$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b2ba8fb1-a893-4ad5-a3fb-f4290e392af0.roa File: b2ba8fb1-a893-4ad5-a3fb-f4290e392af0.roa (raw, json) Hash identifier: dF8f/CnwqIkQQ+Llcm9FyXB6W+6ub29KQHZAVgICqaM= Subject key identifier: BA:28:34:7C:AD:14:85:27:9C:06:C5:4E:67:3E:59:74:C2:28:A4:25 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5B7C7B84B2390362D8F2FACC02A283054A455B71 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b2ba8fb1-a893-4ad5-a3fb-f4290e392af0.roa Signing time: Thu 16 Oct 2025 00:31:41 +0000 ROA not before: Thu 16 Oct 2025 00:31:41 +0000 ROA not after: Thu 20 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.158.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:7c:7b:84:b2:39:03:62:d8:f2:fa:cc:02:a2:83:05:4a:45:5b:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 16 00:31:41 2025 GMT Not After : Nov 20 23:59:59 2025 GMT Subject: serialNumber=f341a8119f9f9129aeeeb66936225eae9022725b1e1860dc9767710d978a9931, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:85:7d:95:97:8a:ba:4d:4a:1e:f7:6d:7d:9d: a4:79:22:db:32:7e:17:34:d9:12:db:c8:c0:6d:92: 3a:5b:4c:16:76:bc:a8:0a:c2:bd:ed:de:71:f5:0b: 7e:ab:c8:87:33:41:13:af:e5:2f:c5:f2:80:3b:66: 0b:4b:3f:bc:9d:60:3b:7f:33:9b:d9:5c:bd:5c:74: 74:54:af:05:78:2e:d9:9c:a2:d3:3d:0b:1d:31:23: 5a:29:f4:c6:b8:44:22:37:c6:0c:aa:91:cf:ca:2d: c7:00:a6:4c:a8:a3:8a:8d:bd:06:63:77:89:89:98: 05:03:db:e3:05:dd:51:89:d1:a0:fe:11:31:8d:32: d7:fd:7f:0a:e7:4a:db:fd:52:b9:25:ce:07:e8:d0: 68:b3:0a:6e:89:eb:43:01:b8:a0:a3:b4:51:77:0f: 68:bf:ab:7a:6e:ec:99:dc:8b:8e:69:2f:bf:82:ae: 66:d9:c7:62:e0:8b:2b:e2:09:61:14:d0:3a:cf:a7: 8a:5f:2b:74:14:7c:65:76:0a:15:ea:95:61:e8:38: 0a:6b:cf:67:3e:96:d1:a3:41:8a:2f:ee:74:7a:a6: 9b:ad:9c:71:79:2d:1f:db:0b:f7:ce:53:77:3f:62: b8:72:2e:52:1d:d8:a9:a0:58:a0:a1:07:8f:ab:53: 15:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:28:34:7C:AD:14:85:27:9C:06:C5:4E:67:3E:59:74:C2:28:A4:25 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b2ba8fb1-a893-4ad5-a3fb-f4290e392af0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.158.64.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:e5:44:8d:13:50:4a:68:44:08:b4:9f:25:5c:69:99:cf:9c: d5:2f:2a:e0:1e:76:d4:b0:98:71:92:28:e1:95:7a:42:94:40: 4a:11:4d:a2:c3:e8:b2:93:7e:8d:af:2c:20:0a:53:bb:a4:6d: 15:30:50:03:ae:36:90:b5:95:ea:a7:32:88:5a:1f:27:b0:c1: 57:02:68:be:e2:86:89:3e:cf:3f:63:ef:b8:b4:7b:3d:37:8d: d6:f4:1a:d5:fd:0c:24:67:e2:82:12:94:bf:1c:4a:9e:f8:46: db:d0:9e:7a:ac:c1:ae:b5:cf:2a:6a:35:cb:f0:4b:18:35:cb: 8d:5c:a5:bb:36:dc:38:cb:12:d1:ed:6c:1a:59:66:bb:18:ef: 02:69:46:3e:6a:f9:50:47:89:53:1a:28:a3:4e:3e:e1:d1:27: 9d:fc:88:1a:f5:5c:ab:c5:88:e8:e7:3e:57:1d:b0:02:44:f7: 18:b3:fe:66:a6:a9:5c:8d:22:d5:7f:79:f2:39:98:c1:9a:bf: 2a:2a:6d:de:56:ad:c4:ab:1e:0a:c4:c9:50:07:9d:e9:0d:72: 17:37:00:5b:9d:5c:56:17:b8:a0:07:35:0f:72:9d:47:b0:af: 0a:67:d3:76:29:cf:b0:ef:22:2a:7b:33:55:9d:ad:47:92:49: 25:52:d1:c0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUW3x7hLI5A2LY8vrMAqKDBUpFW3EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE2MDAzMTQxWhcNMjUxMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BmMzQxYTgxMTlmOWY5MTI5YWVlZWI2NjkzNjIyNWVhZTkw MjI3MjViMWUxODYwZGM5NzY3NzEwZDk3OGE5OTMxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCihX2Vl4q6TUoe9219naR5Itsyfhc02RLbyMBtkjpbTBZ2 vKgKwr3t3nH1C36ryIczQROv5S/F8oA7ZgtLP7ydYDt/M5vZXL1cdHRUrwV4Ltmc otM9Cx0xI1op9Ma4RCI3xgyqkc/KLccApkyoo4qNvQZjd4mJmAUD2+MF3VGJ0aD+ ETGNMtf9fwrnStv9Urklzgfo0GizCm6J60MBuKCjtFF3D2i/q3pu7Jnci45pL7+C rmbZx2LgiyviCWEU0DrPp4pfK3QUfGV2ChXqlWHoOAprz2c+ltGjQYov7nR6pput nHF5LR/bC/fOU3c/YrhyLlId2KmgWKChB4+rUxUPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUuig0fK0UhSecBsVOZz5ZdMIopCUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2IyYmE4ZmIxLWE4OTMtNGFkNS1hM2ZiLWY0MjkwZTM5MmFmMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAPnkAwDQYJKoZIhvcNAQELBQADggEBAJvlRI0TUEpoRAi0nyVcaZnPnNUv KuAedtSwmHGSKOGVekKUQEoRTaLD6LKTfo2vLCAKU7ukbRUwUAOuNpC1leqnMoha HyewwVcCaL7ihok+zz9j77i0ez03jdb0GtX9DCRn4oISlL8cSp74RtvQnnqswa61 zypqNcvwSxg1y41cpbs23DjLEtHtbBpZZrsY7wJpRj5q+VBHiVMaKKNOPuHRJ538 iBr1XKvFiOjnPlcdsAJE9xiz/mamqVyNItV/efI5mMGavyoqbd5WrcSrHgrEyVAH nekNchc3AFudXFYXuKAHNQ9ynUewrwpn03Ypz7DvIip7M1WdrUeSSSVS0cA= -----END CERTIFICATE-----Generated at Mon Oct 20 17:30:04 2025 by rpki-client