$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3ff9d38d-9e18-484b-bd51-bd3144cbb63a.roa File: 3ff9d38d-9e18-484b-bd51-bd3144cbb63a.roa (raw, json) Hash identifier: PQGCb0ZpLMPizQ1iDo3aP+BbXcxnudNtNY7pnfc1b8U= Subject key identifier: E6:20:45:AD:1E:9F:80:A1:4D:88:73:05:F1:D8:09:81:C5:0B:74:86 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 189069F3B13C8822A05BB1B12F43284D4AA430 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3ff9d38d-9e18-484b-bd51-bd3144cbb63a.roa Signing time: Thu 16 Oct 2025 00:47:56 +0000 ROA not before: Thu 16 Oct 2025 00:47:56 +0000 ROA not after: Thu 20 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.158.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:90:69:f3:b1:3c:88:22:a0:5b:b1:b1:2f:43:28:4d:4a:a4:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 16 00:47:56 2025 GMT Not After : Nov 20 23:59:59 2025 GMT Subject: serialNumber=0cc6a2391514960a0a59f62b6c9b6d77c4c6c3a6d9f890ccd4e6e88509dea4a5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1a:51:76:7b:7a:f5:ca:b5:cf:b5:03:48:f0: 60:21:3c:3a:55:67:c9:4a:bf:b8:b7:d8:9b:01:67: 80:9c:97:7e:c4:06:60:a5:55:3d:4e:20:12:c8:c7: 07:08:be:19:7b:c5:12:f1:1c:61:82:fb:7e:02:8e: 06:96:da:5d:f7:60:fd:be:9a:f4:d4:bd:34:89:dc: f9:36:8b:ec:7a:d9:bf:08:4e:0d:a9:8b:67:41:81: cc:1a:a6:64:98:a9:90:23:d5:b4:cb:c3:e5:ea:a6: 23:19:74:66:fe:53:56:63:c8:4c:3a:91:ed:49:25: 30:b0:68:54:b0:c2:06:69:b5:58:3e:a5:49:3d:3a: fc:ac:86:55:a6:8f:06:9b:ea:ec:b9:ca:33:c1:f7: c4:a9:c2:ba:90:1a:ab:30:a5:5c:6a:45:90:04:24: 6b:4f:1c:14:2a:8c:10:a5:ab:02:4c:25:2b:e9:68: 62:3d:d8:b5:03:ce:f8:1b:e8:00:91:93:66:60:23: 4c:ba:3b:9b:f1:cd:bb:89:e9:6e:bd:7f:e8:c1:cc: 5d:e9:c6:3e:2b:4a:b0:c1:37:0e:21:5b:ba:d8:20: c9:26:4d:9b:57:bf:16:dc:e4:50:ce:c6:7f:a1:20: 48:d7:6c:c9:64:30:a2:f4:56:ad:e9:73:92:8f:e8: c9:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:20:45:AD:1E:9F:80:A1:4D:88:73:05:F1:D8:09:81:C5:0B:74:86 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3ff9d38d-9e18-484b-bd51-bd3144cbb63a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.158.68.0/24 Signature Algorithm: sha256WithRSAEncryption 13:0e:cd:84:c3:bf:c3:b6:e8:d6:4e:12:98:d3:79:93:2c:57: 6b:c1:7d:a5:ca:be:de:f3:59:59:82:82:82:80:73:e8:28:17: 20:51:19:69:66:53:42:fc:f1:70:dc:a8:78:cc:84:d8:c1:4b: 74:15:e4:ce:ec:3c:3d:22:ef:a2:9d:fc:28:1a:27:eb:f3:23: 99:ef:e2:de:2f:79:65:93:91:fd:7f:9f:0d:3d:8b:0e:52:df: 92:b7:9b:82:19:d0:f4:b9:d2:88:5e:d6:a6:ff:29:95:06:88: a6:21:83:0a:33:3e:5d:13:4e:93:b4:f0:45:9f:1e:24:d0:87: e8:e9:18:05:74:d6:82:a2:5f:f7:69:eb:f6:af:1b:c7:31:14: a5:be:ed:e6:fb:48:2a:e7:99:0a:ba:21:05:52:89:90:8a:5a: 03:93:40:4b:ca:43:c8:fb:f0:02:74:f0:c5:34:6d:59:cc:8f: 0b:93:44:6e:1e:62:97:ca:39:6c:3c:be:5f:b5:1c:52:ad:7c: 6a:3d:07:a2:86:1c:6b:99:6b:f6:aa:df:6a:6e:65:8d:20:a7: 60:df:df:ab:93:d7:74:c4:a2:69:71:28:25:6d:69:42:65:3e: b1:f0:10:09:bb:18:2f:0b:2d:7c:66:27:99:41:b5:33:56:43: d6:99:d5:70 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITGJBp87E8iCKgW7GxL0MoTUqkMDANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzJkZjZmM2IzYTM0YjYzODZkMWEzMmQ4ZjRmYTMxNzhlZjMx ODg3ZDhiNDI4ZGZhYTQ3NjAeFw0yNTEwMTYwMDQ3NTZaFw0yNTExMjAyMzU5NTla MHoxSTBHBgNVBAUTQDBjYzZhMjM5MTUxNDk2MGEwYTU5ZjYyYjZjOWI2ZDc3YzRj NmMzYTZkOWY4OTBjY2Q0ZTZlODg1MDlkZWE0YTUxLTArBgNVBAMTJDVmMjc2MDQ1 LTViOWYtNDVlZi05MjNkLWYzZmNlMjRhNjIyNTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBALUaUXZ7evXKtc+1A0jwYCE8OlVnyUq/uLfYmwFngJyXfsQG YKVVPU4gEsjHBwi+GXvFEvEcYYL7fgKOBpbaXfdg/b6a9NS9NInc+TaL7HrZvwhO DamLZ0GBzBqmZJipkCPVtMvD5eqmIxl0Zv5TVmPITDqR7UklMLBoVLDCBmm1WD6l ST06/KyGVaaPBpvq7LnKM8H3xKnCupAaqzClXGpFkAQka08cFCqMEKWrAkwlK+lo Yj3YtQPO+BvoAJGTZmAjTLo7m/HNu4npbr1/6MHMXenGPitKsME3DiFbutggySZN m1e/FtzkUM7Gf6EgSNdsyWQwovRWrelzko/oyXcCAwEAAaOCArEwggKtMB0GA1Ud DgQWBBTmIEWtHp+AoU2IcwXx2AmBxQt0hjAfBgNVHSMEGDAWgBQlrdNCsB63pY6t GZAmiLVLP4H0uDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg1MWNlZjE3LTEz MmEtNDMzNy1iN2QxLWJmMTZhNTJmZmQwMy9kZjZmM2IzYTM0YjYzODZkMWEzMmQ4 ZjRmYTMxNzhlZjMxODg3ZDhiNDI4ZGZhYTQ3Ni5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9mNzAzNjk2ZS1lNDdiLTRjMjAtYmQ5My02Zjgw OTA0ZTQyZDIvM2ZmOWQzOGQtOWUxOC00ODRiLWJkNTEtYmQzMTQ0Y2JiNjNhLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMt NmY4MDkwNGU0MmQyL3RqaHRHakxZOVBveGVPOHhpSDJMUW8zNnBIWS5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAA+eRDANBgkqhkiG9w0BAQsFAAOCAQEAEw7NhMO/w7bo1k4SmNN5kyxXa8F9 pcq+3vNZWYKCgoBz6CgXIFEZaWZTQvzxcNyoeMyE2MFLdBXkzuw8PSLvop38KBon 6/Mjme/i3i95ZZOR/X+fDT2LDlLfkrebghnQ9LnSiF7Wpv8plQaIpiGDCjM+XRNO k7TwRZ8eJNCH6OkYBXTWgqJf92nr9q8bxzEUpb7t5vtIKueZCrohBVKJkIpaA5NA S8pDyPvwAnTwxTRtWcyPC5NEbh5il8o5bDy+X7UcUq18aj0HooYca5lr9qrfam5l jSCnYN/fq5PXdMSiaXEoJW1pQmU+sfAQCbsYLwstfGYnmUG1M1ZD1pnVcA== -----END CERTIFICATE-----Generated at Mon Oct 20 02:56:59 2025 by rpki-client