$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1ae4dc80-d854-4299-a65d-85af70662c24.roa File: 1ae4dc80-d854-4299-a65d-85af70662c24.roa (raw, json) Hash identifier: aZfWrnADFNiTszNKqyNWbjhG3nUWpO3Z30gTmc8yEn4= Subject key identifier: CA:7D:3A:50:F6:1D:D2:07:E7:00:92:E7:45:E7:59:C5:09:DE:27:0A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 71925D54A7A9254F00F4D42FF6A12D617A05BAC6 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1ae4dc80-d854-4299-a65d-85af70662c24.roa Signing time: Mon 13 Oct 2025 17:01:14 +0000 ROA not before: Mon 13 Oct 2025 17:01:14 +0000 ROA not after: Mon 17 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.158.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:92:5d:54:a7:a9:25:4f:00:f4:d4:2f:f6:a1:2d:61:7a:05:ba:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 13 17:01:14 2025 GMT Not After : Nov 17 23:59:59 2025 GMT Subject: serialNumber=3687348e3c672851076b5bbb636d5484d984af3bb164a89dbbb7bd134245f2b4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:38:90:91:56:fc:29:df:68:f2:83:99:a7:74: d2:63:ed:76:f1:58:9d:49:8e:13:2c:c8:7f:bc:cd: cb:e2:18:0d:8b:29:80:52:6c:0a:e5:a4:41:86:85: 6c:1e:04:3c:76:a8:77:94:21:9b:ad:6c:1d:53:6f: 97:f0:bc:0e:42:c0:05:8c:4a:1e:4d:36:fa:28:f0: 7a:78:71:14:aa:ba:15:90:e5:cc:93:b9:3d:bb:52: 53:89:92:4d:e1:d0:39:44:b1:f0:e3:6f:49:93:69: ba:ed:e9:e8:da:a4:fa:22:c9:26:f7:e2:ef:e5:31: d5:03:d0:6a:90:9b:04:de:78:ce:6e:33:2e:26:e9: ca:b6:cf:97:c8:5e:91:45:79:c7:0c:c2:3e:17:77: f1:c3:3c:30:c5:8c:56:25:27:02:48:44:ec:ef:56: 7b:e4:52:ad:2d:65:35:fd:7c:fd:7c:6a:55:ce:8e: 7b:cc:28:c6:31:f8:01:c4:46:2b:12:ef:81:7e:f4: 3e:14:3e:a6:e7:23:46:31:8c:25:c0:08:ad:6c:5d: cb:da:1b:fc:7a:b7:36:1f:af:4b:8a:28:cb:a5:21: b5:e8:de:86:59:f4:b6:56:c1:7d:2b:f4:82:0a:76: a6:1c:e7:bf:c0:bd:bc:eb:ab:0f:c5:37:84:b1:50: c8:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:7D:3A:50:F6:1D:D2:07:E7:00:92:E7:45:E7:59:C5:09:DE:27:0A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1ae4dc80-d854-4299-a65d-85af70662c24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.158.217.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:f1:41:6e:bb:61:4e:d7:8c:af:0d:dd:f6:16:5b:11:92:c7: 5b:7d:e4:13:79:4a:23:ec:70:ab:ce:ce:1c:c1:0b:13:a3:7e: 70:12:16:10:98:a7:5f:f6:a0:2c:b3:e7:26:85:d1:e6:5d:41: 93:65:06:21:dc:38:ad:4d:d8:63:76:15:5b:95:76:10:e1:1e: 06:54:90:22:09:77:79:0b:31:65:57:6e:37:db:05:55:38:f2: 74:b9:58:12:79:2c:f6:93:d7:07:c1:eb:64:0d:08:d5:d5:2f: 43:53:d9:06:20:b5:4f:70:c0:ed:d9:71:67:18:62:41:d0:61: d0:2a:85:c2:e9:94:47:31:b7:d5:87:14:f8:ba:b9:4d:41:ce: 3d:6f:18:53:47:66:77:46:a4:c5:7d:97:36:79:41:76:b0:d5: ca:3b:24:8e:06:1d:5f:18:56:6f:c3:9b:08:34:59:5c:e4:da: 80:28:ea:4e:30:c0:f9:7c:17:06:29:0b:8e:d5:ae:c2:45:13: 09:42:9b:fa:e1:c7:27:e0:4a:b7:ff:02:07:50:d1:ff:37:76: 2f:16:33:46:99:a1:f5:a4:12:c3:0a:e7:48:da:8e:39:34:43: 7d:e7:d9:d9:1d:ef:a7:8e:bd:59:8f:30:50:bf:99:0f:62:fd: 48:29:27:de -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcZJdVKepJU8A9NQv9qEtYXoFusYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDEzMTcwMTE0WhcNMjUxMTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0AzNjg3MzQ4ZTNjNjcyODUxMDc2YjViYmI2MzZkNTQ4NGQ5 ODRhZjNiYjE2NGE4OWRiYmI3YmQxMzQyNDVmMmI0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDWOJCRVvwp32jyg5mndNJj7XbxWJ1JjhMsyH+8zcviGA2L KYBSbArlpEGGhWweBDx2qHeUIZutbB1Tb5fwvA5CwAWMSh5NNvoo8Hp4cRSquhWQ 5cyTuT27UlOJkk3h0DlEsfDjb0mTabrt6ejapPoiySb34u/lMdUD0GqQmwTeeM5u My4m6cq2z5fIXpFFeccMwj4Xd/HDPDDFjFYlJwJIROzvVnvkUq0tZTX9fP18alXO jnvMKMYx+AHERisS74F+9D4UPqbnI0YxjCXACK1sXcvaG/x6tzYfr0uKKMulIbXo 3oZZ9LZWwX0r9IIKdqYc57/Avbzrqw/FN4SxUMgrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUyn06UPYd0gfnAJLnRedZxQneJwowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzFhZTRkYzgwLWQ4NTQtNDI5OS1hNjVkLTg1YWY3MDY2MmMyNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAPntkwDQYJKoZIhvcNAQELBQADggEBACrxQW67YU7XjK8N3fYWWxGSx1t9 5BN5SiPscKvOzhzBCxOjfnASFhCYp1/2oCyz5yaF0eZdQZNlBiHcOK1N2GN2FVuV dhDhHgZUkCIJd3kLMWVXbjfbBVU48nS5WBJ5LPaT1wfB62QNCNXVL0NT2QYgtU9w wO3ZcWcYYkHQYdAqhcLplEcxt9WHFPi6uU1Bzj1vGFNHZndGpMV9lzZ5QXaw1co7 JI4GHV8YVm/Dmwg0WVzk2oAo6k4wwPl8FwYpC47VrsJFEwlCm/rhxyfgSrf/AgdQ 0f83di8WM0aZofWkEsMK50jajjk0Q33n2dkd76eOvVmPMFC/mQ9i/UgpJ94= -----END CERTIFICATE-----Generated at Mon Oct 20 08:41:49 2025 by rpki-client