$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cf16abd5-3460-48d6-ba82-f0d652b7b837.roa File: cf16abd5-3460-48d6-ba82-f0d652b7b837.roa (raw, json) Hash identifier: q1C6R3E3cOIVP2mZurb0TbKkRC2t1B+TCbGbTeWa91s= Subject key identifier: A7:84:CF:0B:D2:BB:8D:88:B0:4C:B0:B8:7D:CD:D9:D5:F6:10:96:C6 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 79B7B8FDD5A6D4ABC48F1DEB1A460E99A0D458ED Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cf16abd5-3460-48d6-ba82-f0d652b7b837.roa Signing time: Thu 18 Sep 2025 23:54:13 +0000 ROA not before: Thu 18 Sep 2025 23:54:13 +0000 ROA not after: Thu 23 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.158.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:b7:b8:fd:d5:a6:d4:ab:c4:8f:1d:eb:1a:46:0e:99:a0:d4:58:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 18 23:54:13 2025 GMT Not After : Oct 23 23:59:59 2025 GMT Subject: serialNumber=dacf8a8beb9381dbcc4f6625e1b2a5eb94585339292eba22e649c7fa5f6c90cf, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a1:e2:91:88:b5:99:df:69:c8:b2:4e:b9:06: af:82:12:6a:30:60:7f:af:62:7f:54:5b:2e:b9:b9: 20:ed:4d:9c:7d:62:09:a1:a7:49:48:30:cc:15:49: 56:d6:c4:ab:3f:40:84:9a:9a:73:a7:a3:a9:97:4f: 34:c1:a6:0a:57:a0:d5:72:90:96:b5:3c:87:fd:91: 40:3c:ed:e3:12:e9:f8:1c:0c:09:43:4e:3b:0d:da: 37:7b:5e:fa:6b:b4:04:67:44:64:36:d9:de:18:0c: b7:fc:c5:7a:31:a1:a8:f1:21:44:7d:2f:b1:82:83: ee:52:9d:62:48:9c:81:5a:c7:5b:b9:80:72:e7:ba: d7:09:8e:b6:04:75:be:25:12:62:30:0f:d3:4a:85: 67:b1:85:24:04:b1:5e:1c:fc:cc:f3:26:29:f7:54: d1:27:ba:cf:14:44:93:14:ad:6e:d7:86:b9:67:8c: 4c:a8:74:a7:cd:27:5b:13:5e:58:a9:f7:d5:c9:be: d8:fb:ab:ae:ac:1d:5b:27:15:8e:9a:11:d9:66:55: 33:37:c7:c2:bd:b0:d2:d7:38:d1:55:2e:c8:ac:a5: 77:0d:94:f7:a0:cc:3c:ff:dd:ae:f9:b1:fd:f6:86: 81:4c:cc:e7:7e:22:b8:33:1b:05:6b:87:fc:2b:a5: 98:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:84:CF:0B:D2:BB:8D:88:B0:4C:B0:B8:7D:CD:D9:D5:F6:10:96:C6 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cf16abd5-3460-48d6-ba82-f0d652b7b837.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.158.148.0/24 Signature Algorithm: sha256WithRSAEncryption b2:6b:14:25:5e:b3:59:dd:3e:61:ff:af:78:0f:8e:da:b0:02: ef:9f:40:c0:0e:89:c0:0a:be:1a:ff:a2:9a:a5:d0:c7:e8:ab: ed:06:60:02:92:f4:38:9d:06:a6:16:4e:58:49:9e:81:ac:af: 13:d5:ee:f5:0f:a2:d5:95:88:26:3e:58:b8:09:1c:a3:bd:dc: ca:f7:88:7f:e6:22:d2:4b:84:ff:59:b1:d2:a3:b2:1c:52:20: 1d:39:45:dc:17:1c:58:12:aa:2a:ae:f9:3a:6f:9e:dc:4d:3b: 11:3a:df:11:db:98:22:b7:db:1e:11:aa:d2:b7:b4:f1:4f:2b: 08:10:ef:eb:f7:ca:a7:18:c2:da:08:99:57:46:0c:c1:b6:e9: 03:5e:93:2c:48:7e:7a:80:2d:14:e8:50:8b:3a:02:80:cb:b5: ba:66:eb:3d:c4:39:62:1d:89:7d:ce:51:80:3b:f1:a4:f3:8c: ac:b6:f6:ec:55:0d:45:b0:46:dd:b6:fc:8b:86:3b:16:3b:31: 5c:bf:ff:f9:c5:4c:c6:5b:88:03:e7:24:d5:81:8f:60:45:ce: cf:1e:8b:82:53:60:54:6f:54:d6:d8:b7:4f:51:cb:dd:0a:d9: 1c:8b:e7:69:d2:59:07:18:07:ce:41:95:5b:ca:ad:27:7c:df: 64:9a:f5:49 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUebe4/dWm1KvEjx3rGkYOmaDUWO0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTE4MjM1NDEzWhcNMjUxMDIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BkYWNmOGE4YmViOTM4MWRiY2M0ZjY2MjVlMWIyYTVlYjk0 NTg1MzM5MjkyZWJhMjJlNjQ5YzdmYTVmNmM5MGNmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCnoeKRiLWZ32nIsk65Bq+CEmowYH+vYn9UWy65uSDtTZx9 Ygmhp0lIMMwVSVbWxKs/QISamnOno6mXTzTBpgpXoNVykJa1PIf9kUA87eMS6fgc DAlDTjsN2jd7XvprtARnRGQ22d4YDLf8xXoxoajxIUR9L7GCg+5SnWJInIFax1u5 gHLnutcJjrYEdb4lEmIwD9NKhWexhSQEsV4c/MzzJin3VNEnus8URJMUrW7Xhrln jEyodKfNJ1sTXlip99XJvtj7q66sHVsnFY6aEdlmVTM3x8K9sNLXONFVLsispXcN lPegzDz/3a75sf32hoFMzOd+IrgzGwVrh/wrpZjLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUp4TPC9K7jYiwTLC4fc3Z1fYQlsYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2NmMTZhYmQ1LTM0NjAtNDhkNi1iYTgyLWYwZDY1MmI3YjgzNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAPnpQwDQYJKoZIhvcNAQELBQADggEBALJrFCVes1ndPmH/r3gPjtqwAu+f QMAOicAKvhr/opql0Mfoq+0GYAKS9DidBqYWTlhJnoGsrxPV7vUPotWViCY+WLgJ HKO93Mr3iH/mItJLhP9ZsdKjshxSIB05RdwXHFgSqiqu+TpvntxNOxE63xHbmCK3 2x4RqtK3tPFPKwgQ7+v3yqcYwtoImVdGDMG26QNekyxIfnqALRToUIs6AoDLtbpm 6z3EOWIdiX3OUYA78aTzjKy29uxVDUWwRt22/IuGOxY7MVy///nFTMZbiAPnJNWB j2BFzs8ei4JTYFRvVNbYt09Ry90K2RyL52nSWQcYB85BlVvKrSd832Sa9Uk= -----END CERTIFICATE-----Generated at Fri Sep 19 09:37:29 2025 by rpki-client