$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/897f2bab-8d97-43bd-a0f0-84b359f5ebda.roa File: 897f2bab-8d97-43bd-a0f0-84b359f5ebda.roa (raw, json) Hash identifier: 2oc5LWU+9FSUlo3HKrScDzAX5vjPvqrtiI3/E1VWWdw= Subject key identifier: 15:2D:05:36:F4:EF:E7:DD:AD:F9:A7:CE:6D:D3:5F:92:20:80:F5:EF Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 25A52DEB2011A4C99D4144BA544CF7D470829D15 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/897f2bab-8d97-43bd-a0f0-84b359f5ebda.roa Signing time: Mon 15 Sep 2025 16:08:01 +0000 ROA not before: Mon 15 Sep 2025 16:08:01 +0000 ROA not after: Mon 20 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 15.220.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:a5:2d:eb:20:11:a4:c9:9d:41:44:ba:54:4c:f7:d4:70:82:9d:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 15 16:08:01 2025 GMT Not After : Oct 20 23:59:59 2025 GMT Subject: serialNumber=2fb029f01698ff990197dbaf21b96b6d8a0dcfbd0af7f79fbafaf6df97eedc8d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:a4:d2:a2:b7:03:0b:d6:bc:00:97:39:c2:1d: 44:0d:76:24:df:ec:0c:59:87:d4:a0:fd:f9:77:52: 16:78:ce:a2:4e:23:a1:95:ce:37:16:da:d9:8b:96: 47:d8:a9:a6:42:a1:40:15:e0:89:d6:99:be:51:f7: 16:c7:21:0d:42:25:18:2a:47:3b:8d:20:12:52:4d: ae:8b:e1:3d:a4:17:04:ed:94:ed:23:98:c5:a5:df: a1:60:c3:45:85:24:8b:52:a8:b1:f9:1c:f3:c8:17: ee:a9:e8:2a:1c:76:41:6f:4f:d1:d6:e6:fd:f8:ba: c2:6d:f4:af:00:83:27:20:79:75:ea:99:5c:59:3c: 9a:87:dc:64:b5:a7:8a:be:e6:1b:58:6d:3e:3a:64: b0:2e:38:70:4b:f7:b5:fe:ff:87:2e:64:20:3e:e0: e4:40:3f:48:f3:6e:4c:43:c0:c7:b0:3e:8e:41:b7: a0:13:79:8c:aa:9b:37:d9:ff:b5:77:9b:2d:cb:3e: 10:c0:81:75:83:c1:23:06:9f:b3:cc:cf:52:74:47: 8d:cb:41:29:b7:a6:5d:13:77:8d:86:ed:4f:e1:ea: 8a:af:d5:50:50:1d:21:b2:a0:6f:94:83:e2:48:af: 8e:2b:e7:5c:7e:30:a5:cd:fa:48:34:b3:b7:76:04: d8:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:2D:05:36:F4:EF:E7:DD:AD:F9:A7:CE:6D:D3:5F:92:20:80:F5:EF X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/897f2bab-8d97-43bd-a0f0-84b359f5ebda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.220.233.0/24 Signature Algorithm: sha256WithRSAEncryption 31:c0:48:cc:e3:db:35:25:52:d8:ae:39:da:cb:a2:4a:d6:fa: a7:f2:9a:cc:97:08:52:2e:90:f1:1a:ea:3d:b0:6b:6d:52:5b: b8:eb:2b:35:7f:db:1e:40:2a:db:3d:00:5a:42:d8:27:3a:ba: 83:de:3c:9b:88:bb:84:8a:43:03:d6:2d:ec:63:c7:d4:45:96: 92:2e:c3:c0:81:c0:bf:60:c1:dd:e9:96:d1:ec:11:e0:08:4b: 97:cb:f9:9f:0a:30:2c:e3:51:86:5a:bb:b6:97:5e:1a:ba:50: 83:48:e8:96:dd:32:b8:06:41:e2:71:db:92:e9:57:65:41:d1: 19:38:da:11:7d:01:cc:81:4c:69:37:65:df:94:7c:80:23:ad: 76:49:ce:96:4d:b3:59:54:1b:e4:8b:9f:85:8a:4f:48:7b:7f: 0d:85:91:ff:61:fd:ae:ee:5b:8f:57:85:1b:bd:14:17:15:ed: af:f1:79:df:ed:d5:a6:4b:11:88:e8:37:ad:09:98:1b:40:51: c4:4f:01:d3:d9:5c:5b:c1:fb:8b:f7:80:6e:f8:1e:69:86:d3: 0d:89:d3:92:43:de:b1:45:7f:06:b8:16:ec:ed:25:6f:e8:e3: 49:66:d8:c8:4e:cd:ed:76:d6:da:02:65:8a:93:8a:8e:d2:2e: 34:bf:3f:82 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJaUt6yARpMmdQUS6VEz31HCCnRUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTE1MTYwODAxWhcNMjUxMDIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AyZmIwMjlmMDE2OThmZjk5MDE5N2RiYWYyMWI5NmI2ZDhh MGRjZmJkMGFmN2Y3OWZiYWZhZjZkZjk3ZWVkYzhkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDrpNKitwML1rwAlznCHUQNdiTf7AxZh9Sg/fl3UhZ4zqJO I6GVzjcW2tmLlkfYqaZCoUAV4InWmb5R9xbHIQ1CJRgqRzuNIBJSTa6L4T2kFwTt lO0jmMWl36Fgw0WFJItSqLH5HPPIF+6p6CocdkFvT9HW5v34usJt9K8AgycgeXXq mVxZPJqH3GS1p4q+5htYbT46ZLAuOHBL97X+/4cuZCA+4ORAP0jzbkxDwMewPo5B t6ATeYyqmzfZ/7V3my3LPhDAgXWDwSMGn7PMz1J0R43LQSm3pl0Td42G7U/h6oqv 1VBQHSGyoG+Ug+JIr44r51x+MKXN+kg0s7d2BNi9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUFS0FNvTv592t+afObdNfkiCA9e8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg5N2YyYmFiLThkOTctNDNiZC1hMGYwLTg0YjM1OWY1ZWJkYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAP3OkwDQYJKoZIhvcNAQELBQADggEBADHASMzj2zUlUtiuOdrLokrW+qfy msyXCFIukPEa6j2wa21SW7jrKzV/2x5AKts9AFpC2Cc6uoPePJuIu4SKQwPWLexj x9RFlpIuw8CBwL9gwd3pltHsEeAIS5fL+Z8KMCzjUYZau7aXXhq6UINI6JbdMrgG QeJx25LpV2VB0Rk42hF9AcyBTGk3Zd+UfIAjrXZJzpZNs1lUG+SLn4WKT0h7fw2F kf9h/a7uW49XhRu9FBcV7a/xed/t1aZLEYjoN60JmBtAUcRPAdPZXFvB+4v3gG74 HmmG0w2J05JD3rFFfwa4FuztJW/o40lm2MhOze121toCZYqTio7SLjS/P4I= -----END CERTIFICATE-----Generated at Wed Oct 8 19:42:13 2025 by rpki-client