$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f283dc19-b768-4c91-b420-36e710d88e70.roa File: f283dc19-b768-4c91-b420-36e710d88e70.roa (raw, json) Hash identifier: gpoYjRlzKvEbOvzBl+hv1Ht4DFhkPwOUAV5JafTktAg= Subject key identifier: 2A:41:8E:F4:F5:25:45:59:84:18:02:1B:64:88:BE:D9:82:0F:C9:ED Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 26363C785D52E87CD12F5965DB28224D014F1F7D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f283dc19-b768-4c91-b420-36e710d88e70.roa Signing time: Sat 01 Nov 2025 01:10:15 +0000 ROA not before: Sat 01 Nov 2025 01:10:15 +0000 ROA not after: Sat 06 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.220.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:36:3c:78:5d:52:e8:7c:d1:2f:59:65:db:28:22:4d:01:4f:1f:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Nov 1 01:10:15 2025 GMT Not After : Dec 6 23:59:59 2025 GMT Subject: serialNumber=52f456d1523d1c0260d7399d68311b4b42da3f1b04ff4453aa1b45423219c0cc, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ad:b5:8a:19:26:e0:35:dd:93:df:82:4b:3a: ee:74:02:53:ae:6a:ab:59:6f:a4:e7:e0:b8:03:0b: 28:77:60:f1:20:4a:1f:6d:88:9c:4f:43:17:d4:cc: ea:b1:6d:cc:c7:c2:4d:6c:93:3e:37:50:3d:72:0e: 15:c1:45:f0:22:48:e4:64:10:6b:44:03:c2:98:ab: 26:d7:ee:3d:fb:14:13:53:16:92:22:80:e9:02:8a: 72:e9:ea:9d:57:9d:e3:4a:09:0e:20:7c:d4:77:d9: ab:51:6d:f5:19:e6:53:0a:98:df:d3:07:e1:5c:50: ce:6f:47:2a:85:04:ff:67:49:99:00:e5:0e:6f:61: e5:62:27:ba:34:d7:59:96:70:7d:2c:b1:ab:62:ba: 74:0d:76:ea:b6:2f:55:65:5b:85:2c:45:5b:e7:87: 4b:03:b3:5f:e6:52:58:8e:15:72:9f:5e:9c:43:50: 2e:fd:be:6e:9e:f6:dd:aa:e2:02:eb:e2:d0:cb:45: a9:a6:1e:df:64:c2:8d:45:66:b5:25:3c:0c:69:71: a9:dd:f5:60:61:cb:72:86:f8:ba:df:bf:6e:fa:34: eb:b2:3a:0f:6d:38:76:57:7b:87:6b:df:a4:8c:85: 24:73:34:12:ca:b8:bc:80:68:7f:a4:d2:50:f8:cf: fa:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:41:8E:F4:F5:25:45:59:84:18:02:1B:64:88:BE:D9:82:0F:C9:ED X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f283dc19-b768-4c91-b420-36e710d88e70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.220.250.0/23 Signature Algorithm: sha256WithRSAEncryption 00:a4:c1:a4:d0:8d:06:1f:6d:23:b0:96:c6:94:65:a0:b0:c7: e3:bf:4a:fb:f0:0a:f3:3b:54:1f:19:f4:4e:3b:12:96:31:f4: 3b:44:12:06:b0:f7:dd:28:9c:df:67:15:76:5f:75:3a:a7:4c: 5d:d3:ec:53:7f:3e:95:f9:07:7c:28:f0:8a:6a:7a:46:1b:5c: 7f:2d:8c:49:68:ce:0d:16:b2:c7:dc:db:95:d5:d7:93:91:99: c4:e1:e5:03:50:94:d2:36:39:6b:c3:a9:08:8c:3e:f1:1e:a6: 09:0a:bb:8e:a8:06:00:81:f8:11:df:46:bd:48:57:bb:6e:01: 36:11:77:9c:9d:9e:69:aa:75:e8:06:81:01:7c:1d:12:10:84: 5c:0c:d4:ce:1b:7d:6b:50:55:44:19:3f:f1:61:fa:14:fc:51: b9:61:bb:8f:e7:26:3c:ba:0d:93:23:30:b0:9f:66:ae:32:82: 8e:e8:d5:c1:ba:53:d6:a9:0b:bd:d1:25:e5:e3:59:9a:13:7d: 4a:b5:53:5c:71:32:75:a8:ef:97:29:c1:84:16:4a:91:b3:f8: 03:c2:58:48:cf:15:0c:4c:ea:3d:77:ad:34:c0:f4:6f:ad:23: d5:84:1e:ae:f5:0f:2e:52:45:89:57:6b:0e:7c:7e:a7:2b:ad: 3b:47:0c:0f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJjY8eF1S6HzRL1ll2ygiTQFPH30wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMTAxMDExMDE1WhcNMjUxMjA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A1MmY0NTZkMTUyM2QxYzAyNjBkNzM5OWQ2ODMxMWI0YjQy ZGEzZjFiMDRmZjQ0NTNhYTFiNDU0MjMyMTljMGNjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCprbWKGSbgNd2T34JLOu50AlOuaqtZb6Tn4LgDCyh3YPEg Sh9tiJxPQxfUzOqxbczHwk1skz43UD1yDhXBRfAiSORkEGtEA8KYqybX7j37FBNT FpIigOkCinLp6p1XneNKCQ4gfNR32atRbfUZ5lMKmN/TB+FcUM5vRyqFBP9nSZkA 5Q5vYeViJ7o011mWcH0ssatiunQNduq2L1VlW4UsRVvnh0sDs1/mUliOFXKfXpxD UC79vm6e9t2q4gLr4tDLRammHt9kwo1FZrUlPAxpcand9WBhy3KG+Lrfv276NOuy Og9tOHZXe4dr36SMhSRzNBLKuLyAaH+k0lD4z/q/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKkGO9PUlRVmEGAIbZIi+2YIPye0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2YyODNkYzE5LWI3NjgtNGM5MS1iNDIwLTM2ZTcxMGQ4OGU3MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEP3PowDQYJKoZIhvcNAQELBQADggEBAACkwaTQjQYfbSOwlsaUZaCwx+O/ SvvwCvM7VB8Z9E47EpYx9DtEEgaw990onN9nFXZfdTqnTF3T7FN/PpX5B3wo8Ipq ekYbXH8tjElozg0Wssfc25XV15ORmcTh5QNQlNI2OWvDqQiMPvEepgkKu46oBgCB +BHfRr1IV7tuATYRd5ydnmmqdegGgQF8HRIQhFwM1M4bfWtQVUQZP/Fh+hT8Ublh u4/nJjy6DZMjMLCfZq4ygo7o1cG6U9apC73RJeXjWZoTfUq1U1xxMnWo75cpwYQW SpGz+APCWEjPFQxM6j13rTTA9G+tI9WEHq71Dy5SRYlXaw58fqcrrTtHDA8= -----END CERTIFICATE-----Generated at Wed Nov 5 07:43:13 2025 by rpki-client