$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/59e6a4ed-f365-4eb8-b0ac-76112f69aec7.roa File: 59e6a4ed-f365-4eb8-b0ac-76112f69aec7.roa (raw, json) Hash identifier: rRlaebXOUPfFYtX4eWkr0FsaMzWLQ4UK11dppcyJVns= Subject key identifier: 64:FD:08:56:D3:D0:4A:31:77:FC:84:BE:2C:84:58:09:1E:C6:CB:FC Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 15AE66100F595A6D93F07C7443546C8D75289187 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/59e6a4ed-f365-4eb8-b0ac-76112f69aec7.roa Signing time: Fri 03 Oct 2025 15:09:00 +0000 ROA not before: Fri 03 Oct 2025 15:09:00 +0000 ROA not after: Fri 07 Nov 2025 23:59:59 +0000 asID: 7224 IP address blocks: 15.248.6.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:ae:66:10:0f:59:5a:6d:93:f0:7c:74:43:54:6c:8d:75:28:91:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 3 15:09:00 2025 GMT Not After : Nov 7 23:59:59 2025 GMT Subject: serialNumber=f6e3816bd905def6f9af65822c761acdfbfc9e5f1ef2abc171c2e29568ac5fd1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:e7:68:e2:39:9c:47:a7:b2:33:01:9e:d0:cf: a6:8a:42:3d:1e:58:bf:24:a5:87:ca:d7:2d:78:e5: e7:6b:fd:1b:32:71:27:8c:2d:e4:31:7b:e0:c9:9c: 77:fe:2f:4b:32:16:51:d0:2e:11:bb:04:5e:df:64: 84:e9:05:62:7f:f0:5f:17:15:26:c5:8b:b4:53:8d: 23:be:6d:48:e0:b5:0c:a1:2f:f2:c1:77:8d:dc:77: 1d:07:55:d0:0b:d9:ba:21:db:d7:90:a4:2f:86:8f: fb:79:07:00:0d:f7:2f:a2:c8:c5:0f:fe:78:a4:22: 37:20:5a:bc:a7:f9:43:8c:36:a0:56:f6:ce:ac:5b: 17:d6:11:9d:91:2c:71:21:96:1c:92:df:05:63:6e: bb:00:bc:30:20:03:40:83:f4:5b:94:59:1b:0f:c8: f9:95:27:e8:1a:2e:a3:0e:f3:60:19:99:28:7a:16: ed:54:e0:5f:7c:f2:53:00:5b:63:95:53:c6:ca:48: d8:20:f0:46:e6:56:81:43:72:76:5c:02:28:0b:4a: 17:35:46:b9:ad:09:4a:60:83:7b:3c:37:d1:21:2f: c1:6b:c3:eb:4e:5a:17:de:e3:ed:a4:32:61:ea:db: 1f:81:96:fd:21:f8:b6:d2:6f:44:09:5a:08:91:a2: 1c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:FD:08:56:D3:D0:4A:31:77:FC:84:BE:2C:84:58:09:1E:C6:CB:FC X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/59e6a4ed-f365-4eb8-b0ac-76112f69aec7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.248.6.0/23 Signature Algorithm: sha256WithRSAEncryption 9b:d6:06:5f:17:a8:49:2c:4b:6a:06:cc:28:73:83:5d:f2:10: bf:2a:c4:37:fd:da:cc:34:71:88:74:11:23:74:36:c0:b7:d7: 71:f3:ea:3e:fb:b4:33:a6:0b:01:55:36:84:a8:5a:79:6b:6b: 9f:3c:18:df:d0:9a:1c:58:38:68:c4:2a:22:83:7e:fe:0c:9d: fb:53:cc:d9:ce:34:7c:cd:f3:8a:65:f7:2d:b5:49:40:d5:54: 84:b3:f8:36:4f:c3:6f:5e:ce:03:31:46:f9:00:2a:4e:a8:f4: dd:f4:f5:41:7c:1f:7b:94:8f:0d:b4:aa:5d:92:e6:6a:95:91: d0:67:65:76:fa:20:81:7f:83:76:2d:dd:fd:8c:3d:b0:9d:01: ce:7d:cf:71:da:d5:78:2d:f3:fd:f0:c1:bd:02:ee:86:48:93: ba:a6:b6:ff:cd:53:88:e0:36:31:7a:9f:a4:4b:69:9d:47:76: 50:e5:c2:a8:ca:33:6f:79:88:f5:c0:04:ae:c2:cc:1f:44:77: e9:9a:98:cc:fb:0a:7b:fd:29:00:09:15:4f:17:5b:b9:3b:d4: 89:58:fa:6c:51:6a:c3:96:51:5a:58:63:6d:c0:eb:8d:7e:02: 6a:6d:9c:5c:6d:e2:5d:5c:0c:03:a5:a0:01:5b:3a:96:c0:2c: a8:ae:dd:43 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFa5mEA9ZWm2T8Hx0Q1RsjXUokYcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDAzMTUwOTAwWhcNMjUxMTA3MjM1OTU5 WjB6MUkwRwYDVQQFE0BmNmUzODE2YmQ5MDVkZWY2ZjlhZjY1ODIyYzc2MWFjZGZi ZmM5ZTVmMWVmMmFiYzE3MWMyZTI5NTY4YWM1ZmQxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD552jiOZxHp7IzAZ7Qz6aKQj0eWL8kpYfK1y145edr/Rsy cSeMLeQxe+DJnHf+L0syFlHQLhG7BF7fZITpBWJ/8F8XFSbFi7RTjSO+bUjgtQyh L/LBd43cdx0HVdAL2boh29eQpC+Gj/t5BwAN9y+iyMUP/nikIjcgWryn+UOMNqBW 9s6sWxfWEZ2RLHEhlhyS3wVjbrsAvDAgA0CD9FuUWRsPyPmVJ+gaLqMO82AZmSh6 Fu1U4F988lMAW2OVU8bKSNgg8EbmVoFDcnZcAigLShc1RrmtCUpgg3s8N9EhL8Fr w+tOWhfe4+2kMmHq2x+Blv0h+LbSb0QJWgiRohzRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZP0IVtPQSjF3/IS+LIRYCR7Gy/wwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzU5ZTZhNGVkLWYzNjUtNGViOC1iMGFjLTc2MTEyZjY5YWVjNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEP+AYwDQYJKoZIhvcNAQELBQADggEBAJvWBl8XqEksS2oGzChzg13yEL8q xDf92sw0cYh0ESN0NsC313Hz6j77tDOmCwFVNoSoWnlra588GN/QmhxYOGjEKiKD fv4MnftTzNnONHzN84pl9y21SUDVVISz+DZPw29ezgMxRvkAKk6o9N309UF8H3uU jw20ql2S5mqVkdBnZXb6IIF/g3Yt3f2MPbCdAc59z3Ha1Xgt8/3wwb0C7oZIk7qm tv/NU4jgNjF6n6RLaZ1HdlDlwqjKM295iPXABK7CzB9Ed+mamMz7Cnv9KQAJFU8X W7k71IlY+mxRasOWUVpYY23A641+AmptnFxt4l1cDAOloAFbOpbALKiu3UM= -----END CERTIFICATE-----Generated at Sun Oct 19 23:16:42 2025 by rpki-client