$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/05566c03-2f7f-444b-926e-3f1ca8404a1f.roa File: 05566c03-2f7f-444b-926e-3f1ca8404a1f.roa (raw, json) Hash identifier: 5VtOPE+zQpaMnYeoOy0uWvs2pos7+rASoE3t/JULCRw= Subject key identifier: 08:F0:45:8F:EF:54:D2:FA:CD:5C:5C:C6:35:07:04:ED:D4:A9:68:2C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6AE295116BA84D09FEAFA766423036C9AF206D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/05566c03-2f7f-444b-926e-3f1ca8404a1f.roa Signing time: Fri 19 Sep 2025 00:08:57 +0000 ROA not before: Fri 19 Sep 2025 00:08:57 +0000 ROA not after: Fri 24 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.158.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:e2:95:11:6b:a8:4d:09:fe:af:a7:66:42:30:36:c9:af:20:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 19 00:08:57 2025 GMT Not After : Oct 24 23:59:59 2025 GMT Subject: serialNumber=ff462a96b3e845cba555fec5f0a2eb9150292dccb0a9aa1c485d7c79923fa8fd, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b6:c9:fb:ce:93:40:e2:ee:e4:08:21:08:d3: 93:c1:50:c5:e8:87:78:45:64:9c:51:b9:9d:41:3b: c8:d8:76:aa:9c:76:bf:04:5e:9e:20:8a:ee:06:ab: 23:13:9f:78:4f:d3:ea:d6:d4:5b:03:d1:8d:ef:0c: 84:09:04:fc:c4:b6:d5:f9:94:c9:bc:69:21:e8:c9: d6:1b:43:ab:f3:70:8e:11:3a:fd:fa:1e:e8:d5:70: 2f:54:8f:b7:d9:2c:e4:7d:b9:07:8b:66:ad:24:90: 78:4f:fe:09:93:09:06:a3:61:fa:cc:82:05:2f:58: a8:03:30:4b:82:33:d1:06:93:11:0c:7c:d7:28:35: 1f:a8:17:df:75:58:95:f2:6e:d1:23:d1:99:00:1b: 2a:71:75:9f:ff:41:ec:16:93:89:08:8c:c5:0b:e1: f3:c3:a9:0d:86:77:40:76:60:3e:e2:94:25:31:4b: a5:3f:8f:59:4e:ac:5f:c4:c1:ff:af:db:39:b2:03: b3:97:ef:28:6d:88:69:3d:10:ce:a0:3c:a1:50:41: fa:27:ff:c5:14:00:71:63:e2:25:6a:02:5a:cb:5d: 44:ba:3b:a3:d6:7e:9c:c3:68:7b:88:5c:0e:8d:cf: a4:54:ac:02:a5:4d:38:0e:5f:5e:c1:ed:d9:95:03: 7b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:F0:45:8F:EF:54:D2:FA:CD:5C:5C:C6:35:07:04:ED:D4:A9:68:2C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/05566c03-2f7f-444b-926e-3f1ca8404a1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.158.62.0/24 Signature Algorithm: sha256WithRSAEncryption 71:1a:22:ac:f9:3a:d6:6a:f8:d0:b9:88:a2:21:78:fa:dd:b8: 75:2e:cc:54:f4:f2:0c:54:9b:85:55:6c:9c:cf:44:0c:fd:b8: 21:a8:8b:5d:28:8e:20:ab:a0:e5:dc:43:f8:8c:57:9e:e1:9c: 44:14:01:43:a4:f7:78:c4:b6:ad:44:c4:17:6a:5b:2e:4f:6d: dc:02:b9:44:b1:fa:f5:26:6d:f3:0a:85:7f:6c:72:69:92:75: e7:7c:11:d1:3f:ec:38:00:e6:e6:a9:61:20:66:c3:e8:4b:5b: ca:74:91:1b:31:09:fc:75:1c:b6:1b:a8:56:fc:b9:81:61:55: c9:16:c9:23:f7:8f:9f:dd:91:78:20:29:05:43:bb:d3:87:d9: 0f:21:7c:c9:c6:7a:c8:9f:55:4d:3a:94:a0:30:64:b6:bd:a7: 6c:24:31:b3:32:80:ea:5b:5a:21:42:ff:bd:8d:95:87:65:42: 2e:26:c2:1a:52:71:89:d2:34:2f:cc:23:cb:1e:78:09:00:33: 11:f1:ca:9a:0e:3b:ff:2c:2c:d6:24:02:16:86:00:5c:64:f4: 72:e4:43:6a:55:0e:69:95:1c:0f:cf:a7:e5:92:ed:5b:72:61: 4c:11:5d:0d:a9:d0:bd:dd:bc:e1:f2:d1:33:50:fc:d5:2f:96: 89:0c:9e:81 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITauKVEWuoTQn+r6dmQjA2ya8gbTANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzJkZjZmM2IzYTM0YjYzODZkMWEzMmQ4ZjRmYTMxNzhlZjMx ODg3ZDhiNDI4ZGZhYTQ3NjAeFw0yNTA5MTkwMDA4NTdaFw0yNTEwMjQyMzU5NTla MHoxSTBHBgNVBAUTQGZmNDYyYTk2YjNlODQ1Y2JhNTU1ZmVjNWYwYTJlYjkxNTAy OTJkY2NiMGE5YWExYzQ4NWQ3Yzc5OTIzZmE4ZmQxLTArBgNVBAMTJDVmMjc2MDQ1 LTViOWYtNDVlZi05MjNkLWYzZmNlMjRhNjIyNTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAMm2yfvOk0Di7uQIIQjTk8FQxeiHeEVknFG5nUE7yNh2qpx2 vwReniCK7garIxOfeE/T6tbUWwPRje8MhAkE/MS21fmUybxpIejJ1htDq/NwjhE6 /foe6NVwL1SPt9ks5H25B4tmrSSQeE/+CZMJBqNh+syCBS9YqAMwS4Iz0QaTEQx8 1yg1H6gX33VYlfJu0SPRmQAbKnF1n/9B7BaTiQiMxQvh88OpDYZ3QHZgPuKUJTFL pT+PWU6sX8TB/6/bObIDs5fvKG2IaT0QzqA8oVBB+if/xRQAcWPiJWoCWstdRLo7 o9Z+nMNoe4hcDo3PpFSsAqVNOA5fXsHt2ZUDe60CAwEAAaOCArEwggKtMB0GA1Ud DgQWBBQI8EWP71TS+s1cXMY1BwTt1KloLDAfBgNVHSMEGDAWgBQlrdNCsB63pY6t GZAmiLVLP4H0uDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg1MWNlZjE3LTEz MmEtNDMzNy1iN2QxLWJmMTZhNTJmZmQwMy9kZjZmM2IzYTM0YjYzODZkMWEzMmQ4 ZjRmYTMxNzhlZjMxODg3ZDhiNDI4ZGZhYTQ3Ni5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9mNzAzNjk2ZS1lNDdiLTRjMjAtYmQ5My02Zjgw OTA0ZTQyZDIvMDU1NjZjMDMtMmY3Zi00NDRiLTkyNmUtM2YxY2E4NDA0YTFmLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMt NmY4MDkwNGU0MmQyL3RqaHRHakxZOVBveGVPOHhpSDJMUW8zNnBIWS5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAA+ePjANBgkqhkiG9w0BAQsFAAOCAQEAcRoirPk61mr40LmIoiF4+t24dS7M VPTyDFSbhVVsnM9EDP24IaiLXSiOIKug5dxD+IxXnuGcRBQBQ6T3eMS2rUTEF2pb Lk9t3AK5RLH69SZt8wqFf2xyaZJ153wR0T/sOADm5qlhIGbD6EtbynSRGzEJ/HUc thuoVvy5gWFVyRbJI/ePn92ReCApBUO704fZDyF8ycZ6yJ9VTTqUoDBktr2nbCQx szKA6ltaIUL/vY2Vh2VCLibCGlJxidI0L8wjyx54CQAzEfHKmg47/yws1iQCFoYA XGT0cuRDalUOaZUcD8+n5ZLtW3JhTBFdDanQvd284fLRM1D81S+WiQyegQ== -----END CERTIFICATE-----Generated at Fri Sep 19 10:59:15 2025 by rpki-client