$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ecee8e0a-4799-4e2f-b087-3f756cd50433.roa File: ecee8e0a-4799-4e2f-b087-3f756cd50433.roa (raw, json) Hash identifier: fIIjIsp+XxLHcf+eATxcRkA0VlMXvv7lWk6wFzzOZ3A= Subject key identifier: 0D:22:88:C4:F8:05:D1:39:3D:7B:7F:DE:0B:3A:19:1A:FB:3E:E6:47 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 225DA459A1D5E4967F45F8603A36333A6C19787E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ecee8e0a-4799-4e2f-b087-3f756cd50433.roa Signing time: Fri 07 Nov 2025 01:31:48 +0000 ROA not before: Fri 07 Nov 2025 01:31:48 +0000 ROA not after: Fri 12 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.158.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:5d:a4:59:a1:d5:e4:96:7f:45:f8:60:3a:36:33:3a:6c:19:78:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Nov 7 01:31:48 2025 GMT Not After : Dec 12 23:59:59 2025 GMT Subject: serialNumber=b1e9dceae3317c4e62715d2288a991e80219bb474ce85bac90d0a5deeee0f665, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d6:5a:80:bf:36:32:c8:b2:b4:f8:0e:a3:52: e2:3b:d0:b7:a2:88:a5:45:e2:f4:fc:3b:05:fd:92: 18:1f:b4:0c:89:1d:21:54:5e:ef:6e:52:01:f3:d1: f2:ec:c6:4e:12:f7:20:a0:17:ad:3c:95:b4:e8:36: 16:32:2a:2f:76:c3:ec:05:4d:12:8f:20:59:cb:41: d9:bf:e7:6e:6b:c2:0e:75:65:dc:26:a1:2b:9e:8e: 4b:f8:ac:86:c5:63:ca:bf:d1:99:1f:8b:aa:a0:68: 98:d9:92:02:ff:a6:8a:03:bb:f2:e1:e7:70:ab:61: 6a:42:10:cb:e4:a8:45:c0:98:47:a3:99:2f:b6:55: 54:5a:0d:a1:af:aa:4f:04:fc:8b:f8:d8:16:76:ee: 6b:8b:b6:c0:d6:83:24:77:e1:35:dd:07:09:e9:92: 7b:66:76:1c:24:28:51:94:08:d7:26:de:69:ae:21: a7:9e:49:f1:48:b6:8f:7b:27:e6:c8:df:24:c5:ac: 5d:1d:19:0b:c9:c2:24:9b:ad:1e:12:d1:8a:27:59: 45:98:3d:72:3d:ea:01:42:91:a5:89:3a:7f:4f:ef: ae:24:3a:ba:ba:47:4e:33:e6:6a:0e:ba:6d:b4:11: 15:93:18:82:2e:c7:60:d3:47:71:d1:dc:a2:ab:81: ba:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:22:88:C4:F8:05:D1:39:3D:7B:7F:DE:0B:3A:19:1A:FB:3E:E6:47 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ecee8e0a-4799-4e2f-b087-3f756cd50433.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.158.129.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:73:27:ff:a0:0f:99:9e:8b:66:d9:9d:31:75:37:5d:95:f0: 10:59:db:bd:a8:26:e8:69:01:92:9f:79:e9:8a:d3:55:7a:40: eb:ee:37:27:44:07:fc:9e:2b:b3:1a:e1:f1:8c:ba:f9:cf:a5: 30:96:cd:6f:10:13:4a:34:81:a5:c9:ce:3d:e0:25:01:34:0d: a1:89:5e:26:ba:d5:c0:a5:8f:e1:d3:c8:ca:36:11:20:7e:43: 7c:dc:99:b0:64:19:05:85:66:ef:b1:06:f8:0c:83:75:aa:89: c4:52:58:8f:33:b7:bd:8f:33:e8:14:97:f0:42:5a:84:d3:00: 98:27:9e:d3:1a:e7:c0:1d:d6:67:84:67:af:b2:91:9d:f1:30: f3:af:fa:00:bb:36:05:68:5b:d7:68:9b:d2:9a:a8:11:09:90: b5:00:4a:1b:b1:f6:d6:df:c9:34:a7:f2:f0:41:8e:9b:0b:2b: ba:1b:d5:f5:1f:4d:5d:09:ca:e9:be:fa:79:3f:52:7d:99:42: e2:4d:a0:dd:56:d6:3e:f2:27:d0:95:70:b9:0b:6e:e0:9b:49: 67:91:70:cd:9b:dc:8b:e1:21:0c:57:3f:e9:c5:2d:17:cd:06: f6:b8:94:76:d7:a5:a6:b1:7c:a2:3a:b5:88:74:f2:27:85:9a: 44:6e:18:ee -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIl2kWaHV5JZ/RfhgOjYzOmwZeH4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMTA3MDEzMTQ4WhcNMjUxMjEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BiMWU5ZGNlYWUzMzE3YzRlNjI3MTVkMjI4OGE5OTFlODAy MTliYjQ3NGNlODViYWM5MGQwYTVkZWVlZTBmNjY1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCt1lqAvzYyyLK0+A6jUuI70LeiiKVF4vT8OwX9khgftAyJ HSFUXu9uUgHz0fLsxk4S9yCgF608lbToNhYyKi92w+wFTRKPIFnLQdm/525rwg51 ZdwmoSuejkv4rIbFY8q/0Zkfi6qgaJjZkgL/pooDu/Lh53CrYWpCEMvkqEXAmEej mS+2VVRaDaGvqk8E/Iv42BZ27muLtsDWgyR34TXdBwnpkntmdhwkKFGUCNcm3mmu IaeeSfFIto97J+bI3yTFrF0dGQvJwiSbrR4S0YonWUWYPXI96gFCkaWJOn9P764k Orq6R04z5moOum20ERWTGIIux2DTR3HR3KKrgborAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUDSKIxPgF0Tk9e3/eCzoZGvs+5kcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2VjZWU4ZTBhLTQ3OTktNGUyZi1iMDg3LTNmNzU2Y2Q1MDQzMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAPnoEwDQYJKoZIhvcNAQELBQADggEBAA1zJ/+gD5mei2bZnTF1N12V8BBZ 272oJuhpAZKfeemK01V6QOvuNydEB/yeK7Ma4fGMuvnPpTCWzW8QE0o0gaXJzj3g JQE0DaGJXia61cClj+HTyMo2ESB+Q3zcmbBkGQWFZu+xBvgMg3WqicRSWI8zt72P M+gUl/BCWoTTAJgnntMa58Ad1meEZ6+ykZ3xMPOv+gC7NgVoW9dom9KaqBEJkLUA Shux9tbfyTSn8vBBjpsLK7ob1fUfTV0Jyum++nk/Un2ZQuJNoN1W1j7yJ9CVcLkL buCbSWeRcM2b3IvhIQxXP+nFLRfNBva4lHbXpaaxfKI6tYh08ieFmkRuGO4= -----END CERTIFICATE-----Generated at Fri Nov 7 20:11:35 2025 by rpki-client