$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2baaa4fe-f5b2-489f-9d0b-73fbd9dede3d.roa File: 2baaa4fe-f5b2-489f-9d0b-73fbd9dede3d.roa (raw, json) Hash identifier: SRU6aUN+EjBeYZoPzHlDsSMz6bOSpQnVNgp8VH5PWvI= Subject key identifier: E3:2E:DC:D1:FB:1E:B1:30:4D:B6:C4:EB:73:98:35:E3:4F:6B:51:A1 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 21CDFAAB8D615912FED297005902F7D4D160943D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2baaa4fe-f5b2-489f-9d0b-73fbd9dede3d.roa Signing time: Fri 31 Oct 2025 20:37:02 +0000 ROA not before: Fri 31 Oct 2025 20:37:02 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.197.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:cd:fa:ab:8d:61:59:12:fe:d2:97:00:59:02:f7:d4:d1:60:94:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 31 20:37:02 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=189c9c826c5d63dc6c8358afc3df42349460d0c95385cf300b99b77608a3ac93, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:1e:fa:f7:4d:9e:ad:89:6f:19:78:02:b6:99: 99:d8:92:f3:28:b5:a7:99:25:fb:c0:5f:82:fc:f1: fe:fa:b8:28:e6:4c:a9:92:71:62:1e:07:ca:8c:fe: ab:62:77:94:e9:03:6d:4a:31:9d:a2:2f:a7:1e:8f: f0:df:02:e8:6f:f7:30:05:e5:94:0a:91:e9:22:d7: 9e:60:26:e7:27:05:ad:9b:dd:b9:2f:b4:56:26:9d: dd:6b:36:10:37:48:0b:7c:f1:a7:69:bc:8d:2e:00: 72:28:01:60:39:ed:10:a5:28:83:f7:a8:c8:ae:08: 47:84:53:f1:c9:67:dc:cb:e7:c3:1b:60:e1:15:d6: 67:03:d7:5c:8d:26:91:fa:d8:7e:cc:00:c9:90:66: 53:5e:a4:e3:6c:0a:c5:e9:9f:95:70:8d:d0:b8:38: a2:37:a9:a1:31:cf:37:f6:f0:2f:47:4e:09:49:ff: fe:62:f3:f9:c6:96:83:c8:d5:c9:d1:7f:c0:06:38: 7e:52:e9:b9:0e:c4:ad:f1:a2:07:63:2a:b7:da:11: dc:25:02:d6:62:da:d9:9f:a7:6f:2e:3d:1b:50:6a: f1:2a:4b:c5:48:11:bc:f6:5c:8f:f2:cb:85:a0:f7: 5c:47:8c:9f:8d:60:7c:ae:2a:60:89:d9:88:90:36: 83:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:2E:DC:D1:FB:1E:B1:30:4D:B6:C4:EB:73:98:35:E3:4F:6B:51:A1 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2baaa4fe-f5b2-489f-9d0b-73fbd9dede3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.197.9.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:cc:ca:9b:29:88:d0:4b:04:f8:95:af:22:19:94:1c:b5:83: 18:cf:e6:8d:77:4e:69:d0:c9:c6:19:1c:8a:cd:52:bd:56:fd: 3b:76:a5:7d:9c:98:15:38:5b:ee:0b:79:fb:f1:e4:ac:23:e5: 7d:30:26:e6:25:c7:b9:b2:c2:23:0b:66:59:5a:b2:a2:6e:8b: ba:f9:64:4c:e8:1e:7d:45:63:41:c3:15:ef:3f:ed:b2:88:24: df:65:4f:88:18:72:73:fb:14:84:b5:ab:ee:91:12:f5:a6:45: ef:74:45:18:c0:4a:01:5a:3d:0e:80:25:23:2e:f6:73:d3:45: c0:23:7f:46:04:c5:3f:d6:4f:fe:e7:99:52:bf:83:c3:f5:0d: 73:c9:ab:7a:5b:20:f0:28:fe:a4:53:40:c2:7b:7f:e5:76:56: 65:b1:ba:6d:1b:4a:99:19:0a:33:28:7c:bb:d3:b7:eb:b6:fc: 48:4b:e4:3b:b3:03:c1:d7:cb:77:77:db:76:87:fc:bc:c6:f8: 14:95:52:f4:fa:75:f8:c8:13:6a:35:b6:f0:5d:b5:66:99:5c: b2:55:ab:73:48:3f:b9:1b:fc:62:1d:af:71:58:36:e1:3f:05: 81:7a:78:b7:9c:ee:74:49:e0:97:ec:b8:6b:1a:8f:66:06:28: ed:ff:6d:97 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIc36q41hWRL+0pcAWQL31NFglD0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDMxMjAzNzAyWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AxODljOWM4MjZjNWQ2M2RjNmM4MzU4YWZjM2RmNDIzNDk0 NjBkMGM5NTM4NWNmMzAwYjk5Yjc3NjA4YTNhYzkzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNHvr3TZ6tiW8ZeAK2mZnYkvMotaeZJfvAX4L88f76uCjm TKmScWIeB8qM/qtid5TpA21KMZ2iL6cej/DfAuhv9zAF5ZQKkeki155gJucnBa2b 3bkvtFYmnd1rNhA3SAt88adpvI0uAHIoAWA57RClKIP3qMiuCEeEU/HJZ9zL58Mb YOEV1mcD11yNJpH62H7MAMmQZlNepONsCsXpn5VwjdC4OKI3qaExzzf28C9HTglJ //5i8/nGloPI1cnRf8AGOH5S6bkOxK3xogdjKrfaEdwlAtZi2tmfp28uPRtQavEq S8VIEbz2XI/yy4Wg91xHjJ+NYHyuKmCJ2YiQNoObAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU4y7c0fsesTBNtsTrc5g1409rUaEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzJiYWFhNGZlLWY1YjItNDg5Zi05ZDBiLTczZmJkOWRlZGUzZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAPxQkwDQYJKoZIhvcNAQELBQADggEBAEzMypspiNBLBPiVryIZlBy1gxjP 5o13TmnQycYZHIrNUr1W/Tt2pX2cmBU4W+4Lefvx5Kwj5X0wJuYlx7mywiMLZlla sqJui7r5ZEzoHn1FY0HDFe8/7bKIJN9lT4gYcnP7FIS1q+6REvWmRe90RRjASgFa PQ6AJSMu9nPTRcAjf0YExT/WT/7nmVK/g8P1DXPJq3pbIPAo/qRTQMJ7f+V2VmWx um0bSpkZCjMofLvTt+u2/EhL5DuzA8HXy3d323aH/LzG+BSVUvT6dfjIE2o1tvBd tWaZXLJVq3NIP7kb/GIdr3FYNuE/BYF6eLec7nRJ4JfsuGsaj2YGKO3/bZc= -----END CERTIFICATE-----Generated at Thu Nov 6 05:46:42 2025 by rpki-client