$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bd05bf67-9209-47a2-a05a-a7e437a8a25c.roa File: bd05bf67-9209-47a2-a05a-a7e437a8a25c.roa (raw, json) Hash identifier: G2Wg84UsS2DNcE4gMMwy/6sYI4/QAMS8x437X1KcEjk= Subject key identifier: 2C:14:1E:A1:1C:30:81:89:3A:37:91:FA:5E:41:AC:E7:E9:96:F5:7C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3F2B468A7BFC6C1F91D1B8A844AC6526BB5C2B75 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bd05bf67-9209-47a2-a05a-a7e437a8a25c.roa Signing time: Fri 10 Oct 2025 00:46:05 +0000 ROA not before: Fri 10 Oct 2025 00:46:05 +0000 ROA not after: Fri 14 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.177.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:2b:46:8a:7b:fc:6c:1f:91:d1:b8:a8:44:ac:65:26:bb:5c:2b:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 10 00:46:05 2025 GMT Not After : Nov 14 23:59:59 2025 GMT Subject: serialNumber=14a2fe73ddc7efcdb37794959432f3c64a0e7f4965c72ea5ce1551cbb580942a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2b:98:51:a1:75:b4:c1:b1:08:63:35:48:66: ea:42:cb:24:92:c7:2d:e9:27:e7:41:ed:e6:b0:8d: d9:c5:4d:38:be:42:11:3f:a4:2e:e7:53:c9:9c:33: 87:8c:77:60:4b:ab:b4:08:ba:24:f5:66:b9:88:64: 58:4b:7c:b9:5c:7d:ff:32:b6:27:f1:34:04:bd:35: f4:23:ab:ac:a5:92:cb:b5:5f:d6:7c:c1:24:89:96: 5b:99:53:61:af:d2:4d:58:69:d4:30:21:b6:2a:af: 32:9c:43:16:94:22:d9:bb:25:a6:b9:3d:a7:6d:2c: dd:02:12:ae:6c:1f:68:98:20:51:8f:f7:79:7d:93: 27:86:85:38:df:f0:b0:e3:63:ff:61:57:d8:78:3d: 3a:b2:9f:88:02:6b:11:46:d9:e8:6a:52:f7:db:ab: 88:31:7b:24:cc:6b:f3:eb:69:00:c7:13:fa:53:89: 7e:31:e1:90:4b:59:98:b0:a8:8f:d8:df:3c:2b:29: 12:a5:14:6f:2c:3f:29:88:80:04:31:ff:1d:f8:bb: 63:fd:9f:76:1b:25:40:91:90:48:c3:39:50:6b:31: 55:00:22:c6:fe:b7:c8:4c:69:7e:80:26:51:11:90: 14:3e:e7:3c:b1:e1:df:54:41:9d:cb:57:39:ac:de: 81:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:14:1E:A1:1C:30:81:89:3A:37:91:FA:5E:41:AC:E7:E9:96:F5:7C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bd05bf67-9209-47a2-a05a-a7e437a8a25c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.177.91.0/24 Signature Algorithm: sha256WithRSAEncryption 18:68:aa:05:06:32:6f:17:f3:38:3b:2d:b0:38:dc:50:73:2e: 58:c4:34:5a:1e:6d:0e:95:b8:25:18:14:8c:90:44:3e:5f:63: 39:b9:da:b0:b8:53:75:fa:04:e7:26:86:4b:2b:e1:90:42:ae: de:ac:84:36:63:81:7a:f8:b2:78:c3:35:8b:73:09:4f:0c:7c: 37:6c:2a:b4:72:4b:db:ce:2f:d6:58:49:20:81:e8:bd:69:71: 4b:c1:e2:3f:03:60:64:05:91:46:c9:3a:53:b5:99:98:03:4d: 42:e1:5e:26:91:14:82:07:18:e3:0e:7e:42:79:12:08:2c:d2: 37:04:c9:32:05:d8:1b:16:e0:0a:13:1d:8a:82:11:75:e6:a6: 52:86:b1:2c:7f:54:0f:93:ae:2d:cf:27:8a:67:37:03:00:7e: 93:5a:34:d1:58:93:d2:1d:b3:97:aa:25:94:92:d5:6e:91:1f: 6c:33:11:e8:39:3a:4e:e0:a1:1b:d2:e3:f5:49:ae:aa:97:94: bf:88:4b:d4:bc:69:3e:38:75:89:30:30:fd:46:72:69:7f:4e: e3:27:4f:4b:ad:bd:40:a7:c3:56:06:da:24:6a:78:37:77:b5: 0e:b8:be:2e:49:e2:a1:0e:55:5f:77:03:5d:cc:50:c6:c7:e5: 86:16:bc:b9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPytGinv8bB+R0bioRKxlJrtcK3UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDEwMDA0NjA1WhcNMjUxMTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AxNGEyZmU3M2RkYzdlZmNkYjM3Nzk0OTU5NDMyZjNjNjRh MGU3ZjQ5NjVjNzJlYTVjZTE1NTFjYmI1ODA5NDJhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8K5hRoXW0wbEIYzVIZupCyySSxy3pJ+dB7eawjdnFTTi+ QhE/pC7nU8mcM4eMd2BLq7QIuiT1ZrmIZFhLfLlcff8ytifxNAS9NfQjq6ylksu1 X9Z8wSSJlluZU2Gv0k1YadQwIbYqrzKcQxaUItm7Jaa5PadtLN0CEq5sH2iYIFGP 93l9kyeGhTjf8LDjY/9hV9h4PTqyn4gCaxFG2ehqUvfbq4gxeyTMa/PraQDHE/pT iX4x4ZBLWZiwqI/Y3zwrKRKlFG8sPymIgAQx/x34u2P9n3YbJUCRkEjDOVBrMVUA Isb+t8hMaX6AJlERkBQ+5zyx4d9UQZ3LVzms3oFRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQULBQeoRwwgYk6N5H6XkGs5+mW9XwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2JkMDViZjY3LTkyMDktNDdhMi1hMDVhLWE3ZTQzN2E4YTI1Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAPsVswDQYJKoZIhvcNAQELBQADggEBABhoqgUGMm8X8zg7LbA43FBzLljE NFoebQ6VuCUYFIyQRD5fYzm52rC4U3X6BOcmhksr4ZBCrt6shDZjgXr4snjDNYtz CU8MfDdsKrRyS9vOL9ZYSSCB6L1pcUvB4j8DYGQFkUbJOlO1mZgDTULhXiaRFIIH GOMOfkJ5Eggs0jcEyTIF2BsW4AoTHYqCEXXmplKGsSx/VA+Tri3PJ4pnNwMAfpNa NNFYk9Ids5eqJZSS1W6RH2wzEeg5Ok7goRvS4/VJrqqXlL+IS9S8aT44dYkwMP1G cml/TuMnT0utvUCnw1YG2iRqeDd3tQ64vi5J4qEOVV93A13MUMbH5YYWvLk= -----END CERTIFICATE-----Generated at Mon Oct 20 03:04:47 2025 by rpki-client