$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d750a370-4884-4695-8096-5cbc23a1a298.roa File: d750a370-4884-4695-8096-5cbc23a1a298.roa (raw, json) Hash identifier: GrE1/p2i9WB1EOVBrE3OhyLIsWckCWMi2DGuJO1idu8= Subject key identifier: F1:57:F2:D6:DA:D7:42:FE:C2:5E:E3:76:5B:AA:CE:A6:B3:D3:2C:0D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 249828BA4756411F2838D63264959E0ECD621670 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d750a370-4884-4695-8096-5cbc23a1a298.roa Signing time: Mon 13 Oct 2025 17:19:57 +0000 ROA not before: Mon 13 Oct 2025 17:19:57 +0000 ROA not after: Mon 17 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.158.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:98:28:ba:47:56:41:1f:28:38:d6:32:64:95:9e:0e:cd:62:16:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 13 17:19:57 2025 GMT Not After : Nov 17 23:59:59 2025 GMT Subject: serialNumber=afb30c89e38ddce624b1fe46d3d0d382d5733c54f7e6f6b5e55be7076e2acba6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:81:21:56:04:c1:73:ab:49:e7:0e:9d:54:b2: 20:1c:a0:82:b5:71:24:01:44:6e:d6:38:97:96:28: 18:cd:12:4b:2a:b5:5b:47:ab:f4:ee:78:e9:1c:cc: b2:83:e4:e1:13:36:c9:55:9d:a4:35:73:99:82:68: cc:d4:94:77:d7:b2:9f:70:ed:5b:b7:4b:15:83:69: b1:7f:e4:58:66:0f:90:b3:58:f9:b7:64:82:95:17: 1b:5c:4d:43:be:5a:21:75:41:ad:85:64:59:e8:2e: fa:60:47:ce:23:cc:b6:3a:b1:19:e0:26:b0:7e:4b: ce:f7:07:ea:0c:0f:b2:3f:f7:e3:7c:16:26:8d:30: 9d:62:52:7f:47:94:08:73:1e:95:5e:d8:45:ea:87: 0b:b3:d8:f9:12:2b:da:a8:86:c3:e6:14:ad:1a:90: ed:c4:7a:0c:91:73:ea:b1:ec:7a:2e:72:94:3f:17: b3:c2:ce:b5:5b:06:20:62:b4:14:fa:20:87:e5:f7: c6:cf:ef:3f:26:d3:67:a0:ed:ce:6b:22:96:fa:0b: bd:81:1f:c3:5a:cc:bd:0a:2d:6d:a0:d7:34:62:86: cd:53:55:45:d7:b9:3f:f5:af:a9:9b:e8:55:e8:49: 0c:00:de:ba:fd:a8:94:c4:ab:f6:84:75:b6:5e:e2: eb:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:57:F2:D6:DA:D7:42:FE:C2:5E:E3:76:5B:AA:CE:A6:B3:D3:2C:0D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d750a370-4884-4695-8096-5cbc23a1a298.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.158.216.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:35:4f:07:d7:ec:1f:56:cf:d6:a9:7e:e6:b6:a7:68:95:8f: 32:9f:36:66:73:7a:f9:ef:d9:21:77:f3:62:4f:80:54:60:dd: 09:0a:0d:f3:f5:1a:60:89:85:f7:32:8c:4d:64:b6:f6:5b:30: eb:2e:25:8e:ab:a2:0d:20:0b:e3:c4:94:6f:97:32:8d:48:23: 79:10:99:46:3a:1e:2f:3d:cd:c2:af:70:b3:ec:5b:f8:c2:72: 3c:33:ac:b4:30:ad:30:40:a6:b5:1c:d4:99:22:14:77:64:90: ee:50:6f:8b:d5:43:20:75:61:36:33:79:53:04:12:2b:d9:2a: e6:c8:89:de:7b:ab:db:e2:13:42:6e:98:4a:9a:25:0d:7b:65: 22:fd:4c:d1:2f:0d:ce:23:06:a7:53:d0:1e:e2:d9:cf:7b:a1: 30:ca:88:9c:58:cf:d8:d4:5d:a2:41:8f:91:02:93:7d:98:e3: 34:10:9e:64:6f:78:87:3d:85:87:19:9c:66:f1:0d:da:de:27: 96:b5:fe:f8:2c:e8:bd:97:21:56:c3:75:0a:76:65:ce:5b:52: c2:a8:d7:51:d6:a3:18:bc:2b:94:b9:1e:b7:ae:3b:ff:5e:93: 95:be:d8:e8:02:00:3a:6f:f4:ec:45:f2:80:46:de:11:cf:3a: c6:7d:91:28 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJJgoukdWQR8oONYyZJWeDs1iFnAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDEzMTcxOTU3WhcNMjUxMTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BhZmIzMGM4OWUzOGRkY2U2MjRiMWZlNDZkM2QwZDM4MmQ1 NzMzYzU0ZjdlNmY2YjVlNTViZTcwNzZlMmFjYmE2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCWgSFWBMFzq0nnDp1UsiAcoIK1cSQBRG7WOJeWKBjNEksq tVtHq/TueOkczLKD5OETNslVnaQ1c5mCaMzUlHfXsp9w7Vu3SxWDabF/5FhmD5Cz WPm3ZIKVFxtcTUO+WiF1Qa2FZFnoLvpgR84jzLY6sRngJrB+S873B+oMD7I/9+N8 FiaNMJ1iUn9HlAhzHpVe2EXqhwuz2PkSK9qohsPmFK0akO3EegyRc+qx7HoucpQ/ F7PCzrVbBiBitBT6IIfl98bP7z8m02eg7c5rIpb6C72BH8NazL0KLW2g1zRihs1T VUXXuT/1r6mb6FXoSQwA3rr9qJTEq/aEdbZe4usNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU8Vfy1trXQv7CXuN2W6rOprPTLA0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Q3NTBhMzcwLTQ4ODQtNDY5NS04MDk2LTVjYmMyM2ExYTI5OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAPntgwDQYJKoZIhvcNAQELBQADggEBAH41TwfX7B9Wz9apfua2p2iVjzKf NmZzevnv2SF382JPgFRg3QkKDfP1GmCJhfcyjE1ktvZbMOsuJY6rog0gC+PElG+X Mo1II3kQmUY6Hi89zcKvcLPsW/jCcjwzrLQwrTBAprUc1JkiFHdkkO5Qb4vVQyB1 YTYzeVMEEivZKubIid57q9viE0JumEqaJQ17ZSL9TNEvDc4jBqdT0B7i2c97oTDK iJxYz9jUXaJBj5ECk32Y4zQQnmRveIc9hYcZnGbxDdreJ5a1/vgs6L2XIVbDdQp2 Zc5bUsKo11HWoxi8K5S5HreuO/9ek5W+2OgCADpv9OxF8oBG3hHPOsZ9kSg= -----END CERTIFICATE-----Generated at Mon Oct 20 03:11:01 2025 by rpki-client