$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bb3a8bcf-cae7-427f-bb65-401bf30544f5.roa File: bb3a8bcf-cae7-427f-bb65-401bf30544f5.roa (raw, json) Hash identifier: SF2Ox2pnwkMHI+kEHlSGN8rmA1DZUemiGcq85/i7yMU= Subject key identifier: 1A:50:7A:59:42:4F:99:C5:30:C2:FD:9C:A5:86:C5:0B:A7:3A:4D:CB Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7A988288CE9ADEFFD04B5DC0FAF975E8769650F8 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bb3a8bcf-cae7-427f-bb65-401bf30544f5.roa Signing time: Fri 26 Sep 2025 15:29:22 +0000 ROA not before: Fri 26 Sep 2025 15:29:22 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.177.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:98:82:88:ce:9a:de:ff:d0:4b:5d:c0:fa:f9:75:e8:76:96:50:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 15:29:22 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=c3ffd4a2665968e419ecf06b45434b807a48971ed33b1b80f37c227428e6f51c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b1:9c:0a:9e:c8:6b:c9:19:a9:d7:3a:3a:41: 17:eb:51:f8:70:4c:4f:1b:90:14:de:76:e5:8c:33: 8c:cc:17:e4:21:74:4f:ab:9f:28:51:61:bb:6e:e6: 85:7f:a9:9f:b6:b5:99:84:4a:5e:85:4d:31:9b:60: 77:f7:3b:5e:47:97:01:cf:1a:88:77:84:0a:ad:72: 67:0c:54:6b:b1:ce:97:1f:b9:82:b7:3e:4a:53:5f: 85:19:25:c3:af:65:f3:4f:49:88:dd:e8:12:13:e8: e1:21:ff:44:d9:d9:8b:e1:74:1f:8e:a2:8f:51:69: 97:a8:66:ce:e4:2e:55:ee:8b:a1:31:f2:a9:ac:a8: b1:44:07:1a:a1:69:d8:5b:e0:2c:fa:fd:ed:93:ad: 6f:31:8e:2f:70:e8:26:15:07:7c:6e:98:b6:e1:70: 61:12:7b:91:7c:a0:79:bd:a9:b3:9b:55:f4:38:70: fe:86:50:6d:d4:43:2a:75:10:eb:96:14:a0:6a:96: 62:1b:6d:2f:7e:04:76:a2:54:21:d8:cc:c0:99:18: a9:a8:f3:ff:b6:cf:6f:c9:00:1c:e0:28:52:45:54: 5a:bc:75:a5:00:28:22:63:b8:a0:96:6f:59:2d:71: 3c:33:ef:6f:88:17:f1:9f:21:bd:a2:37:c9:c2:07: 7f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:50:7A:59:42:4F:99:C5:30:C2:FD:9C:A5:86:C5:0B:A7:3A:4D:CB X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bb3a8bcf-cae7-427f-bb65-401bf30544f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.177.82.0/24 Signature Algorithm: sha256WithRSAEncryption 66:09:19:8b:7b:89:9b:fe:ec:49:b5:aa:0c:de:46:f9:8a:1f: de:90:5d:8a:13:b5:22:e4:59:bf:0b:6f:df:93:54:66:9f:1c: ed:10:5d:3f:9f:c8:c7:22:9a:4a:3d:39:7a:22:6a:1f:74:5f: 61:ff:99:6c:b0:34:f5:d1:ae:40:94:24:7a:4e:aa:1f:00:02: 8e:67:32:db:ff:0c:a4:76:2a:31:f7:55:1b:58:d9:f3:7e:2f: 99:25:12:a6:c2:f5:ba:0c:d7:07:ac:8f:bb:c2:2e:59:ee:29: 2a:49:46:49:d4:db:cb:88:67:c7:ab:cf:68:dc:c6:f9:73:bb: ce:be:56:b4:4c:57:e5:f1:17:db:13:09:f1:3f:28:d4:2b:08: 1d:c2:fa:a1:93:8f:fb:79:01:0d:db:af:95:c6:51:11:b9:85: 6b:c4:c5:05:a4:80:a9:10:22:18:1b:6f:e6:d4:c7:b3:18:75: c9:92:1a:e6:20:1e:ba:94:02:5e:86:f7:8f:33:68:12:e3:c7: 58:5b:98:a7:ee:fc:be:85:ff:01:e1:6a:e4:81:e4:87:30:58: a8:49:2e:f2:84:6e:53:db:f1:83:f2:fb:91:7c:6d:69:87:69: ad:a0:9b:fa:f3:cb:46:2f:9d:06:96:18:a0:86:51:2f:a7:a5: d1:2e:bc:b2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUepiCiM6a3v/QS13A+vl16HaWUPgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MTUyOTIyWhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BjM2ZmZDRhMjY2NTk2OGU0MTllY2YwNmI0NTQzNGI4MDdh NDg5NzFlZDMzYjFiODBmMzdjMjI3NDI4ZTZmNTFjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKsZwKnshryRmp1zo6QRfrUfhwTE8bkBTeduWMM4zMF+Qh dE+rnyhRYbtu5oV/qZ+2tZmESl6FTTGbYHf3O15HlwHPGoh3hAqtcmcMVGuxzpcf uYK3PkpTX4UZJcOvZfNPSYjd6BIT6OEh/0TZ2YvhdB+Ooo9RaZeoZs7kLlXui6Ex 8qmsqLFEBxqhadhb4Cz6/e2TrW8xji9w6CYVB3xumLbhcGESe5F8oHm9qbObVfQ4 cP6GUG3UQyp1EOuWFKBqlmIbbS9+BHaiVCHYzMCZGKmo8/+2z2/JABzgKFJFVFq8 daUAKCJjuKCWb1ktcTwz72+IF/GfIb2iN8nCB38FAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUGlB6WUJPmcUwwv2cpYbFC6c6TcswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2JiM2E4YmNmLWNhZTctNDI3Zi1iYjY1LTQwMWJmMzA1NDRmNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAPsVIwDQYJKoZIhvcNAQELBQADggEBAGYJGYt7iZv+7Em1qgzeRvmKH96Q XYoTtSLkWb8Lb9+TVGafHO0QXT+fyMcimko9OXoiah90X2H/mWywNPXRrkCUJHpO qh8AAo5nMtv/DKR2KjH3VRtY2fN+L5klEqbC9boM1wesj7vCLlnuKSpJRknU28uI Z8erz2jcxvlzu86+VrRMV+XxF9sTCfE/KNQrCB3C+qGTj/t5AQ3br5XGURG5hWvE xQWkgKkQIhgbb+bUx7MYdcmSGuYgHrqUAl6G948zaBLjx1hbmKfu/L6F/wHhauSB 5IcwWKhJLvKEblPb8YPy+5F8bWmHaa2gm/rzy0YvnQaWGKCGUS+npdEuvLI= -----END CERTIFICATE-----Generated at Mon Oct 20 21:15:55 2025 by rpki-client