$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d2de8cef-fb8f-4887-9901-3075dd865195.roa File: d2de8cef-fb8f-4887-9901-3075dd865195.roa (raw, json) Hash identifier: wOqrEbMu6pWrqLUPomRuTPYFWDnc8tkMrP5YsUgjU1I= Subject key identifier: 36:A8:66:A2:C3:87:27:0D:A4:89:29:85:B1:80:18:B1:AE:49:44:9E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5ED92C6298ED9EF34DE357844C9707D64D7EC91A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d2de8cef-fb8f-4887-9901-3075dd865195.roa Signing time: Sun 19 Oct 2025 06:42:35 +0000 ROA not before: Sun 19 Oct 2025 06:42:35 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.220.152.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:d9:2c:62:98:ed:9e:f3:4d:e3:57:84:4c:97:07:d6:4d:7e:c9:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 06:42:35 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=dce1b809a83f81895f47e7e9de50463dbb00e457b0bd390ac4516f092a0979d2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:31:67:bb:f4:24:5f:33:a2:fd:a6:6d:fa:3f: f6:e5:8f:9e:f6:63:f3:ba:4e:07:7d:4c:40:4c:1f: 39:e6:2d:65:50:c6:cd:00:61:9e:41:05:48:f0:00: cc:05:89:63:19:24:eb:af:6c:17:fe:67:1e:b4:02: b4:e7:90:61:cf:46:72:a2:d0:df:67:25:48:9d:0b: 02:37:af:37:49:b2:56:3d:f1:be:5f:48:df:29:87: 1b:95:9f:76:f0:8d:5f:76:31:d2:61:41:3b:5c:05: 8e:d3:45:86:63:e6:35:e4:f4:2f:7e:6d:f0:48:81: d5:aa:c7:6e:8d:69:e7:d4:00:a0:00:63:63:6a:18: 16:aa:b7:24:2a:14:b5:e4:4f:ca:83:72:e4:84:67: b1:84:9e:d5:f8:b8:99:9b:7b:83:b0:09:12:ca:8b: 95:b7:87:30:9e:05:2f:8a:1b:76:40:1b:35:44:59: 39:b4:81:2d:18:7a:0b:30:75:01:50:6a:2e:ab:35: 2e:a2:78:a2:5b:3f:7d:79:e0:ce:a0:ce:fa:9d:66: f6:1d:6f:71:60:f7:ab:41:fc:9b:01:81:4a:99:64: 0a:af:1c:c7:58:6a:0c:01:cf:83:c9:bd:67:3f:a4: 66:00:56:2e:21:19:43:48:19:b1:20:64:ea:ab:41: 8d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:A8:66:A2:C3:87:27:0D:A4:89:29:85:B1:80:18:B1:AE:49:44:9E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d2de8cef-fb8f-4887-9901-3075dd865195.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.220.152.0/21 Signature Algorithm: sha256WithRSAEncryption 10:c1:08:e3:6a:e3:1a:c4:05:c5:5a:d9:40:6a:53:44:f3:25: db:9e:76:5e:ed:71:70:05:12:1c:53:96:68:75:53:34:f3:b5: d7:29:76:e4:ff:6b:d2:9f:4e:62:48:90:66:20:b6:e5:b7:b4: f6:ba:a6:83:1a:7a:ec:34:a9:30:d5:75:92:c1:e7:cc:23:ee: a9:a3:1d:4e:18:af:ce:b2:ff:84:09:7a:63:b2:b7:91:da:6b: 9a:20:a8:49:d8:f6:c2:76:7a:42:d7:c7:0e:c4:77:30:86:6c: d9:ab:c1:3f:3f:5f:cf:17:8c:29:e8:49:41:85:f6:98:72:1e: 0e:6c:e0:c9:fc:78:c9:3d:8e:b7:69:57:dd:cf:ec:10:54:44: 36:ee:14:41:a9:b7:7e:4c:34:64:59:89:99:3c:2a:92:0f:1b: 79:32:76:89:2a:9f:d2:10:02:2b:9d:ee:aa:a3:12:99:f8:9e: 53:2f:b3:17:26:f1:14:1b:68:29:ac:c2:a4:0a:a9:09:96:5f: 2a:11:ea:d6:96:44:16:d6:fb:bd:51:bc:d3:36:d1:97:3f:c7: 8f:bd:d6:22:aa:8a:df:0f:b9:cc:a5:5e:b0:0a:fc:84:93:52: ae:c4:76:e4:62:26:03:6f:e8:d4:74:80:3f:bd:e8:a3:dd:65: ab:f9:6c:db -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXtksYpjtnvNN41eETJcH1k1+yRowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MDY0MjM1WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BkY2UxYjgwOWE4M2Y4MTg5NWY0N2U3ZTlkZTUwNDYzZGJi MDBlNDU3YjBiZDM5MGFjNDUxNmYwOTJhMDk3OWQyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFMWe79CRfM6L9pm36P/blj572Y/O6Tgd9TEBMHznmLWVQ xs0AYZ5BBUjwAMwFiWMZJOuvbBf+Zx60ArTnkGHPRnKi0N9nJUidCwI3rzdJslY9 8b5fSN8phxuVn3bwjV92MdJhQTtcBY7TRYZj5jXk9C9+bfBIgdWqx26NaefUAKAA Y2NqGBaqtyQqFLXkT8qDcuSEZ7GEntX4uJmbe4OwCRLKi5W3hzCeBS+KG3ZAGzVE WTm0gS0YegswdQFQai6rNS6ieKJbP3154M6gzvqdZvYdb3Fg96tB/JsBgUqZZAqv HMdYagwBz4PJvWc/pGYAVi4hGUNIGbEgZOqrQY2pAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUNqhmosOHJw2kiSmFsYAYsa5JRJ4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2QyZGU4Y2VmLWZiOGYtNDg4Ny05OTAxLTMwNzVkZDg2NTE5NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMP3JgwDQYJKoZIhvcNAQELBQADggEBABDBCONq4xrEBcVa2UBqU0TzJdue dl7tcXAFEhxTlmh1UzTztdcpduT/a9KfTmJIkGYgtuW3tPa6poMaeuw0qTDVdZLB 58wj7qmjHU4Yr86y/4QJemOyt5Haa5ogqEnY9sJ2ekLXxw7EdzCGbNmrwT8/X88X jCnoSUGF9phyHg5s4Mn8eMk9jrdpV93P7BBURDbuFEGpt35MNGRZiZk8KpIPG3ky dokqn9IQAiud7qqjEpn4nlMvsxcm8RQbaCmswqQKqQmWXyoR6taWRBbW+71RvNM2 0Zc/x4+91iKqit8PucylXrAK/ISTUq7EduRiJgNv6NR0gD+96KPdZav5bNs= -----END CERTIFICATE-----Generated at Mon Oct 20 06:23:11 2025 by rpki-client