$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d9158f73-a635-47d0-8b21-2736156c1449.roa File: d9158f73-a635-47d0-8b21-2736156c1449.roa (raw, json) Hash identifier: vzS9iGpFizc7nprsFyEKgmHljq0fWD8J1dtZxmAnL6Q= Subject key identifier: 1F:01:34:62:85:FE:9F:10:7B:0C:93:92:35:91:04:D8:13:D9:C1:FC Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 61A971C753791C255C3EE665DCBA67E5765FF4AA Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d9158f73-a635-47d0-8b21-2736156c1449.roa Signing time: Fri 19 Sep 2025 00:08:49 +0000 ROA not before: Fri 19 Sep 2025 00:08:49 +0000 ROA not after: Fri 24 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.158.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:a9:71:c7:53:79:1c:25:5c:3e:e6:65:dc:ba:67:e5:76:5f:f4:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 19 00:08:49 2025 GMT Not After : Oct 24 23:59:59 2025 GMT Subject: serialNumber=faab78e36ccfed1835e106dac39a74e194cf479eddeee837a6b4ea6e61711200, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:68:71:2a:d0:36:67:f0:1f:b2:46:c1:7b:4a: cf:60:58:45:38:a0:74:d6:d0:bf:49:6a:d7:9d:74: 6f:a3:5c:ab:52:b7:2c:12:92:18:a1:72:60:fd:7b: 8d:81:8b:28:ac:aa:a9:18:de:ac:1b:3e:83:94:25: 98:61:c4:2d:00:b1:9d:18:56:95:9d:6c:44:d0:df: 1e:44:86:bd:89:36:c8:4b:36:7c:ae:56:2b:d8:eb: ea:2e:1b:ff:57:0d:21:bb:48:6e:7b:2c:3b:65:23: 86:8e:d2:b3:3c:61:7e:ad:7a:ca:a2:ca:f0:02:12: 56:8e:65:4f:18:fa:c1:97:f2:62:ce:71:5b:9a:b4: eb:59:81:73:0d:a3:cf:bc:1f:c1:5d:e4:a5:0e:60: bc:44:78:be:11:e3:b7:14:fd:b0:33:fb:e9:f2:f4: 5e:e2:31:96:9d:8a:28:86:de:31:e7:e0:bc:c2:2f: 76:a7:7f:9f:e9:cb:7f:57:34:dc:a3:91:78:9f:e1: cb:7e:fd:b0:2e:8e:03:bb:fb:7d:0d:d4:e1:c1:a3: 09:22:5d:c4:71:bf:ae:ce:c0:f3:2e:10:3f:cf:e6: 7f:b9:26:d6:eb:4e:a7:dd:f9:35:d1:92:94:81:02: 90:e0:90:10:01:86:38:b7:ac:62:89:c3:af:42:27: b9:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:01:34:62:85:FE:9F:10:7B:0C:93:92:35:91:04:D8:13:D9:C1:FC X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d9158f73-a635-47d0-8b21-2736156c1449.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.158.55.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:d8:82:7b:2c:2b:f5:c4:71:f8:4d:07:b3:29:51:61:1b:6f: 77:11:af:74:41:fc:7f:18:7c:0a:85:a1:17:b5:f7:b0:58:cf: 8b:a5:3d:89:9a:5f:9d:20:91:8e:08:b3:b9:0c:53:a1:10:98: 2f:2b:7a:45:d9:3e:8e:73:a1:72:45:90:e5:5c:67:51:84:6b: 69:57:72:f8:e6:05:f2:36:de:d6:57:54:32:6f:dd:95:05:16: e3:60:fe:d5:d0:6d:23:74:a6:e4:9d:1b:eb:64:19:a7:c4:e5: 05:7d:6e:40:73:cd:cf:19:62:90:e4:3b:2b:ee:ac:6c:09:aa: 7d:19:8f:64:1c:71:f4:ba:eb:1f:d0:0f:16:d0:f7:30:a4:8a: 2b:1f:c4:39:cd:6c:fe:6b:ed:4e:76:6e:3a:35:d6:ab:b8:60: f6:a4:e0:9f:3e:a5:42:07:8c:bf:cd:24:67:85:ba:01:e4:bc: 69:36:48:19:5d:92:93:99:e0:8a:de:5f:20:90:05:c4:e8:31: bd:4e:db:26:2b:89:b4:5c:f8:4d:59:ca:74:14:95:c9:12:37: c0:ee:1b:cb:e4:23:6d:50:d5:42:10:17:3c:3b:9d:53:2c:d7: 0e:21:34:f0:bc:48:64:dd:94:24:86:4a:96:83:e4:56:ee:81: 04:49:e4:5b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYalxx1N5HCVcPuZl3Lpn5XZf9KowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTE5MDAwODQ5WhcNMjUxMDI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BmYWFiNzhlMzZjY2ZlZDE4MzVlMTA2ZGFjMzlhNzRlMTk0 Y2Y0NzllZGRlZWU4MzdhNmI0ZWE2ZTYxNzExMjAwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCWaHEq0DZn8B+yRsF7Ss9gWEU4oHTW0L9JateddG+jXKtS tywSkhihcmD9e42BiyisqqkY3qwbPoOUJZhhxC0AsZ0YVpWdbETQ3x5Ehr2JNshL NnyuVivY6+ouG/9XDSG7SG57LDtlI4aO0rM8YX6tesqiyvACElaOZU8Y+sGX8mLO cVuatOtZgXMNo8+8H8Fd5KUOYLxEeL4R47cU/bAz++ny9F7iMZadiiiG3jHn4LzC L3anf5/py39XNNyjkXif4ct+/bAujgO7+30N1OHBowkiXcRxv67OwPMuED/P5n+5 JtbrTqfd+TXRkpSBApDgkBABhji3rGKJw69CJ7lLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUHwE0YoX+nxB7DJOSNZEE2BPZwfwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Q5MTU4ZjczLWE2MzUtNDdkMC04YjIxLTI3MzYxNTZjMTQ0OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAPnjcwDQYJKoZIhvcNAQELBQADggEBAIvYgnssK/XEcfhNB7MpUWEbb3cR r3RB/H8YfAqFoRe197BYz4ulPYmaX50gkY4Is7kMU6EQmC8rekXZPo5zoXJFkOVc Z1GEa2lXcvjmBfI23tZXVDJv3ZUFFuNg/tXQbSN0puSdG+tkGafE5QV9bkBzzc8Z YpDkOyvurGwJqn0Zj2QccfS66x/QDxbQ9zCkiisfxDnNbP5r7U52bjo11qu4YPak 4J8+pUIHjL/NJGeFugHkvGk2SBldkpOZ4IreXyCQBcToMb1O2yYribRc+E1ZynQU lckSN8DuG8vkI21Q1UIQFzw7nVMs1w4hNPC8SGTdlCSGSpaD5FbugQRJ5Fs= -----END CERTIFICATE-----Generated at Fri Sep 19 06:06:36 2025 by rpki-client