$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/218ebb2d-3855-42ab-a742-5830d3ae10d7.roa File: 218ebb2d-3855-42ab-a742-5830d3ae10d7.roa (raw, json) Hash identifier: DcTzP3Ammnjhy3yQG2mcsbqSBqZzNg7WtP5Q2h+d0sE= Subject key identifier: 19:C0:3F:2F:FD:91:C4:A2:F8:1D:C0:E4:2D:35:B5:EB:4C:29:1C:2F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 56BF0C01AD19E3B5112088DF9E128A6A4871499F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/218ebb2d-3855-42ab-a742-5830d3ae10d7.roa Signing time: Tue 04 Nov 2025 00:40:10 +0000 ROA not before: Tue 04 Nov 2025 00:40:10 +0000 ROA not after: Tue 09 Dec 2025 23:59:59 +0000 asID: 14618 IP address blocks: 161.188.176.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:bf:0c:01:ad:19:e3:b5:11:20:88:df:9e:12:8a:6a:48:71:49:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Nov 4 00:40:10 2025 GMT Not After : Dec 9 23:59:59 2025 GMT Subject: serialNumber=058063c2af4520ea6ebc54c47d983ef200835091a1849a0cd4978524a224c323, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4f:55:2b:94:56:96:0d:8d:f5:72:bf:c4:e6: 8c:90:e2:b5:0f:bd:c0:3a:03:e6:d1:5f:a1:ad:66: 20:d6:10:cf:9a:74:d0:73:f9:e5:86:ff:5b:ca:e3: 34:ac:06:77:30:4d:b3:7c:70:ff:95:60:a4:0b:b2: db:74:f1:c8:c9:e8:5f:45:7e:c3:ea:4d:70:1e:4a: 15:60:d7:0a:c8:d8:c3:32:8a:0a:7c:2c:4c:bb:f5: 43:09:08:72:cf:94:08:f7:d5:04:96:ce:62:87:7a: 70:26:b5:dd:a1:10:eb:ef:bf:98:f9:2f:1e:65:cc: a1:39:b7:bf:32:fc:17:e2:d6:0a:a4:5b:00:40:0f: 7a:0e:4b:bf:4e:77:26:9c:fc:b4:b6:0a:e6:96:07: cd:8d:81:b8:13:51:6e:8d:c1:6c:0b:b7:74:9f:36: b8:6c:e6:07:c9:3d:35:c8:86:cd:3f:35:d6:a2:6e: 8a:f8:ec:fe:b1:f9:6c:37:d9:d6:f7:30:91:91:0b: b8:79:5c:b8:13:e8:01:d0:d8:53:f9:70:52:f1:b1: 3a:5f:3c:e6:b6:0d:1a:84:d3:cb:9c:7b:dd:f7:2c: cc:58:3d:7e:f8:85:57:14:35:00:63:9f:38:ae:cf: b7:ee:a8:44:12:29:0e:01:f1:c9:a7:c5:ff:eb:4c: 65:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:C0:3F:2F:FD:91:C4:A2:F8:1D:C0:E4:2D:35:B5:EB:4C:29:1C:2F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/218ebb2d-3855-42ab-a742-5830d3ae10d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.188.176.0/23 Signature Algorithm: sha256WithRSAEncryption 70:4f:20:88:b9:fa:1f:0d:79:f7:a1:64:d8:6a:8f:f0:cc:f0: 3b:96:b9:ee:7e:c4:d0:6d:9c:e2:b9:cd:2f:87:46:75:a7:a5: 9d:30:dc:62:c5:00:b1:b4:2b:15:fb:78:95:fa:5e:ab:7e:e3: 1b:c2:d3:40:d0:1f:f6:56:fd:6d:96:96:d6:19:7b:8a:ec:6e: 5e:c9:3d:57:fb:48:3c:d5:ee:4d:07:5e:8b:2e:bd:a5:47:42: 52:b0:2e:ee:5c:e3:f8:90:e6:db:bc:aa:0c:f4:8a:00:09:cb: 3b:2e:8b:bb:59:22:0a:b8:13:56:af:4e:e8:14:a8:ac:2c:67: 12:b1:20:5d:ac:e0:f1:6d:65:f1:c2:72:04:93:12:2e:af:5e: 13:7f:d3:ff:05:62:b3:3f:72:79:bd:48:89:d5:29:e5:e9:d8: c1:a9:28:c2:d1:75:1a:48:2f:52:0b:9d:22:cf:ba:d0:b6:07: 27:07:08:b5:3e:49:9f:9c:be:fb:55:8f:e9:32:66:b4:7c:ea: b1:dc:02:58:34:12:d2:4d:26:e9:39:3d:46:af:e8:6e:d7:0b: f1:2f:fd:8d:76:86:d6:e2:9e:98:30:6d:08:e2:a0:57:48:7e: 79:67:b5:94:36:95:3c:e2:2e:ba:0e:fc:d1:55:5f:cf:92:f8: 3a:ed:08:7e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVr8MAa0Z47URIIjfnhKKakhxSZ8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMTA0MDA0MDEwWhcNMjUxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AwNTgwNjNjMmFmNDUyMGVhNmViYzU0YzQ3ZDk4M2VmMjAw ODM1MDkxYTE4NDlhMGNkNDk3ODUyNGEyMjRjMzIzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvT1UrlFaWDY31cr/E5oyQ4rUPvcA6A+bRX6GtZiDWEM+a dNBz+eWG/1vK4zSsBncwTbN8cP+VYKQLstt08cjJ6F9FfsPqTXAeShVg1wrI2MMy igp8LEy79UMJCHLPlAj31QSWzmKHenAmtd2hEOvvv5j5Lx5lzKE5t78y/Bfi1gqk WwBAD3oOS79Odyac/LS2CuaWB82NgbgTUW6NwWwLt3SfNrhs5gfJPTXIhs0/Ndai bor47P6x+Ww32db3MJGRC7h5XLgT6AHQ2FP5cFLxsTpfPOa2DRqE08uce933LMxY PX74hVcUNQBjnziuz7fuqEQSKQ4B8cmnxf/rTGXbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUGcA/L/2RxKL4HcDkLTW160wpHC8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzIxOGViYjJkLTM4NTUtNDJhYi1hNzQyLTU4MzBkM2FlMTBkNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAGhvLAwDQYJKoZIhvcNAQELBQADggEBAHBPIIi5+h8NefehZNhqj/DM8DuW ue5+xNBtnOK5zS+HRnWnpZ0w3GLFALG0KxX7eJX6Xqt+4xvC00DQH/ZW/W2WltYZ e4rsbl7JPVf7SDzV7k0HXosuvaVHQlKwLu5c4/iQ5tu8qgz0igAJyzsui7tZIgq4 E1avTugUqKwsZxKxIF2s4PFtZfHCcgSTEi6vXhN/0/8FYrM/cnm9SInVKeXp2MGp KMLRdRpIL1ILnSLPutC2BycHCLU+SZ+cvvtVj+kyZrR86rHcAlg0EtJNJuk5PUav 6G7XC/Ev/Y12htbinpgwbQjioFdIfnlntZQ2lTziLroO/NFVX8+S+DrtCH4= -----END CERTIFICATE-----Generated at Wed Nov 5 09:08:15 2025 by rpki-client