$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ec035603-7de0-4fd9-89b4-2425560f6955.roa File: ec035603-7de0-4fd9-89b4-2425560f6955.roa (raw, json) Hash identifier: LvzUMzogFuPivKnV2c2d91CFQenmPKxCgdTwQQdTEbA= Subject key identifier: FF:23:D1:A0:A9:0F:45:21:8F:2F:29:9F:91:CE:49:98:AB:63:7F:6E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3A44432DF0210AD33BEA9FF63E90FCCDE2502E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ec035603-7de0-4fd9-89b4-2425560f6955.roa Signing time: Wed 15 Oct 2025 23:51:09 +0000 ROA not before: Wed 15 Oct 2025 23:51:09 +0000 ROA not after: Wed 19 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.158.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:44:43:2d:f0:21:0a:d3:3b:ea:9f:f6:3e:90:fc:cd:e2:50:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 15 23:51:09 2025 GMT Not After : Nov 19 23:59:59 2025 GMT Subject: serialNumber=f84cc8e98e92f47710eb07ec88b675614a263bd940a4879d4f0266530fb6aaff, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:02:a7:92:d5:d6:8b:7e:cb:69:4b:a3:7b:c6: 14:33:4c:ab:7c:f2:41:f0:85:84:49:fd:5a:f7:8e: c3:65:e8:18:29:36:10:95:45:f5:6c:98:c3:27:a8: dc:ad:09:1a:74:c1:7c:fc:f4:e3:a7:1c:fb:ee:5e: c8:bc:c7:19:dd:a4:bd:5e:9f:86:71:56:38:f2:e4: b9:94:58:cb:5e:3a:e6:43:60:42:ec:c5:26:11:ce: 33:0f:c6:1b:a7:6d:07:70:d5:6e:eb:6d:01:0f:a4: eb:80:c3:69:06:00:4c:3a:fa:b0:8e:7e:a5:fb:69: c1:bf:73:40:8c:05:2a:1e:92:0d:0c:77:b6:70:f8: a2:aa:d9:a4:7a:da:97:df:42:dd:06:ed:ac:1c:23: d7:84:ba:87:4c:54:4d:53:86:ab:f2:7e:fa:d6:0b: 27:ae:3d:c2:99:a9:6e:0f:1f:17:49:92:15:03:e6: 41:90:a4:94:7d:a0:0a:48:15:48:92:4d:e8:8c:f3: fc:88:df:3b:47:b2:ce:e1:dc:56:e3:a1:ee:a5:1c: bf:2d:92:51:3c:e8:08:97:60:14:a9:92:e6:ce:62: d4:cb:df:46:85:28:ad:f9:79:eb:52:31:3f:37:d3: 38:ea:04:df:09:5b:ab:54:db:96:b5:3a:33:a7:32: 40:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:23:D1:A0:A9:0F:45:21:8F:2F:29:9F:91:CE:49:98:AB:63:7F:6E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ec035603-7de0-4fd9-89b4-2425560f6955.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.158.46.0/24 Signature Algorithm: sha256WithRSAEncryption a3:f9:da:e7:64:92:2a:da:b3:12:7c:b2:d7:59:47:b3:11:32: 1d:ee:1e:27:3a:e6:74:54:b0:4e:1f:de:de:24:56:75:c1:fd: dc:ec:2f:d2:83:be:c5:7d:50:57:2b:83:4b:fa:0d:f1:fb:20: e5:96:00:34:97:06:61:f6:30:b8:09:a2:7f:45:e5:cf:7b:ab: d5:2e:04:45:64:5d:74:2a:8f:5c:09:b6:60:46:cf:f1:0c:04: 4a:76:06:48:b1:b5:93:ec:56:d3:eb:85:74:28:6b:91:99:25: 47:2b:03:2b:27:45:0f:66:23:99:5d:f0:c3:a5:b7:8f:4e:16: 07:df:12:90:e8:e0:a6:de:25:14:42:f1:93:45:b9:53:7c:be: fb:bc:87:df:ca:57:ea:ca:4d:c2:3d:22:85:e1:aa:33:70:ac: 5e:c1:7e:25:04:94:15:73:7a:0d:d4:c8:63:bc:07:b6:4c:61: 71:0b:66:24:9b:c4:a1:68:a0:e1:43:1f:ba:98:9f:8b:f9:54: 92:10:52:00:5f:1f:7a:82:9a:ff:2e:b1:54:fc:17:3f:5d:e3: 96:18:2c:cb:7e:50:f2:77:75:1f:61:9e:8b:7d:f0:c6:db:91: 42:be:10:ad:ba:96:e7:e3:68:79:64:d0:78:e4:1a:db:69:75: 28:78:c5:77 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITOkRDLfAhCtM76p/2PpD8zeJQLjANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzJkZjZmM2IzYTM0YjYzODZkMWEzMmQ4ZjRmYTMxNzhlZjMx ODg3ZDhiNDI4ZGZhYTQ3NjAeFw0yNTEwMTUyMzUxMDlaFw0yNTExMTkyMzU5NTla MHoxSTBHBgNVBAUTQGY4NGNjOGU5OGU5MmY0NzcxMGViMDdlYzg4YjY3NTYxNGEy NjNiZDk0MGE0ODc5ZDRmMDI2NjUzMGZiNmFhZmYxLTArBgNVBAMTJDVmMjc2MDQ1 LTViOWYtNDVlZi05MjNkLWYzZmNlMjRhNjIyNTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBALACp5LV1ot+y2lLo3vGFDNMq3zyQfCFhEn9WveOw2XoGCk2 EJVF9WyYwyeo3K0JGnTBfPz046cc++5eyLzHGd2kvV6fhnFWOPLkuZRYy1465kNg QuzFJhHOMw/GG6dtB3DVbuttAQ+k64DDaQYATDr6sI5+pftpwb9zQIwFKh6SDQx3 tnD4oqrZpHral99C3QbtrBwj14S6h0xUTVOGq/J++tYLJ649wpmpbg8fF0mSFQPm QZCklH2gCkgVSJJN6Izz/IjfO0eyzuHcVuOh7qUcvy2SUTzoCJdgFKmS5s5i1Mvf RoUorfl561IxPzfTOOoE3wlbq1TblrU6M6cyQPECAwEAAaOCArEwggKtMB0GA1Ud DgQWBBT/I9GgqQ9FIY8vKZ+RzkmYq2N/bjAfBgNVHSMEGDAWgBQlrdNCsB63pY6t GZAmiLVLP4H0uDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg1MWNlZjE3LTEz MmEtNDMzNy1iN2QxLWJmMTZhNTJmZmQwMy9kZjZmM2IzYTM0YjYzODZkMWEzMmQ4 ZjRmYTMxNzhlZjMxODg3ZDhiNDI4ZGZhYTQ3Ni5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9mNzAzNjk2ZS1lNDdiLTRjMjAtYmQ5My02Zjgw OTA0ZTQyZDIvZWMwMzU2MDMtN2RlMC00ZmQ5LTg5YjQtMjQyNTU2MGY2OTU1LnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMt NmY4MDkwNGU0MmQyL3RqaHRHakxZOVBveGVPOHhpSDJMUW8zNnBIWS5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAA+eLjANBgkqhkiG9w0BAQsFAAOCAQEAo/na52SSKtqzEnyy11lHsxEyHe4e JzrmdFSwTh/e3iRWdcH93Owv0oO+xX1QVyuDS/oN8fsg5ZYANJcGYfYwuAmif0Xl z3ur1S4ERWRddCqPXAm2YEbP8QwESnYGSLG1k+xW0+uFdChrkZklRysDKydFD2Yj mV3ww6W3j04WB98SkOjgpt4lFELxk0W5U3y++7yH38pX6spNwj0iheGqM3CsXsF+ JQSUFXN6DdTIY7wHtkxhcQtmJJvEoWig4UMfupifi/lUkhBSAF8feoKa/y6xVPwX P13jlhgsy35Q8nd1H2Gei33wxtuRQr4QrbqW5+NoeWTQeOQa22l1KHjFdw== -----END CERTIFICATE-----Generated at Mon Oct 20 21:11:33 2025 by rpki-client