$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/45b41aed-2ef8-4a4b-83ed-36891e125aa2.roa File: 45b41aed-2ef8-4a4b-83ed-36891e125aa2.roa (raw, json) Hash identifier: iMtgTHimjvy+EuvZGeRhEU4Nylv3/1M8jR84vk04yGk= Subject key identifier: A6:0F:88:DB:A3:AA:CA:52:A6:93:8C:D1:B2:B6:8C:F6:71:8A:E6:80 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3C286BFD3FAE3851389F770DA17AE8DE2F386FE5 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/45b41aed-2ef8-4a4b-83ed-36891e125aa2.roa Signing time: Mon 13 Oct 2025 17:10:19 +0000 ROA not before: Mon 13 Oct 2025 17:10:19 +0000 ROA not after: Mon 17 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.158.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:28:6b:fd:3f:ae:38:51:38:9f:77:0d:a1:7a:e8:de:2f:38:6f:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 13 17:10:19 2025 GMT Not After : Nov 17 23:59:59 2025 GMT Subject: serialNumber=ab1d95f62de492bc665085abb6402f6311f20fbfc6f55f06b33958b0ec804209, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3f:38:78:a8:62:4d:1a:ae:7c:06:7c:7c:0e: a4:dd:56:3e:f7:be:61:10:90:ff:5f:5c:fe:3d:b2: 22:7a:16:9c:33:76:44:51:48:bb:d5:d2:e2:8e:3e: f9:c3:87:e1:74:e4:c3:24:99:48:c4:19:f9:6e:40: f5:00:58:e5:41:dc:97:e7:c1:63:cb:61:79:bb:1d: ff:e4:44:80:69:8e:68:d6:c3:9f:5f:5f:b4:db:cf: 50:0b:63:61:67:5c:a2:13:ef:13:14:da:46:6a:b2: ea:8e:11:32:e1:ab:85:b3:bd:64:56:e7:a1:17:18: 0a:99:d8:4f:1f:72:d9:4c:f3:1f:79:06:a4:1a:cd: 49:5b:07:99:33:64:cd:b3:13:62:e8:11:6b:86:79: 72:3b:f6:76:29:c9:71:6b:bf:a2:c3:bc:cb:91:ce: bf:7c:b9:3e:dd:94:a6:d3:38:b2:10:11:b3:7c:4c: 54:cc:23:23:0d:70:6f:4b:94:ef:41:48:40:30:c5: 7a:3c:0d:ff:9b:ab:ce:7b:3c:79:df:f6:ae:ff:82: 5e:2a:50:51:30:0b:3d:bd:63:6c:16:13:dd:97:d1: 63:7b:7f:1b:2a:a9:0f:d1:ba:bd:be:07:92:e5:1b: 09:f7:94:0f:45:6c:66:33:15:b6:d6:7f:f1:34:28: 2a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:0F:88:DB:A3:AA:CA:52:A6:93:8C:D1:B2:B6:8C:F6:71:8A:E6:80 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/45b41aed-2ef8-4a4b-83ed-36891e125aa2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.158.178.0/24 Signature Algorithm: sha256WithRSAEncryption 44:c2:8e:ea:e7:50:f5:b6:58:37:7b:e4:b8:84:6a:0a:22:48: df:8e:2c:6c:49:24:db:04:be:b9:c5:ef:b8:c6:21:0b:42:96: bf:a4:31:b7:6c:d8:8a:05:03:e2:33:68:64:24:65:df:52:1f: a8:c0:5b:aa:b3:a3:d0:44:dc:22:b8:5c:b1:63:c0:ec:ef:3e: a1:a2:10:1d:fd:d4:21:ed:25:02:8d:3c:a5:8e:62:a2:88:44: 39:a8:36:52:e9:0a:a6:07:7c:fa:c2:e2:69:fa:f0:49:b1:49: 54:d4:86:ff:51:bd:4a:98:b8:5e:9c:d3:b2:03:2d:77:81:9d: ac:b0:7e:c8:15:9a:6a:d8:86:80:f0:ec:94:44:f1:cd:09:5e: be:92:63:c2:31:e6:1b:a9:a4:fd:17:f1:b1:74:db:c4:3b:08: 05:61:6d:ec:18:0e:ee:f4:c3:a0:cf:ec:e3:bd:fb:6f:c9:e3: ea:7d:2d:26:19:ea:ff:20:86:e5:6d:ac:70:54:39:d7:ff:f5: bb:07:8f:fd:6a:3a:79:17:0e:d6:f0:d2:e0:e1:2f:63:16:89: 75:3f:48:17:c7:50:40:fe:d2:22:da:07:d8:f2:6d:bd:e4:cf: ea:c6:6b:5b:2f:98:d4:e0:c6:4d:2e:60:6a:e2:18:cd:45:3e: 85:23:c7:d3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPChr/T+uOFE4n3cNoXro3i84b+UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDEzMTcxMDE5WhcNMjUxMTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BhYjFkOTVmNjJkZTQ5MmJjNjY1MDg1YWJiNjQwMmY2MzEx ZjIwZmJmYzZmNTVmMDZiMzM5NThiMGVjODA0MjA5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2Pzh4qGJNGq58Bnx8DqTdVj73vmEQkP9fXP49siJ6Fpwz dkRRSLvV0uKOPvnDh+F05MMkmUjEGfluQPUAWOVB3JfnwWPLYXm7Hf/kRIBpjmjW w59fX7Tbz1ALY2FnXKIT7xMU2kZqsuqOETLhq4WzvWRW56EXGAqZ2E8fctlM8x95 BqQazUlbB5kzZM2zE2LoEWuGeXI79nYpyXFrv6LDvMuRzr98uT7dlKbTOLIQEbN8 TFTMIyMNcG9LlO9BSEAwxXo8Df+bq857PHnf9q7/gl4qUFEwCz29Y2wWE92X0WN7 fxsqqQ/Rur2+B5LlGwn3lA9FbGYzFbbWf/E0KCpzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUpg+I26OqylKmk4zRsraM9nGK5oAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQ1YjQxYWVkLTJlZjgtNGE0Yi04M2VkLTM2ODkxZTEyNWFhMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAPnrIwDQYJKoZIhvcNAQELBQADggEBAETCjurnUPW2WDd75LiEagoiSN+O LGxJJNsEvrnF77jGIQtClr+kMbds2IoFA+IzaGQkZd9SH6jAW6qzo9BE3CK4XLFj wOzvPqGiEB391CHtJQKNPKWOYqKIRDmoNlLpCqYHfPrC4mn68EmxSVTUhv9RvUqY uF6c07IDLXeBnaywfsgVmmrYhoDw7JRE8c0JXr6SY8Ix5huppP0X8bF028Q7CAVh bewYDu70w6DP7OO9+2/J4+p9LSYZ6v8ghuVtrHBUOdf/9bsHj/1qOnkXDtbw0uDh L2MWiXU/SBfHUED+0iLaB9jybb3kz+rGa1svmNTgxk0uYGriGM1FPoUjx9M= -----END CERTIFICATE-----Generated at Mon Oct 20 11:55:38 2025 by rpki-client