$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/168d4fdf-8096-4905-8770-2898b5e869ee.roa File: 168d4fdf-8096-4905-8770-2898b5e869ee.roa (raw, json) Hash identifier: pmkelSwfkm1ZbTT94WhcVijVbvC5VCkDENl4pbw052Y= Subject key identifier: 9E:52:CF:EC:7D:45:0E:79:5E:FE:1C:CD:E9:68:AD:B8:E5:AA:E9:42 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 59421148FD0113E77BD76FEA56C0C2697E0FD66E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/168d4fdf-8096-4905-8770-2898b5e869ee.roa Signing time: Thu 16 Oct 2025 00:15:14 +0000 ROA not before: Thu 16 Oct 2025 00:15:14 +0000 ROA not after: Thu 20 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.158.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:42:11:48:fd:01:13:e7:7b:d7:6f:ea:56:c0:c2:69:7e:0f:d6:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 16 00:15:14 2025 GMT Not After : Nov 20 23:59:59 2025 GMT Subject: serialNumber=1d49f254c0465e13da2458592f89595b87b2952e884972a7fe0974204306273c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:8d:26:d0:3d:bc:c8:69:8b:84:5d:de:03:08: c8:93:a2:19:e0:14:ef:46:2d:4d:49:a3:27:30:2b: 79:31:ea:fe:cd:ee:19:39:12:4e:f6:74:37:04:9d: 76:e0:eb:60:cd:d7:09:eb:89:71:e9:19:37:d5:fc: e0:ad:fb:e6:97:b9:bd:62:70:88:3f:74:71:0e:6e: ca:24:6d:a6:0a:ea:6c:6a:40:26:06:c9:a8:80:73: de:84:cf:1a:84:2a:43:26:c8:f2:1c:74:94:89:e6: f1:82:d4:49:14:35:b0:e5:b7:97:be:0a:36:0c:ca: 9d:b5:f4:d6:f0:08:53:90:3b:5e:9d:35:d7:fb:ac: b9:51:a5:5c:fb:ce:fe:1e:70:d1:36:09:23:26:41: 58:f0:88:d1:41:ab:66:78:af:bf:46:50:2d:ff:4a: dd:65:77:41:a2:b7:e4:35:1f:da:86:96:0b:f1:a4: 38:1b:30:47:8f:ee:df:d6:ce:d3:1c:b3:24:a4:94: 73:83:7f:30:6a:db:e4:46:dc:25:03:a6:2f:85:a3: 92:c7:34:3a:98:af:c1:0f:eb:63:8a:e5:7f:ef:be: b4:43:a3:f8:53:23:4e:96:9b:31:0d:d7:6c:65:52: 0a:49:0f:6b:4d:64:28:be:98:e2:f3:6d:64:37:a6: 02:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:52:CF:EC:7D:45:0E:79:5E:FE:1C:CD:E9:68:AD:B8:E5:AA:E9:42 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/168d4fdf-8096-4905-8770-2898b5e869ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.158.61.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:3b:7e:2a:28:fd:ae:77:38:1d:3c:b4:0f:04:ab:fc:f5:61: 00:e4:69:d2:b8:03:70:3d:80:15:68:c4:51:d2:ff:af:27:de: 71:bc:91:0b:3e:25:72:4b:0f:4e:e6:20:9c:86:4c:92:00:62: e9:fb:00:db:83:93:a4:9e:9a:2a:99:c4:82:d3:6d:f4:e3:6a: 77:43:8b:b3:ef:38:1e:ad:b3:68:6b:74:6e:60:d1:03:63:20: 1a:45:7d:4d:ff:4c:95:77:6b:b8:a7:40:14:49:75:f8:b2:f1: ca:87:e6:6b:08:7f:96:be:25:ae:44:97:91:2e:fc:c6:18:db: 84:20:b7:3c:0f:c5:ac:16:d3:2c:aa:ee:bc:be:fb:c6:56:76: 7f:62:27:0b:25:d6:43:2e:90:d5:4a:97:02:e3:cb:32:94:d3: 71:e9:4f:e2:61:20:31:2c:a8:27:8b:cf:25:cb:ce:6b:ac:b8: a6:67:82:a0:c6:ac:73:b3:52:4a:e1:ab:3d:41:f0:61:34:fa: 0b:bc:f5:d9:2f:ee:90:4e:09:bf:75:7d:88:02:12:64:ea:33: f2:b0:89:6b:04:30:25:5f:8a:77:9b:e6:73:76:48:3e:98:51: d6:f0:72:34:b4:ef:44:c4:d7:ea:0d:73:31:a1:f6:fe:1d:d0: 6d:73:20:ef -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWUIRSP0BE+d712/qVsDCaX4P1m4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE2MDAxNTE0WhcNMjUxMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AxZDQ5ZjI1NGMwNDY1ZTEzZGEyNDU4NTkyZjg5NTk1Yjg3 YjI5NTJlODg0OTcyYTdmZTA5NzQyMDQzMDYyNzNjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDcjSbQPbzIaYuEXd4DCMiTohngFO9GLU1JoycwK3kx6v7N 7hk5Ek72dDcEnXbg62DN1wnriXHpGTfV/OCt++aXub1icIg/dHEObsokbaYK6mxq QCYGyaiAc96EzxqEKkMmyPIcdJSJ5vGC1EkUNbDlt5e+CjYMyp219NbwCFOQO16d Ndf7rLlRpVz7zv4ecNE2CSMmQVjwiNFBq2Z4r79GUC3/St1ld0Git+Q1H9qGlgvx pDgbMEeP7t/WztMcsySklHODfzBq2+RG3CUDpi+Fo5LHNDqYr8EP62OK5X/vvrRD o/hTI06WmzEN12xlUgpJD2tNZCi+mOLzbWQ3pgKlAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUnlLP7H1FDnle/hzN6WituOWq6UIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzE2OGQ0ZmRmLTgwOTYtNDkwNS04NzcwLTI4OThiNWU4NjllZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAPnj0wDQYJKoZIhvcNAQELBQADggEBAJo7fioo/a53OB08tA8Eq/z1YQDk adK4A3A9gBVoxFHS/68n3nG8kQs+JXJLD07mIJyGTJIAYun7ANuDk6SemiqZxILT bfTjandDi7PvOB6ts2hrdG5g0QNjIBpFfU3/TJV3a7inQBRJdfiy8cqH5msIf5a+ Ja5El5Eu/MYY24QgtzwPxawW0yyq7ry++8ZWdn9iJwsl1kMukNVKlwLjyzKU03Hp T+JhIDEsqCeLzyXLzmusuKZngqDGrHOzUkrhqz1B8GE0+gu89dkv7pBOCb91fYgC EmTqM/KwiWsEMCVfineb5nN2SD6YUdbwcjS070TE1+oNczGh9v4d0G1zIO8= -----END CERTIFICATE-----Generated at Mon Oct 20 03:07:57 2025 by rpki-client