$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/95b9c0ba-7f49-49ab-9e79-d20d7887aaec.roa File: 95b9c0ba-7f49-49ab-9e79-d20d7887aaec.roa (raw, json) Hash identifier: gfuHdKTcXpuqb0BplHygYKcs0EMPz81pQEgbYonjKJ4= Subject key identifier: 11:B4:1C:5A:E6:34:26:0F:DA:00:59:3D:D3:CC:C8:86:C2:15:B5:BE Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2974213C11E22FB8BD6CCC06EAA07D76E545D5D8 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/95b9c0ba-7f49-49ab-9e79-d20d7887aaec.roa Signing time: Wed 15 Oct 2025 20:21:12 +0000 ROA not before: Wed 15 Oct 2025 20:21:12 +0000 ROA not after: Wed 19 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 143.204.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:74:21:3c:11:e2:2f:b8:bd:6c:cc:06:ea:a0:7d:76:e5:45:d5:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 15 20:21:12 2025 GMT Not After : Nov 19 23:59:59 2025 GMT Subject: serialNumber=d85f7842c279dac80d4129160c72791f85fdb35edb28eea7cc65e92cdd7ac1d8, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a3:1b:1b:88:78:f8:e4:9e:04:ca:20:60:29: cc:05:39:11:17:67:1f:70:10:b5:9d:05:c0:00:88: e7:e3:4c:ad:af:c9:40:d1:f9:2a:86:d7:ea:1e:45: 7c:e7:ff:9e:f0:8f:c7:66:92:82:c1:eb:c9:fc:d8: 77:07:56:45:61:11:ab:98:b8:ea:70:8a:8c:9c:a5: 11:83:3f:ee:5a:bc:50:16:ba:0a:f4:ea:0a:4c:0b: 88:d1:ad:ae:c7:21:e5:92:48:f5:35:2f:a1:a2:25: b4:5e:a7:0d:8d:e4:04:41:12:c5:ed:ce:25:15:ae: e5:92:5e:33:37:b5:63:77:f1:a4:48:46:87:dc:ef: 7a:88:3f:25:c4:7c:2a:f0:fb:87:c2:c1:f0:c5:75: c7:b1:db:60:86:ae:77:12:b8:b1:6e:05:ff:0d:28: 26:95:13:7e:eb:e7:6c:87:44:67:a7:5b:6d:30:87: b4:f5:1b:fc:31:f7:c4:f8:51:a7:9e:2d:5b:59:b2: e5:13:5d:9f:60:3c:c0:0b:e5:55:fd:49:99:fc:76: ad:66:ef:f5:d5:d5:c1:20:01:df:2a:60:1e:a1:e4: b7:3b:a0:1a:23:0a:be:fa:e6:60:5f:ae:ac:ef:54: 2c:52:bd:37:6f:d9:d7:77:89:6e:f4:9b:b4:95:28: 7a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:B4:1C:5A:E6:34:26:0F:DA:00:59:3D:D3:CC:C8:86:C2:15:B5:BE X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/95b9c0ba-7f49-49ab-9e79-d20d7887aaec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.204.29.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:f8:21:aa:1a:68:1b:25:a4:16:d7:27:34:b9:56:fd:b9:07: 87:87:3b:56:ad:aa:ea:1c:e9:ff:b8:ca:d6:77:72:3b:dd:e7: d6:9e:07:57:cb:21:d7:8b:05:1c:57:de:24:9f:a5:98:8a:13: f5:69:b8:76:7c:16:4b:7c:ac:f1:f2:aa:d9:0d:b8:13:e7:59: 2a:98:26:6a:d1:c5:0f:87:7b:24:85:84:6e:3d:ec:d6:72:55: 5f:c0:cf:07:84:9e:2e:56:7e:7b:01:16:cf:e5:97:10:ef:00: 60:06:3d:73:82:f1:47:d2:0f:96:99:96:52:75:a9:46:a0:93: 2a:b0:c0:a8:ba:02:53:06:e6:03:3b:4e:ea:de:88:92:0a:c3: e2:2b:1e:0e:b0:f1:70:e1:73:b8:33:e2:20:6f:a9:8e:6b:82: 3b:28:50:f6:9e:76:89:92:32:00:ee:fd:c4:ea:c2:c9:8d:7b: d6:c5:b6:e8:e2:9f:6f:93:b7:c5:18:57:b5:f2:d6:4b:ac:f8: 49:6d:b6:37:c2:3c:88:4b:dc:96:ea:9b:4a:ee:dc:c9:ba:c8: 56:94:cf:b6:0a:0e:87:d4:05:9b:d0:b5:3c:fd:7e:2c:4c:e8: 49:1d:91:56:8e:93:81:1d:53:2b:3a:d1:23:90:d3:09:47:0c: df:fb:53:9d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKXQhPBHiL7i9bMwG6qB9duVF1dgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE1MjAyMTEyWhcNMjUxMTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BkODVmNzg0MmMyNzlkYWM4MGQ0MTI5MTYwYzcyNzkxZjg1 ZmRiMzVlZGIyOGVlYTdjYzY1ZTkyY2RkN2FjMWQ4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwoxsbiHj45J4EyiBgKcwFOREXZx9wELWdBcAAiOfjTK2v yUDR+SqG1+oeRXzn/57wj8dmkoLB68n82HcHVkVhEauYuOpwioycpRGDP+5avFAW ugr06gpMC4jRra7HIeWSSPU1L6GiJbRepw2N5ARBEsXtziUVruWSXjM3tWN38aRI Rofc73qIPyXEfCrw+4fCwfDFdcex22CGrncSuLFuBf8NKCaVE37r52yHRGenW20w h7T1G/wx98T4UaeeLVtZsuUTXZ9gPMAL5VX9SZn8dq1m7/XV1cEgAd8qYB6h5Lc7 oBojCr765mBfrqzvVCxSvTdv2dd3iW70m7SVKHppAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUEbQcWuY0Jg/aAFk908zIhsIVtb4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzk1YjljMGJhLTdmNDktNDlhYi05ZTc5LWQyMGQ3ODg3YWFlYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACPzB0wDQYJKoZIhvcNAQELBQADggEBAD74IaoaaBslpBbXJzS5Vv25B4eH O1atquoc6f+4ytZ3cjvd59aeB1fLIdeLBRxX3iSfpZiKE/VpuHZ8Fkt8rPHyqtkN uBPnWSqYJmrRxQ+HeySFhG497NZyVV/AzweEni5WfnsBFs/llxDvAGAGPXOC8UfS D5aZllJ1qUagkyqwwKi6AlMG5gM7TureiJIKw+IrHg6w8XDhc7gz4iBvqY5rgjso UPaedomSMgDu/cTqwsmNe9bFtujin2+Tt8UYV7Xy1kus+ElttjfCPIhL3Jbqm0ru 3Mm6yFaUz7YKDofUBZvQtTz9fixM6EkdkVaOk4EdUys60SOQ0wlHDN/7U50= -----END CERTIFICATE-----Generated at Fri Oct 17 21:59:20 2025 by rpki-client