$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2c22dfdf-1a7b-4cbb-931a-519e317908d0.roa File: 2c22dfdf-1a7b-4cbb-931a-519e317908d0.roa (raw, json) Hash identifier: e9JzouWBHLGUEuyEv9AwWzBR5fig1iHKFWd3Xhi+HpE= Subject key identifier: 0D:4A:E3:BA:BF:CF:62:2B:06:E6:13:4B:E6:08:87:0F:3D:3C:CD:E3 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7C9D834C5FDBDB8BF35C3AE33DDDDD0F16803DB1 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2c22dfdf-1a7b-4cbb-931a-519e317908d0.roa Signing time: Fri 31 Oct 2025 20:36:59 +0000 ROA not before: Fri 31 Oct 2025 20:36:59 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.197.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:9d:83:4c:5f:db:db:8b:f3:5c:3a:e3:3d:dd:dd:0f:16:80:3d:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 31 20:36:59 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=21910fcb815111fed289fc83fd8c84f5e5030d73e89e1dab28af99249fb70cce, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:f6:81:bb:6d:58:35:5b:90:08:0d:06:b3:d5: 6a:c2:07:b5:9f:68:d7:5b:c8:9e:10:16:fa:a6:25: 56:d3:50:75:55:3d:83:2a:da:09:94:20:c1:5b:a3: ba:ac:02:22:3f:4b:e0:2a:24:36:fa:75:84:08:58: a5:6c:3c:81:c5:e2:b5:22:35:2d:9c:6e:12:35:1d: 76:87:03:d9:8a:cd:4a:44:20:8e:43:67:b9:46:ed: a2:28:2b:af:04:93:e3:bf:6f:80:ab:37:cf:b8:95: 24:e9:c6:81:a5:3c:a4:9f:68:a2:7a:03:69:99:d1: 87:0e:f6:da:ad:fd:16:47:8e:f6:b2:cc:c8:f7:47: 20:4f:99:aa:c7:2f:42:28:f0:f8:fa:b9:09:a3:7f: 87:5b:90:02:a0:38:09:48:8a:ad:98:0a:9a:de:e3: a2:1b:c8:24:e1:3e:9f:00:ef:67:8c:49:39:c4:0f: ac:b8:2b:5d:c3:14:6f:a3:06:91:c5:14:e8:ff:46: 2c:f1:e5:c7:0f:cf:10:79:0f:ad:6a:04:bd:62:9a: 9a:30:d6:2e:1e:85:a6:a5:0a:7b:e6:a5:e4:9e:78: 53:8c:3c:e5:7f:72:30:40:5d:d3:57:e7:27:10:d8: 8b:a1:ff:3d:85:7f:cf:56:4e:dc:83:6c:c0:d1:d9: eb:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:4A:E3:BA:BF:CF:62:2B:06:E6:13:4B:E6:08:87:0F:3D:3C:CD:E3 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2c22dfdf-1a7b-4cbb-931a-519e317908d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.197.23.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:5b:1c:36:4f:b8:93:9a:2d:cc:77:b7:ed:f6:5a:4c:51:a7: e7:ca:72:5a:da:e8:42:bd:4d:94:6f:c0:6f:80:2b:56:d6:ee: ca:21:92:28:30:9b:e1:7c:1e:08:53:ea:72:a6:4b:bf:f2:76: 16:0d:f1:82:ab:a4:2a:cf:f9:aa:9b:35:5c:63:0d:a4:1c:52: bc:b7:d7:bf:55:38:dc:08:08:ce:6d:41:40:42:d7:b3:90:17: b2:5a:3e:3a:d1:43:5e:cb:19:4a:ef:3d:e9:c1:2a:8e:10:01: 1b:e5:72:51:da:ae:f4:f9:10:79:0f:80:3a:0b:e5:06:01:0a: 31:18:dd:52:39:e6:95:41:84:14:ea:e7:89:c7:e6:2f:f6:ca: 65:57:c3:a0:c5:00:31:29:18:92:0c:aa:4c:64:ff:bf:ee:ff: 79:02:a0:88:c3:b6:c5:30:b1:59:d6:8c:7f:93:34:7d:48:03: a5:21:e6:a9:b6:8c:d4:29:af:2b:0e:ec:32:96:16:df:a6:0f: ec:b4:21:8b:ac:36:3e:0f:9d:c0:aa:2c:eb:3a:05:40:c3:5f: 9d:f4:c3:a5:83:f3:bb:07:25:e5:66:4c:98:91:68:cc:1e:0b: e7:8d:07:9c:1c:97:e0:f3:11:0c:15:6c:fc:40:6f:61:62:20: 1a:17:a9:19 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfJ2DTF/b24vzXDrjPd3dDxaAPbEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDMxMjAzNjU5WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AyMTkxMGZjYjgxNTExMWZlZDI4OWZjODNmZDhjODRmNWU1 MDMwZDczZTg5ZTFkYWIyOGFmOTkyNDlmYjcwY2NlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDy9oG7bVg1W5AIDQaz1WrCB7WfaNdbyJ4QFvqmJVbTUHVV PYMq2gmUIMFbo7qsAiI/S+AqJDb6dYQIWKVsPIHF4rUiNS2cbhI1HXaHA9mKzUpE II5DZ7lG7aIoK68Ek+O/b4CrN8+4lSTpxoGlPKSfaKJ6A2mZ0YcO9tqt/RZHjvay zMj3RyBPmarHL0Io8Pj6uQmjf4dbkAKgOAlIiq2YCpre46IbyCThPp8A72eMSTnE D6y4K13DFG+jBpHFFOj/Rizx5ccPzxB5D61qBL1impow1i4ehaalCnvmpeSeeFOM POV/cjBAXdNX5ycQ2Iuh/z2Ff89WTtyDbMDR2evVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUDUrjur/PYisG5hNL5giHDz08zeMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzJjMjJkZmRmLTFhN2ItNGNiYi05MzFhLTUxOWUzMTc5MDhkMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAPxRcwDQYJKoZIhvcNAQELBQADggEBACpbHDZPuJOaLcx3t+32WkxRp+fK clra6EK9TZRvwG+AK1bW7sohkigwm+F8HghT6nKmS7/ydhYN8YKrpCrP+aqbNVxj DaQcUry3179VONwICM5tQUBC17OQF7JaPjrRQ17LGUrvPenBKo4QARvlclHarvT5 EHkPgDoL5QYBCjEY3VI55pVBhBTq54nH5i/2ymVXw6DFADEpGJIMqkxk/7/u/3kC oIjDtsUwsVnWjH+TNH1IA6Uh5qm2jNQprysO7DKWFt+mD+y0IYusNj4PncCqLOs6 BUDDX530w6WD87sHJeVmTJiRaMweC+eNB5wcl+DzEQwVbPxAb2FiIBoXqRk= -----END CERTIFICATE-----Generated at Wed Nov 5 08:42:24 2025 by rpki-client