$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8f52ea6d-114c-47dd-b066-5921cef6cb0d.roa File: 8f52ea6d-114c-47dd-b066-5921cef6cb0d.roa (raw, json) Hash identifier: XYWePCAtleGctG0PoOatPPJg30NcrKUPmSINDE/MKAc= Subject key identifier: B1:F4:58:11:AA:68:1F:F1:27:65:49:14:B1:DF:CD:70:78:6F:36:C5 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 241E86A51C7A5C31C502101B3BE2D96A11E7235B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8f52ea6d-114c-47dd-b066-5921cef6cb0d.roa Signing time: Wed 15 Oct 2025 21:04:18 +0000 ROA not before: Wed 15 Oct 2025 21:04:18 +0000 ROA not after: Wed 19 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 143.204.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:1e:86:a5:1c:7a:5c:31:c5:02:10:1b:3b:e2:d9:6a:11:e7:23:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 15 21:04:18 2025 GMT Not After : Nov 19 23:59:59 2025 GMT Subject: serialNumber=0243cd1c27c66b75a742bbb6fa37b25b22f32a6f8fe858993b603cca22e66794, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:62:b1:f9:26:7d:50:09:13:91:48:ea:cb:36: fe:c5:62:3f:97:a5:12:ac:d3:27:c1:24:05:98:b3: 8a:98:77:72:d0:41:bf:1f:3a:f8:0f:d0:e2:49:ab: 63:cd:25:41:43:6e:bc:91:b0:6b:e5:08:09:27:88: 17:6d:02:ce:99:57:07:6e:69:17:b1:78:39:16:ee: e7:9e:ff:81:58:2a:9a:d9:5d:26:09:a4:c2:56:27: a6:71:6a:b8:8a:be:43:58:89:96:57:bc:51:b7:39: 4e:40:df:e5:9b:f8:12:cb:88:88:83:20:15:ec:ca: 88:57:7a:86:69:65:22:6c:18:23:6a:7c:1e:b3:23: be:97:2e:f4:21:a2:0b:cd:d1:a7:f1:48:68:50:85: 29:51:d7:a8:1b:a2:d3:81:a4:27:52:93:42:50:51: 27:6d:1c:8a:a2:f0:ef:f6:9f:2e:a2:f3:9e:c6:2a: 72:0a:73:90:ab:0b:9e:a8:52:fa:06:ab:d4:bb:6b: 5c:63:d0:ca:2d:58:6c:b0:a8:41:7d:8b:16:68:31: a5:4f:64:21:6e:50:98:cb:00:69:a1:32:47:02:f1: 39:4b:83:2b:cd:75:c5:a6:74:38:4b:0c:e5:3e:74: 17:7f:45:78:38:df:d1:4c:e3:89:f8:89:74:12:28: 35:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:F4:58:11:AA:68:1F:F1:27:65:49:14:B1:DF:CD:70:78:6F:36:C5 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8f52ea6d-114c-47dd-b066-5921cef6cb0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.204.232.0/24 Signature Algorithm: sha256WithRSAEncryption 65:38:95:77:0c:d2:30:43:08:40:5d:de:aa:27:24:d4:89:f1: 00:7f:71:2d:b9:8a:ba:c9:d1:6d:e4:4d:d3:b2:69:8e:27:4c: 9e:e0:9d:dc:1d:0b:c8:76:4f:0b:f7:ce:87:60:7c:50:5b:f1: b7:d6:ec:13:7b:49:f4:34:60:8a:47:35:0c:2c:1f:bf:a8:84: 7a:ba:6d:ec:16:32:cc:5f:37:0d:3e:59:56:37:36:2b:e7:e2: 17:f5:f8:62:e1:5b:31:22:83:5d:4d:48:01:a2:10:bb:26:07: d8:ac:59:32:8e:64:91:1d:33:b7:bc:02:75:ec:d5:38:86:ba: b6:23:9e:ec:23:ab:51:72:60:c5:27:d0:80:19:9c:c3:1d:0a: 86:8a:f4:c2:6c:42:b0:15:9d:32:32:79:59:fc:92:61:b6:48: 68:d2:2f:a2:ae:4d:3b:08:64:28:57:15:e1:a6:bb:70:01:f2: c0:c4:91:34:19:39:08:84:74:50:fc:d8:4b:5b:11:d6:87:b2: 7a:c2:63:d3:1e:d6:57:7c:0d:f6:e1:dd:d2:76:e2:c2:b3:c2: e2:22:f3:99:b5:e3:78:a2:66:fc:48:b8:05:b5:09:22:00:58: 75:ff:c8:38:22:2e:15:24:09:b1:23:0f:ec:4b:8c:47:df:7e: d0:66:15:00 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJB6GpRx6XDHFAhAbO+LZahHnI1swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE1MjEwNDE4WhcNMjUxMTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0AwMjQzY2QxYzI3YzY2Yjc1YTc0MmJiYjZmYTM3YjI1YjIy ZjMyYTZmOGZlODU4OTkzYjYwM2NjYTIyZTY2Nzk0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2YrH5Jn1QCRORSOrLNv7FYj+XpRKs0yfBJAWYs4qYd3LQ Qb8fOvgP0OJJq2PNJUFDbryRsGvlCAkniBdtAs6ZVwduaRexeDkW7uee/4FYKprZ XSYJpMJWJ6ZxariKvkNYiZZXvFG3OU5A3+Wb+BLLiIiDIBXsyohXeoZpZSJsGCNq fB6zI76XLvQhogvN0afxSGhQhSlR16gbotOBpCdSk0JQUSdtHIqi8O/2ny6i857G KnIKc5CrC56oUvoGq9S7a1xj0MotWGywqEF9ixZoMaVPZCFuUJjLAGmhMkcC8TlL gyvNdcWmdDhLDOU+dBd/RXg439FM44n4iXQSKDUVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUsfRYEapoH/EnZUkUsd/NcHhvNsUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzhmNTJlYTZkLTExNGMtNDdkZC1iMDY2LTU5MjFjZWY2Y2IwZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACPzOgwDQYJKoZIhvcNAQELBQADggEBAGU4lXcM0jBDCEBd3qonJNSJ8QB/ cS25irrJ0W3kTdOyaY4nTJ7gndwdC8h2Twv3zodgfFBb8bfW7BN7SfQ0YIpHNQws H7+ohHq6bewWMsxfNw0+WVY3Nivn4hf1+GLhWzEig11NSAGiELsmB9isWTKOZJEd M7e8AnXs1TiGurYjnuwjq1FyYMUn0IAZnMMdCoaK9MJsQrAVnTIyeVn8kmG2SGjS L6KuTTsIZChXFeGmu3AB8sDEkTQZOQiEdFD82EtbEdaHsnrCY9Me1ld8Dfbh3dJ2 4sKzwuIi85m143iiZvxIuAW1CSIAWHX/yDgiLhUkCbEjD+xLjEffftBmFQA= -----END CERTIFICATE-----Generated at Fri Oct 17 22:01:58 2025 by rpki-client