$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0d503af8-6533-4229-8372-1620e43041e4.roa File: 0d503af8-6533-4229-8372-1620e43041e4.roa (raw, json) Hash identifier: xkOHTxgouCSjXt8PWW3gkw+BVIt8yoKRkDdj351Iskw= Subject key identifier: 42:52:40:5C:0A:F8:43:AB:25:4B:49:19:95:0B:C3:95:28:02:F8:8C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6A1B6B785C3A33AF227026CA1F576134C8B0966B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0d503af8-6533-4229-8372-1620e43041e4.roa Signing time: Fri 26 Sep 2025 15:30:44 +0000 ROA not before: Fri 26 Sep 2025 15:30:44 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 8987 IP address blocks: 15.205.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:1b:6b:78:5c:3a:33:af:22:70:26:ca:1f:57:61:34:c8:b0:96:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 15:30:44 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=6b4fc924caf3c8bd5825ac092df05d5f806e476b76bdabe096220fa20f60c5f0, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a6:42:cf:43:58:f7:80:37:d5:5d:23:b1:17: 1d:17:c5:c8:71:23:c2:c3:37:be:d4:00:77:47:0f: 1b:cd:e2:ea:d1:99:9f:7b:2e:c1:52:5b:8e:e1:fd: 09:6e:ce:e7:97:5d:76:37:21:03:ba:c3:67:d1:2c: a9:f0:98:de:34:c6:d8:e0:0c:59:d8:d1:cd:2b:52: 0f:85:ff:57:34:24:d8:93:96:06:c2:cd:b3:21:25: 56:42:7e:36:31:c6:94:84:0e:b0:d8:aa:74:9d:59: a8:4c:9a:4f:a2:36:37:31:ea:78:6b:87:49:9b:01: c0:67:ae:66:d2:af:4a:8f:8b:35:3f:b4:bb:7d:c6: 10:1e:de:0d:01:ed:5c:c0:05:93:82:4c:9f:47:ec: 91:bc:1c:d7:1d:6e:75:9f:80:d5:0e:29:aa:5e:67: 0e:d8:ef:86:67:cc:e8:85:94:7a:c3:1e:7f:a5:97: 93:fa:c3:a9:da:8e:2c:a7:d4:d2:6b:ac:c6:df:6d: 01:0b:a7:4c:73:f7:aa:d1:9d:87:68:d9:df:0f:19: 25:37:54:16:73:94:2a:95:d4:01:66:6c:4d:b2:38: 8c:c3:fe:0a:57:5d:06:bc:fb:70:cb:8f:48:1e:c4: 5f:70:10:8b:42:e9:3a:8b:ea:cd:42:7c:05:ce:9a: 2f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:52:40:5C:0A:F8:43:AB:25:4B:49:19:95:0B:C3:95:28:02:F8:8C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0d503af8-6533-4229-8372-1620e43041e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.205.0.0/16 Signature Algorithm: sha256WithRSAEncryption 6e:ea:e4:72:89:f1:48:b8:96:0d:ea:7c:53:55:a0:53:8d:fe: 8d:31:a3:e3:88:17:71:c0:f5:3d:32:5c:c5:ce:36:5c:d6:04: a4:11:92:97:85:fc:b9:f6:14:83:be:c2:b2:6f:27:a7:47:40: 76:9d:10:6d:c0:56:de:13:14:45:9e:d4:62:2b:23:ea:f9:c8: b6:a2:89:8b:5c:90:41:41:37:53:b9:41:2d:e1:ce:86:40:14: 90:78:4b:3d:fe:f7:8a:dc:dc:e6:6d:a7:f4:c4:dd:af:42:9f: 0d:e8:4e:12:88:b4:a4:a0:00:3a:ac:a3:7d:68:1e:7a:39:d2: 2e:d1:1c:cb:de:37:5b:e5:cc:32:92:5c:8a:c1:b8:1e:14:26: 95:72:96:47:35:fa:52:36:39:6b:78:0c:90:4f:7e:08:92:ed: d6:de:25:20:56:f8:96:06:6e:51:37:be:f7:d1:2c:66:a9:cf: f2:b1:82:c0:3d:5b:7b:ec:d2:25:04:94:c5:e0:82:47:a2:54: e8:b7:51:53:b3:23:42:9c:fd:24:5e:c2:e0:db:73:e3:42:df: da:37:07:86:8e:b8:26:96:10:44:dd:90:8c:17:60:f8:60:aa: c2:6c:61:89:7d:db:f4:a3:4b:30:c6:7e:b2:41:a4:ef:f3:36: ed:2e:76:5e -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUahtreFw6M68icCbKH1dhNMiwlmswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MTUzMDQ0WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A2YjRmYzkyNGNhZjNjOGJkNTgyNWFjMDkyZGYwNWQ1Zjgw NmU0NzZiNzZiZGFiZTA5NjIyMGZhMjBmNjBjNWYwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDWpkLPQ1j3gDfVXSOxFx0XxchxI8LDN77UAHdHDxvN4urR mZ97LsFSW47h/QluzueXXXY3IQO6w2fRLKnwmN40xtjgDFnY0c0rUg+F/1c0JNiT lgbCzbMhJVZCfjYxxpSEDrDYqnSdWahMmk+iNjcx6nhrh0mbAcBnrmbSr0qPizU/ tLt9xhAe3g0B7VzABZOCTJ9H7JG8HNcdbnWfgNUOKapeZw7Y74ZnzOiFlHrDHn+l l5P6w6najiyn1NJrrMbfbQELp0xz96rRnYdo2d8PGSU3VBZzlCqV1AFmbE2yOIzD /gpXXQa8+3DLj0gexF9wEItC6TqL6s1CfAXOmi8/AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUQlJAXAr4Q6slS0kZlQvDlSgC+IwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzBkNTAzYWY4LTY1MzMtNDIyOS04MzcyLTE2MjBlNDMwNDFlNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAPzTANBgkqhkiG9w0BAQsFAAOCAQEAburkconxSLiWDep8U1WgU43+jTGj 44gXccD1PTJcxc42XNYEpBGSl4X8ufYUg77Csm8np0dAdp0QbcBW3hMURZ7UYisj 6vnItqKJi1yQQUE3U7lBLeHOhkAUkHhLPf73itzc5m2n9MTdr0KfDehOEoi0pKAA OqyjfWgeejnSLtEcy943W+XMMpJcisG4HhQmlXKWRzX6UjY5a3gMkE9+CJLt1t4l IFb4lgZuUTe+99EsZqnP8rGCwD1be+zSJQSUxeCCR6JU6LdRU7MjQpz9JF7C4Ntz 40Lf2jcHho64JpYQRN2QjBdg+GCqwmxhiX3b9KNLMMZ+skGk7/M27S52Xg== -----END CERTIFICATE-----Generated at Mon Oct 20 06:34:02 2025 by rpki-client