$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/86214a8b-e7ca-49b6-88b9-842a6519f742.roa File: 86214a8b-e7ca-49b6-88b9-842a6519f742.roa (raw, json) Hash identifier: QmMd5yxOJH6T6e5uE7i1q4qYOKK7UN8pPZelyWQydlc= Subject key identifier: 4D:78:08:80:01:E6:05:2F:95:27:B1:D3:DF:BF:3F:B4:B5:41:8D:8C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 482B0592139E34A859BDBDB847C63A9C5F6CECBC Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/86214a8b-e7ca-49b6-88b9-842a6519f742.roa Signing time: Wed 15 Oct 2025 22:57:20 +0000 ROA not before: Wed 15 Oct 2025 22:57:20 +0000 ROA not after: Wed 19 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 143.204.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:2b:05:92:13:9e:34:a8:59:bd:bd:b8:47:c6:3a:9c:5f:6c:ec:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 15 22:57:20 2025 GMT Not After : Nov 19 23:59:59 2025 GMT Subject: serialNumber=aa807e484eb89ee4a2ca856c54af6bb83c869cb7a748fa0b8e45a4574d184c23, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:2e:e9:ec:2e:ff:96:4c:05:4e:fd:7a:fd:c0: d6:a1:10:fb:9b:5a:b8:2c:dc:1b:79:99:26:20:0b: cc:df:f3:5d:75:e7:ea:4f:df:f5:21:34:ba:74:82: e9:83:e7:8a:2b:34:34:dd:a2:17:21:b7:81:8c:6a: 39:c8:c6:29:24:62:ca:ec:ef:70:ae:92:dd:d7:c1: a3:fc:5c:a7:9b:ef:43:cc:5c:c5:5b:04:f1:bc:e5: 2d:e8:2a:72:0a:18:f0:9c:01:39:ce:eb:da:f3:d5: 0c:3e:d8:0c:c2:f9:6c:ea:46:f8:5a:33:c3:0e:cf: f8:41:c6:1c:20:79:4e:47:95:8a:3a:bc:bb:48:5d: b1:b5:fb:c9:6c:87:e9:f6:72:b9:b4:4f:8a:31:8f: 16:56:a5:38:85:4e:ee:38:2c:f2:e6:55:50:f8:b4: 27:85:54:27:43:1c:41:27:9e:6e:f3:00:ec:ba:f0: ea:21:c4:2b:2c:79:5b:b3:53:58:54:8d:bc:44:51: 23:31:5c:16:fd:04:60:77:93:e5:d3:b2:97:29:8e: ed:b0:2b:86:4c:9c:c3:bc:10:52:78:bb:f0:bd:c1: 02:a3:66:48:20:a5:15:bd:3f:fd:bd:ce:7f:e2:73: fd:4f:42:e6:39:32:6d:64:2f:49:4f:56:14:74:f3: 8f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:78:08:80:01:E6:05:2F:95:27:B1:D3:DF:BF:3F:B4:B5:41:8D:8C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/86214a8b-e7ca-49b6-88b9-842a6519f742.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.204.216.0/21 Signature Algorithm: sha256WithRSAEncryption 00:aa:b0:e6:45:87:f7:f0:af:b4:3e:9d:3c:74:8e:b3:f8:cd: 83:36:ca:28:38:aa:4e:f9:9a:42:d6:6d:c1:09:01:99:95:92: e0:b2:b1:bc:72:59:c9:9c:b2:90:bf:2f:d2:46:a5:0c:cd:d5: 64:96:8c:13:69:61:a9:e8:2a:4b:06:2e:51:6d:2e:5c:b5:71: 34:8f:ee:55:0c:dc:78:69:36:35:ab:f7:c1:1c:9a:04:78:93: 8d:61:3a:5b:bd:d8:32:3d:ea:34:3e:2b:95:63:09:4d:32:f2: 62:2e:a2:66:f9:f9:9c:94:ca:66:c5:79:96:f5:3c:81:9f:4f: 83:83:64:ae:57:a3:ac:58:5e:ca:24:fc:be:bb:a4:ce:b2:84: ad:31:28:01:07:74:f3:25:5e:80:1a:f9:2b:c6:68:25:38:20: f7:22:79:22:8a:1c:24:45:ce:1c:74:ee:d4:34:af:56:1c:8b: b4:93:b4:0c:ff:b0:e8:a3:02:ba:30:8a:a4:c9:ec:2e:99:fd: 0f:92:fd:fa:56:88:3b:01:d9:66:df:40:b4:06:ac:06:ef:ce: 51:e2:3f:48:ad:99:3c:4c:e7:65:b8:15:7e:53:0c:57:ff:54: 68:3d:ff:ec:40:ec:47:d0:f6:0d:18:f1:71:4b:0f:c1:a2:86: 3e:82:8c:5c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSCsFkhOeNKhZvb24R8Y6nF9s7LwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE1MjI1NzIwWhcNMjUxMTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BhYTgwN2U0ODRlYjg5ZWU0YTJjYTg1NmM1NGFmNmJiODNj ODY5Y2I3YTc0OGZhMGI4ZTQ1YTQ1NzRkMTg0YzIzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDhLunsLv+WTAVO/Xr9wNahEPubWrgs3Bt5mSYgC8zf8111 5+pP3/UhNLp0gumD54orNDTdohcht4GMajnIxikkYsrs73Cukt3XwaP8XKeb70PM XMVbBPG85S3oKnIKGPCcATnO69rz1Qw+2AzC+WzqRvhaM8MOz/hBxhwgeU5HlYo6 vLtIXbG1+8lsh+n2crm0T4oxjxZWpTiFTu44LPLmVVD4tCeFVCdDHEEnnm7zAOy6 8OohxCsseVuzU1hUjbxEUSMxXBb9BGB3k+XTspcpju2wK4ZMnMO8EFJ4u/C9wQKj ZkggpRW9P/29zn/ic/1PQuY5Mm1kL0lPVhR084+dAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUTXgIgAHmBS+VJ7HT378/tLVBjYwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg2MjE0YThiLWU3Y2EtNDliNi04OGI5LTg0MmE2NTE5Zjc0Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAOPzNgwDQYJKoZIhvcNAQELBQADggEBAACqsOZFh/fwr7Q+nTx0jrP4zYM2 yig4qk75mkLWbcEJAZmVkuCysbxyWcmcspC/L9JGpQzN1WSWjBNpYanoKksGLlFt Lly1cTSP7lUM3HhpNjWr98EcmgR4k41hOlu92DI96jQ+K5VjCU0y8mIuomb5+ZyU ymbFeZb1PIGfT4ODZK5Xo6xYXsok/L67pM6yhK0xKAEHdPMlXoAa+SvGaCU4IPci eSKKHCRFzhx07tQ0r1Yci7STtAz/sOijArowiqTJ7C6Z/Q+S/fpWiDsB2WbfQLQG rAbvzlHiP0itmTxM52W4FX5TDFf/VGg9/+xA7EfQ9g0Y8XFLD8Gihj6CjFw= -----END CERTIFICATE-----Generated at Fri Oct 17 21:57:55 2025 by rpki-client