$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8710ea42-5251-4f2c-8194-07838b3f5ffc.roa File: 8710ea42-5251-4f2c-8194-07838b3f5ffc.roa (raw, json) Hash identifier: Z+h5O3pJxBO015TuXuX0v/G/C+jOODJAj0mfmZdEyDo= Subject key identifier: 2A:F7:A9:D8:3C:50:98:85:B6:8A:C8:59:11:E3:77:B5:61:EC:8B:60 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5A064074D4698DB2D5DF77B90EBEE96616317F35 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8710ea42-5251-4f2c-8194-07838b3f5ffc.roa Signing time: Tue 21 Oct 2025 04:21:16 +0000 ROA not before: Tue 21 Oct 2025 04:21:16 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.245.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:06:40:74:d4:69:8d:b2:d5:df:77:b9:0e:be:e9:66:16:31:7f:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 21 04:21:16 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=ad8b83219c056b444eb8b42bd8ea1be70857160e59155c745dbe200036848959, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:2d:2d:ec:e5:48:7f:76:9a:49:ed:c1:49:60: 08:00:df:7b:45:27:f1:8e:5c:0c:4c:c8:e5:da:a1: a5:0d:76:11:b3:71:35:77:98:7f:4d:e8:b6:56:2f: a1:98:65:e0:b8:86:df:43:4b:44:33:7a:1f:72:80: 40:26:85:9c:ef:2c:ad:a2:63:bf:86:14:55:cc:78: ff:83:99:21:73:7f:e0:22:6e:1a:27:b4:a2:50:95: 06:69:eb:a3:b4:1f:5f:ce:a3:71:3b:67:20:a0:90: 69:06:ef:fc:27:7d:a9:7a:56:97:af:8a:c3:82:10: 6d:68:c7:32:e4:38:ff:b1:c5:5a:32:31:51:f9:3e: 2a:de:47:71:ac:b8:84:2d:24:51:e4:4b:bf:b7:ab: 4c:04:de:51:31:ac:c5:20:9b:2c:f6:a8:49:14:38: 7c:67:2b:ac:0a:5f:1d:9c:98:09:0a:d1:52:a1:ec: 1a:de:a1:cd:71:71:34:c8:56:63:78:ef:ca:0d:17: 75:c1:9e:bd:61:04:fe:d1:79:5f:bf:83:7f:f1:59: 41:d3:50:60:5f:22:60:19:a2:1f:de:f6:44:b9:37: 01:f3:7d:57:02:28:34:77:4d:e8:d1:7f:64:53:5e: 68:e9:f9:f9:01:97:ee:b5:3d:66:95:bb:92:39:7f: 78:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:F7:A9:D8:3C:50:98:85:B6:8A:C8:59:11:E3:77:B5:61:EC:8B:60 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8710ea42-5251-4f2c-8194-07838b3f5ffc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.245.0.0/16 Signature Algorithm: sha256WithRSAEncryption 34:aa:ca:ff:23:22:ab:06:7e:a9:0b:5b:8b:2b:b0:4d:6d:db: 9e:79:e6:94:8c:11:10:09:26:66:6b:ee:f7:cc:aa:ea:08:d7: 04:0f:3e:b5:58:f7:5c:1e:ff:18:d3:74:83:ca:8d:85:60:41: bf:df:6a:0d:9b:5a:d9:c4:ba:1f:c8:f2:b8:0f:f4:4c:e8:13: ff:a1:3f:b8:2d:2a:e4:a2:30:93:25:6d:2f:f5:2d:65:c0:51: 7c:70:83:42:c9:7a:ff:0b:d4:58:9e:22:d4:32:2b:f0:91:f6: bb:15:ef:f3:4e:cb:39:53:4d:76:72:76:f1:6e:57:55:61:08: eb:2d:a0:3d:c0:19:62:89:df:08:44:47:54:af:cb:42:82:00: b6:5d:08:58:a6:e2:8d:9d:26:bd:9c:47:0d:71:09:f3:d3:a3: ec:2d:34:df:d1:50:33:ef:56:38:3a:0d:b8:8c:62:5d:d5:48: 98:23:56:3f:aa:4c:c2:3d:50:b0:0b:68:4b:b6:1b:19:0e:3c: 09:24:1a:e1:38:3e:37:51:b7:69:0b:5a:2a:84:73:c0:1c:63: 0d:69:a6:dd:e3:ae:8c:ec:c7:f8:b2:11:93:fa:c7:7b:9c:05: f2:c1:18:a0:2f:00:5a:ea:8e:3c:b0:4b:d5:e2:d3:bf:3f:a1: 61:a1:20:dd -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUWgZAdNRpjbLV33e5Dr7pZhYxfzUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDIxMDQyMTE2WhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BhZDhiODMyMTljMDU2YjQ0NGViOGI0MmJkOGVhMWJlNzA4 NTcxNjBlNTkxNTVjNzQ1ZGJlMjAwMDM2ODQ4OTU5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDrLS3s5Uh/dppJ7cFJYAgA33tFJ/GOXAxMyOXaoaUNdhGz cTV3mH9N6LZWL6GYZeC4ht9DS0Qzeh9ygEAmhZzvLK2iY7+GFFXMeP+DmSFzf+Ai bhontKJQlQZp66O0H1/Oo3E7ZyCgkGkG7/wnfal6VpevisOCEG1oxzLkOP+xxVoy MVH5PireR3GsuIQtJFHkS7+3q0wE3lExrMUgmyz2qEkUOHxnK6wKXx2cmAkK0VKh 7Breoc1xcTTIVmN478oNF3XBnr1hBP7ReV+/g3/xWUHTUGBfImAZoh/e9kS5NwHz fVcCKDR3TejRf2RTXmjp+fkBl+61PWaVu5I5f3hTAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUKvep2DxQmIW2ishZEeN3tWHsi2AwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg3MTBlYTQyLTUyNTEtNGYyYy04MTk0LTA3ODM4YjNmNWZmYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAP9TANBgkqhkiG9w0BAQsFAAOCAQEANKrK/yMiqwZ+qQtbiyuwTW3bnnnm lIwREAkmZmvu98yq6gjXBA8+tVj3XB7/GNN0g8qNhWBBv99qDZta2cS6H8jyuA/0 TOgT/6E/uC0q5KIwkyVtL/UtZcBRfHCDQsl6/wvUWJ4i1DIr8JH2uxXv807LOVNN dnJ28W5XVWEI6y2gPcAZYonfCERHVK/LQoIAtl0IWKbijZ0mvZxHDXEJ89Oj7C00 39FQM+9WODoNuIxiXdVImCNWP6pMwj1QsAtoS7YbGQ48CSQa4Tg+N1G3aQtaKoRz wBxjDWmm3eOujOzH+LIRk/rHe5wF8sEYoC8AWuqOPLBL1eLTvz+hYaEg3Q== -----END CERTIFICATE-----Generated at Wed Nov 5 03:34:46 2025 by rpki-client