$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/acfbdd06-bf86-414c-8630-66acc908ec95.roa File: acfbdd06-bf86-414c-8630-66acc908ec95.roa (raw, json) Hash identifier: or+LryXGZTboCCt9+ByCflxKdPvkgEWPQN0MVuIlPh8= Subject key identifier: 92:D3:C6:26:19:49:CC:A6:EB:83:DC:26:46:6B:07:15:03:E3:32:26 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 59B1B4A0127FD2ADA7317F192BE84EAD34005EFB Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/acfbdd06-bf86-414c-8630-66acc908ec95.roa Signing time: Thu 18 Sep 2025 23:57:54 +0000 ROA not before: Thu 18 Sep 2025 23:57:54 +0000 ROA not after: Thu 23 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.158.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:b1:b4:a0:12:7f:d2:ad:a7:31:7f:19:2b:e8:4e:ad:34:00:5e:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 18 23:57:54 2025 GMT Not After : Oct 23 23:59:59 2025 GMT Subject: serialNumber=5da0c15f6e0be48bcfc37953d4593ceb3edee582001e8fc24ba4755be8d93908, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:04:f9:84:5a:d3:03:81:af:7e:93:b3:f5:50: 12:86:fe:78:aa:ae:10:41:6b:86:a6:48:1e:01:2e: 56:1a:b2:b5:99:3d:c3:fd:36:e7:9c:92:d3:b4:15: 1e:a8:d1:34:f0:cb:c3:a3:59:10:de:f7:4c:d4:24: e9:64:33:a3:98:09:60:9c:e9:e6:dd:f3:04:0e:68: eb:32:82:59:63:30:e2:7d:3f:be:5b:3d:f4:9c:15: 09:3b:ed:9c:8e:53:ce:91:e4:95:e7:9f:31:6d:d2: ab:79:d3:e5:7c:f6:07:92:15:e2:ef:b2:f9:79:f3: 65:80:82:16:d3:7f:69:ae:d7:85:4d:10:cb:13:97: df:3a:dc:46:d1:81:7f:94:ae:07:07:20:fc:b0:33: ce:04:72:ff:9a:f2:0d:60:53:4e:c6:b1:ab:0f:1b: ee:01:74:9b:1e:35:5b:eb:cc:f3:4b:50:c7:2d:df: 8b:51:c6:56:d8:4a:69:ab:cd:ab:3e:5d:35:da:9f: 25:b8:ff:19:de:01:29:36:0b:9b:60:8b:ff:3e:56: 5c:3b:2a:09:55:46:25:7f:a0:75:cf:84:5d:40:6a: 0b:66:25:b7:f8:a5:bc:63:9e:65:52:66:a6:8b:d4: fb:82:08:17:c4:84:57:a2:e5:53:ea:94:b2:33:b8: 3f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:D3:C6:26:19:49:CC:A6:EB:83:DC:26:46:6B:07:15:03:E3:32:26 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/acfbdd06-bf86-414c-8630-66acc908ec95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.158.232.0/24 Signature Algorithm: sha256WithRSAEncryption 30:9c:ef:53:6c:a2:77:2b:39:eb:69:b6:39:fb:3a:b7:89:4a: 7b:ac:2a:13:da:04:f7:23:c9:bf:13:44:1d:ed:91:36:c7:f6: ad:bc:15:b3:e3:07:11:f3:c9:69:0a:c7:4c:5b:86:48:66:f0: 4c:c4:34:8a:b8:ec:34:ad:b7:cf:f5:a1:81:b0:d7:61:64:3a: 07:a5:37:e9:12:a7:02:57:c5:98:60:2e:4b:56:bb:b1:48:90: 4e:a8:86:af:00:d2:0f:8a:5c:46:48:06:f6:99:46:29:79:82: 1b:ea:7a:fc:ef:a7:a1:06:8e:f4:7d:df:01:13:b0:d2:55:5d: bf:76:41:be:a7:bd:a8:e3:27:da:7a:8b:06:0b:d3:f7:88:78: 3f:d3:57:52:06:f9:16:29:26:17:c3:e2:3c:2c:be:fa:c6:e0: f5:f4:58:70:94:b4:4d:25:7d:b6:ca:c3:21:a7:36:91:77:0c: 2b:28:0d:09:10:16:1c:10:3c:49:ab:69:ba:ba:6c:d1:8d:dc: ce:64:52:20:8e:94:24:b5:54:0e:57:35:72:be:fb:f8:7a:00: 13:64:ec:ae:be:ab:d2:db:3e:aa:c6:97:53:94:c6:84:86:40: ab:5d:64:e3:8e:a8:aa:21:ac:52:ab:fd:24:45:a8:5c:68:09: 5b:58:5e:03 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWbG0oBJ/0q2nMX8ZK+hOrTQAXvswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTE4MjM1NzU0WhcNMjUxMDIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZGEwYzE1ZjZlMGJlNDhiY2ZjMzc5NTNkNDU5M2NlYjNl ZGVlNTgyMDAxZThmYzI0YmE0NzU1YmU4ZDkzOTA4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4BPmEWtMDga9+k7P1UBKG/niqrhBBa4amSB4BLlYasrWZ PcP9NuecktO0FR6o0TTwy8OjWRDe90zUJOlkM6OYCWCc6ebd8wQOaOsyglljMOJ9 P75bPfScFQk77ZyOU86R5JXnnzFt0qt50+V89geSFeLvsvl582WAghbTf2mu14VN EMsTl9863EbRgX+UrgcHIPywM84Ecv+a8g1gU07GsasPG+4BdJseNVvrzPNLUMct 34tRxlbYSmmrzas+XTXanyW4/xneASk2C5tgi/8+Vlw7KglVRiV/oHXPhF1Aagtm Jbf4pbxjnmVSZqaL1PuCCBfEhFei5VPqlLIzuD8XAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUktPGJhlJzKbrg9wmRmsHFQPjMiYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2FjZmJkZDA2LWJmODYtNDE0Yy04NjMwLTY2YWNjOTA4ZWM5NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAPnugwDQYJKoZIhvcNAQELBQADggEBADCc71NsoncrOetptjn7OreJSnus KhPaBPcjyb8TRB3tkTbH9q28FbPjBxHzyWkKx0xbhkhm8EzENIq47DStt8/1oYGw 12FkOgelN+kSpwJXxZhgLktWu7FIkE6ohq8A0g+KXEZIBvaZRil5ghvqevzvp6EG jvR93wETsNJVXb92Qb6nvajjJ9p6iwYL0/eIeD/TV1IG+RYpJhfD4jwsvvrG4PX0 WHCUtE0lfbbKwyGnNpF3DCsoDQkQFhwQPEmrabq6bNGN3M5kUiCOlCS1VA5XNXK+ +/h6ABNk7K6+q9LbPqrGl1OUxoSGQKtdZOOOqKohrFKr/SRFqFxoCVtYXgM= -----END CERTIFICATE-----Generated at Fri Sep 19 11:14:09 2025 by rpki-client