$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0489c323-915f-4e21-94f1-8fa4a8485cf7.roa File: 0489c323-915f-4e21-94f1-8fa4a8485cf7.roa (raw, json) Hash identifier: /2jZDpC7langti0M3XFdC3jYQs7RCGbozEQUJpiJfdY= Subject key identifier: 6E:0B:0B:52:F3:B6:77:1F:56:94:74:26:5F:D9:DF:AE:3B:F4:26:99 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 79B707A88A9EF0E1A5F10EF8E70F024E05DFC62A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0489c323-915f-4e21-94f1-8fa4a8485cf7.roa Signing time: Thu 18 Sep 2025 23:56:17 +0000 ROA not before: Thu 18 Sep 2025 23:56:17 +0000 ROA not after: Thu 23 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.158.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:b7:07:a8:8a:9e:f0:e1:a5:f1:0e:f8:e7:0f:02:4e:05:df:c6:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 18 23:56:17 2025 GMT Not After : Oct 23 23:59:59 2025 GMT Subject: serialNumber=73f5d324af4819c10165869495be0f7330958f2a54ba765fac657aaffd44dc3f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4a:8e:00:5b:a6:80:39:22:d4:40:68:ea:46: 2a:a2:88:f0:4a:01:e9:1f:53:44:af:7e:a5:81:61: 24:9a:e5:9e:18:59:21:9a:24:4e:7e:22:4a:b4:71: 50:4a:ba:a2:75:bc:d4:da:dc:e7:af:f6:c1:1c:c9: 08:ef:ca:b9:8b:6c:f6:a0:db:32:47:c9:fb:d4:86: 3c:a7:37:b5:04:52:57:bc:5d:d5:76:8c:72:fc:43: 14:f1:4a:08:3e:08:05:9a:50:bc:2a:d2:41:77:5c: 7c:ef:94:b2:a4:56:f6:e4:d0:5b:42:5b:f0:b1:c4: a7:65:b3:fc:28:8d:c6:2b:24:7c:1f:91:43:fb:a2: 72:70:bb:c2:fe:3a:1d:f1:c3:b4:2a:67:e3:48:37: 0c:4b:3f:8d:08:28:7b:56:38:94:cf:ee:55:d8:43: 1c:c8:ac:58:62:ed:a4:ed:ad:ae:73:e6:3c:b3:e8: 65:e4:93:43:03:b4:52:2d:24:72:bf:1c:d6:09:72: 85:d8:dd:e0:00:d9:14:42:b2:fe:54:3d:11:af:0c: b9:4e:94:94:e2:46:48:ed:81:d7:d7:d9:ef:62:62: a8:fa:0d:20:3d:02:d5:5d:03:b4:b2:59:fc:5a:8c: 6d:9b:f4:b4:4e:e6:ca:cf:22:7e:7f:f3:28:a5:fe: 7d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:0B:0B:52:F3:B6:77:1F:56:94:74:26:5F:D9:DF:AE:3B:F4:26:99 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0489c323-915f-4e21-94f1-8fa4a8485cf7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.158.19.0/24 Signature Algorithm: sha256WithRSAEncryption 43:3e:0b:f3:68:ac:8f:2d:db:d8:18:4f:82:3f:b8:e6:be:06: 9c:fe:3f:01:ac:4f:90:eb:58:8d:e7:0a:c5:fa:8c:8c:f9:65: f1:bc:64:8b:61:42:8f:1b:bb:b6:ff:57:1a:c9:a9:bd:44:d9: 87:51:d1:89:e0:fd:a5:a2:62:8e:b4:0c:69:0e:20:64:ab:d2: da:fe:56:a8:09:23:ca:9c:67:7b:68:0d:7c:b2:92:1d:76:18: 8a:90:28:c4:1f:39:96:36:ad:ee:b9:e4:98:29:43:e0:23:4b: f1:63:51:6a:9b:f4:ee:81:2c:da:98:08:48:58:fd:4e:2e:98: 86:01:18:e0:f1:78:c1:67:72:84:25:bb:32:52:6a:ce:7c:95: e2:ed:fb:ba:4c:7b:7e:a0:64:85:ae:52:26:f1:08:1b:e8:25: 5c:11:f0:01:39:ac:3f:e4:0a:1d:1c:bc:d1:55:c7:86:4a:8a: 01:67:8f:b6:96:95:ad:50:e3:95:1f:e6:43:21:d2:d0:7b:f2: 9a:a1:22:df:72:56:83:5e:6e:c9:82:95:72:8b:ef:c8:dc:65: 75:53:ef:17:ef:cf:2e:2b:b8:46:03:b8:3d:13:a6:24:86:4e: a2:cf:de:1e:19:2c:c3:c0:99:44:71:71:28:70:c9:2a:b8:93: 60:10:7f:33 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUebcHqIqe8OGl8Q745w8CTgXfxiowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTE4MjM1NjE3WhcNMjUxMDIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A3M2Y1ZDMyNGFmNDgxOWMxMDE2NTg2OTQ5NWJlMGY3MzMw OTU4ZjJhNTRiYTc2NWZhYzY1N2FhZmZkNDRkYzNmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtSo4AW6aAOSLUQGjqRiqiiPBKAekfU0SvfqWBYSSa5Z4Y WSGaJE5+Ikq0cVBKuqJ1vNTa3Oev9sEcyQjvyrmLbPag2zJHyfvUhjynN7UEUle8 XdV2jHL8QxTxSgg+CAWaULwq0kF3XHzvlLKkVvbk0FtCW/CxxKdls/wojcYrJHwf kUP7onJwu8L+Oh3xw7QqZ+NINwxLP40IKHtWOJTP7lXYQxzIrFhi7aTtra5z5jyz 6GXkk0MDtFItJHK/HNYJcoXY3eAA2RRCsv5UPRGvDLlOlJTiRkjtgdfX2e9iYqj6 DSA9AtVdA7SyWfxajG2b9LRO5srPIn5/8yil/n0jAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUbgsLUvO2dx9WlHQmX9nfrjv0JpkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzA0ODljMzIzLTkxNWYtNGUyMS05NGYxLThmYTRhODQ4NWNmNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAPnhMwDQYJKoZIhvcNAQELBQADggEBAEM+C/NorI8t29gYT4I/uOa+Bpz+ PwGsT5DrWI3nCsX6jIz5ZfG8ZIthQo8bu7b/VxrJqb1E2YdR0Yng/aWiYo60DGkO IGSr0tr+VqgJI8qcZ3toDXyykh12GIqQKMQfOZY2re655JgpQ+AjS/FjUWqb9O6B LNqYCEhY/U4umIYBGODxeMFncoQluzJSas58leLt+7pMe36gZIWuUibxCBvoJVwR 8AE5rD/kCh0cvNFVx4ZKigFnj7aWla1Q45Uf5kMh0tB78pqhIt9yVoNebsmClXKL 78jcZXVT7xfvzy4ruEYDuD0TpiSGTqLP3h4ZLMPAmURxcShwySq4k2AQfzM= -----END CERTIFICATE-----Generated at Fri Sep 19 08:02:22 2025 by rpki-client