$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ace3a1e9-d5b3-49ff-b98c-40c5c247b40c.roa File: ace3a1e9-d5b3-49ff-b98c-40c5c247b40c.roa (raw, json) Hash identifier: sOEDOnrlScGX1L7/f0xXiv6iyGgEzRRvepqgxF13YMI= Subject key identifier: 60:BF:A4:E7:D8:10:C3:09:BA:AD:30:8A:B3:EE:F0:19:13:DB:E5:81 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4BF3F4B8DD803E98333C14861809CF3A6BA2754F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ace3a1e9-d5b3-49ff-b98c-40c5c247b40c.roa Signing time: Wed 15 Oct 2025 23:33:45 +0000 ROA not before: Wed 15 Oct 2025 23:33:45 +0000 ROA not after: Wed 19 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 144.220.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:f3:f4:b8:dd:80:3e:98:33:3c:14:86:18:09:cf:3a:6b:a2:75:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 15 23:33:45 2025 GMT Not After : Nov 19 23:59:59 2025 GMT Subject: serialNumber=5a3ab16dda27e6627c30a6949921f8292da8bca5623eb90e8e6296fbb5f5b62d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:63:dd:3a:c7:35:7f:f5:5c:60:5d:a1:39:6c: 22:fa:be:8d:20:7e:ef:c6:98:15:0d:04:71:3d:eb: fb:37:10:cc:92:ea:be:dd:8c:6b:26:f7:2a:b6:bb: ae:89:97:2a:e7:99:93:7e:3f:0d:90:80:17:0b:d4: 45:4b:88:49:e4:49:16:93:53:56:e9:42:5f:6f:21: 68:4a:51:a7:86:92:48:5b:ee:16:6e:00:13:ad:1c: 4d:97:90:e4:57:2d:44:ae:b3:1e:fb:2c:87:d0:97: a0:8b:ea:ac:42:58:c0:66:d5:26:0e:57:34:3e:58: f4:3b:e3:34:bb:be:17:cb:d0:e5:dc:4e:f5:3d:49: da:65:ef:bd:6c:24:4d:81:5a:b8:f4:46:9c:06:d0: 9e:47:a0:91:68:7e:f3:3f:90:ce:7b:6e:03:5c:32: 7f:56:e7:37:f7:12:f8:c8:62:83:9a:b9:52:65:05: ab:5c:e6:b8:60:17:20:bb:b0:6c:1f:d2:17:62:7f: 1d:a9:25:1d:f5:11:2e:f3:b5:e9:5e:7e:ed:32:d7: 66:09:87:c4:d5:a2:34:94:7e:86:45:75:08:d9:96: 4e:b4:ca:1b:e8:63:f5:02:91:11:1f:ee:98:96:96: 70:78:ca:c4:4a:5e:7b:b7:69:a9:05:af:00:c0:e3: 15:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:BF:A4:E7:D8:10:C3:09:BA:AD:30:8A:B3:EE:F0:19:13:DB:E5:81 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ace3a1e9-d5b3-49ff-b98c-40c5c247b40c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.220.134.0/24 Signature Algorithm: sha256WithRSAEncryption 95:15:4f:66:78:49:ca:f6:e6:01:b8:c9:d2:8c:17:08:08:d6: cd:2b:b8:be:ef:21:55:05:ff:7f:5b:91:9a:90:72:0c:0c:3c: ba:f1:ec:a8:c7:0f:40:21:3f:98:ce:46:19:09:eb:1a:a0:76: 37:82:ac:43:6f:94:2f:33:55:00:69:58:8c:45:34:a2:d1:e1: 56:e5:cb:66:31:28:8c:de:a5:c0:af:66:e0:12:7f:ac:7a:31: a0:78:43:6a:d2:fb:db:e4:d7:09:da:28:62:c3:d2:00:5e:c4: 27:b9:60:12:31:ce:23:de:f8:a8:2a:29:dd:b4:77:ee:bb:ae: 43:c8:0c:3f:5c:41:c2:c4:63:3d:3c:cf:9f:69:0e:72:35:99: e0:d8:e6:fc:5e:c5:ce:87:dd:f1:84:46:3c:d2:40:7a:15:1b: 19:19:c2:4f:8f:74:03:39:3f:a3:ff:4b:cf:6e:74:c9:48:91: bf:af:a2:10:40:3d:9e:3e:59:b4:35:0b:ef:98:73:0e:69:8a: 25:cd:df:9a:f8:82:f0:a1:ef:f0:8b:cb:5f:13:95:e2:2b:f8: 0f:79:e4:bc:42:5d:a7:64:5b:b1:f5:07:72:83:88:66:9d:39: 39:4c:b6:64:a2:a6:12:82:d4:e4:42:b7:5a:5b:9e:04:df:87: 8e:41:be:8a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUS/P0uN2APpgzPBSGGAnPOmuidU8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE1MjMzMzQ1WhcNMjUxMTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A1YTNhYjE2ZGRhMjdlNjYyN2MzMGE2OTQ5OTIxZjgyOTJk YThiY2E1NjIzZWI5MGU4ZTYyOTZmYmI1ZjViNjJkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDWY906xzV/9VxgXaE5bCL6vo0gfu/GmBUNBHE96/s3EMyS 6r7djGsm9yq2u66JlyrnmZN+Pw2QgBcL1EVLiEnkSRaTU1bpQl9vIWhKUaeGkkhb 7hZuABOtHE2XkORXLUSusx77LIfQl6CL6qxCWMBm1SYOVzQ+WPQ74zS7vhfL0OXc TvU9Sdpl771sJE2BWrj0RpwG0J5HoJFofvM/kM57bgNcMn9W5zf3EvjIYoOauVJl Batc5rhgFyC7sGwf0hdifx2pJR31ES7ztelefu0y12YJh8TVojSUfoZFdQjZlk60 yhvoY/UCkREf7piWlnB4ysRKXnu3aakFrwDA4xVLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUYL+k59gQwwm6rTCKs+7wGRPb5YEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2FjZTNhMWU5LWQ1YjMtNDlmZi1iOThjLTQwYzVjMjQ3YjQwYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACQ3IYwDQYJKoZIhvcNAQELBQADggEBAJUVT2Z4Scr25gG4ydKMFwgI1s0r uL7vIVUF/39bkZqQcgwMPLrx7KjHD0AhP5jORhkJ6xqgdjeCrENvlC8zVQBpWIxF NKLR4Vbly2YxKIzepcCvZuASf6x6MaB4Q2rS+9vk1wnaKGLD0gBexCe5YBIxziPe +KgqKd20d+67rkPIDD9cQcLEYz08z59pDnI1meDY5vxexc6H3fGERjzSQHoVGxkZ wk+PdAM5P6P/S89udMlIkb+vohBAPZ4+WbQ1C++Ycw5piiXN35r4gvCh7/CLy18T leIr+A955LxCXadkW7H1B3KDiGadOTlMtmSiphKC1ORCt1pbngTfh45Bvoo= -----END CERTIFICATE-----Generated at Fri Oct 17 23:48:37 2025 by rpki-client