$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3de4db91-792f-4c90-8773-798043867572.roa File: 3de4db91-792f-4c90-8773-798043867572.roa (raw, json) Hash identifier: /cTlOZEqzCoNJBQKhBTQYYdoGjL9mSQB505jYXfovGY= Subject key identifier: AD:00:D2:0A:6C:B5:D3:44:7B:7E:D0:D4:FB:42:14:F0:47:2E:2E:40 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0C0DDA1694C23ABAF8E235D4D857BD9DF601F367 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3de4db91-792f-4c90-8773-798043867572.roa Signing time: Mon 13 Oct 2025 17:10:17 +0000 ROA not before: Mon 13 Oct 2025 17:10:17 +0000 ROA not after: Mon 17 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.158.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:0d:da:16:94:c2:3a:ba:f8:e2:35:d4:d8:57:bd:9d:f6:01:f3:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 13 17:10:17 2025 GMT Not After : Nov 17 23:59:59 2025 GMT Subject: serialNumber=1c4ff2e1a7994e2fbb67866e9d0b0db25105229b7fb66b1cc19d04f369754e77, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e3:fe:44:7f:68:33:41:c8:67:7c:41:fc:00: c5:0d:4e:9a:93:0d:61:cd:10:27:31:48:c0:fc:3a: 48:04:7d:f1:5a:15:2d:d4:53:53:87:44:5a:b8:6b: 1e:91:ce:5c:13:28:f3:9b:e8:db:03:be:d2:79:c4: 31:60:c9:0e:9a:f2:b3:e5:2d:aa:96:dd:b2:aa:9b: 06:01:2c:ef:c4:f9:e1:cc:e8:55:f8:16:a6:d6:0e: 49:8e:3f:f3:bb:ff:ad:98:16:b7:72:f2:36:98:e8: 60:f9:01:79:ad:1b:7e:8d:b5:52:e0:6e:d5:39:99: 7c:a5:05:a3:00:74:36:1d:56:b3:22:3e:aa:db:fe: 33:10:48:4b:bb:aa:d7:5c:8d:46:02:5b:2f:f8:17: 45:23:42:b7:84:c9:51:ba:cb:92:11:79:d3:ac:ef: ec:5c:a2:e1:96:ae:c0:4d:96:43:a3:03:b3:e6:8a: 92:62:cb:d3:6c:6f:96:0e:ba:d5:88:81:4b:b2:cd: 92:32:31:c6:de:c8:8d:14:a4:ba:9b:83:23:bc:8c: 24:bc:e4:3b:68:5b:d5:cd:99:f0:9b:a9:fc:bf:04: 59:91:9f:2c:82:c8:7d:a7:1e:9d:98:80:ed:f2:c7: 57:52:db:84:2a:a0:ed:95:00:33:60:1d:46:88:bd: 10:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:00:D2:0A:6C:B5:D3:44:7B:7E:D0:D4:FB:42:14:F0:47:2E:2E:40 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3de4db91-792f-4c90-8773-798043867572.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.158.20.0/23 Signature Algorithm: sha256WithRSAEncryption 64:05:7f:82:c5:09:d7:a2:db:88:94:d0:72:2f:3a:c7:5f:f2: d4:50:d5:f2:90:df:83:8b:9f:c4:e9:7b:57:96:52:97:ab:e4: ab:aa:e3:11:1d:f6:57:84:f9:5b:d6:91:76:52:de:c2:78:72: 0c:b9:08:c5:76:c4:9f:64:f5:bf:52:f7:9b:68:f2:85:c8:ca: c0:1a:f3:13:d8:b9:cf:f1:ff:02:ee:07:57:d4:3a:7a:b2:b1: e4:26:47:16:57:b2:85:58:c7:9d:ca:21:9b:3a:ff:34:8e:d2: f1:ea:90:4f:2f:a2:1e:d2:8a:c6:cd:41:9d:86:0e:0a:ce:44: 7c:87:fd:ea:dd:56:c2:c4:ef:2e:ef:17:c8:f6:af:ef:fa:3c: 32:9c:49:03:fb:f2:70:ef:a7:74:dc:1f:23:86:9e:63:54:cd: c0:1e:40:46:7e:dd:c5:94:4e:12:69:d3:61:72:b0:29:59:f3: a4:72:15:0b:39:ab:55:37:1b:d8:14:6f:7e:2b:f3:62:84:a1: a0:05:d8:2d:32:a8:0c:d4:23:fd:dc:c4:1a:c7:73:8e:6a:ac: 7b:3e:4e:9f:1e:2a:72:50:e1:16:8c:09:b2:31:bf:72:b1:fc: 6d:ff:bd:b5:d9:39:39:c9:a7:eb:42:75:38:4f:c2:78:12:06: ee:02:5e:ab -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDA3aFpTCOrr44jXU2Fe9nfYB82cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDEzMTcxMDE3WhcNMjUxMTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0AxYzRmZjJlMWE3OTk0ZTJmYmI2Nzg2NmU5ZDBiMGRiMjUx MDUyMjliN2ZiNjZiMWNjMTlkMDRmMzY5NzU0ZTc3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCj4/5Ef2gzQchnfEH8AMUNTpqTDWHNECcxSMD8OkgEffFa FS3UU1OHRFq4ax6RzlwTKPOb6NsDvtJ5xDFgyQ6a8rPlLaqW3bKqmwYBLO/E+eHM 6FX4FqbWDkmOP/O7/62YFrdy8jaY6GD5AXmtG36NtVLgbtU5mXylBaMAdDYdVrMi Pqrb/jMQSEu7qtdcjUYCWy/4F0UjQreEyVG6y5IRedOs7+xcouGWrsBNlkOjA7Pm ipJiy9Nsb5YOutWIgUuyzZIyMcbeyI0UpLqbgyO8jCS85DtoW9XNmfCbqfy/BFmR nyyCyH2nHp2YgO3yx1dS24QqoO2VADNgHUaIvRDtAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUrQDSCmy100R7ftDU+0IU8EcuLkAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzNkZTRkYjkxLTc5MmYtNGM5MC04NzczLTc5ODA0Mzg2NzU3Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEPnhQwDQYJKoZIhvcNAQELBQADggEBAGQFf4LFCdei24iU0HIvOsdf8tRQ 1fKQ34OLn8Tpe1eWUper5Kuq4xEd9leE+VvWkXZS3sJ4cgy5CMV2xJ9k9b9S95to 8oXIysAa8xPYuc/x/wLuB1fUOnqyseQmRxZXsoVYx53KIZs6/zSO0vHqkE8voh7S isbNQZ2GDgrORHyH/erdVsLE7y7vF8j2r+/6PDKcSQP78nDvp3TcHyOGnmNUzcAe QEZ+3cWUThJp02FysClZ86RyFQs5q1U3G9gUb34r82KEoaAF2C0yqAzUI/3cxBrH c45qrHs+Tp8eKnJQ4RaMCbIxv3Kx/G3/vbXZOTnJp+tCdThPwngSBu4CXqs= -----END CERTIFICATE-----Generated at Mon Oct 20 03:15:51 2025 by rpki-client