$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b77b7d32-4450-4dd0-8bb4-731dc9a326fe.roa File: b77b7d32-4450-4dd0-8bb4-731dc9a326fe.roa (raw, json) Hash identifier: /6XZdtIBLyhZpRjOnYaiR36uGBbbHV1MJSyzvio2huE= Subject key identifier: EE:35:38:2B:37:AC:44:43:48:2D:A5:0C:9C:31:0A:7C:82:79:1F:CC Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6085E4E913BE6D3435614A0ADDB289B013FBCDD4 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b77b7d32-4450-4dd0-8bb4-731dc9a326fe.roa Signing time: Tue 21 Oct 2025 04:21:16 +0000 ROA not before: Tue 21 Oct 2025 04:21:16 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 3209 IP address blocks: 15.145.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:85:e4:e9:13:be:6d:34:35:61:4a:0a:dd:b2:89:b0:13:fb:cd:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 21 04:21:16 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=66dde220f263a597aad1ef1bedb6fed7afa66bd81df78e421cd163144e1921c8, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e8:2c:f9:36:5b:91:47:a1:0d:81:d1:57:ff: 86:c4:20:d7:9e:e8:7e:12:22:1c:39:b9:e3:37:3f: 50:fb:dd:8d:06:93:59:0d:55:c1:38:26:f6:f0:0b: b6:2b:22:e0:ac:2e:41:4b:a6:b3:f5:fc:b0:82:95: 0c:e6:43:71:64:f6:77:22:e4:53:27:07:c9:77:b1: 14:41:1d:ff:35:ae:1e:b8:89:a3:35:58:23:18:69: 30:31:ff:48:e7:e9:e3:9c:0b:ac:25:46:94:75:aa: 61:de:db:bc:b4:cb:ff:28:fd:9b:9b:3c:7f:1d:a5: 6f:55:93:f5:d7:31:3c:c9:d5:bf:b5:f8:d0:1c:ae: e6:fb:b9:40:d1:74:35:b3:c6:97:e6:e0:dc:16:09: b5:e8:22:49:00:86:fb:37:20:ee:67:c5:1c:a2:a3: c1:07:c9:ca:b0:43:70:d1:f5:7e:78:45:3e:92:fe: 16:c1:19:1e:48:b9:11:6f:1e:23:a8:69:0f:6d:d4: c4:68:83:3a:43:c9:0e:e1:76:0d:f4:9b:32:95:69: 39:39:0d:e4:e0:bf:f1:94:ea:8b:64:6e:1e:0a:42: db:46:27:18:d8:b4:98:0a:68:be:5f:fa:03:1d:12: bd:55:65:c0:31:d9:a2:65:d5:3d:8f:0d:14:16:a7: 68:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:35:38:2B:37:AC:44:43:48:2D:A5:0C:9C:31:0A:7C:82:79:1F:CC X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b77b7d32-4450-4dd0-8bb4-731dc9a326fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.145.12.0/22 Signature Algorithm: sha256WithRSAEncryption 5a:ce:10:a0:5b:fd:c2:5e:69:58:04:95:f8:3d:84:50:2b:7a: 61:ec:e4:51:08:10:c6:bc:a8:8c:ae:94:11:1d:65:69:fb:ec: c4:fa:93:db:fd:e4:4f:1a:f4:1a:62:cc:35:2e:57:af:9a:08: b0:b4:24:7e:11:a0:b4:e2:50:ca:58:bb:b4:3a:72:2e:99:02: 9d:c0:15:d5:5b:29:e2:32:d4:d2:e4:17:44:bf:bb:cc:c2:2c: 20:bc:6d:a7:61:c9:d6:76:07:81:f0:97:0e:be:88:e6:b0:44: 83:6f:62:6e:65:0c:44:83:d0:08:e9:2c:72:b9:ab:89:ee:b2: 44:6e:fd:61:7f:17:5b:32:9e:75:7d:33:e0:c3:7f:2a:73:4c: 47:f1:8f:35:6f:77:98:b5:ef:6b:60:28:68:56:4d:94:e8:e9: 7b:f9:ae:81:ca:de:48:5c:30:1a:ce:75:15:d8:42:bd:68:6f: fc:fb:4f:eb:d3:d5:2d:46:09:c5:be:be:aa:14:0b:83:93:89: fb:19:ec:97:60:c7:9b:e6:28:72:8c:08:f8:af:a8:44:57:d2: 7d:55:de:27:87:9a:fa:18:0f:2b:71:fa:48:04:08:89:ad:7c: 0b:d4:e8:fd:41:5b:ea:ba:7a:b7:82:26:83:99:29:c3:27:ce: 91:10:92:9b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYIXk6RO+bTQ1YUoK3bKJsBP7zdQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDIxMDQyMTE2WhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A2NmRkZTIyMGYyNjNhNTk3YWFkMWVmMWJlZGI2ZmVkN2Fm YTY2YmQ4MWRmNzhlNDIxY2QxNjMxNDRlMTkyMWM4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCm6Cz5NluRR6ENgdFX/4bEINee6H4SIhw5ueM3P1D73Y0G k1kNVcE4JvbwC7YrIuCsLkFLprP1/LCClQzmQ3Fk9nci5FMnB8l3sRRBHf81rh64 iaM1WCMYaTAx/0jn6eOcC6wlRpR1qmHe27y0y/8o/ZubPH8dpW9Vk/XXMTzJ1b+1 +NAcrub7uUDRdDWzxpfm4NwWCbXoIkkAhvs3IO5nxRyio8EHycqwQ3DR9X54RT6S /hbBGR5IuRFvHiOoaQ9t1MRogzpDyQ7hdg30mzKVaTk5DeTgv/GU6otkbh4KQttG JxjYtJgKaL5f+gMdEr1VZcAx2aJl1T2PDRQWp2gFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU7jU4KzesRENILaUMnDEKfIJ5H8wwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2I3N2I3ZDMyLTQ0NTAtNGRkMC04YmI0LTczMWRjOWEzMjZmZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIPkQwwDQYJKoZIhvcNAQELBQADggEBAFrOEKBb/cJeaVgElfg9hFAremHs 5FEIEMa8qIyulBEdZWn77MT6k9v95E8a9BpizDUuV6+aCLC0JH4RoLTiUMpYu7Q6 ci6ZAp3AFdVbKeIy1NLkF0S/u8zCLCC8badhydZ2B4Hwlw6+iOawRINvYm5lDESD 0AjpLHK5q4nuskRu/WF/F1synnV9M+DDfypzTEfxjzVvd5i172tgKGhWTZTo6Xv5 roHK3khcMBrOdRXYQr1ob/z7T+vT1S1GCcW+vqoUC4OTifsZ7Jdgx5vmKHKMCPiv qERX0n1V3ieHmvoYDytx+kgECImtfAvU6P1BW+q6ereCJoOZKcMnzpEQkps= -----END CERTIFICATE-----Generated at Tue Nov 4 20:57:21 2025 by rpki-client