$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a926660f-724f-4d66-b9f3-dd5b25efa483.roa File: a926660f-724f-4d66-b9f3-dd5b25efa483.roa (raw, json) Hash identifier: ZF0Gg6+qWa/E7Xo0u3wn/hDs5dqEsIzmINeMAYqyoiM= Subject key identifier: 51:00:88:02:F0:01:03:B8:ED:9C:A8:D2:B4:40:8A:AA:FA:59:D4:6B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 545C7577652EA7C4463C3D95C65CE46E544EB663 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a926660f-724f-4d66-b9f3-dd5b25efa483.roa Signing time: Mon 06 Oct 2025 16:52:38 +0000 ROA not before: Mon 06 Oct 2025 16:52:38 +0000 ROA not after: Mon 10 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.181.104.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:5c:75:77:65:2e:a7:c4:46:3c:3d:95:c6:5c:e4:6e:54:4e:b6:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 6 16:52:38 2025 GMT Not After : Nov 10 23:59:59 2025 GMT Subject: serialNumber=66da9734ddf27d218d138de2078f3feef071165d766a7cf329d7216f39140658, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:37:16:42:0e:f0:d6:37:e1:67:d1:17:f9:46: a2:1f:f9:d1:7d:64:43:59:e2:e9:70:e7:50:5d:e5: db:40:ef:d5:d6:14:38:aa:a9:e5:fd:54:22:18:7e: 52:ec:6d:f1:af:90:c4:5c:34:ca:0a:e6:cc:72:ed: 4c:87:9f:a3:13:cd:e0:54:d5:4c:1e:dd:6d:90:c0: 59:89:f1:5c:98:09:7e:b1:3c:0c:38:40:bf:40:4a: 66:de:d2:88:91:ee:5f:93:fc:69:94:b5:0e:af:de: ab:a6:99:0a:a8:d2:df:d2:05:57:9f:6f:7e:b4:b1: e4:6c:2f:bc:4c:fd:3a:3b:3f:6f:e2:91:fb:7b:9e: dd:a4:30:16:cf:0f:06:c0:e9:59:31:a9:1c:1f:af: 34:8d:61:a0:9a:c3:89:c2:1e:8f:1b:ce:a4:1e:7a: 35:82:06:99:67:8b:26:3c:6a:b3:91:bf:c4:1d:52: bf:a0:ea:30:64:48:50:7c:1c:d6:8f:a7:56:09:77: b5:68:51:e3:f8:6d:b8:c2:d7:33:c6:c6:23:c4:99: 14:b0:bf:08:65:4e:49:24:d4:c6:7b:3d:8d:cc:ff: bb:97:90:84:d6:43:10:43:4d:87:c3:78:7f:74:ed: 0e:81:84:59:88:75:23:70:ca:6f:39:f5:de:4a:eb: 1d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:00:88:02:F0:01:03:B8:ED:9C:A8:D2:B4:40:8A:AA:FA:59:D4:6B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a926660f-724f-4d66-b9f3-dd5b25efa483.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.181.104.0/21 Signature Algorithm: sha256WithRSAEncryption a1:68:eb:0b:5a:1d:9c:33:45:ea:9f:26:f4:14:22:2f:8c:7c: 15:a7:d4:6a:7b:d4:31:78:ca:d5:21:99:f5:3a:13:d6:20:1b: ff:ba:f7:74:e2:97:b4:10:95:11:96:3c:9f:96:50:73:4c:75: 13:27:79:6e:36:cd:29:0f:b3:57:30:88:3a:57:3c:9f:96:5f: ba:32:0c:bb:3f:41:9d:82:e6:b0:f5:e0:c4:51:bf:47:af:9d: e2:c0:49:b7:11:54:4f:dc:04:05:38:38:16:50:0c:f6:be:f6: a0:11:f4:29:9a:15:ed:b9:a9:1c:8f:6a:c5:6c:a7:71:97:1e: f9:d5:02:46:ce:53:21:1d:38:13:e5:be:16:af:e1:de:6b:65: a4:4e:cb:6a:07:54:e5:f6:b2:65:d6:25:93:12:9e:58:1b:55: 41:4b:b1:78:74:f9:58:03:0e:07:7c:b8:f6:26:ca:b9:33:2e: e5:05:67:0c:d3:af:18:f3:92:dd:5e:b1:98:3b:6b:32:28:fb: b0:c6:87:ca:24:d3:56:13:26:9b:f7:2d:7c:b0:48:58:4a:95: f7:af:7a:d1:c8:ad:84:57:83:45:b7:50:42:40:60:03:78:b2: a7:29:b9:cb:b3:93:f0:ca:00:bd:cf:b7:18:43:3f:04:0f:0f: 28:27:62:36 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVFx1d2Uup8RGPD2VxlzkblROtmMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDA2MTY1MjM4WhcNMjUxMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A2NmRhOTczNGRkZjI3ZDIxOGQxMzhkZTIwNzhmM2ZlZWYw NzExNjVkNzY2YTdjZjMyOWQ3MjE2ZjM5MTQwNjU4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyNxZCDvDWN+Fn0Rf5RqIf+dF9ZENZ4ulw51Bd5dtA79XW FDiqqeX9VCIYflLsbfGvkMRcNMoK5sxy7UyHn6MTzeBU1Uwe3W2QwFmJ8VyYCX6x PAw4QL9ASmbe0oiR7l+T/GmUtQ6v3qummQqo0t/SBVefb360seRsL7xM/To7P2/i kft7nt2kMBbPDwbA6VkxqRwfrzSNYaCaw4nCHo8bzqQeejWCBplniyY8arORv8Qd Ur+g6jBkSFB8HNaPp1YJd7VoUeP4bbjC1zPGxiPEmRSwvwhlTkkk1MZ7PY3M/7uX kITWQxBDTYfDeH907Q6BhFmIdSNwym859d5K6x0xAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUUQCIAvABA7jtnKjStECKqvpZ1GswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2E5MjY2NjBmLTcyNGYtNGQ2Ni1iOWYzLWRkNWIyNWVmYTQ4My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMPtWgwDQYJKoZIhvcNAQELBQADggEBAKFo6wtaHZwzReqfJvQUIi+MfBWn 1Gp71DF4ytUhmfU6E9YgG/+693Til7QQlRGWPJ+WUHNMdRMneW42zSkPs1cwiDpX PJ+WX7oyDLs/QZ2C5rD14MRRv0evneLASbcRVE/cBAU4OBZQDPa+9qAR9CmaFe25 qRyPasVsp3GXHvnVAkbOUyEdOBPlvhav4d5rZaROy2oHVOX2smXWJZMSnlgbVUFL sXh0+VgDDgd8uPYmyrkzLuUFZwzTrxjzkt1esZg7azIo+7DGh8ok01YTJpv3LXyw SFhKlfevetHIrYRXg0W3UEJAYAN4sqcpucuzk/DKAL3PtxhDPwQPDygnYjY= -----END CERTIFICATE-----Generated at Fri Oct 17 23:54:18 2025 by rpki-client