$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a49a5e3d-37ab-4278-9852-d0f7086400e6.roa File: a49a5e3d-37ab-4278-9852-d0f7086400e6.roa (raw, json) Hash identifier: YAxNF8MTA+W1mKY18QBxujO/g9JnzroOQgXF+ksREdA= Subject key identifier: 7F:8C:A8:68:A9:92:27:0A:D5:CD:4F:B3:32:7A:7B:88:B5:E9:A4:C3 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4646B5554574DEAE6160675C3046683484D14AB1 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a49a5e3d-37ab-4278-9852-d0f7086400e6.roa Signing time: Wed 15 Oct 2025 18:31:20 +0000 ROA not before: Wed 15 Oct 2025 18:31:20 +0000 ROA not after: Wed 19 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 143.204.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:46:b5:55:45:74:de:ae:61:60:67:5c:30:46:68:34:84:d1:4a:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 15 18:31:20 2025 GMT Not After : Nov 19 23:59:59 2025 GMT Subject: serialNumber=788a047d3422d7c31d7704bdabfd1a3a38cdb4a3463b6b25177c181ef9808ffe, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:42:44:8f:05:35:aa:b7:8a:75:4e:fd:25:82: f7:74:46:77:a8:bf:5b:b0:48:d7:5f:1f:9a:51:28: a4:e3:35:8f:20:13:a9:5e:61:6e:61:57:65:b1:f1: 8c:11:0b:a9:4b:8c:5e:95:25:49:59:20:3b:83:67: 4f:a4:e3:d5:47:c4:f7:49:91:fb:77:7f:0e:a3:f5: 6e:37:5d:43:f9:23:82:6f:cd:30:30:8b:2d:c9:d9: aa:bd:ae:d2:54:e0:6d:be:5a:a2:61:1f:a3:42:22: 8f:35:20:e5:fa:a0:aa:47:e4:6d:30:44:5a:9e:88: c3:78:83:98:3c:d2:3d:6a:19:3e:77:8c:d8:c6:18: 2c:30:d3:d5:4f:9d:a4:61:7e:38:f5:b8:0f:f2:a6: dd:84:9f:bd:7b:23:e4:9f:34:ee:e2:5d:8e:f1:38: 68:b3:37:b9:1b:98:07:8f:a7:4e:19:27:3d:55:51: 2e:06:f3:c9:31:b5:6c:30:b3:18:08:82:8e:3d:ef: 3e:31:33:7b:27:58:c2:e3:7e:a9:5d:84:66:80:5a: 90:ba:03:74:89:c6:17:43:02:39:79:c6:6e:39:60: 58:f8:54:bc:c1:9c:1b:9e:48:c8:28:6c:da:cb:23: 5e:a6:3a:a7:c1:4c:e0:62:36:5c:30:a1:db:a9:ba: e4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:8C:A8:68:A9:92:27:0A:D5:CD:4F:B3:32:7A:7B:88:B5:E9:A4:C3 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a49a5e3d-37ab-4278-9852-d0f7086400e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.204.32.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:72:6f:f6:f4:8d:41:9a:81:60:10:dc:d5:d7:ac:c8:24:d8: f4:77:57:10:2d:bc:ab:e7:73:97:3f:7e:dc:d9:f8:17:2e:ee: c0:3a:ef:2c:d0:53:cc:8f:14:00:9a:f4:cb:a0:18:b5:90:a6: 4b:c8:4d:c4:6d:fd:10:98:97:da:97:57:3f:61:af:fe:0f:db: f8:12:23:b9:72:eb:8d:ca:77:94:b8:c4:6f:97:6a:b5:d3:08: 8f:84:b1:47:52:2a:b6:9a:11:aa:ef:fa:6c:b7:2d:dc:db:c0: d5:26:80:07:04:ea:23:4e:d9:08:da:f3:37:5d:5b:67:6f:4c: ad:b0:32:bc:41:ee:5f:5d:d8:f6:a9:d9:a1:a4:c6:57:6c:9d: 18:03:a6:66:81:86:2a:f6:bd:2d:53:b4:93:45:8c:fa:cd:6b: 4f:69:c4:c4:3e:e5:4a:ec:44:d8:13:3d:c2:ce:be:98:33:79: cb:b5:c5:41:b0:21:0c:9f:60:d9:6a:92:3b:ef:1a:c4:15:cf: cb:5b:71:d6:46:8c:59:9e:51:0a:29:e8:66:4a:af:ea:d1:d7: 7d:93:fe:19:ef:13:19:08:c6:51:7d:62:5c:f6:ea:7a:28:b1: 5e:bf:ae:7b:18:07:1f:90:e5:01:0f:48:c7:be:ad:4d:0c:c4: a7:60:2f:5a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURka1VUV03q5hYGdcMEZoNITRSrEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE1MTgzMTIwWhcNMjUxMTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A3ODhhMDQ3ZDM0MjJkN2MzMWQ3NzA0YmRhYmZkMWEzYTM4 Y2RiNGEzNDYzYjZiMjUxNzdjMTgxZWY5ODA4ZmZlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQChQkSPBTWqt4p1Tv0lgvd0Rneov1uwSNdfH5pRKKTjNY8g E6leYW5hV2Wx8YwRC6lLjF6VJUlZIDuDZ0+k49VHxPdJkft3fw6j9W43XUP5I4Jv zTAwiy3J2aq9rtJU4G2+WqJhH6NCIo81IOX6oKpH5G0wRFqeiMN4g5g80j1qGT53 jNjGGCww09VPnaRhfjj1uA/ypt2En717I+SfNO7iXY7xOGizN7kbmAePp04ZJz1V US4G88kxtWwwsxgIgo497z4xM3snWMLjfqldhGaAWpC6A3SJxhdDAjl5xm45YFj4 VLzBnBueSMgobNrLI16mOqfBTOBiNlwwodupuuR3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUf4yoaKmSJwrVzU+zMnp7iLXppMMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2E0OWE1ZTNkLTM3YWItNDI3OC05ODUyLWQwZjcwODY0MDBlNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACPzCAwDQYJKoZIhvcNAQELBQADggEBAFtyb/b0jUGagWAQ3NXXrMgk2PR3 VxAtvKvnc5c/ftzZ+Bcu7sA67yzQU8yPFACa9MugGLWQpkvITcRt/RCYl9qXVz9h r/4P2/gSI7ly643Kd5S4xG+XarXTCI+EsUdSKraaEarv+my3LdzbwNUmgAcE6iNO 2Qja8zddW2dvTK2wMrxB7l9d2Pap2aGkxldsnRgDpmaBhir2vS1TtJNFjPrNa09p xMQ+5UrsRNgTPcLOvpgzecu1xUGwIQyfYNlqkjvvGsQVz8tbcdZGjFmeUQop6GZK r+rR132T/hnvExkIxlF9Ylz26noosV6/rnsYBx+Q5QEPSMe+rU0MxKdgL1o= -----END CERTIFICATE-----Generated at Fri Oct 17 22:05:04 2025 by rpki-client