client