$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0e23d473-faa4-4a56-b4e8-7ded7d1787e1.roa File: 0e23d473-faa4-4a56-b4e8-7ded7d1787e1.roa (raw, json) Hash identifier: Kj/1+Uy9xg96nDOZLHavD9XUX/84VFTec1WvsSYSStI= Subject key identifier: 63:FC:02:6A:C4:2F:8F:50:B6:D9:D9:02:6F:69:15:F0:F6:FF:61:0D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0E3A0E2A367D78A3C9E6278BEFF33A948F0EB896 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0e23d473-faa4-4a56-b4e8-7ded7d1787e1.roa Signing time: Mon 13 Oct 2025 17:00:08 +0000 ROA not before: Mon 13 Oct 2025 17:00:08 +0000 ROA not after: Mon 17 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.158.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:3a:0e:2a:36:7d:78:a3:c9:e6:27:8b:ef:f3:3a:94:8f:0e:b8:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 13 17:00:08 2025 GMT Not After : Nov 17 23:59:59 2025 GMT Subject: serialNumber=eb2bc459729dc11e9f62a36f4da687fc5ec8671654d8d03fc022098645e52400, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:05:e2:07:4f:16:bc:5a:7c:5b:2a:79:c5:44: 99:23:a9:15:22:bf:bc:eb:70:c5:07:98:9b:a3:03: af:26:b6:91:ce:14:cd:d9:09:30:36:d6:19:e7:9a: 70:ea:db:45:f9:53:4a:75:ef:f1:32:dd:f8:9c:1a: ec:08:9f:8a:74:77:03:cf:75:d9:6a:a5:e4:e6:6f: 09:83:d2:08:b8:5e:a7:70:b3:be:af:b4:ea:1d:d6: c9:37:74:33:08:66:f0:07:32:a6:91:3f:ed:c2:5c: 0d:b0:f0:9d:5c:15:99:b8:f8:0d:15:e9:4f:78:3a: d5:37:ed:3b:c0:57:58:5a:66:45:16:92:a5:fc:a7: ef:eb:59:cf:02:87:ae:f9:68:8a:d6:e5:a9:f4:65: 69:d5:7c:92:e3:ae:60:a3:61:11:1c:d7:50:fc:4c: 81:4a:7a:2b:ed:91:a6:ca:fe:72:25:fb:b0:69:50: c8:7d:a5:68:52:94:74:e7:95:a7:3a:f0:c0:bf:8f: f0:e9:02:38:20:4d:6d:6f:34:43:3a:cd:3d:8f:f5: cb:4f:c3:a4:f0:94:8c:6e:81:9a:fa:90:30:3a:a6: 1d:92:39:76:2e:52:38:b7:23:cd:e3:57:86:5a:3b: 78:02:95:8c:67:26:ae:b2:51:2a:de:be:3b:8a:fc: df:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:FC:02:6A:C4:2F:8F:50:B6:D9:D9:02:6F:69:15:F0:F6:FF:61:0D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0e23d473-faa4-4a56-b4e8-7ded7d1787e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.158.215.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:dd:06:94:83:62:d5:96:d4:79:0f:4a:bf:97:3d:38:d7:04: e2:12:76:97:6d:df:3c:7a:13:02:0b:ca:95:b9:1b:93:3e:21: 2f:44:2f:3a:4c:c4:c5:86:2f:2f:b6:c4:ac:5a:be:f9:fb:8e: 49:b3:6d:81:f3:61:e7:2e:21:b2:53:10:11:5e:68:55:00:d9: 93:ad:4a:c5:be:b3:68:80:bf:b8:11:14:bb:98:d8:b0:bd:6e: 51:78:b5:6b:26:fc:65:66:2d:22:85:8d:e9:42:96:0a:f6:5e: eb:81:6c:b3:4b:8e:f0:c9:61:53:78:c1:8d:1e:bd:c1:ea:fa: 8d:c3:fe:e7:f8:b5:70:26:a1:1f:79:5a:f7:4d:b6:13:22:bd: 43:9f:2f:78:e1:7d:da:0a:9f:40:8f:93:bf:7d:7f:60:1b:1f: 7d:3c:ba:7b:18:36:28:1a:14:9d:cc:ab:ca:94:59:2b:cd:41: 0b:be:95:f1:fe:e8:cc:b9:f9:22:31:d3:62:71:94:43:80:ed: 5f:89:bc:65:a1:1c:ec:69:32:1e:d4:8e:c1:c7:d2:f8:03:a8: c7:2a:bb:a0:44:b5:be:7e:1a:c2:02:f7:6c:c8:98:50:20:b2: 72:ef:6e:1f:c6:4b:5c:99:14:5d:37:64:e5:1b:fd:2f:e3:e8: 53:c6:76:a7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDjoOKjZ9eKPJ5ieL7/M6lI8OuJYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDEzMTcwMDA4WhcNMjUxMTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BlYjJiYzQ1OTcyOWRjMTFlOWY2MmEzNmY0ZGE2ODdmYzVl Yzg2NzE2NTRkOGQwM2ZjMDIyMDk4NjQ1ZTUyNDAwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNBeIHTxa8WnxbKnnFRJkjqRUiv7zrcMUHmJujA68mtpHO FM3ZCTA21hnnmnDq20X5U0p17/Ey3ficGuwIn4p0dwPPddlqpeTmbwmD0gi4Xqdw s76vtOod1sk3dDMIZvAHMqaRP+3CXA2w8J1cFZm4+A0V6U94OtU37TvAV1haZkUW kqX8p+/rWc8Ch675aIrW5an0ZWnVfJLjrmCjYREc11D8TIFKeivtkabK/nIl+7Bp UMh9pWhSlHTnlac68MC/j/DpAjggTW1vNEM6zT2P9ctPw6TwlIxugZr6kDA6ph2S OXYuUji3I83jV4ZaO3gClYxnJq6yUSrevjuK/N8xAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUY/wCasQvj1C22dkCb2kV8Pb/YQ0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzBlMjNkNDczLWZhYTQtNGE1Ni1iNGU4LTdkZWQ3ZDE3ODdlMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAPntcwDQYJKoZIhvcNAQELBQADggEBAJrdBpSDYtWW1HkPSr+XPTjXBOIS dpdt3zx6EwILypW5G5M+IS9ELzpMxMWGLy+2xKxavvn7jkmzbYHzYecuIbJTEBFe aFUA2ZOtSsW+s2iAv7gRFLuY2LC9blF4tWsm/GVmLSKFjelClgr2XuuBbLNLjvDJ YVN4wY0evcHq+o3D/uf4tXAmoR95WvdNthMivUOfL3jhfdoKn0CPk799f2AbH308 unsYNigaFJ3Mq8qUWSvNQQu+lfH+6My5+SIx02JxlEOA7V+JvGWhHOxpMh7UjsHH 0vgDqMcqu6BEtb5+GsIC92zImFAgsnLvbh/GS1yZFF03ZOUb/S/j6FPGdqc= -----END CERTIFICATE-----Generated at Mon Oct 20 06:04:25 2025 by rpki-client