$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/902b5e35-4645-4816-8703-71bf6e62402d.roa File: 902b5e35-4645-4816-8703-71bf6e62402d.roa (raw, json) Hash identifier: /TB8fdcDAYzvhgBIQ2cwiIJvdcv3Ii12vZTUK81J/gY= Subject key identifier: 08:1B:DC:49:4A:10:E3:02:F2:16:ED:28:E7:03:08:5C:53:B6:6A:54 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 111CB5F206E1EF9AD43928D926526DD89C7E6E01 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/902b5e35-4645-4816-8703-71bf6e62402d.roa Signing time: Wed 15 Oct 2025 23:23:58 +0000 ROA not before: Wed 15 Oct 2025 23:23:58 +0000 ROA not after: Wed 19 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 144.220.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:1c:b5:f2:06:e1:ef:9a:d4:39:28:d9:26:52:6d:d8:9c:7e:6e:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 15 23:23:58 2025 GMT Not After : Nov 19 23:59:59 2025 GMT Subject: serialNumber=dc00a4238b381a711b37b3b77200a5f3673cf5474cfb610444474bd1e1bfb2ce, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:be:5c:1a:32:55:75:67:37:e0:85:4f:e1:f4: d9:5e:3f:2b:ba:19:aa:d0:1e:c0:b0:b2:1a:2f:2e: e6:8a:c2:e5:a1:a9:20:18:8b:8c:c8:9b:1a:6f:12: ec:dd:47:22:5f:65:1f:74:17:7a:d8:ee:e8:6b:9b: 56:52:80:7f:13:cc:24:8d:1e:d1:c7:9c:5f:95:19: b8:91:d6:dc:53:a6:39:15:47:16:bb:29:9f:a9:65: d1:88:0a:1b:e4:3e:05:06:2f:94:36:f3:be:87:cf: 1f:92:ce:54:af:f0:7d:30:7a:f3:60:7d:82:68:67: 8b:57:41:a0:c0:ef:4f:fd:75:76:ed:fd:69:4e:63: 4d:e4:46:67:1a:22:97:9f:8a:24:63:8b:b0:b4:fa: 4c:e5:9f:76:29:14:db:b3:0e:1a:1d:70:45:c9:1d: e3:db:61:24:52:c3:c8:5f:1c:f6:b8:93:68:07:3d: b7:67:f1:84:bc:88:75:df:03:57:30:6f:06:00:4e: fb:69:1d:86:51:7c:7c:19:d1:18:7b:da:51:a1:dc: 74:dd:ea:45:2d:d4:0f:87:af:28:09:a4:5d:9d:32: 29:0b:8e:ea:44:d4:b1:c5:06:a3:ea:66:f4:d0:32: 2d:05:eb:4c:a6:9b:60:47:b9:04:a2:27:80:7d:5b: d8:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:1B:DC:49:4A:10:E3:02:F2:16:ED:28:E7:03:08:5C:53:B6:6A:54 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/902b5e35-4645-4816-8703-71bf6e62402d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.220.87.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:5d:51:70:e7:e6:fd:3c:07:5b:5d:88:8d:e0:ca:a2:2a:cc: 45:45:80:07:25:c6:9c:83:08:e3:a2:67:0d:3e:64:1b:75:93: ca:a6:52:f9:3c:d6:b2:eb:a9:f1:85:d4:5d:8b:d2:6b:d0:14: 0a:f0:01:36:a8:43:0d:a2:de:3f:9b:c0:a3:2a:21:ca:82:02: f5:e2:5f:f8:95:ee:39:52:2c:24:07:25:91:4d:df:69:67:ed: f1:40:ae:42:c6:3f:6a:4c:57:ba:d5:11:5d:0d:08:26:37:79: 7d:a9:72:19:92:49:3d:84:23:a9:96:58:7e:42:4d:02:a1:c2: ce:d0:fe:bf:7b:02:85:91:f4:01:c9:f6:49:5e:01:5e:65:22: df:06:25:97:2c:1c:00:da:57:f2:79:f2:33:35:3c:56:67:ce: 13:b3:f5:4f:8f:80:0c:92:be:14:d3:fd:bf:9b:b0:02:66:fe: 4a:8c:6b:10:5e:c9:1f:56:48:fe:c7:f3:59:83:f8:5a:2d:fc: 43:46:07:50:e8:9d:b7:95:73:f8:25:b9:71:63:fd:7f:f7:fe: 80:05:ef:67:c2:2e:73:33:3a:bb:60:e3:0a:14:b1:c1:17:aa: fc:5a:88:39:ed:43:27:49:c6:6d:dc:c1:fe:76:7e:6e:2f:cd: e3:e0:96:92 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUERy18gbh75rUOSjZJlJt2Jx+bgEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE1MjMyMzU4WhcNMjUxMTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BkYzAwYTQyMzhiMzgxYTcxMWIzN2IzYjc3MjAwYTVmMzY3 M2NmNTQ3NGNmYjYxMDQ0NDQ3NGJkMWUxYmZiMmNlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjvlwaMlV1ZzfghU/h9NlePyu6GarQHsCwshovLuaKwuWh qSAYi4zImxpvEuzdRyJfZR90F3rY7uhrm1ZSgH8TzCSNHtHHnF+VGbiR1txTpjkV Rxa7KZ+pZdGIChvkPgUGL5Q2876Hzx+SzlSv8H0wevNgfYJoZ4tXQaDA70/9dXbt /WlOY03kRmcaIpefiiRji7C0+kzln3YpFNuzDhodcEXJHePbYSRSw8hfHPa4k2gH Pbdn8YS8iHXfA1cwbwYATvtpHYZRfHwZ0Rh72lGh3HTd6kUt1A+HrygJpF2dMikL jupE1LHFBqPqZvTQMi0F60ymm2BHuQSiJ4B9W9iDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUCBvcSUoQ4wLyFu0o5wMIXFO2alQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzkwMmI1ZTM1LTQ2NDUtNDgxNi04NzAzLTcxYmY2ZTYyNDAyZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACQ3FcwDQYJKoZIhvcNAQELBQADggEBAFxdUXDn5v08B1tdiI3gyqIqzEVF gAclxpyDCOOiZw0+ZBt1k8qmUvk81rLrqfGF1F2L0mvQFArwATaoQw2i3j+bwKMq IcqCAvXiX/iV7jlSLCQHJZFN32ln7fFArkLGP2pMV7rVEV0NCCY3eX2pchmSST2E I6mWWH5CTQKhws7Q/r97AoWR9AHJ9kleAV5lIt8GJZcsHADaV/J58jM1PFZnzhOz 9U+PgAySvhTT/b+bsAJm/kqMaxBeyR9WSP7H81mD+Fot/ENGB1DonbeVc/gluXFj /X/3/oAF72fCLnMzOrtg4woUscEXqvxaiDntQydJxm3cwf52fm4vzePglpI= -----END CERTIFICATE-----Generated at Fri Oct 17 22:04:39 2025 by rpki-client