$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d071a541-4360-466f-b8a3-9329b3a7af5c.roa File: d071a541-4360-466f-b8a3-9329b3a7af5c.roa (raw, json) Hash identifier: acVMcro3yhfY27uSdKMbjv28uw0hh5BjqvR/FdZrZ3M= Subject key identifier: 5F:FF:FF:B7:71:62:4A:A3:B2:4E:71:3E:EB:7F:58:78:FC:17:FB:C8 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 18DA15AE51C63E91D248236FEC49BAE86DB0B957 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d071a541-4360-466f-b8a3-9329b3a7af5c.roa Signing time: Tue 07 Oct 2025 15:26:50 +0000 ROA not before: Tue 07 Oct 2025 15:26:50 +0000 ROA not after: Tue 11 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 15.220.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:da:15:ae:51:c6:3e:91:d2:48:23:6f:ec:49:ba:e8:6d:b0:b9:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 7 15:26:50 2025 GMT Not After : Nov 11 23:59:59 2025 GMT Subject: serialNumber=691b0b8661b8e3e61faf1b7139750886e47e1ba07be8ee8771fb6c9bafe13fbc, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1c:3e:6d:c6:92:c5:45:82:9d:53:fb:90:8d: 0a:fc:e7:e0:cc:3c:2f:b8:11:0d:19:0d:6f:4b:18: d5:1e:f0:0d:fd:a0:0e:8a:06:5e:9a:4a:01:62:49: 62:67:8c:70:7b:21:a6:8e:25:f4:3f:e0:24:a9:24: e3:92:92:e1:fd:e0:5a:a7:4d:31:04:14:76:46:48: b5:81:c3:a1:3c:f3:db:86:b0:78:e6:fc:f4:f6:74: f5:d4:ed:44:21:18:1f:65:96:d1:26:a5:9d:41:c5: 2d:7b:7a:f4:b9:01:fa:44:49:23:67:92:cc:71:f4: ec:b9:a8:4c:af:e8:87:ea:51:d1:5c:1e:f3:fe:85: d2:85:4b:8a:1c:32:36:bf:01:47:00:86:8d:e5:13: c8:9f:b4:08:8d:54:95:90:79:25:d2:40:d4:a2:91: b2:57:86:6e:7b:5c:9a:94:b9:d0:ef:29:6c:c5:0e: e8:d9:3a:af:c5:61:13:4e:5b:24:ba:45:a5:d8:28: 5c:ad:1a:c5:e9:5c:96:ba:fc:8f:93:35:8b:77:26: 58:3f:5f:b9:05:2a:3b:ad:f0:c7:79:c1:69:4a:51: 36:5c:2f:84:89:cc:00:2d:65:38:9c:d0:0b:13:05: e2:bb:e6:0a:f9:2c:00:f1:3d:b5:c2:8b:21:bb:ca: 73:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:FF:FF:B7:71:62:4A:A3:B2:4E:71:3E:EB:7F:58:78:FC:17:FB:C8 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d071a541-4360-466f-b8a3-9329b3a7af5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.220.236.0/22 Signature Algorithm: sha256WithRSAEncryption b4:9f:11:ea:b8:cb:e3:19:a7:8b:c0:58:44:73:90:99:f1:9b: f3:5e:1d:f0:d8:63:a2:05:1f:52:b9:5f:8c:dd:eb:3b:32:fe: c3:59:f9:f1:fd:c6:34:7b:a4:24:03:75:80:b0:0d:d5:ae:e7: 8a:a1:06:24:ab:0e:71:47:a1:9d:9b:77:51:77:b3:56:21:8f: 48:81:9b:91:7a:cd:20:e0:bc:be:38:6c:11:78:9d:5d:a2:6b: 71:ec:70:d8:d5:48:a4:ca:c2:8f:28:2a:cf:70:24:43:e2:01: ab:30:47:39:db:fb:bb:c4:ff:3b:f4:38:60:88:e9:93:53:00: 30:72:02:c0:1d:9f:06:1e:70:5f:28:d7:7a:1e:75:8b:d0:c7: 2c:f2:a8:c0:75:2f:e5:a8:a2:d3:3c:64:a2:cf:d0:26:ee:bd: d1:41:01:b4:dd:dd:bc:e0:05:ed:a8:f2:a2:05:2a:6d:7d:d7: e7:86:50:b0:cd:2c:56:fb:d5:53:e4:d2:33:a9:ea:5d:e1:2f: 46:74:46:b5:93:f7:29:3a:c8:c9:a7:28:f4:ec:e2:ae:05:2a: 73:b4:ed:ba:95:0e:3b:1f:67:c8:5e:11:54:3c:24:f3:4f:0a: 56:fc:59:b9:03:30:f3:d9:7e:58:f2:18:98:df:e9:65:62:4a: 68:d3:4d:b9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGNoVrlHGPpHSSCNv7Em66G2wuVcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDA3MTUyNjUwWhcNMjUxMTExMjM1OTU5 WjB6MUkwRwYDVQQFE0A2OTFiMGI4NjYxYjhlM2U2MWZhZjFiNzEzOTc1MDg4NmU0 N2UxYmEwN2JlOGVlODc3MWZiNmM5YmFmZTEzZmJjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrHD5txpLFRYKdU/uQjQr85+DMPC+4EQ0ZDW9LGNUe8A39 oA6KBl6aSgFiSWJnjHB7IaaOJfQ/4CSpJOOSkuH94FqnTTEEFHZGSLWBw6E889uG sHjm/PT2dPXU7UQhGB9lltEmpZ1BxS17evS5AfpESSNnksxx9Oy5qEyv6IfqUdFc HvP+hdKFS4ocMja/AUcAho3lE8iftAiNVJWQeSXSQNSikbJXhm57XJqUudDvKWzF DujZOq/FYRNOWyS6RaXYKFytGsXpXJa6/I+TNYt3Jlg/X7kFKjut8Md5wWlKUTZc L4SJzAAtZTic0AsTBeK75gr5LADxPbXCiyG7ynN1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUX///t3FiSqOyTnE+639YePwX+8gwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2QwNzFhNTQxLTQzNjAtNDY2Zi1iOGEzLTkzMjliM2E3YWY1Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIP3OwwDQYJKoZIhvcNAQELBQADggEBALSfEeq4y+MZp4vAWERzkJnxm/Ne HfDYY6IFH1K5X4zd6zsy/sNZ+fH9xjR7pCQDdYCwDdWu54qhBiSrDnFHoZ2bd1F3 s1Yhj0iBm5F6zSDgvL44bBF4nV2ia3HscNjVSKTKwo8oKs9wJEPiAaswRznb+7vE /zv0OGCI6ZNTADByAsAdnwYecF8o13oedYvQxyzyqMB1L+WootM8ZKLP0CbuvdFB AbTd3bzgBe2o8qIFKm191+eGULDNLFb71VPk0jOp6l3hL0Z0RrWT9yk6yMmnKPTs 4q4FKnO07bqVDjsfZ8heEVQ8JPNPClb8WbkDMPPZfljyGJjf6WViSmjTTbk= -----END CERTIFICATE-----Generated at Wed Oct 8 21:14:49 2025 by rpki-client