$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ff007066-4f16-43dc-ac2e-68c91e17023e.roa File: ff007066-4f16-43dc-ac2e-68c91e17023e.roa (raw, json) Hash identifier: +R6YXGXepST2VDWCW8o4Nehh/AiI48fXhNKbGUK/jmE= Subject key identifier: 31:AB:84:2D:E7:05:4F:82:3C:E2:B4:0C:FE:65:BC:DB:73:F9:CC:19 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5A5EC7AEA4C56D82C4FE7A76761D49B64A912D14 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ff007066-4f16-43dc-ac2e-68c91e17023e.roa Signing time: Fri 03 Oct 2025 15:10:10 +0000 ROA not before: Fri 03 Oct 2025 15:10:10 +0000 ROA not after: Fri 07 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.177.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:5e:c7:ae:a4:c5:6d:82:c4:fe:7a:76:76:1d:49:b6:4a:91:2d:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 3 15:10:10 2025 GMT Not After : Nov 7 23:59:59 2025 GMT Subject: serialNumber=e3c7baceb0fb0034e6cf14d47166d042e34bcd75c6e83b2adee9a64df22d8a12, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:31:22:b8:1c:d8:f9:11:40:f6:d6:ce:1f:13: 0b:70:3b:03:6d:82:d7:bb:6e:98:bf:53:25:9d:72: 66:d6:17:1c:01:a5:ea:43:bc:05:07:e6:50:44:9f: 5a:1c:42:56:63:fe:2e:d7:fe:eb:04:4b:1c:4e:9a: 43:d2:9d:6c:57:45:90:60:bf:1c:60:52:8a:11:28: 36:c0:c3:fa:98:96:3d:cb:3e:a6:25:17:a7:0c:97: f1:80:cc:93:6a:dc:de:f6:02:3f:55:55:38:0b:54: ae:4e:cb:90:9e:c6:38:9e:1b:b8:5a:ae:30:1e:a9: c7:f0:f4:27:0f:b2:07:b1:5e:ea:8a:2a:4e:b8:80: 1a:2a:81:39:f4:2a:f4:3c:6e:1e:93:09:4d:ff:ae: 64:58:68:93:d0:45:a0:cf:26:5d:fb:f5:a4:a2:57: db:ff:c7:2b:dc:47:e7:aa:86:7b:3f:53:1f:39:0b: 49:bf:63:98:4f:88:56:22:4a:1e:f9:79:7f:a0:4d: 28:28:4a:ef:e7:c6:24:2e:75:73:40:12:d2:82:c4: 33:67:1b:a3:d8:39:ce:56:4b:f4:83:80:2c:75:e7: 8e:b7:06:eb:60:de:02:91:6e:10:1c:bb:bb:ea:ef: ca:c0:e4:cf:56:d1:0c:d7:f6:e2:8b:3b:dc:0a:eb: b4:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:AB:84:2D:E7:05:4F:82:3C:E2:B4:0C:FE:65:BC:DB:73:F9:CC:19 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ff007066-4f16-43dc-ac2e-68c91e17023e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.177.103.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:a7:2e:81:d1:68:19:fe:76:53:23:02:8b:51:b9:bb:02:e2: cc:b5:c7:38:bf:34:ef:5f:b6:37:74:19:2e:04:b6:34:79:e5: 79:e0:fe:73:f6:85:a5:2c:f7:50:0f:8b:9e:34:0b:56:b5:40: db:34:c5:2c:0f:67:0e:34:22:f1:2f:e3:bf:36:f5:60:a3:a8: ed:0c:c2:57:46:4e:fd:a1:20:95:a7:3f:cb:ca:24:4e:c7:ca: b0:f4:54:ba:31:7c:91:3d:df:8c:a4:6b:14:3f:70:f2:fa:40: ae:c5:0b:44:45:fb:22:28:b9:69:a3:94:6a:1e:be:2d:f6:a1: 67:f1:e3:ee:99:0e:4f:77:ab:88:ea:e7:11:6a:97:2a:e5:90: 3b:4a:bd:55:bf:7a:8a:04:62:5c:57:2b:ce:bd:87:90:c1:1a: 1a:b1:8a:fc:0f:6c:24:70:9d:3b:2c:7b:f5:30:7f:19:43:ca: 16:04:6e:23:de:64:ec:fc:92:b0:99:55:24:ac:a8:47:a3:9f: 33:5f:f6:e7:fc:f1:ce:65:0e:53:65:35:ff:ba:39:2b:b4:3e: 0a:b9:eb:1c:e0:aa:0a:f7:fc:6d:35:ec:6e:df:05:29:09:85: 24:9f:c1:08:4e:57:39:67:68:77:b5:d5:8a:6b:b3:36:e3:1d: 3d:5a:44:28 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWl7HrqTFbYLE/np2dh1JtkqRLRQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDAzMTUxMDEwWhcNMjUxMTA3MjM1OTU5 WjB6MUkwRwYDVQQFE0BlM2M3YmFjZWIwZmIwMDM0ZTZjZjE0ZDQ3MTY2ZDA0MmUz NGJjZDc1YzZlODNiMmFkZWU5YTY0ZGYyMmQ4YTEyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDrMSK4HNj5EUD21s4fEwtwOwNtgte7bpi/UyWdcmbWFxwB pepDvAUH5lBEn1ocQlZj/i7X/usESxxOmkPSnWxXRZBgvxxgUooRKDbAw/qYlj3L PqYlF6cMl/GAzJNq3N72Aj9VVTgLVK5Oy5CexjieG7harjAeqcfw9CcPsgexXuqK Kk64gBoqgTn0KvQ8bh6TCU3/rmRYaJPQRaDPJl379aSiV9v/xyvcR+eqhns/Ux85 C0m/Y5hPiFYiSh75eX+gTSgoSu/nxiQudXNAEtKCxDNnG6PYOc5WS/SDgCx15463 Butg3gKRbhAcu7vq78rA5M9W0QzX9uKLO9wK67QZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUMauELecFT4I84rQM/mW823P5zBkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2ZmMDA3MDY2LTRmMTYtNDNkYy1hYzJlLTY4YzkxZTE3MDIzZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAPsWcwDQYJKoZIhvcNAQELBQADggEBAEqnLoHRaBn+dlMjAotRubsC4sy1 xzi/NO9ftjd0GS4EtjR55Xng/nP2haUs91APi540C1a1QNs0xSwPZw40IvEv4782 9WCjqO0MwldGTv2hIJWnP8vKJE7HyrD0VLoxfJE934ykaxQ/cPL6QK7FC0RF+yIo uWmjlGoevi32oWfx4+6ZDk93q4jq5xFqlyrlkDtKvVW/eooEYlxXK869h5DBGhqx ivwPbCRwnTsse/UwfxlDyhYEbiPeZOz8krCZVSSsqEejnzNf9uf88c5lDlNlNf+6 OSu0Pgq56xzgqgr3/G017G7fBSkJhSSfwQhOVzlnaHe11YprszbjHT1aRCg= -----END CERTIFICATE-----Generated at Mon Oct 20 08:51:23 2025 by rpki-client