$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4eaa625e-7733-49f2-88a9-501666934f69.roa File: 4eaa625e-7733-49f2-88a9-501666934f69.roa (raw, json) Hash identifier: t6nmfFi8UowEyWC4Iu/NkcpXSRQgcNBZ9ThOJ6iKJ2k= Subject key identifier: 79:A0:68:07:99:AD:BC:DC:1A:4A:3B:7F:9C:00:D7:C4:B8:5A:F9:18 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 653A12DC52E5F0BDC901A66E8DE60296A7AE7A8D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4eaa625e-7733-49f2-88a9-501666934f69.roa Signing time: Thu 16 Oct 2025 00:47:56 +0000 ROA not before: Thu 16 Oct 2025 00:47:56 +0000 ROA not after: Thu 20 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.158.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:3a:12:dc:52:e5:f0:bd:c9:01:a6:6e:8d:e6:02:96:a7:ae:7a:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 16 00:47:56 2025 GMT Not After : Nov 20 23:59:59 2025 GMT Subject: serialNumber=1b268f4996dd3e8b4fda6304ce9f5ff84bec408250e68151cbcbd835d1a5d57e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:be:bf:cc:8d:8f:c7:41:98:b1:a9:92:3d:56: 40:a5:52:09:c1:c2:ae:96:f0:58:2f:29:e9:7c:f3: e7:a9:92:fa:6f:b3:0b:ab:cc:f8:4a:66:f3:39:48: c5:c2:58:24:dd:b8:d9:e8:d1:28:37:eb:ec:8b:d5: be:c0:50:54:ba:b8:e4:7a:29:a7:e4:81:0e:6e:31: 80:65:4d:2a:b2:50:81:84:4d:d3:e1:4d:62:a2:eb: 9c:8c:f5:4a:1c:58:4e:70:c2:98:f6:f1:2b:de:7e: 20:b7:a1:92:1e:a0:46:3b:25:ab:25:5a:c7:5f:75: ef:fa:db:ad:d3:90:d5:9f:91:b5:a9:1f:43:01:0d: 07:8b:3e:fd:2d:bb:56:e0:b9:1c:f0:35:7f:1f:80: b9:19:44:6a:26:63:80:58:9c:27:67:de:9c:54:52: 42:45:a7:1d:e3:1f:b8:ba:9b:d3:ae:da:b6:48:c0: e6:50:68:25:08:dd:55:de:d4:18:2b:12:96:1e:33: ae:de:68:c1:7d:4a:95:b0:42:12:2e:21:f9:7a:5c: 0b:81:4e:97:a2:af:4d:71:58:3e:0d:52:6e:4e:a7: ec:89:d8:47:d6:56:81:31:54:29:37:5d:33:2c:bf: b1:10:31:48:8c:51:58:00:05:90:a0:6b:50:a0:ea: 81:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:A0:68:07:99:AD:BC:DC:1A:4A:3B:7F:9C:00:D7:C4:B8:5A:F9:18 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4eaa625e-7733-49f2-88a9-501666934f69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.158.66.0/24 Signature Algorithm: sha256WithRSAEncryption 23:54:f7:40:03:2e:27:96:b9:cb:87:be:14:e0:04:53:87:a6: 21:3f:1f:1a:fa:ce:a0:7f:0c:63:6a:1f:85:d5:4a:9c:29:ae: 9d:66:34:99:f0:04:03:54:f3:27:25:59:f9:35:14:46:2e:a2: af:90:67:75:c7:9e:0b:9c:d2:32:b4:14:80:91:d6:ed:b2:bc: 59:d6:e4:c6:e8:41:c6:a0:54:9a:71:bc:19:5b:2f:96:68:eb: 2b:35:c6:6d:64:9b:48:c2:dc:41:43:5c:09:23:c0:dd:27:95: 29:3d:1e:48:36:41:7b:89:f8:b1:0b:3f:88:19:2c:d5:59:63: cf:f5:a7:17:f3:e7:10:71:f3:e4:2d:73:e6:a2:b8:69:49:50: ad:82:76:35:19:f1:e0:e4:d6:25:70:ff:ae:a2:97:67:de:74: fc:69:59:71:ae:2f:6f:da:5c:bf:24:7f:e7:14:eb:4f:8f:df: db:8e:12:2c:99:b3:b6:bd:bb:44:ab:02:34:51:ec:95:5e:01: 8a:bd:b5:52:bd:51:cc:bb:43:f2:89:b9:6a:8b:a1:18:68:50: 94:56:41:5c:91:86:be:b0:16:96:c8:32:44:39:22:5c:67:20: de:ad:d1:b8:90:60:e1:1f:e1:c1:55:a8:d3:b4:72:27:af:26: e0:97:b7:85 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZToS3FLl8L3JAaZujeYClqeueo0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE2MDA0NzU2WhcNMjUxMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AxYjI2OGY0OTk2ZGQzZThiNGZkYTYzMDRjZTlmNWZmODRi ZWM0MDgyNTBlNjgxNTFjYmNiZDgzNWQxYTVkNTdlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCIvr/MjY/HQZixqZI9VkClUgnBwq6W8FgvKel88+epkvpv swurzPhKZvM5SMXCWCTduNno0Sg36+yL1b7AUFS6uOR6KafkgQ5uMYBlTSqyUIGE TdPhTWKi65yM9UocWE5wwpj28SvefiC3oZIeoEY7JaslWsdfde/6263TkNWfkbWp H0MBDQeLPv0tu1bguRzwNX8fgLkZRGomY4BYnCdn3pxUUkJFpx3jH7i6m9Ou2rZI wOZQaCUI3VXe1BgrEpYeM67eaMF9SpWwQhIuIfl6XAuBTpeir01xWD4NUm5Op+yJ 2EfWVoExVCk3XTMsv7EQMUiMUVgABZCga1Cg6oEhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUeaBoB5mtvNwaSjt/nADXxLha+RgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzRlYWE2MjVlLTc3MzMtNDlmMi04OGE5LTUwMTY2NjkzNGY2OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAPnkIwDQYJKoZIhvcNAQELBQADggEBACNU90ADLieWucuHvhTgBFOHpiE/ Hxr6zqB/DGNqH4XVSpwprp1mNJnwBANU8yclWfk1FEYuoq+QZ3XHnguc0jK0FICR 1u2yvFnW5MboQcagVJpxvBlbL5Zo6ys1xm1km0jC3EFDXAkjwN0nlSk9Hkg2QXuJ +LELP4gZLNVZY8/1pxfz5xBx8+Qtc+aiuGlJUK2CdjUZ8eDk1iVw/66il2fedPxp WXGuL2/aXL8kf+cU60+P39uOEiyZs7a9u0SrAjRR7JVeAYq9tVK9Ucy7Q/KJuWqL oRhoUJRWQVyRhr6wFpbIMkQ5IlxnIN6t0biQYOEf4cFVqNO0cievJuCXt4U= -----END CERTIFICATE-----Generated at Mon Oct 20 08:41:24 2025 by rpki-client