$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2e260d22-d7bc-4ede-9e2b-0ad69ba24c5a.roa File: 2e260d22-d7bc-4ede-9e2b-0ad69ba24c5a.roa (raw, json) Hash identifier: DQXgXMGSNqSrNa/EjPYAj5clDtX1UVN8IgSLRVrXQvU= Subject key identifier: 78:ED:FE:D2:0F:72:A7:EA:DC:9B:C2:6B:1B:FA:3C:20:A7:83:0F:54 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6F366DD14ED8BC5FC7C327ADAD3270267DCC1AEE Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2e260d22-d7bc-4ede-9e2b-0ad69ba24c5a.roa Signing time: Fri 07 Nov 2025 01:31:47 +0000 ROA not before: Fri 07 Nov 2025 01:31:47 +0000 ROA not after: Fri 12 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.158.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:36:6d:d1:4e:d8:bc:5f:c7:c3:27:ad:ad:32:70:26:7d:cc:1a:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Nov 7 01:31:47 2025 GMT Not After : Dec 12 23:59:59 2025 GMT Subject: serialNumber=9da2e09206b716bde462f3ac105a1c932f40e45e1d54dc36b8bb7d0d1bf70878, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4a:33:23:35:d9:63:ef:a4:05:58:72:2b:3d: cd:bc:32:72:8d:5c:2f:95:d8:8a:8a:f0:2d:7e:f8: f6:7f:4e:e2:47:ba:d7:40:f6:d5:86:6f:68:78:07: a6:2e:c9:0f:33:45:b3:b9:44:1f:6f:8b:1d:93:ac: 60:eb:93:20:d2:0c:b9:8f:31:b0:4a:23:eb:d3:6f: cc:05:5c:af:76:ac:6c:a7:0b:aa:f3:ef:7d:2a:44: 97:da:df:8f:1e:ba:4f:62:e3:29:eb:ea:37:de:16: 56:3a:4d:2e:50:00:9a:ec:13:b7:b2:39:a9:4c:b7: fc:5a:6b:9c:d8:5b:a4:68:f9:5a:41:40:53:6d:65: 4a:9d:ab:34:ba:36:79:ea:0b:af:23:16:9c:52:dd: 99:6d:4e:3a:be:92:89:f4:49:7e:72:48:c8:5f:12: cb:58:83:5d:91:39:c6:83:fd:88:f0:fd:6c:93:46: b0:a8:79:0e:97:5e:01:4d:0c:ee:88:25:ca:6b:8f: 3c:4e:e4:f7:6a:0d:a5:b8:88:27:5b:bc:d3:da:d4: 19:94:a5:1e:26:e6:d5:94:aa:94:09:d4:21:0a:a4: 20:a5:b0:ea:b6:47:02:25:c8:1e:d5:b0:2c:97:61: e2:61:a3:1f:4f:a6:19:b3:ab:0e:9d:ba:e1:c3:5e: 3a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:ED:FE:D2:0F:72:A7:EA:DC:9B:C2:6B:1B:FA:3C:20:A7:83:0F:54 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2e260d22-d7bc-4ede-9e2b-0ad69ba24c5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.158.186.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:a1:31:90:c0:d3:a1:b1:fb:68:61:b2:83:f7:d8:88:00:d7: f8:04:b6:a7:1f:fc:5b:fd:73:8f:03:8e:ae:12:31:f1:06:51: 24:5e:3c:d8:1b:45:ef:b4:29:a0:fd:e8:79:18:60:15:5f:e6: af:c3:f9:3c:e7:47:36:16:94:14:04:56:f4:5e:55:e3:dd:b6: 19:8b:52:47:47:07:bf:1e:93:1c:35:3c:6c:1e:ed:e4:26:1e: 7e:4e:04:b8:5b:f0:a2:99:3e:8c:c3:5a:18:a6:69:94:d1:ce: 13:90:50:18:a5:e4:c9:a5:f4:3a:ab:16:d2:84:b5:1e:ec:a0: f1:66:3b:e3:68:2e:94:2d:ec:f0:8a:b0:3b:9d:76:c1:5e:23: c3:4e:90:53:8c:f7:37:77:c3:c8:47:3d:ba:eb:1f:37:2e:b8: 20:78:ff:ce:77:47:97:c4:36:87:52:54:44:86:b6:5b:b5:f6: 13:66:b7:75:6f:7d:5f:02:87:86:78:ec:0f:45:be:89:fd:1b: 77:8d:fb:5c:46:73:24:a5:74:19:c1:21:b0:b6:b2:26:3f:21: 11:54:27:1b:e7:79:8d:c5:03:c4:3b:e0:ff:ee:90:2d:29:3d: 6a:ce:eb:fa:44:4d:dd:4d:23:cb:a4:72:f6:b4:2e:55:50:ad: 60:96:96:6d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbzZt0U7YvF/HwyetrTJwJn3MGu4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMTA3MDEzMTQ3WhcNMjUxMjEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZGEyZTA5MjA2YjcxNmJkZTQ2MmYzYWMxMDVhMWM5MzJm NDBlNDVlMWQ1NGRjMzZiOGJiN2QwZDFiZjcwODc4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQSjMjNdlj76QFWHIrPc28MnKNXC+V2IqK8C1++PZ/TuJH utdA9tWGb2h4B6YuyQ8zRbO5RB9vix2TrGDrkyDSDLmPMbBKI+vTb8wFXK92rGyn C6rz730qRJfa348euk9i4ynr6jfeFlY6TS5QAJrsE7eyOalMt/xaa5zYW6Ro+VpB QFNtZUqdqzS6NnnqC68jFpxS3ZltTjq+kon0SX5ySMhfEstYg12ROcaD/Yjw/WyT RrCoeQ6XXgFNDO6IJcprjzxO5PdqDaW4iCdbvNPa1BmUpR4m5tWUqpQJ1CEKpCCl sOq2RwIlyB7VsCyXYeJhox9Pphmzqw6duuHDXjoDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUeO3+0g9yp+rcm8JrG/o8IKeDD1QwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzJlMjYwZDIyLWQ3YmMtNGVkZS05ZTJiLTBhZDY5YmEyNGM1YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAPnrowDQYJKoZIhvcNAQELBQADggEBAE2hMZDA06Gx+2hhsoP32IgA1/gE tqcf/Fv9c48Djq4SMfEGUSRePNgbRe+0KaD96HkYYBVf5q/D+TznRzYWlBQEVvRe VePdthmLUkdHB78ekxw1PGwe7eQmHn5OBLhb8KKZPozDWhimaZTRzhOQUBil5Mml 9DqrFtKEtR7soPFmO+NoLpQt7PCKsDuddsFeI8NOkFOM9zd3w8hHPbrrHzcuuCB4 /853R5fENodSVESGtlu19hNmt3VvfV8Ch4Z47A9Fvon9G3eN+1xGcySldBnBIbC2 siY/IRFUJxvneY3FA8Q74P/ukC0pPWrO6/pETd1NI8ukcva0LlVQrWCWlm0= -----END CERTIFICATE-----Generated at Fri Nov 7 20:21:25 2025 by rpki-client