$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d615b767-a0e2-4c0d-968e-75a8fe4005cd.roa File: d615b767-a0e2-4c0d-968e-75a8fe4005cd.roa (raw, json) Hash identifier: n1FeVBIQGRvFmFyHDW0mSRYylCl+xvQl1zpdUOY/H5Q= Subject key identifier: 70:32:EA:64:81:B8:6C:44:2E:39:D5:4A:09:7F:63:B3:A4:35:DD:20 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 03AC478C673FAE222BE6802E15023FF2B00F66F9 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d615b767-a0e2-4c0d-968e-75a8fe4005cd.roa Signing time: Mon 13 Oct 2025 17:42:57 +0000 ROA not before: Mon 13 Oct 2025 17:42:57 +0000 ROA not after: Mon 17 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.158.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:ac:47:8c:67:3f:ae:22:2b:e6:80:2e:15:02:3f:f2:b0:0f:66:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 13 17:42:57 2025 GMT Not After : Nov 17 23:59:59 2025 GMT Subject: serialNumber=9cd105e14791f51b3830f80c1efaa98d00e620a1180ef8036ec6238812ff19a8, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:df:ce:9e:ca:9f:89:fb:49:15:8e:b4:e2:2f: 7a:9b:c5:b5:f4:66:8e:b5:4a:5a:51:04:d3:62:10: 3b:4c:ec:92:5a:a9:e8:35:76:e9:05:39:b7:3b:5e: 6b:ca:3e:a7:27:d1:18:bc:18:3d:1e:97:19:1a:e5: e8:3c:c9:2d:18:0c:26:d8:54:f9:44:36:6e:ba:f4: 07:71:c7:17:38:c8:cb:03:40:56:96:f4:8d:cf:dd: db:69:87:e6:c2:10:fb:0a:c2:41:c6:40:f4:2e:a6: bb:62:51:0f:fc:20:b2:56:42:a3:7a:5d:fe:ab:22: 78:bf:a6:9a:e8:2c:69:41:eb:9c:a5:91:f3:38:4c: 0c:69:bc:c7:21:5c:57:e1:25:03:77:85:de:59:17: f7:fd:17:53:ae:47:1f:d9:bc:64:9e:2e:1f:9b:73: cf:30:bf:68:9b:e7:ac:d0:34:b4:4a:6e:02:5a:5e: 4f:9e:82:d7:08:05:07:20:13:60:99:45:98:9d:a3: 8c:53:e9:8f:9f:b1:d7:f1:95:14:08:dc:64:cb:84: 8b:aa:7d:00:4a:1d:a0:8a:da:97:79:0d:4d:f1:27: 39:3a:5e:7f:3e:55:e1:9d:12:ee:fc:cc:12:7d:e8: 00:11:91:46:5a:17:76:43:d2:7d:06:5f:d1:7e:e8: dc:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:32:EA:64:81:B8:6C:44:2E:39:D5:4A:09:7F:63:B3:A4:35:DD:20 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d615b767-a0e2-4c0d-968e-75a8fe4005cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.158.132.0/24 Signature Algorithm: sha256WithRSAEncryption 11:21:c1:c6:a8:d8:83:f8:82:c8:ba:7c:1c:d5:e4:63:8f:b3: 20:65:8d:dd:2c:1d:b7:41:22:a2:b6:63:e2:68:7b:18:c0:c3: ca:58:20:8d:61:4a:88:dd:de:33:26:a5:7a:2b:5c:a0:7a:6e: f8:5b:05:35:de:b2:7f:1b:19:99:a6:48:23:c2:df:c9:43:a9: 3f:58:78:fe:35:23:56:6b:00:26:f3:f5:e5:bc:8e:11:8f:5f: c9:8f:5a:fc:80:f5:4c:8e:a0:27:cf:39:7c:f5:c4:c0:14:97: e4:92:aa:88:17:c7:e4:9a:7a:62:ae:c2:22:b6:93:78:d8:ed: 3e:d1:2f:6f:a3:ff:2a:84:fe:2f:87:a5:5e:8a:e4:3f:40:e6: dd:19:de:b5:da:f9:dc:e1:a0:70:d3:02:14:ca:85:7f:07:4a: aa:38:67:bc:54:c5:39:32:71:71:3d:82:04:04:0a:37:c3:f8: bc:63:e1:c1:d7:01:c7:ca:b9:3b:b3:bb:f5:a4:bd:1d:73:6f: 64:b6:e3:cc:d1:9c:75:8a:25:39:b2:90:94:7c:40:0f:38:09: da:25:60:16:f3:d2:0f:50:f8:77:c5:b6:8f:96:50:bf:41:9b: 49:62:d7:68:f8:b0:c6:d9:cc:d7:81:9c:70:c7:7f:49:ce:4d: ae:be:dc:69 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUA6xHjGc/riIr5oAuFQI/8rAPZvkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDEzMTc0MjU3WhcNMjUxMTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A5Y2QxMDVlMTQ3OTFmNTFiMzgzMGY4MGMxZWZhYTk4ZDAw ZTYyMGExMTgwZWY4MDM2ZWM2MjM4ODEyZmYxOWE4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCq386eyp+J+0kVjrTiL3qbxbX0Zo61SlpRBNNiEDtM7JJa qeg1dukFObc7XmvKPqcn0Ri8GD0elxka5eg8yS0YDCbYVPlENm669Adxxxc4yMsD QFaW9I3P3dtph+bCEPsKwkHGQPQuprtiUQ/8ILJWQqN6Xf6rIni/pproLGlB65yl kfM4TAxpvMchXFfhJQN3hd5ZF/f9F1OuRx/ZvGSeLh+bc88wv2ib56zQNLRKbgJa Xk+egtcIBQcgE2CZRZido4xT6Y+fsdfxlRQI3GTLhIuqfQBKHaCK2pd5DU3xJzk6 Xn8+VeGdEu78zBJ96AARkUZaF3ZD0n0GX9F+6NxhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUcDLqZIG4bEQuOdVKCX9js6Q13SAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Q2MTViNzY3LWEwZTItNGMwZC05NjhlLTc1YThmZTQwMDVjZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAPnoQwDQYJKoZIhvcNAQELBQADggEBABEhwcao2IP4gsi6fBzV5GOPsyBl jd0sHbdBIqK2Y+JoexjAw8pYII1hSojd3jMmpXorXKB6bvhbBTXesn8bGZmmSCPC 38lDqT9YeP41I1ZrACbz9eW8jhGPX8mPWvyA9UyOoCfPOXz1xMAUl+SSqogXx+Sa emKuwiK2k3jY7T7RL2+j/yqE/i+HpV6K5D9A5t0Z3rXa+dzhoHDTAhTKhX8HSqo4 Z7xUxTkycXE9ggQECjfD+Lxj4cHXAcfKuTuzu/WkvR1zb2S248zRnHWKJTmykJR8 QA84CdolYBbz0g9Q+HfFto+WUL9Bm0li12j4sMbZzNeBnHDHf0nOTa6+3Gk= -----END CERTIFICATE-----Generated at Mon Oct 20 08:30:28 2025 by rpki-client