$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cf8998d8-99d4-4b0b-9648-f902779332fe.roa File: cf8998d8-99d4-4b0b-9648-f902779332fe.roa (raw, json) Hash identifier: k3XLBZo9OOW9kouUMm+F9vGpKhwN82VBsaqs3+RhDMM= Subject key identifier: C2:0B:5A:2A:10:3F:8F:E6:E8:24:D9:B0:57:48:39:6D:08:6C:62:81 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5873D54E9FAE7662F96CA46DF1C8C951F9349226 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cf8998d8-99d4-4b0b-9648-f902779332fe.roa Signing time: Fri 26 Sep 2025 15:30:53 +0000 ROA not before: Fri 26 Sep 2025 15:30:53 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.220.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:73:d5:4e:9f:ae:76:62:f9:6c:a4:6d:f1:c8:c9:51:f9:34:92:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 15:30:53 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=7eca3533db65ce3621fac64a9d7a9d311597dc777aabcc0a7b1640476133d04a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:be:a8:72:7d:44:29:ba:8c:01:dc:55:eb:67: 2c:dc:d5:e6:d7:58:bc:8e:4b:a4:df:50:60:d6:b6: ea:ec:de:f3:28:67:87:81:cc:42:20:83:9f:1b:52: 2c:13:d8:4b:b5:e7:36:c9:72:c7:d4:1a:0f:98:0c: 6b:02:be:5c:49:2c:3a:a8:e2:44:27:10:0d:9f:a4: 8e:b4:66:e2:85:ef:f9:14:b1:ee:a0:37:1d:f6:85: c1:d0:ec:2b:8a:b6:09:33:37:61:2b:f1:43:86:83: 95:dc:e5:f8:87:3e:27:49:0a:76:e0:df:d0:3a:f1: 0f:af:5e:08:a3:a7:02:64:c0:8e:9b:57:ad:52:49: c8:f2:bc:b7:8f:31:27:4d:d8:c2:50:89:c1:d6:93: 50:28:2b:fa:8b:5c:4d:94:13:2c:0f:6b:f4:5a:1d: 61:54:9a:93:a7:1c:68:a9:63:6a:05:94:2e:b3:4d: fb:c5:2e:26:6c:86:10:80:d2:9e:fa:49:21:b7:af: 3f:d9:bb:76:1a:6a:ae:42:3c:18:0a:96:c0:45:c4: 58:b8:8e:35:47:3f:3a:95:13:d0:f3:31:c9:48:da: 3c:15:e3:9b:be:4c:25:8b:1e:7b:a6:bf:10:48:49: ed:37:b6:d1:87:4e:78:14:f1:42:f3:cd:59:57:53: 68:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:0B:5A:2A:10:3F:8F:E6:E8:24:D9:B0:57:48:39:6D:08:6C:62:81 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cf8998d8-99d4-4b0b-9648-f902779332fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.220.232.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:87:bf:ce:f4:92:73:25:16:9b:21:74:0c:4b:ae:da:48:50: bc:b4:12:d3:9b:74:03:e4:de:68:59:38:30:c9:f7:04:44:4e: bb:cb:86:e1:7a:d4:a5:9c:aa:4f:4a:ca:85:6d:01:c3:19:16: 49:a7:ac:04:99:f4:20:28:d0:6c:d6:ef:02:8e:97:3f:37:2f: 49:e7:88:6b:f8:0c:a2:78:25:ad:ea:8c:5d:12:ec:e5:35:c3: 82:0f:25:2b:25:4c:87:a2:a7:93:0b:fa:d8:a3:9c:aa:e7:12: b7:d6:a4:b8:2d:7c:95:b7:1b:e4:94:12:8e:73:31:08:b0:db: 02:56:22:6d:a0:1f:b5:f0:1b:37:f6:06:0f:a6:3f:10:7e:e2: 8d:7f:e3:85:42:dc:dd:dc:d5:82:2a:fd:2b:2b:2a:bb:9a:f0: fc:8f:49:fa:f5:ea:35:d5:3b:ae:25:09:bf:3c:d2:e1:d1:f0: e1:0b:a0:83:8d:93:b6:c6:9f:97:ab:e7:22:c9:e0:c0:8a:77: eb:9f:29:67:27:39:8e:1c:99:7e:4f:7d:f4:5a:78:41:26:08: 0c:3a:86:b1:0e:30:7f:92:e6:94:d1:37:84:67:4d:b6:f1:10: 64:9f:df:ba:ef:62:60:17:b6:6a:2b:8b:ce:61:84:94:f5:5f: d5:23:c2:9a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWHPVTp+udmL5bKRt8cjJUfk0kiYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MTUzMDUzWhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZWNhMzUzM2RiNjVjZTM2MjFmYWM2NGE5ZDdhOWQzMTE1 OTdkYzc3N2FhYmNjMGE3YjE2NDA0NzYxMzNkMDRhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCgvqhyfUQpuowB3FXrZyzc1ebXWLyOS6TfUGDWturs3vMo Z4eBzEIgg58bUiwT2Eu15zbJcsfUGg+YDGsCvlxJLDqo4kQnEA2fpI60ZuKF7/kU se6gNx32hcHQ7CuKtgkzN2Er8UOGg5Xc5fiHPidJCnbg39A68Q+vXgijpwJkwI6b V61SScjyvLePMSdN2MJQicHWk1AoK/qLXE2UEywPa/RaHWFUmpOnHGipY2oFlC6z TfvFLiZshhCA0p76SSG3rz/Zu3Yaaq5CPBgKlsBFxFi4jjVHPzqVE9DzMclI2jwV 45u+TCWLHnumvxBISe03ttGHTngU8ULzzVlXU2jvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUwgtaKhA/j+boJNmwV0g5bQhsYoEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2NmODk5OGQ4LTk5ZDQtNGIwYi05NjQ4LWY5MDI3NzkzMzJmZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAP3OgwDQYJKoZIhvcNAQELBQADggEBAJuHv870knMlFpshdAxLrtpIULy0 EtObdAPk3mhZODDJ9wRETrvLhuF61KWcqk9KyoVtAcMZFkmnrASZ9CAo0GzW7wKO lz83L0nniGv4DKJ4Ja3qjF0S7OU1w4IPJSslTIeip5ML+tijnKrnErfWpLgtfJW3 G+SUEo5zMQiw2wJWIm2gH7XwGzf2Bg+mPxB+4o1/44VC3N3c1YIq/SsrKrua8PyP Sfr16jXVO64lCb880uHR8OELoIONk7bGn5er5yLJ4MCKd+ufKWcnOY4cmX5PffRa eEEmCAw6hrEOMH+S5pTRN4RnTbbxEGSf37rvYmAXtmori85hhJT1X9Ujwpo= -----END CERTIFICATE-----Generated at Mon Oct 20 21:33:59 2025 by rpki-client