$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aea97087-014b-4770-9e94-3c0bc6783a1a.roa File: aea97087-014b-4770-9e94-3c0bc6783a1a.roa (raw, json) Hash identifier: zDEN4kGnt+DJU/rkoi0PUfYuMCiZc7DMpAZNELMTyjM= Subject key identifier: 3F:50:C5:C8:F1:E5:E3:AB:DC:7E:E7:E0:6C:01:C7:AC:13:E6:52:FD Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 159B48426FC6B883C19CB314776598B9FC2FE386 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aea97087-014b-4770-9e94-3c0bc6783a1a.roa Signing time: Fri 19 Sep 2025 00:12:51 +0000 ROA not before: Fri 19 Sep 2025 00:12:51 +0000 ROA not after: Fri 24 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.158.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:9b:48:42:6f:c6:b8:83:c1:9c:b3:14:77:65:98:b9:fc:2f:e3:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 19 00:12:51 2025 GMT Not After : Oct 24 23:59:59 2025 GMT Subject: serialNumber=971f176dff32d52e3af7756ae4eca24f54de8d25d59fa090de33bf76388187c8, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c5:4c:f4:eb:aa:81:3a:6b:58:df:d6:b7:c9: a7:95:87:60:73:72:92:d0:9c:60:09:e1:5c:f0:f9: e4:b3:6b:a6:60:a1:32:a0:41:74:55:bf:93:02:06: 62:62:e1:ec:d9:47:41:b6:fb:53:b3:9b:3d:10:b1: a1:63:85:9f:8a:88:2c:3b:04:37:b7:47:ca:62:77: 82:3b:0d:ee:d4:57:cc:f4:b5:e9:7a:a0:15:50:98: 6f:6e:59:50:d3:7a:0d:9e:d0:4b:77:1b:17:23:4a: e8:d3:e4:4f:b5:3b:6b:6f:4b:e2:0e:19:84:6c:a7: 48:13:bf:74:d1:31:ed:a3:37:c2:cb:bc:e3:1f:4c: ae:af:35:1f:09:3d:2b:25:6e:e8:e0:e1:69:43:a6: 06:b8:58:aa:40:0c:42:ea:00:8d:e9:db:64:cf:68: 27:8b:0e:cf:56:93:22:a0:fe:46:27:f9:2c:9b:8e: ae:29:c7:94:6f:b6:34:f2:68:0e:91:d7:8f:b9:db: 28:e9:0d:84:23:df:f1:4f:8b:42:24:d9:11:b3:cd: 3d:a0:53:d5:6c:80:76:93:3b:8f:23:79:89:ba:07: e8:23:97:87:cc:f3:92:c4:1e:3b:ad:9e:81:16:a5: 15:a9:d6:a0:f5:53:bb:f7:0a:3b:0a:f8:18:36:ea: c1:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:50:C5:C8:F1:E5:E3:AB:DC:7E:E7:E0:6C:01:C7:AC:13:E6:52:FD X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aea97087-014b-4770-9e94-3c0bc6783a1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.158.32.0/20 Signature Algorithm: sha256WithRSAEncryption 60:4e:f4:6a:35:71:82:f4:4e:a8:c1:bc:31:95:36:a4:18:e1: 89:c1:ac:0b:c5:79:3c:94:3f:5f:14:1e:52:23:b8:6b:f1:cd: ca:1e:e8:ce:bc:64:f6:a6:c5:72:7f:96:01:2b:1c:ac:96:8f: de:a9:0c:7e:78:09:38:27:ea:cf:1b:36:2c:a0:11:d8:a5:70: a8:99:96:75:76:32:bf:1b:2a:76:9b:cc:76:3e:04:5f:c9:2f: f5:1a:ea:d9:b8:46:a3:20:fb:d0:82:50:6c:ae:7f:90:47:e7: bf:de:c3:38:51:16:03:ea:27:91:92:7c:71:9b:5e:3d:3e:d6: 3e:68:75:f2:04:3d:98:85:a1:23:a0:19:3e:e9:2c:13:9a:ce: 54:37:ae:13:14:7e:3c:29:40:4f:03:10:8c:b0:26:88:6d:cc: 9d:c2:a4:00:e8:5c:6e:76:6e:cb:b5:8a:a7:79:85:06:52:d2: 93:de:bc:24:f4:17:8e:89:b9:2a:c5:26:0b:a2:31:8b:11:f6: 2c:3f:19:05:7d:91:00:d2:98:54:5e:2c:0e:da:80:c0:0f:2f: 09:fc:38:44:ed:a5:0b:5f:a0:80:47:98:2f:4a:1f:d5:67:ff: c0:f5:1d:13:a8:f8:ba:6e:77:cc:5e:bf:d2:21:7f:d3:e1:c0: 13:82:85:c5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFZtIQm/GuIPBnLMUd2WYufwv44YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTE5MDAxMjUxWhcNMjUxMDI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A5NzFmMTc2ZGZmMzJkNTJlM2FmNzc1NmFlNGVjYTI0ZjU0 ZGU4ZDI1ZDU5ZmEwOTBkZTMzYmY3NjM4ODE4N2M4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZxUz066qBOmtY39a3yaeVh2BzcpLQnGAJ4Vzw+eSza6Zg oTKgQXRVv5MCBmJi4ezZR0G2+1Ozmz0QsaFjhZ+KiCw7BDe3R8pid4I7De7UV8z0 tel6oBVQmG9uWVDTeg2e0Et3GxcjSujT5E+1O2tvS+IOGYRsp0gTv3TRMe2jN8LL vOMfTK6vNR8JPSslbujg4WlDpga4WKpADELqAI3p22TPaCeLDs9WkyKg/kYn+Syb jq4px5RvtjTyaA6R14+52yjpDYQj3/FPi0Ik2RGzzT2gU9VsgHaTO48jeYm6B+gj l4fM85LEHjutnoEWpRWp1qD1U7v3CjsK+Bg26sEbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUP1DFyPHl46vcfufgbAHHrBPmUv0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2FlYTk3MDg3LTAxNGItNDc3MC05ZTk0LTNjMGJjNjc4M2ExYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQPniAwDQYJKoZIhvcNAQELBQADggEBAGBO9Go1cYL0TqjBvDGVNqQY4YnB rAvFeTyUP18UHlIjuGvxzcoe6M68ZPamxXJ/lgErHKyWj96pDH54CTgn6s8bNiyg EdilcKiZlnV2Mr8bKnabzHY+BF/JL/Ua6tm4RqMg+9CCUGyuf5BH57/ewzhRFgPq J5GSfHGbXj0+1j5odfIEPZiFoSOgGT7pLBOazlQ3rhMUfjwpQE8DEIywJohtzJ3C pADoXG52bsu1iqd5hQZS0pPevCT0F46JuSrFJguiMYsR9iw/GQV9kQDSmFReLA7a gMAPLwn8OETtpQtfoIBHmC9KH9Vn/8D1HROo+Lpud8xev9Ihf9PhwBOChcU= -----END CERTIFICATE-----Generated at Fri Sep 19 04:37:43 2025 by rpki-client