$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ff88e27e-75e1-47f9-9fe6-543529716cf1.roa File: ff88e27e-75e1-47f9-9fe6-543529716cf1.roa (raw, json) Hash identifier: 2dE9VNnKXDOEFfmi/VUmoH5VNdGu9+nA/IVZKU8W4js= Subject key identifier: FF:40:CF:7E:7D:D0:57:21:38:FE:9B:95:9A:9C:96:0E:43:F6:00:C6 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2AFD5B42AE34BC0CBCEEDC52AA832B1F0A4975C9 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ff88e27e-75e1-47f9-9fe6-543529716cf1.roa Signing time: Fri 10 Oct 2025 00:55:30 +0000 ROA not before: Fri 10 Oct 2025 00:55:30 +0000 ROA not after: Fri 14 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.230.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:fd:5b:42:ae:34:bc:0c:bc:ee:dc:52:aa:83:2b:1f:0a:49:75:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 10 00:55:30 2025 GMT Not After : Nov 14 23:59:59 2025 GMT Subject: serialNumber=3c0f274cb32ee2181035b82cec437ddcd92f705278fcdf55d68efcb0284504d4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:14:fb:45:a8:ba:98:50:6a:c8:bc:d5:0f:34: 50:b8:8d:4a:7d:42:cd:31:a9:dd:94:99:00:0b:8c: 87:fa:5e:09:bd:88:80:ab:fd:43:b6:18:5d:23:a5: bf:da:d1:91:0b:c3:93:d7:61:01:88:74:82:bc:80: 80:fd:78:7c:87:89:24:8f:47:b3:e8:9c:16:6d:99: e5:36:fa:f9:38:61:c2:20:fb:d7:82:cf:9a:97:e2: e8:62:1c:d3:f0:ab:cf:23:47:b1:bb:59:7f:55:64: b8:d3:48:07:56:bd:c5:9b:69:30:6d:09:09:ac:bc: d3:7a:37:a6:a7:44:40:1f:a9:6d:ce:26:1c:0b:f1: a9:f6:14:77:6e:c7:28:ce:cb:f7:0a:c4:06:da:b4: 02:4a:93:f4:7f:3d:4c:33:69:24:03:15:9e:07:10: 91:09:a3:3f:16:df:d2:e6:0f:7f:0e:62:ee:7f:bb: 51:96:2d:6c:0c:7e:10:05:3b:60:26:4c:8a:e0:2f: c2:99:af:4d:fe:e3:2e:f7:cd:fe:23:ba:45:c1:25: 65:a5:cf:d0:6c:31:e7:42:0f:b7:6e:f0:58:ee:06: 06:b2:af:d1:0c:8b:b9:5a:00:6e:f6:be:40:d7:da: 21:0a:d8:59:70:e4:ae:b2:9b:ed:c0:f2:8b:e8:d6: 99:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:40:CF:7E:7D:D0:57:21:38:FE:9B:95:9A:9C:96:0E:43:F6:00:C6 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ff88e27e-75e1-47f9-9fe6-543529716cf1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.230.221.0/24 Signature Algorithm: sha256WithRSAEncryption 59:42:c0:27:0c:eb:e3:2c:4d:e4:bc:6d:c2:7d:c9:85:1f:e0: a9:c1:4f:c8:ac:97:24:95:4b:d7:91:10:79:86:bf:26:57:51: 66:72:5a:ef:25:2f:a0:8e:a5:5f:fa:e3:f8:8f:03:07:16:05: ab:6b:46:87:26:21:35:c0:4f:46:bb:c7:17:c4:d9:e5:ab:56: c8:87:af:62:2d:d4:df:9e:55:d6:31:ed:bb:02:38:ba:39:f5: e8:ef:e2:2d:2d:fc:7d:97:3f:4d:e3:89:16:c1:7d:17:dc:2b: 0c:73:3c:54:90:93:48:2a:7d:de:e2:0d:39:ef:d6:a7:24:7c: fa:c3:8f:9e:f8:e2:42:5f:1f:17:2b:6c:5e:7a:41:db:3a:35: 62:fa:2d:ba:be:94:cc:48:a9:e3:07:a0:55:16:5a:b9:58:41: 8b:25:a3:d2:f4:11:2c:ee:6d:93:f1:60:88:56:90:80:46:fa: 1b:77:64:b6:75:ad:b0:6b:de:16:3a:35:1a:89:24:c5:22:94: f3:c7:4c:32:a2:a9:58:76:40:ce:43:4e:bf:e8:45:57:37:08: 42:01:19:29:88:da:bd:8b:ea:5f:67:2b:76:93:91:90:4d:d4: 53:cf:e1:b8:ba:14:66:4a:e3:d9:59:7e:33:e6:74:1a:cc:fa: 62:cd:e1:9d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKv1bQq40vAy87txSqoMrHwpJdckwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDEwMDA1NTMwWhcNMjUxMTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AzYzBmMjc0Y2IzMmVlMjE4MTAzNWI4MmNlYzQzN2RkY2Q5 MmY3MDUyNzhmY2RmNTVkNjhlZmNiMDI4NDUwNGQ0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZFPtFqLqYUGrIvNUPNFC4jUp9Qs0xqd2UmQALjIf6Xgm9 iICr/UO2GF0jpb/a0ZELw5PXYQGIdIK8gID9eHyHiSSPR7PonBZtmeU2+vk4YcIg +9eCz5qX4uhiHNPwq88jR7G7WX9VZLjTSAdWvcWbaTBtCQmsvNN6N6anREAfqW3O JhwL8an2FHduxyjOy/cKxAbatAJKk/R/PUwzaSQDFZ4HEJEJoz8W39LmD38OYu5/ u1GWLWwMfhAFO2AmTIrgL8KZr03+4y73zf4jukXBJWWlz9BsMedCD7du8FjuBgay r9EMi7laAG72vkDX2iEK2Flw5K6ym+3A8ovo1pljAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU/0DPfn3QVyE4/puVmpyWDkP2AMYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2ZmODhlMjdlLTc1ZTEtNDdmOS05ZmU2LTU0MzUyOTcxNmNmMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAP5t0wDQYJKoZIhvcNAQELBQADggEBAFlCwCcM6+MsTeS8bcJ9yYUf4KnB T8islySVS9eREHmGvyZXUWZyWu8lL6COpV/64/iPAwcWBatrRocmITXAT0a7xxfE 2eWrVsiHr2It1N+eVdYx7bsCOLo59ejv4i0t/H2XP03jiRbBfRfcKwxzPFSQk0gq fd7iDTnv1qckfPrDj5744kJfHxcrbF56Qds6NWL6Lbq+lMxIqeMHoFUWWrlYQYsl o9L0ESzubZPxYIhWkIBG+ht3ZLZ1rbBr3hY6NRqJJMUilPPHTDKiqVh2QM5DTr/o RVc3CEIBGSmI2r2L6l9nK3aTkZBN1FPP4bi6FGZK49lZfjPmdBrM+mLN4Z0= -----END CERTIFICATE-----Generated at Mon Oct 20 06:30:54 2025 by rpki-client