$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/90172004-8351-41f1-b655-1f34d0951c78.roa File: 90172004-8351-41f1-b655-1f34d0951c78.roa (raw, json) Hash identifier: wGA88e5/LjMVFwWsvpRW1Uu/zyP7PCqBFQDjByXdH/Y= Subject key identifier: AE:BB:54:BD:4C:3E:AF:CD:2B:E4:C0:BF:26:6D:66:F2:9F:65:9C:52 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 08335440A9C57595294363249856FB07AA742C1D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/90172004-8351-41f1-b655-1f34d0951c78.roa Signing time: Mon 13 Oct 2025 16:50:09 +0000 ROA not before: Mon 13 Oct 2025 16:50:09 +0000 ROA not after: Mon 17 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.158.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:33:54:40:a9:c5:75:95:29:43:63:24:98:56:fb:07:aa:74:2c:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 13 16:50:09 2025 GMT Not After : Nov 17 23:59:59 2025 GMT Subject: serialNumber=04ea62a457087da1e001b24d5c305b821d4425d880414c81e2189663096beb1d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:09:c6:17:1e:7b:bd:04:d0:39:79:a0:7d:f5: 62:e3:c5:66:4c:10:3b:2e:f9:0c:f2:1b:eb:4c:33: e2:6c:e4:2f:19:86:e0:ee:64:0c:7a:31:24:df:fd: aa:c4:ca:39:ac:56:ef:53:4e:e1:fa:ff:db:e8:7b: 7a:51:6e:19:e9:fc:b3:b6:4c:a1:8b:7e:e0:3f:ff: c5:b4:27:3d:d0:37:30:45:c4:1c:b2:10:e4:28:7c: 1b:67:8d:5a:0d:b6:d8:a7:89:ce:ab:6d:e5:ea:b3: 6f:68:75:d0:fe:6a:16:10:f1:28:b8:75:09:75:0b: 6a:7b:79:ad:84:68:2b:70:6e:d0:83:05:54:5a:fc: fa:92:c8:2d:db:aa:4b:d0:72:4f:a2:29:39:2c:3d: 85:3a:50:7e:3f:cb:11:46:84:32:31:16:39:c1:ba: f8:30:e7:c5:1d:6d:ad:e4:72:3b:e7:b7:70:2d:79: 1b:9d:2a:6b:fd:34:cd:2d:e8:70:62:9c:f1:03:4c: 8c:70:bd:e3:61:80:09:52:8f:de:1c:2b:3b:70:f4: f1:b5:30:1e:18:20:78:9b:6e:6f:a0:e8:32:13:7d: 2e:5d:f6:6c:e3:b6:37:42:ee:9a:16:54:27:ae:e0: b6:ba:c7:09:72:21:94:ac:dd:bc:e6:f8:33:84:e9: f4:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:BB:54:BD:4C:3E:AF:CD:2B:E4:C0:BF:26:6D:66:F2:9F:65:9C:52 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/90172004-8351-41f1-b655-1f34d0951c78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.158.170.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:66:95:aa:a8:57:9a:57:71:d9:b0:8d:c1:12:85:46:8e:27: bc:d6:42:0b:ec:5f:54:f1:7b:63:c5:50:57:8d:40:c4:06:d0: 96:d3:82:f0:0d:16:11:24:f4:8f:f2:6e:e8:40:03:62:3e:cf: e5:81:a6:02:74:6a:89:96:67:fd:c1:ef:37:cc:b7:a1:8f:22: 4d:2a:cc:28:93:1d:c4:37:69:fa:4c:bc:44:0a:97:13:49:54: 36:e2:ea:d7:10:41:05:2f:a8:3c:5a:c5:72:df:47:12:c9:39: cc:cb:55:47:50:b1:b7:a5:18:b0:33:d5:35:0a:25:f5:b9:4a: 19:73:9b:79:69:a8:4a:58:28:5b:d7:72:7b:a7:86:40:d8:5c: f4:d2:5d:35:16:c1:69:6c:92:07:e4:8a:4f:47:f2:70:96:60: 99:6a:e2:14:2e:4f:69:d0:5b:eb:03:d3:26:f8:13:40:9b:27: 70:62:58:b1:93:2b:e2:e6:ad:74:f7:74:ff:ca:af:3a:96:0c: 9b:bf:41:de:a4:aa:a4:fd:9e:9b:49:4e:61:fa:49:65:23:2d: 3f:f6:74:53:90:40:d4:98:10:c1:3c:66:65:c9:77:4b:2f:d6: 01:e5:d4:2d:a1:37:45:98:bd:eb:9f:3a:2d:f6:0f:95:cb:e2: cb:92:ca:a4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCDNUQKnFdZUpQ2MkmFb7B6p0LB0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDEzMTY1MDA5WhcNMjUxMTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0AwNGVhNjJhNDU3MDg3ZGExZTAwMWIyNGQ1YzMwNWI4MjFk NDQyNWQ4ODA0MTRjODFlMjE4OTY2MzA5NmJlYjFkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDdCcYXHnu9BNA5eaB99WLjxWZMEDsu+QzyG+tMM+Js5C8Z huDuZAx6MSTf/arEyjmsVu9TTuH6/9voe3pRbhnp/LO2TKGLfuA//8W0Jz3QNzBF xByyEOQofBtnjVoNttinic6rbeXqs29oddD+ahYQ8Si4dQl1C2p7ea2EaCtwbtCD BVRa/PqSyC3bqkvQck+iKTksPYU6UH4/yxFGhDIxFjnBuvgw58Udba3kcjvnt3At eRudKmv9NM0t6HBinPEDTIxwveNhgAlSj94cKztw9PG1MB4YIHibbm+g6DITfS5d 9mzjtjdC7poWVCeu4La6xwlyIZSs3bzm+DOE6fSRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUrrtUvUw+r80r5MC/Jm1m8p9lnFIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzkwMTcyMDA0LTgzNTEtNDFmMS1iNjU1LTFmMzRkMDk1MWM3OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAPnqowDQYJKoZIhvcNAQELBQADggEBAH5mlaqoV5pXcdmwjcEShUaOJ7zW QgvsX1Txe2PFUFeNQMQG0JbTgvANFhEk9I/ybuhAA2I+z+WBpgJ0aomWZ/3B7zfM t6GPIk0qzCiTHcQ3afpMvEQKlxNJVDbi6tcQQQUvqDxaxXLfRxLJOczLVUdQsbel GLAz1TUKJfW5Shlzm3lpqEpYKFvXcnunhkDYXPTSXTUWwWlskgfkik9H8nCWYJlq 4hQuT2nQW+sD0yb4E0CbJ3BiWLGTK+LmrXT3dP/KrzqWDJu/Qd6kqqT9nptJTmH6 SWUjLT/2dFOQQNSYEME8ZmXJd0sv1gHl1C2hN0WYveufOi32D5XL4suSyqQ= -----END CERTIFICATE-----Generated at Mon Oct 20 06:07:20 2025 by rpki-client