$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3de4db91-792f-4c90-8773-798043867572.roa File: 3de4db91-792f-4c90-8773-798043867572.roa (raw, json) Hash identifier: ITTYpegSsG3M7uj6nNN1RPJnOvmqf7o1NvOz6wdBf50= Subject key identifier: 7D:00:17:FC:56:99:59:CB:4B:A3:3F:4E:BF:7B:11:46:AA:14:37:6E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 54E9A6A39D4EF21BE2A1D6B48372D12F1B0BE3 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3de4db91-792f-4c90-8773-798043867572.roa Signing time: Fri 19 Sep 2025 00:10:39 +0000 ROA not before: Fri 19 Sep 2025 00:10:39 +0000 ROA not after: Fri 24 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.158.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:e9:a6:a3:9d:4e:f2:1b:e2:a1:d6:b4:83:72:d1:2f:1b:0b:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 19 00:10:39 2025 GMT Not After : Oct 24 23:59:59 2025 GMT Subject: serialNumber=95c5ecd9dcd9297f9a966752d0ce02e6d154bafb96591f9f2abef701f3101dc6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:31:e5:ab:ba:7e:d7:54:e4:b1:01:ce:ec:e1: 4c:30:ce:04:8c:8b:a6:95:1c:f1:1e:66:c2:0e:8d: e1:3c:da:2f:d9:36:d6:bc:f9:f2:21:35:fe:7c:66: 3c:2e:1c:cf:2b:b4:d2:f1:ba:59:40:c0:43:bf:c7: b5:79:8f:78:9c:57:53:bb:0a:79:c2:c3:c9:53:a8: e3:4a:4a:c5:f9:d2:06:c6:c6:32:19:9f:2e:54:48: f9:46:ac:a9:99:41:ad:15:ec:60:f1:ef:40:2c:43: a2:ca:4f:54:f6:d0:9e:a4:aa:11:c4:85:d3:c3:4e: 05:f5:e4:70:e3:4f:89:c8:7b:03:a5:33:f0:ec:a8: e8:e0:d8:cc:02:b0:b1:48:05:2f:9a:b9:0d:23:85: da:5b:f5:d1:bc:95:d2:8a:e9:8c:77:60:63:c9:0d: 40:da:13:b4:f3:e8:e2:c7:ab:e1:10:43:6d:48:71: 73:79:1e:0c:b9:ca:bc:5e:cb:b9:69:b2:da:91:23: d8:c0:4d:84:c3:54:4a:c8:f0:7d:8a:6b:24:3e:15: 18:d6:f1:a5:e2:5e:93:40:16:09:f0:60:23:cc:53: ff:2c:c5:d9:37:e9:2e:88:18:b7:fa:92:44:69:f8: 7e:19:4a:f3:f2:58:d3:df:e4:fa:75:d9:e5:ad:bf: 07:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:00:17:FC:56:99:59:CB:4B:A3:3F:4E:BF:7B:11:46:AA:14:37:6E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3de4db91-792f-4c90-8773-798043867572.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.158.20.0/23 Signature Algorithm: sha256WithRSAEncryption 93:ad:1f:8e:8c:08:b5:fa:b1:23:3a:3e:2d:03:32:48:13:bd: 2a:aa:b2:2d:bc:50:33:cc:d2:32:dd:76:54:1b:18:e8:ff:78: 1f:90:5e:8b:a1:e8:57:08:71:63:45:0f:48:b9:79:b5:54:d9: f8:00:16:95:d9:3d:84:fb:40:33:48:94:ce:49:ee:e0:89:f7: b4:6d:16:35:92:7e:a3:1a:09:2f:41:cf:e9:59:10:0d:7f:fc: eb:c8:b5:93:66:3f:2a:77:93:2b:87:7a:2d:96:da:3b:24:f5: b9:ac:5f:b9:89:15:12:2c:6c:ee:8a:5e:3a:b7:b2:88:d0:69: 35:18:05:76:fb:01:00:3b:43:e8:21:16:5e:f3:61:c6:f8:ac: 1f:f9:82:65:39:12:2b:67:b9:46:e3:ca:b9:ee:d5:fa:5b:4e: e9:cd:7c:87:04:59:4a:6f:bf:cc:79:51:3b:90:63:23:ce:39: 18:5b:57:22:31:af:12:db:0b:dc:2f:32:4c:a5:ab:4f:11:ae: 0d:4e:70:7c:89:c4:4c:05:fe:1c:ab:59:94:13:aa:a2:2a:b4: 35:ba:bc:47:74:57:e9:d6:71:cb:16:a3:8b:8d:35:9c:2e:fb: 7b:11:41:c6:2e:b9:07:2f:c7:6b:4c:7c:74:4e:94:4c:8c:e9: 07:5c:e0:d3 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITVOmmo51O8hvioda0g3LRLxsL4zANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzJkZjZmM2IzYTM0YjYzODZkMWEzMmQ4ZjRmYTMxNzhlZjMx ODg3ZDhiNDI4ZGZhYTQ3NjAeFw0yNTA5MTkwMDEwMzlaFw0yNTEwMjQyMzU5NTla MHoxSTBHBgNVBAUTQDk1YzVlY2Q5ZGNkOTI5N2Y5YTk2Njc1MmQwY2UwMmU2ZDE1 NGJhZmI5NjU5MWY5ZjJhYmVmNzAxZjMxMDFkYzYxLTArBgNVBAMTJDVmMjc2MDQ1 LTViOWYtNDVlZi05MjNkLWYzZmNlMjRhNjIyNTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAPYx5au6ftdU5LEBzuzhTDDOBIyLppUc8R5mwg6N4TzaL9k2 1rz58iE1/nxmPC4czyu00vG6WUDAQ7/HtXmPeJxXU7sKecLDyVOo40pKxfnSBsbG MhmfLlRI+UasqZlBrRXsYPHvQCxDospPVPbQnqSqEcSF08NOBfXkcONPich7A6Uz 8Oyo6ODYzAKwsUgFL5q5DSOF2lv10byV0orpjHdgY8kNQNoTtPPo4ser4RBDbUhx c3keDLnKvF7LuWmy2pEj2MBNhMNUSsjwfYprJD4VGNbxpeJek0AWCfBgI8xT/yzF 2TfpLogYt/qSRGn4fhlK8/JY09/k+nXZ5a2/B2kCAwEAAaOCArEwggKtMB0GA1Ud DgQWBBR9ABf8VplZy0ujP06/exFGqhQ3bjAfBgNVHSMEGDAWgBQlrdNCsB63pY6t GZAmiLVLP4H0uDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg1MWNlZjE3LTEz MmEtNDMzNy1iN2QxLWJmMTZhNTJmZmQwMy9kZjZmM2IzYTM0YjYzODZkMWEzMmQ4 ZjRmYTMxNzhlZjMxODg3ZDhiNDI4ZGZhYTQ3Ni5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9mNzAzNjk2ZS1lNDdiLTRjMjAtYmQ5My02Zjgw OTA0ZTQyZDIvM2RlNGRiOTEtNzkyZi00YzkwLTg3NzMtNzk4MDQzODY3NTcyLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMt NmY4MDkwNGU0MmQyL3RqaHRHakxZOVBveGVPOHhpSDJMUW8zNnBIWS5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAQ+eFDANBgkqhkiG9w0BAQsFAAOCAQEAk60fjowItfqxIzo+LQMySBO9Kqqy LbxQM8zSMt12VBsY6P94H5Bei6HoVwhxY0UPSLl5tVTZ+AAWldk9hPtAM0iUzknu 4In3tG0WNZJ+oxoJL0HP6VkQDX/868i1k2Y/KneTK4d6LZbaOyT1uaxfuYkVEixs 7opeOreyiNBpNRgFdvsBADtD6CEWXvNhxvisH/mCZTkSK2e5RuPKue7V+ltO6c18 hwRZSm+/zHlRO5BjI845GFtXIjGvEtsL3C8yTKWrTxGuDU5wfInETAX+HKtZlBOq oiq0Nbq8R3RX6dZxyxaji401nC77exFBxi65By/Ha0x8dE6UTIzpB1zg0w== -----END CERTIFICATE-----Generated at Fri Sep 19 03:17:47 2025 by rpki-client