$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fdf80611-b80b-4abe-935f-aaab75507116.roa File: fdf80611-b80b-4abe-935f-aaab75507116.roa (raw, json) Hash identifier: QQZ6q/fEiiY+IyQck01Yi2rcOW8VV4E7Asc8kzqN96Y= Subject key identifier: AD:BA:4B:7F:F2:08:C6:4E:BF:73:57:DC:A8:2A:30:DC:9A:D5:8F:91 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 276911E22DBBC96535BAB1098926D946594009E9 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fdf80611-b80b-4abe-935f-aaab75507116.roa Signing time: Sun 19 Oct 2025 05:21:21 +0000 ROA not before: Sun 19 Oct 2025 05:21:21 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.136.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:69:11:e2:2d:bb:c9:65:35:ba:b1:09:89:26:d9:46:59:40:09:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 05:21:21 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=124117210a9b78878b029ed4baa58d0fa263fa4c8230b9ebaa797d0ed1ca0010, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:da:6c:37:68:34:20:c9:e8:4f:11:35:eb:0a: 18:a9:20:e5:e1:61:e6:43:b9:fc:94:37:32:d5:a4: fa:0b:3b:8b:9b:73:ce:21:ff:5d:2d:3a:3a:a3:cb: 4d:63:41:f8:40:95:dd:c0:59:e0:49:14:b8:bb:0e: c6:c1:16:7d:37:ef:77:2a:9c:32:1a:f2:65:61:61: ee:7c:5d:cd:50:2d:a9:3f:62:a0:5c:e2:1a:30:c5: d7:35:d3:e0:3f:a4:25:e1:29:51:24:eb:ec:bd:a4: 13:6d:f4:9d:1c:a2:21:af:2a:c1:86:46:63:42:4a: 72:fc:4a:8f:00:0a:5a:13:30:6a:9f:1e:c8:aa:41: 1f:de:0d:33:5e:2d:99:61:6c:54:fc:ba:c2:c2:be: 7c:8a:fe:4e:3e:91:44:ed:d6:78:47:dc:94:4e:3d: 2a:06:42:b3:30:f2:d8:58:1b:bc:5b:9c:40:f5:92: 8e:ed:b7:ba:af:4e:6c:b9:1b:d1:5c:05:72:9c:45: d1:7e:67:65:39:75:06:23:6e:9f:dd:70:3f:85:5e: 77:d9:6e:de:27:4d:17:e7:e2:69:4e:cc:4c:32:75: 68:f2:98:13:b3:ab:5b:0a:37:92:ca:ec:90:6b:4c: a3:cb:af:ec:21:1a:9a:da:7a:6d:34:e0:60:a6:43: 07:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:BA:4B:7F:F2:08:C6:4E:BF:73:57:DC:A8:2A:30:DC:9A:D5:8F:91 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fdf80611-b80b-4abe-935f-aaab75507116.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.136.0.0/16 Signature Algorithm: sha256WithRSAEncryption 0e:68:7f:bc:c2:04:03:d6:fa:f0:2a:93:e4:b6:ca:d0:8a:24: 3b:30:19:5d:2e:11:e4:14:0e:62:64:d3:7c:60:e2:6b:98:27: 21:72:98:6a:0e:9e:da:f3:b2:3a:92:fb:8c:9a:b8:90:3a:d2: e3:78:c1:f8:b0:97:d1:92:19:42:bb:52:c2:3e:b6:b6:a6:a7: db:ac:6c:86:48:47:e9:3e:20:7e:a7:57:46:42:56:64:3f:cb: 13:e2:c9:df:45:95:bb:56:75:1a:4e:ad:35:f2:34:05:70:de: 2f:58:cb:7b:2d:d5:d1:8e:d4:1e:4f:5f:68:54:c3:48:c0:99: ee:d8:d4:00:0f:ae:3d:be:de:b8:3d:28:9c:90:fb:54:a6:dd: 5e:25:07:2e:74:88:70:5d:2d:62:c8:20:e0:78:3b:e3:5b:f4: fd:1d:d5:4e:90:20:e2:8c:c1:66:9e:2d:7a:fc:70:52:8a:00: 9b:34:e3:c3:0a:76:2d:c4:9a:3d:ea:45:b9:1c:52:01:4d:e2: 84:65:46:e7:9b:98:f4:84:c9:aa:8c:9a:5c:b0:3f:39:9d:f9: f2:36:f3:6e:7a:fc:19:85:ed:d3:8e:17:a6:ee:15:bd:b0:66: 92:1d:c3:8d:f9:7b:52:04:fa:85:18:d8:46:e8:a1:72:fc:42: bf:11:c9:d7 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUJ2kR4i27yWU1urEJiSbZRllACekwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MDUyMTIxWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AxMjQxMTcyMTBhOWI3ODg3OGIwMjllZDRiYWE1OGQwZmEy NjNmYTRjODIzMGI5ZWJhYTc5N2QwZWQxY2EwMDEwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDe2mw3aDQgyehPETXrChipIOXhYeZDufyUNzLVpPoLO4ub c84h/10tOjqjy01jQfhAld3AWeBJFLi7DsbBFn0373cqnDIa8mVhYe58Xc1QLak/ YqBc4howxdc10+A/pCXhKVEk6+y9pBNt9J0coiGvKsGGRmNCSnL8So8ACloTMGqf HsiqQR/eDTNeLZlhbFT8usLCvnyK/k4+kUTt1nhH3JROPSoGQrMw8thYG7xbnED1 ko7tt7qvTmy5G9FcBXKcRdF+Z2U5dQYjbp/dcD+FXnfZbt4nTRfn4mlOzEwydWjy mBOzq1sKN5LK7JBrTKPLr+whGpraem004GCmQwezAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUrbpLf/IIxk6/c1fcqCow3JrVj5EwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2ZkZjgwNjExLWI4MGItNGFiZS05MzVmLWFhYWI3NTUwNzExNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAPiDANBgkqhkiG9w0BAQsFAAOCAQEADmh/vMIEA9b68CqT5LbK0IokOzAZ XS4R5BQOYmTTfGDia5gnIXKYag6e2vOyOpL7jJq4kDrS43jB+LCX0ZIZQrtSwj62 tqan26xshkhH6T4gfqdXRkJWZD/LE+LJ30WVu1Z1Gk6tNfI0BXDeL1jLey3V0Y7U Hk9faFTDSMCZ7tjUAA+uPb7euD0onJD7VKbdXiUHLnSIcF0tYsgg4Hg741v0/R3V TpAg4ozBZp4tevxwUooAmzTjwwp2LcSaPepFuRxSAU3ihGVG55uY9ITJqoyaXLA/ OZ358jbzbnr8GYXt044Xpu4VvbBmkh3Djfl7UgT6hRjYRuihcvxCvxHJ1w== -----END CERTIFICATE-----Generated at Mon Oct 20 05:56:14 2025 by rpki-client