$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/87791a0d-361b-410a-ab0f-24418447d72a.roa File: 87791a0d-361b-410a-ab0f-24418447d72a.roa (raw, json) Hash identifier: EUmJm419PaVxD1zEnzY6Qn+KmOTt53ZMi8CJjASZRB8= Subject key identifier: 76:05:CB:7E:D2:28:62:8D:21:D5:63:57:B7:8B:0F:18:50:30:E4:19 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 356087AB52ECD4E15FBE77C812B995567CFA758E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/87791a0d-361b-410a-ab0f-24418447d72a.roa Signing time: Thu 18 Sep 2025 23:54:05 +0000 ROA not before: Thu 18 Sep 2025 23:54:05 +0000 ROA not after: Thu 23 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.158.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:60:87:ab:52:ec:d4:e1:5f:be:77:c8:12:b9:95:56:7c:fa:75:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 18 23:54:05 2025 GMT Not After : Oct 23 23:59:59 2025 GMT Subject: serialNumber=c18968e8798bb60f0dbe8313207f4a722cf32a39f6a70289be54108b51e4725c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:10:c7:18:2a:db:4d:bf:51:b6:55:69:9c:19: 67:11:ee:51:11:5f:70:36:63:de:2e:b6:fd:e6:bd: 50:95:45:73:60:8b:c5:18:9d:23:50:14:b0:2a:7b: c1:6b:d5:0c:78:3e:8c:c9:8b:96:61:1f:b0:f4:ca: fc:f7:aa:23:9b:80:30:5e:e1:93:68:97:26:e9:1e: 6c:44:1e:54:05:c0:8b:4c:13:d5:7a:28:63:6f:02: db:ef:43:71:22:53:36:aa:3c:06:9a:53:c6:9c:7a: c7:1c:cd:d7:09:f9:38:af:df:b0:ff:89:09:1c:04: ef:d6:e4:e0:cb:c5:2a:a7:e3:f9:d3:7f:4a:a9:19: a6:93:41:87:b1:30:36:30:8f:23:9c:92:a2:ac:08: 66:7b:cb:38:58:38:d6:74:c8:1a:31:3b:30:6a:26: 20:0c:a8:33:7f:e7:6c:4f:32:15:e8:72:e8:5d:4b: 41:0f:02:a3:0d:b0:38:df:c9:6a:14:e6:6f:55:15: 24:b3:bf:58:f4:4f:7f:f5:22:a4:d5:d7:0a:d3:f9: 43:ad:81:ab:b0:66:8b:8e:ae:19:eb:c7:03:82:1e: cc:cb:ac:84:9e:23:3c:36:c8:f1:36:73:97:44:9a: 15:9f:fb:05:d2:0a:50:ec:57:73:49:dc:9d:7d:e2: e2:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:05:CB:7E:D2:28:62:8D:21:D5:63:57:B7:8B:0F:18:50:30:E4:19 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/87791a0d-361b-410a-ab0f-24418447d72a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.158.141.0/24 Signature Algorithm: sha256WithRSAEncryption 77:cf:e2:47:1b:06:3d:71:6c:22:64:24:4f:97:e8:50:b1:ea: 59:54:8d:f4:05:86:8e:b8:48:99:b1:39:b3:ed:b4:3f:85:64: 36:a8:44:cb:16:f7:8f:c8:15:91:d3:d5:59:69:be:db:7f:62: 05:07:b5:10:d7:45:f2:ef:21:23:a3:37:3e:35:76:b3:c8:d0: 9c:87:37:c5:d7:4a:a2:82:f8:bc:00:7c:7b:92:1d:50:19:1e: 3d:b0:03:0d:d5:f4:d5:ba:97:b0:dc:5b:fc:f2:ee:11:bd:75: 77:d6:07:2a:54:6c:46:71:44:dd:e5:d9:ff:8b:30:17:25:cb: 55:e0:34:e7:c2:b4:10:2f:56:8b:d5:28:cf:42:36:b3:5f:8e: 93:8f:60:e7:ac:64:70:b3:de:7e:43:e9:b6:e0:c1:cb:be:d9: 11:cd:1a:c1:6b:39:b5:4b:43:72:21:b7:0f:3a:2c:f8:54:1f: dd:dc:7a:5f:12:ae:f8:c2:82:00:70:d0:88:ef:8b:0d:9a:0f: 14:9b:82:f2:21:69:0f:4f:10:7f:03:68:72:af:d9:4e:d3:dc: 36:3e:1b:29:94:ed:20:b4:b3:cd:8e:1d:e8:b9:9d:94:ac:3d: 83:88:a0:41:cc:b2:ca:9b:ee:92:34:33:ef:4e:1a:9d:ea:03: 76:c4:83:8a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNWCHq1Ls1OFfvnfIErmVVnz6dY4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTE4MjM1NDA1WhcNMjUxMDIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BjMTg5NjhlODc5OGJiNjBmMGRiZTgzMTMyMDdmNGE3MjJj ZjMyYTM5ZjZhNzAyODliZTU0MTA4YjUxZTQ3MjVjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDMEMcYKttNv1G2VWmcGWcR7lERX3A2Y94utv3mvVCVRXNg i8UYnSNQFLAqe8Fr1Qx4PozJi5ZhH7D0yvz3qiObgDBe4ZNolybpHmxEHlQFwItM E9V6KGNvAtvvQ3EiUzaqPAaaU8acescczdcJ+Tiv37D/iQkcBO/W5ODLxSqn4/nT f0qpGaaTQYexMDYwjyOckqKsCGZ7yzhYONZ0yBoxOzBqJiAMqDN/52xPMhXocuhd S0EPAqMNsDjfyWoU5m9VFSSzv1j0T3/1IqTV1wrT+UOtgauwZouOrhnrxwOCHszL rISeIzw2yPE2c5dEmhWf+wXSClDsV3NJ3J194uLtAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUdgXLftIoYo0h1WNXt4sPGFAw5BkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg3NzkxYTBkLTM2MWItNDEwYS1hYjBmLTI0NDE4NDQ3ZDcyYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAPno0wDQYJKoZIhvcNAQELBQADggEBAHfP4kcbBj1xbCJkJE+X6FCx6llU jfQFho64SJmxObPttD+FZDaoRMsW94/IFZHT1Vlpvtt/YgUHtRDXRfLvISOjNz41 drPI0JyHN8XXSqKC+LwAfHuSHVAZHj2wAw3V9NW6l7DcW/zy7hG9dXfWBypUbEZx RN3l2f+LMBcly1XgNOfCtBAvVovVKM9CNrNfjpOPYOesZHCz3n5D6bbgwcu+2RHN GsFrObVLQ3Ihtw86LPhUH93cel8SrvjCggBw0Ijviw2aDxSbgvIhaQ9PEH8DaHKv 2U7T3DY+GymU7SC0s82OHei5nZSsPYOIoEHMssqb7pI0M+9OGp3qA3bEg4o= -----END CERTIFICATE-----Generated at Fri Sep 19 04:38:17 2025 by rpki-client