$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7989b880-a2ad-493b-a4f3-8b1fca94ec2a.roa File: 7989b880-a2ad-493b-a4f3-8b1fca94ec2a.roa (raw, json) Hash identifier: xKmO6P8vp92qTvSqohdyCZfaOOt0FNIQyW72UgjxY7k= Subject key identifier: 00:48:11:D9:5E:F7:87:6B:39:4D:45:33:09:2C:70:C0:89:EE:E0:04 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 27EE8441B3942D472A47B19F303723629674BA98 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7989b880-a2ad-493b-a4f3-8b1fca94ec2a.roa Signing time: Wed 15 Oct 2025 19:55:10 +0000 ROA not before: Wed 15 Oct 2025 19:55:10 +0000 ROA not after: Wed 19 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 143.204.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:ee:84:41:b3:94:2d:47:2a:47:b1:9f:30:37:23:62:96:74:ba:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 15 19:55:10 2025 GMT Not After : Nov 19 23:59:59 2025 GMT Subject: serialNumber=5e9b7724dad4b44a73e5b4dbd2d199abb6df1446996a4373b4790c6b573aab41, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:05:67:1e:70:32:79:7e:d6:a8:bd:b8:4a:f1: bd:9b:af:43:59:a8:d1:99:b2:4c:d5:e7:37:cc:45: ed:fe:06:6c:ca:dd:ca:71:dd:bb:6d:fb:30:26:ea: b0:84:f7:ee:5b:86:67:18:3f:f4:09:bc:b8:4f:64: 33:48:58:75:ce:1e:d0:a2:40:1a:72:f2:86:dc:d0: 11:3b:f0:66:c0:8b:ef:3c:93:9d:4d:66:b3:7a:76: bc:01:32:b9:dc:79:82:19:38:8d:c8:44:e8:35:1e: 45:ad:59:1a:c0:1d:68:e0:cc:fc:e4:3f:d6:b3:f6: df:ab:fc:9c:cb:cb:7e:63:98:e9:43:7f:0a:26:ed: 6e:05:30:3d:8d:4b:4d:06:07:44:40:e9:fa:d5:e2: 17:2a:66:19:ef:3a:53:02:4b:3b:ff:6e:a9:39:a1: 93:dc:9e:8c:4f:86:89:19:7f:b4:97:84:5a:f8:1a: d9:9a:eb:0d:bd:79:93:a2:97:08:9d:c2:76:09:8c: db:45:8c:2d:f2:95:fd:c2:5d:09:b8:77:90:fd:70: 56:37:fa:07:0e:bb:5f:29:82:8c:ac:fa:c1:b6:0e: da:d7:2b:e5:66:be:c2:a0:08:c1:51:6f:6c:78:29: b7:1f:33:90:fe:6f:af:3f:f6:6a:c3:87:28:85:4a: b8:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:48:11:D9:5E:F7:87:6B:39:4D:45:33:09:2C:70:C0:89:EE:E0:04 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7989b880-a2ad-493b-a4f3-8b1fca94ec2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.204.44.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:14:f6:92:89:95:26:4f:2e:5a:ec:3d:eb:67:89:d4:a5:bb: 77:5a:a1:2b:0a:a4:99:21:bb:ab:a6:7c:d2:bc:34:91:e6:67: ee:cd:c1:c5:0d:18:8c:0e:2e:eb:43:59:1a:16:f0:b6:5b:7e: 53:f9:ea:54:cb:d8:8a:4a:37:61:f1:ed:29:69:1a:1d:90:e5: d1:68:6a:63:f3:e9:f0:81:0d:a6:86:76:f7:a3:2e:13:27:65: 1f:cf:01:85:13:9b:af:e4:c7:da:e3:18:92:37:db:5b:2d:be: e8:37:98:97:06:e1:c0:02:99:52:6f:0f:2a:04:9d:08:8d:4d: 79:d3:44:25:17:2a:74:72:b2:74:26:2f:83:7e:3d:7c:f8:fb: 40:4c:ec:a9:98:25:cf:57:6c:f8:ed:b7:2f:66:0e:7e:2a:b7: 5a:c9:ac:20:d5:60:f0:d4:35:a3:16:a3:66:31:2e:6e:ea:fb: 93:50:0c:de:7a:b3:cb:00:bc:3f:5f:ef:6a:b6:3f:23:7f:51: 87:dd:b0:b8:db:77:54:ae:3f:79:72:0e:21:1d:58:71:55:02: a4:0c:5c:af:0a:ae:f2:08:71:cd:30:42:96:3b:7b:4b:84:d6: 3b:60:38:4e:66:a5:6c:be:65:da:e9:00:1c:9e:48:ef:09:de: 64:c7:9a:5d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJ+6EQbOULUcqR7GfMDcjYpZ0upgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE1MTk1NTEwWhcNMjUxMTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZTliNzcyNGRhZDRiNDRhNzNlNWI0ZGJkMmQxOTlhYmI2 ZGYxNDQ2OTk2YTQzNzNiNDc5MGM2YjU3M2FhYjQxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzBWcecDJ5ftaovbhK8b2br0NZqNGZskzV5zfMRe3+BmzK 3cpx3btt+zAm6rCE9+5bhmcYP/QJvLhPZDNIWHXOHtCiQBpy8obc0BE78GbAi+88 k51NZrN6drwBMrnceYIZOI3IROg1HkWtWRrAHWjgzPzkP9az9t+r/JzLy35jmOlD fwom7W4FMD2NS00GB0RA6frV4hcqZhnvOlMCSzv/bqk5oZPcnoxPhokZf7SXhFr4 Gtma6w29eZOilwidwnYJjNtFjC3ylf3CXQm4d5D9cFY3+gcOu18pgoys+sG2DtrX K+VmvsKgCMFRb2x4KbcfM5D+b68/9mrDhyiFSrjTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUAEgR2V73h2s5TUUzCSxwwInu4AQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzc5ODliODgwLWEyYWQtNDkzYi1hNGYzLThiMWZjYTk0ZWMyYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACPzCwwDQYJKoZIhvcNAQELBQADggEBAA4U9pKJlSZPLlrsPetnidSlu3da oSsKpJkhu6umfNK8NJHmZ+7NwcUNGIwOLutDWRoW8LZbflP56lTL2IpKN2Hx7Slp Gh2Q5dFoamPz6fCBDaaGdvejLhMnZR/PAYUTm6/kx9rjGJI321stvug3mJcG4cAC mVJvDyoEnQiNTXnTRCUXKnRysnQmL4N+PXz4+0BM7KmYJc9XbPjtty9mDn4qt1rJ rCDVYPDUNaMWo2YxLm7q+5NQDN56s8sAvD9f72q2PyN/UYfdsLjbd1SuP3lyDiEd WHFVAqQMXK8KrvIIcc0wQpY7e0uE1jtgOE5mpWy+ZdrpAByeSO8J3mTHml0= -----END CERTIFICATE-----Generated at Sat Oct 18 02:17:27 2025 by rpki-client