$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cf16abd5-3460-48d6-ba82-f0d652b7b837.roa File: cf16abd5-3460-48d6-ba82-f0d652b7b837.roa (raw, json) Hash identifier: wH8GGYdo9oT1+TntGh7RrWCIQFBK4e3lOrbJ9DrUD6Y= Subject key identifier: 46:D3:02:6B:E9:0C:78:DE:B1:23:20:28:1D:A2:FF:F3:2A:0F:48:E3 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2D72487AFA49A1B2602AA7C8E567255C6B06DA78 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cf16abd5-3460-48d6-ba82-f0d652b7b837.roa Signing time: Mon 13 Oct 2025 16:59:00 +0000 ROA not before: Mon 13 Oct 2025 16:59:00 +0000 ROA not after: Mon 17 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.158.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:72:48:7a:fa:49:a1:b2:60:2a:a7:c8:e5:67:25:5c:6b:06:da:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 13 16:59:00 2025 GMT Not After : Nov 17 23:59:59 2025 GMT Subject: serialNumber=eac06d8d1cbb8ac60f088f6321de80f6ed69c12065e6d0acb911d3df0e4c4238, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e8:1f:d6:00:ce:c0:d6:14:ac:39:e1:52:33: 83:ac:99:29:66:59:38:e4:6b:68:07:16:bb:d7:d2: 47:50:8e:92:fd:3b:f0:10:07:f6:61:c4:72:65:5c: b7:47:5f:40:1c:fc:b0:0b:59:d2:4b:ad:e6:9e:6e: 01:7c:4b:f7:12:c4:f0:6b:a1:99:a6:df:6d:d6:54: c9:d2:6a:da:fd:7f:d8:19:45:ba:99:c4:17:51:ef: 71:7c:75:f8:41:8d:52:e9:c4:9a:5a:9c:aa:fe:48: 87:1e:de:d8:f2:03:1e:cb:12:c3:ab:5e:46:26:fb: 7f:90:5c:bb:80:7b:72:15:bb:6c:ca:f2:be:4a:13: 5e:f4:12:af:2b:a0:01:45:c6:79:db:5f:67:17:77: 4a:2f:6b:1f:cf:51:0a:56:c8:4a:5e:1a:6d:1e:fc: ab:4d:ba:81:80:a3:81:79:91:00:65:22:9f:05:83: 3c:16:63:da:b8:1a:ae:d6:03:5d:d2:cd:99:c9:a1: 10:ea:c9:46:9e:33:7f:a7:b4:93:8a:db:ad:2a:ad: d5:74:7f:0c:b6:38:96:64:73:5e:f7:7f:0a:43:a8: aa:7a:78:98:cd:f9:8d:9a:2c:5c:5c:f9:f1:1e:dd: df:ca:1e:2e:be:85:0f:eb:46:7c:29:86:a5:3d:5b: 2d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:D3:02:6B:E9:0C:78:DE:B1:23:20:28:1D:A2:FF:F3:2A:0F:48:E3 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cf16abd5-3460-48d6-ba82-f0d652b7b837.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.158.148.0/24 Signature Algorithm: sha256WithRSAEncryption 27:19:44:f2:40:88:af:0d:c0:49:8e:39:fb:21:b1:ba:26:34: 36:da:0f:ef:4a:7e:f8:42:02:97:a5:2d:f0:cc:53:ed:a0:a4: e7:38:85:ec:7e:48:c9:26:e3:0c:b1:7f:78:d0:4d:57:36:d0: 9b:ea:a3:42:2c:0a:c3:97:6a:a9:d7:6b:15:4b:44:ea:84:8a: 26:e6:ea:d7:47:27:d5:fc:7a:e7:99:2e:50:b8:85:ce:47:eb: d7:b9:bf:d5:0d:00:30:75:4e:2f:67:36:44:c2:c4:13:46:14: 2f:75:b6:b2:b7:aa:a9:87:76:07:82:c2:2e:19:a4:32:83:34: 68:79:9d:01:cb:73:cc:d7:82:0f:d1:6c:06:c0:83:61:ae:3b: 1f:0f:64:8c:62:93:53:e4:49:c0:32:b6:1e:c1:95:7d:9d:1a: ce:1b:69:f1:80:57:24:ed:cc:39:e9:bb:0a:31:ed:9d:8f:ea: a2:c3:76:d8:c8:56:e5:a8:43:39:b0:69:05:3b:1a:b6:a6:1b: e7:7e:c5:d7:b9:a4:80:23:84:86:9e:59:44:d3:3d:d5:d2:83: cc:f6:d6:95:2f:e3:af:7d:23:3b:46:13:7b:03:5b:a2:0d:0d: eb:80:a5:ef:4c:4f:79:e3:d1:2c:93:6a:e6:4a:12:26:06:0f: 59:6e:5a:72 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULXJIevpJobJgKqfI5WclXGsG2ngwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDEzMTY1OTAwWhcNMjUxMTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BlYWMwNmQ4ZDFjYmI4YWM2MGYwODhmNjMyMWRlODBmNmVk NjljMTIwNjVlNmQwYWNiOTExZDNkZjBlNGM0MjM4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCh6B/WAM7A1hSsOeFSM4OsmSlmWTjka2gHFrvX0kdQjpL9 O/AQB/ZhxHJlXLdHX0Ac/LALWdJLreaebgF8S/cSxPBroZmm323WVMnSatr9f9gZ RbqZxBdR73F8dfhBjVLpxJpanKr+SIce3tjyAx7LEsOrXkYm+3+QXLuAe3IVu2zK 8r5KE170Eq8roAFFxnnbX2cXd0ovax/PUQpWyEpeGm0e/KtNuoGAo4F5kQBlIp8F gzwWY9q4Gq7WA13SzZnJoRDqyUaeM3+ntJOK260qrdV0fwy2OJZkc173fwpDqKp6 eJjN+Y2aLFxc+fEe3d/KHi6+hQ/rRnwphqU9Wy2RAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQURtMCa+kMeN6xIyAoHaL/8yoPSOMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2NmMTZhYmQ1LTM0NjAtNDhkNi1iYTgyLWYwZDY1MmI3YjgzNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAPnpQwDQYJKoZIhvcNAQELBQADggEBACcZRPJAiK8NwEmOOfshsbomNDba D+9KfvhCApelLfDMU+2gpOc4hex+SMkm4wyxf3jQTVc20Jvqo0IsCsOXaqnXaxVL ROqEiibm6tdHJ9X8eueZLlC4hc5H69e5v9UNADB1Ti9nNkTCxBNGFC91trK3qqmH dgeCwi4ZpDKDNGh5nQHLc8zXgg/RbAbAg2GuOx8PZIxik1PkScAyth7BlX2dGs4b afGAVyTtzDnpuwox7Z2P6qLDdtjIVuWoQzmwaQU7GramG+d+xde5pIAjhIaeWUTT PdXSg8z21pUv4699IztGE3sDW6INDeuApe9MT3nj0SyTauZKEiYGD1luWnI= -----END CERTIFICATE-----Generated at Mon Oct 20 03:02:31 2025 by rpki-client