$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2dcd1287-2d03-487c-8687-e801da5e97e2.roa File: 2dcd1287-2d03-487c-8687-e801da5e97e2.roa (raw, json) Hash identifier: LnPHR3+omSoiamg1w092ls8JXxqZwfRP4CQtosyIUZ0= Subject key identifier: 3C:54:EE:2A:FE:CA:30:F8:74:5E:F1:64:83:28:AF:B5:BB:8F:EA:95 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4F1B8B3543C79E32E4EBB6B6631FD35AD794E8 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2dcd1287-2d03-487c-8687-e801da5e97e2.roa Signing time: Fri 31 Oct 2025 20:36:53 +0000 ROA not before: Fri 31 Oct 2025 20:36:53 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.197.32.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:1b:8b:35:43:c7:9e:32:e4:eb:b6:b6:63:1f:d3:5a:d7:94:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 31 20:36:53 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=ee79f6103b353399907e50d07c508b0755c29f5e837c76f75b7887381f2d7b7f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:14:69:c5:fd:5a:a5:fd:d8:3a:66:c9:58:0c: e0:8b:f4:d1:4a:b3:f5:58:88:5d:f3:b0:31:29:fb: 8f:c8:14:95:c7:29:61:60:2c:05:f4:27:0b:4b:0c: 69:1c:f8:6a:9e:34:31:ec:37:3d:c5:42:5e:e1:d7: ff:a7:f8:d6:fd:7c:32:56:93:0d:0b:72:76:e4:ca: d7:0d:3b:24:2f:9e:20:36:52:69:a9:8d:e9:f7:0e: 98:46:59:a3:ba:ba:22:92:d6:67:60:fa:59:21:c0: 87:16:81:81:ec:4b:9e:26:4c:7a:e2:c0:b2:09:19: 1b:d2:26:dd:7c:b0:a8:00:e5:b1:e2:30:54:da:75: b5:e8:38:de:a9:f8:28:d7:40:9f:ce:57:9c:28:f0: 9f:aa:14:52:3c:08:0c:60:a6:3a:2c:a0:42:e3:9c: 9a:35:7d:9c:eb:dd:ca:4a:d1:2b:55:b7:57:7a:fe: 95:29:32:53:b4:b8:f1:30:28:09:41:24:ed:79:cb: 13:6a:41:78:c3:d7:7f:e9:a2:77:0d:4c:6e:cc:69: 16:01:a8:9a:5f:59:1a:11:5d:21:be:8b:f4:e2:e5: 6a:98:9f:97:3c:5e:4f:8c:43:e1:f0:86:de:d6:03: b1:b1:9c:90:3e:29:e1:f8:8a:fa:e8:39:fc:b2:51: 11:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:54:EE:2A:FE:CA:30:F8:74:5E:F1:64:83:28:AF:B5:BB:8F:EA:95 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2dcd1287-2d03-487c-8687-e801da5e97e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.197.32.0/23 Signature Algorithm: sha256WithRSAEncryption 1c:d3:25:6a:c3:08:74:1e:d7:31:6d:0e:64:8c:11:bc:63:f1: 94:2b:01:64:31:ba:a2:81:53:d2:e0:75:49:9a:69:2d:c1:ab: d0:15:77:80:d3:8a:9e:11:68:84:75:99:b9:32:6c:c6:a2:7b: 7e:43:b7:a7:3c:b8:c7:c1:85:c8:99:03:40:8a:fc:01:48:d1: 6b:bd:ae:77:4a:62:ea:89:cb:07:f9:1f:04:5c:8d:9a:16:2b: e8:56:f3:b6:6c:13:5c:e7:71:9f:84:1f:b5:06:ac:1b:f1:f9: 14:35:97:50:ea:02:3b:07:27:cd:9b:24:1d:4d:5a:e0:20:59: bf:37:8f:48:51:a3:25:15:d8:0f:97:16:39:fc:f3:f7:fc:c4: a5:cb:a9:70:3b:c7:e9:1b:48:01:3b:e4:8d:a7:19:08:7b:12: b9:42:f3:e9:da:5c:ad:eb:91:61:10:1a:f5:8d:8e:25:78:42: c9:62:f4:38:85:8f:72:f7:df:06:55:ae:f1:0f:5b:dc:72:10: 7a:42:c4:30:b3:aa:a7:9e:c6:39:58:5c:61:d1:16:59:cb:d8: 53:a5:2f:41:71:08:ba:7c:5f:6c:bc:c9:ad:fb:32:e0:4e:c1: b5:30:85:c1:a0:9b:5b:83:5e:11:49:38:7e:b9:a6:04:e6:de: b3:51:f0:bc -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITTxuLNUPHnjLk67a2Yx/TWteU6DANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzJkZjZmM2IzYTM0YjYzODZkMWEzMmQ4ZjRmYTMxNzhlZjMx ODg3ZDhiNDI4ZGZhYTQ3NjAeFw0yNTEwMzEyMDM2NTNaFw0yNTEyMDUyMzU5NTla MHoxSTBHBgNVBAUTQGVlNzlmNjEwM2IzNTMzOTk5MDdlNTBkMDdjNTA4YjA3NTVj MjlmNWU4MzdjNzZmNzViNzg4NzM4MWYyZDdiN2YxLTArBgNVBAMTJDVmMjc2MDQ1 LTViOWYtNDVlZi05MjNkLWYzZmNlMjRhNjIyNTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAK0UacX9WqX92DpmyVgM4Iv00Uqz9ViIXfOwMSn7j8gUlccp YWAsBfQnC0sMaRz4ap40Mew3PcVCXuHX/6f41v18MlaTDQtyduTK1w07JC+eIDZS aamN6fcOmEZZo7q6IpLWZ2D6WSHAhxaBgexLniZMeuLAsgkZG9Im3XywqADlseIw VNp1teg43qn4KNdAn85XnCjwn6oUUjwIDGCmOiygQuOcmjV9nOvdykrRK1W3V3r+ lSkyU7S48TAoCUEk7XnLE2pBeMPXf+midw1MbsxpFgGoml9ZGhFdIb6L9OLlapif lzxeT4xD4fCG3tYDsbGckD4p4fiK+ug5/LJRESsCAwEAAaOCArEwggKtMB0GA1Ud DgQWBBQ8VO4q/sow+HRe8WSDKK+1u4/qlTAfBgNVHSMEGDAWgBQlrdNCsB63pY6t GZAmiLVLP4H0uDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg1MWNlZjE3LTEz MmEtNDMzNy1iN2QxLWJmMTZhNTJmZmQwMy9kZjZmM2IzYTM0YjYzODZkMWEzMmQ4 ZjRmYTMxNzhlZjMxODg3ZDhiNDI4ZGZhYTQ3Ni5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9mNzAzNjk2ZS1lNDdiLTRjMjAtYmQ5My02Zjgw OTA0ZTQyZDIvMmRjZDEyODctMmQwMy00ODdjLTg2ODctZTgwMWRhNWU5N2UyLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMt NmY4MDkwNGU0MmQyL3RqaHRHakxZOVBveGVPOHhpSDJMUW8zNnBIWS5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAQ/FIDANBgkqhkiG9w0BAQsFAAOCAQEAHNMlasMIdB7XMW0OZIwRvGPxlCsB ZDG6ooFT0uB1SZppLcGr0BV3gNOKnhFohHWZuTJsxqJ7fkO3pzy4x8GFyJkDQIr8 AUjRa72ud0pi6onLB/kfBFyNmhYr6FbztmwTXOdxn4QftQasG/H5FDWXUOoCOwcn zZskHU1a4CBZvzePSFGjJRXYD5cWOfzz9/zEpcupcDvH6RtIATvkjacZCHsSuULz 6dpcreuRYRAa9Y2OJXhCyWL0OIWPcvffBlWu8Q9b3HIQekLEMLOqp57GOVhcYdEW WcvYU6UvQXEIunxfbLzJrfsy4E7BtTCFwaCbW4NeEUk4frmmBObes1HwvA== -----END CERTIFICATE-----Generated at Wed Nov 5 01:46:10 2025 by rpki-client