$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6cdd43cc-94a7-435f-8625-7261675a288e.roa File: 6cdd43cc-94a7-435f-8625-7261675a288e.roa (raw, json) Hash identifier: fcX47RWBtt0/usL6PurlOi5ZWQYs/1febjmDXl6Hm2w= Subject key identifier: 88:50:84:EC:99:0D:E6:CC:ED:9B:D7:18:1E:08:EE:3C:46:91:DD:C6 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 170C566942821A057844D468755DA34A7309D3F4 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6cdd43cc-94a7-435f-8625-7261675a288e.roa Signing time: Wed 15 Oct 2025 18:56:08 +0000 ROA not before: Wed 15 Oct 2025 18:56:08 +0000 ROA not after: Wed 19 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 143.204.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:0c:56:69:42:82:1a:05:78:44:d4:68:75:5d:a3:4a:73:09:d3:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 15 18:56:08 2025 GMT Not After : Nov 19 23:59:59 2025 GMT Subject: serialNumber=9d842f62bf4000f402e10659cba4040b020df6b243c9f0813d4ca8cbae96ef79, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:66:48:3e:31:da:f0:68:44:49:60:6b:65:ec: 7e:0e:c4:fe:25:b5:45:32:b3:eb:5d:90:dc:c0:9d: 6d:23:4d:1c:df:68:01:fe:47:ea:b7:0a:92:3c:6e: 2e:13:65:1f:66:50:24:e2:ac:45:d0:d2:5e:8a:6b: a8:95:ff:9f:39:82:9d:86:75:c3:43:fc:82:1a:bb: 5f:7c:6a:a2:3d:fb:4c:f4:5d:01:ac:db:a6:b9:f7: 50:38:ee:30:96:7b:cf:33:7f:6f:6a:6c:88:fe:f0: f9:40:9d:57:4f:a2:63:7d:30:7b:e3:2e:b7:ef:fc: 9c:54:27:08:6f:ca:d9:69:4c:d2:5c:08:74:49:7e: fe:18:b2:9e:95:a6:45:26:42:19:08:b2:93:89:b1: 8f:81:6f:93:ad:46:b6:da:03:dd:5c:4f:88:b9:82: f9:9b:aa:15:2a:a0:0b:8b:ef:a2:fc:a3:52:7d:c9: bb:40:1a:e9:92:06:3a:ef:cc:d4:98:9f:c8:09:26: c0:b9:b9:03:64:0c:74:ec:6b:06:19:c3:7e:4a:44: 94:cb:ad:83:34:ae:75:e0:16:02:e3:b6:5e:7a:dd: 43:ae:d3:7a:3f:9d:cc:43:f2:63:1e:18:22:5b:24: 44:10:d7:b7:c6:94:d9:b4:81:e0:6f:e7:b7:ba:98: bd:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:50:84:EC:99:0D:E6:CC:ED:9B:D7:18:1E:08:EE:3C:46:91:DD:C6 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6cdd43cc-94a7-435f-8625-7261675a288e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.204.115.0/24 Signature Algorithm: sha256WithRSAEncryption 47:2e:a1:22:76:a1:33:64:c0:0c:03:2b:31:db:a1:5d:40:17: 92:7e:42:89:59:b6:da:ce:27:7d:67:53:d2:d9:5a:91:76:e3: 7d:22:c6:5a:ea:1c:47:ff:69:30:a0:2d:d4:9a:9e:08:0e:3b: c1:a1:0b:b7:d8:00:89:bc:83:19:09:6c:af:df:3b:c5:4f:8b: 1f:27:26:82:77:f4:4d:a3:9c:15:96:46:bf:9a:8d:e3:19:6e: ad:4a:84:58:df:20:f6:d4:ad:bb:47:d0:fe:b4:e9:0d:2f:de: 22:61:7f:42:44:cb:51:55:c7:a5:e8:5b:d6:53:55:2c:89:d3: e7:1c:cc:1a:e5:94:47:69:1f:a4:96:fe:97:e5:f0:f6:7b:b2: 19:ed:1a:d3:06:7b:02:9b:9f:13:3f:d5:4d:50:c3:4e:59:9c: f2:5a:61:e7:11:b3:85:29:bd:b2:b5:39:36:95:c1:ad:9d:56: 4e:44:6c:12:c3:96:87:07:ef:ff:00:de:fd:0b:a6:ce:e1:94: d1:56:63:da:2b:93:47:78:21:f2:fb:da:8b:be:da:f2:58:57: d2:fd:b2:0b:6d:e6:dd:96:d2:42:47:e6:16:10:ea:03:82:76: 56:30:d2:9c:f0:97:0a:96:6d:01:82:a6:ff:6f:d1:2a:bc:b4: b2:93:9d:90 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFwxWaUKCGgV4RNRodV2jSnMJ0/QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE1MTg1NjA4WhcNMjUxMTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZDg0MmY2MmJmNDAwMGY0MDJlMTA2NTljYmE0MDQwYjAy MGRmNmIyNDNjOWYwODEzZDRjYThjYmFlOTZlZjc5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFZkg+MdrwaERJYGtl7H4OxP4ltUUys+tdkNzAnW0jTRzf aAH+R+q3CpI8bi4TZR9mUCTirEXQ0l6Ka6iV/585gp2GdcND/IIau198aqI9+0z0 XQGs26a591A47jCWe88zf29qbIj+8PlAnVdPomN9MHvjLrfv/JxUJwhvytlpTNJc CHRJfv4Ysp6VpkUmQhkIspOJsY+Bb5OtRrbaA91cT4i5gvmbqhUqoAuL76L8o1J9 ybtAGumSBjrvzNSYn8gJJsC5uQNkDHTsawYZw35KRJTLrYM0rnXgFgLjtl563UOu 03o/ncxD8mMeGCJbJEQQ17fGlNm0geBv57e6mL3PAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUiFCE7JkN5sztm9cYHgjuPEaR3cYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzZjZGQ0M2NjLTk0YTctNDM1Zi04NjI1LTcyNjE2NzVhMjg4ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACPzHMwDQYJKoZIhvcNAQELBQADggEBAEcuoSJ2oTNkwAwDKzHboV1AF5J+ QolZttrOJ31nU9LZWpF2430ixlrqHEf/aTCgLdSanggOO8GhC7fYAIm8gxkJbK/f O8VPix8nJoJ39E2jnBWWRr+ajeMZbq1KhFjfIPbUrbtH0P606Q0v3iJhf0JEy1FV x6XoW9ZTVSyJ0+cczBrllEdpH6SW/pfl8PZ7shntGtMGewKbnxM/1U1Qw05ZnPJa YecRs4UpvbK1OTaVwa2dVk5EbBLDlocH7/8A3v0Lps7hlNFWY9ork0d4IfL72ou+ 2vJYV9L9sgtt5t2W0kJH5hYQ6gOCdlYw0pzwlwqWbQGCpv9v0Sq8tLKTnZA= -----END CERTIFICATE-----Generated at Fri Oct 17 23:52:14 2025 by rpki-client