$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b2478452-80dc-452f-9401-c25c98f35859.roa File: b2478452-80dc-452f-9401-c25c98f35859.roa (raw, json) Hash identifier: /0jFZplaOR1R9Q5KKLLa5QjqUD3FTbi6tkizVI59AKA= Subject key identifier: 59:0D:5C:A6:88:50:26:AE:9F:C4:09:95:41:CE:9C:A7:33:69:F5:92 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7419C2534D431E962FBEFB851FA24E34B2FC80A1 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b2478452-80dc-452f-9401-c25c98f35859.roa Signing time: Tue 21 Oct 2025 09:22:24 +0000 ROA not before: Tue 21 Oct 2025 09:22:24 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 15.230.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:19:c2:53:4d:43:1e:96:2f:be:fb:85:1f:a2:4e:34:b2:fc:80:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 21 09:22:24 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=ec39d07ee0863927410221de4e9e2f3c9f55cfc0caf3559b79e52281c9863e33, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:23:6c:29:8b:1e:9a:e7:2c:f3:26:c1:d0:4b: d1:59:2e:f5:7a:be:d3:de:9e:04:76:fe:dd:32:f9: 0f:78:37:6d:a6:83:83:68:02:de:a7:a3:33:58:d4: 90:b3:d4:1c:19:a5:f8:22:8c:3f:55:f1:40:74:df: 7f:9f:e1:3e:5a:df:1f:48:64:92:fa:c6:31:3a:d6: 1e:4c:d9:c8:64:21:b5:24:a9:e1:4b:99:57:39:f9: 68:87:39:1b:4b:0b:54:84:4a:d1:86:21:6c:ce:18: b5:1e:ab:d6:31:09:57:1a:64:38:66:45:e6:63:7f: 28:a0:6e:92:82:f5:c6:09:65:dc:ec:48:a1:58:cf: bf:39:13:56:a4:16:44:93:60:79:ae:15:20:e8:c5: 1b:30:25:ae:14:3b:41:7b:d2:f6:9e:e2:4b:0c:5e: 32:83:21:7c:47:8d:ab:c8:34:84:c1:52:ec:cb:68: 7e:cd:03:d6:5a:46:9d:39:b3:5b:d6:cf:8f:e1:9b: 6a:6e:fd:27:9c:cf:0a:9e:13:38:9c:bb:d7:94:30: 38:d6:99:04:16:ba:41:0a:07:5f:b2:f0:06:34:a4: fb:66:67:cf:9e:0e:e1:ed:1c:3f:4b:d2:2e:cd:dd: b0:ef:30:92:2e:4b:17:c2:36:02:24:20:03:f5:79: 99:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:0D:5C:A6:88:50:26:AE:9F:C4:09:95:41:CE:9C:A7:33:69:F5:92 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b2478452-80dc-452f-9401-c25c98f35859.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.230.168.0/24 Signature Algorithm: sha256WithRSAEncryption 01:2b:d4:d9:8e:97:76:0e:a0:96:40:ad:ac:44:e6:35:ee:a5: 73:55:f1:87:01:c5:07:dc:5f:87:82:12:be:6c:bc:45:03:15: d6:76:54:a4:69:25:09:00:54:32:36:9d:41:e7:b2:99:5d:fd: eb:d4:d2:84:a1:a7:6c:5f:5c:f2:dc:cf:52:9e:17:50:95:cc: f4:a5:07:9a:f6:4d:f0:28:6c:49:e4:01:b2:6c:96:c9:f1:ee: 97:0e:ca:25:e1:46:dd:74:a4:4e:4f:39:88:77:2a:53:c8:75: 81:b4:de:ac:87:59:45:07:08:8a:d6:0c:c3:39:d8:ee:30:1d: 55:1b:cd:fb:05:04:9a:ff:33:14:b5:e3:f3:b1:1d:b7:37:27: 18:18:1a:03:d9:7e:1c:c8:a6:e6:bf:32:03:0a:67:6f:7d:71: 53:6d:25:6c:f3:70:f8:77:83:75:54:2e:d3:81:4d:b2:af:ba: 4a:18:f9:7e:b0:97:18:f1:74:98:78:cc:d0:c9:9e:e8:9b:24: c0:8f:ce:c1:99:c4:cb:44:11:d8:9c:54:bd:c8:31:66:fd:11: 8b:8f:e9:d3:80:ff:42:5f:b1:5f:4e:9d:01:a3:33:74:7b:9b: ef:78:bc:4f:74:cc:3e:43:17:a7:27:fd:3b:ec:bf:10:eb:42: 53:eb:fb:71 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdBnCU01DHpYvvvuFH6JONLL8gKEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDIxMDkyMjI0WhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BlYzM5ZDA3ZWUwODYzOTI3NDEwMjIxZGU0ZTllMmYzYzlm NTVjZmMwY2FmMzU1OWI3OWU1MjI4MWM5ODYzZTMzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD3I2wpix6a5yzzJsHQS9FZLvV6vtPengR2/t0y+Q94N22m g4NoAt6nozNY1JCz1BwZpfgijD9V8UB033+f4T5a3x9IZJL6xjE61h5M2chkIbUk qeFLmVc5+WiHORtLC1SEStGGIWzOGLUeq9YxCVcaZDhmReZjfyigbpKC9cYJZdzs SKFYz785E1akFkSTYHmuFSDoxRswJa4UO0F70vae4ksMXjKDIXxHjavINITBUuzL aH7NA9ZaRp05s1vWz4/hm2pu/SeczwqeEzicu9eUMDjWmQQWukEKB1+y8AY0pPtm Z8+eDuHtHD9L0i7N3bDvMJIuSxfCNgIkIAP1eZl9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUWQ1cpohQJq6fxAmVQc6cpzNp9ZIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2IyNDc4NDUyLTgwZGMtNDUyZi05NDAxLWMyNWM5OGYzNTg1OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAP5qgwDQYJKoZIhvcNAQELBQADggEBAAEr1NmOl3YOoJZAraxE5jXupXNV 8YcBxQfcX4eCEr5svEUDFdZ2VKRpJQkAVDI2nUHnspld/evU0oShp2xfXPLcz1Ke F1CVzPSlB5r2TfAobEnkAbJslsnx7pcOyiXhRt10pE5POYh3KlPIdYG03qyHWUUH CIrWDMM52O4wHVUbzfsFBJr/MxS14/OxHbc3JxgYGgPZfhzIpua/MgMKZ299cVNt JWzzcPh3g3VULtOBTbKvukoY+X6wlxjxdJh4zNDJnuibJMCPzsGZxMtEEdicVL3I MWb9EYuP6dOA/0JfsV9OnQGjM3R7m+94vE90zD5DF6cn/TvsvxDrQlPr+3E= -----END CERTIFICATE-----Generated at Wed Nov 5 01:49:55 2025 by rpki-client