$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eca36373-2c2b-4810-b0c5-c530f9afed33.roa File: eca36373-2c2b-4810-b0c5-c530f9afed33.roa (raw, json) Hash identifier: QDy9rhcKGhlknpjG/sKR2VdC3w3fZMmd6B7U2uTQEnE= Subject key identifier: 89:3F:77:B4:FA:1D:11:2C:4B:C9:F2:37:FB:29:6D:07:40:A8:11:9C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 276D1C755690B39DD54E17F192DAA914C5D5E62B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eca36373-2c2b-4810-b0c5-c530f9afed33.roa Signing time: Tue 21 Oct 2025 11:00:03 +0000 ROA not before: Tue 21 Oct 2025 11:00:03 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.177.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:6d:1c:75:56:90:b3:9d:d5:4e:17:f1:92:da:a9:14:c5:d5:e6:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 21 11:00:03 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=e2ba228d29ad3a49fafb6af1ea8caa046a3114355e734cd904d729c0de774869, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4d:e5:6a:48:b3:35:64:96:11:05:3a:6d:41: 31:61:59:07:93:21:48:8f:28:3a:f3:05:b4:eb:f9: 4f:e8:2d:57:03:88:8f:c5:97:8b:a2:25:9f:0d:e4: 18:9d:80:cf:56:10:06:68:f5:06:5d:d4:5c:57:89: dc:26:a5:14:07:fd:78:f4:01:b6:bb:33:4d:04:ce: ef:23:da:c1:b1:2f:30:d0:98:de:48:1e:fa:a6:c0: 0e:38:e0:e9:25:4a:2a:74:b6:0c:97:b1:a6:3e:91: 8e:f2:78:2c:5c:65:4f:15:4d:26:8b:e9:06:ed:d8: 8d:33:4f:85:e4:8b:80:67:d3:a2:4d:fe:96:bc:06: b6:85:1c:18:04:97:d6:f2:0a:db:35:7f:20:61:52: bd:f9:31:99:9a:c2:80:4e:b5:05:1a:92:64:f4:dd: 5a:27:0a:4e:cc:57:fa:a0:07:27:08:94:55:fb:40: 0c:4d:5c:f0:49:0e:4c:01:dd:33:ba:41:93:de:9e: 1d:ff:48:d2:f5:bb:0c:53:f5:33:f6:23:6d:ad:67: 07:14:47:2d:c8:88:53:76:3c:ca:8e:eb:94:71:d0: ac:ee:e6:bf:2e:22:d5:28:85:dd:58:b5:75:c9:15: b4:46:b9:e8:2b:76:14:f1:c1:e2:a8:da:71:6e:cd: c4:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:3F:77:B4:FA:1D:11:2C:4B:C9:F2:37:FB:29:6D:07:40:A8:11:9C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eca36373-2c2b-4810-b0c5-c530f9afed33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.177.88.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:4d:14:dd:f6:b5:28:4d:c2:26:fa:7c:e0:1a:c1:28:75:b1: ff:28:a5:23:a3:0e:d1:44:02:08:a7:55:63:ee:a1:ef:71:e2: cd:28:bf:a0:60:e9:af:03:f9:2d:03:15:0e:e1:bc:99:74:1e: 63:b4:a1:ea:d7:5c:e0:aa:5a:4a:e0:2f:e0:b3:da:ef:d9:cc: 34:a0:ea:02:25:2e:58:34:67:ca:af:58:49:7c:2a:de:1b:37: 7e:98:5f:16:30:5b:34:35:76:9b:f6:67:46:88:17:cf:8e:ce: 2a:80:c4:ac:c4:62:05:e7:be:87:77:b3:13:db:2a:bf:f7:bf: 31:ad:95:89:98:64:94:f6:56:fd:21:50:e9:cb:76:ee:3a:05: d1:40:2b:6a:c2:ea:76:b0:bd:33:ee:2b:37:35:8b:25:0d:4a: 87:14:30:66:88:66:15:eb:1d:86:53:15:6a:24:a9:e0:95:a3: 41:92:5f:85:e8:3c:9e:e4:00:0b:4a:00:d5:8f:87:18:f9:13: 3f:46:d0:54:83:72:e6:98:bb:9d:52:28:bd:24:73:02:f2:1d: a8:28:37:01:7a:d6:f0:11:d3:b2:06:8a:f3:3f:aa:31:eb:4c: 7b:22:60:82:73:d6:95:68:4c:03:1f:15:83:99:04:b1:39:56: 24:85:4d:99 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJ20cdVaQs53VThfxktqpFMXV5iswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDIxMTEwMDAzWhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BlMmJhMjI4ZDI5YWQzYTQ5ZmFmYjZhZjFlYThjYWEwNDZh MzExNDM1NWU3MzRjZDkwNGQ3MjljMGRlNzc0ODY5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBTeVqSLM1ZJYRBTptQTFhWQeTIUiPKDrzBbTr+U/oLVcD iI/Fl4uiJZ8N5BidgM9WEAZo9QZd1FxXidwmpRQH/Xj0Aba7M00Ezu8j2sGxLzDQ mN5IHvqmwA444OklSip0tgyXsaY+kY7yeCxcZU8VTSaL6Qbt2I0zT4Xki4Bn06JN /pa8BraFHBgEl9byCts1fyBhUr35MZmawoBOtQUakmT03VonCk7MV/qgBycIlFX7 QAxNXPBJDkwB3TO6QZPenh3/SNL1uwxT9TP2I22tZwcURy3IiFN2PMqO65Rx0Kzu 5r8uItUohd1YtXXJFbRGuegrdhTxweKo2nFuzcRxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUiT93tPodESxLyfI3+yltB0CoEZwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2VjYTM2MzczLTJjMmItNDgxMC1iMGM1LWM1MzBmOWFmZWQzMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAPsVgwDQYJKoZIhvcNAQELBQADggEBAIpNFN32tShNwib6fOAawSh1sf8o pSOjDtFEAginVWPuoe9x4s0ov6Bg6a8D+S0DFQ7hvJl0HmO0oerXXOCqWkrgL+Cz 2u/ZzDSg6gIlLlg0Z8qvWEl8Kt4bN36YXxYwWzQ1dpv2Z0aIF8+OziqAxKzEYgXn vod3sxPbKr/3vzGtlYmYZJT2Vv0hUOnLdu46BdFAK2rC6nawvTPuKzc1iyUNSocU MGaIZhXrHYZTFWokqeCVo0GSX4XoPJ7kAAtKANWPhxj5Ez9G0FSDcuaYu51SKL0k cwLyHagoNwF61vAR07IGivM/qjHrTHsiYIJz1pVoTAMfFYOZBLE5ViSFTZk= -----END CERTIFICATE-----Generated at Wed Nov 5 01:49:05 2025 by rpki-client