$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0fc3b0f8-111d-4728-9df8-c5317703d0f2.roa File: 0fc3b0f8-111d-4728-9df8-c5317703d0f2.roa (raw, json) Hash identifier: z9Iv36wqXhfmlhRZa6ordbt0wGjz6D3TAm2+EOYLzvs= Subject key identifier: DD:FC:E6:FA:AF:4F:AF:7A:D9:82:D5:E4:61:A5:80:92:54:72:97:9C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 655445F3C84347E7E00E1DE6CD1CF65A91A9B82E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0fc3b0f8-111d-4728-9df8-c5317703d0f2.roa Signing time: Fri 07 Nov 2025 00:10:46 +0000 ROA not before: Fri 07 Nov 2025 00:10:46 +0000 ROA not after: Fri 12 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.158.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:54:45:f3:c8:43:47:e7:e0:0e:1d:e6:cd:1c:f6:5a:91:a9:b8:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Nov 7 00:10:46 2025 GMT Not After : Dec 12 23:59:59 2025 GMT Subject: serialNumber=2263f7574d02565adc8fb3f62e64cda26e2119746f70299f743e3eb58d54b748, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b7:d0:71:78:00:47:84:e7:db:6b:b9:22:0c: 43:96:62:59:08:a2:5e:e0:41:e9:88:bc:b7:e5:67: f0:73:dc:34:cc:2c:ee:a4:f2:a7:8a:cd:e2:b7:e3: 91:a8:4c:70:2b:3c:59:5a:c7:f1:8e:af:88:b9:51: 0e:93:3a:bb:68:52:b4:28:35:12:4a:f5:ff:a3:43: a8:be:7b:6d:2d:2f:1a:85:4c:17:ba:4e:41:2c:2c: 65:48:12:ae:3c:f2:f5:8a:13:c4:56:9e:34:ca:90: ad:df:80:d0:44:06:d3:8c:cc:b5:36:fd:b3:24:49: 07:f5:38:d8:b5:5a:e3:d2:32:73:3f:b4:44:f4:0d: 59:1e:66:f6:fa:6e:cf:ed:69:5b:74:ed:19:60:28: 0e:6a:cc:fb:1d:7d:71:97:18:8b:65:ab:36:d6:c8: 4e:f5:72:a2:85:11:e8:60:78:95:0a:dc:3e:29:45: 57:42:15:37:bc:bf:6d:ec:90:5b:c7:e1:e1:19:d9: 96:fa:dd:fa:b2:4a:f5:b1:1d:e6:af:5d:70:54:81: f1:1c:b2:84:3a:6f:4b:ce:ab:47:46:80:c5:fa:95: b3:3b:57:70:83:5d:b6:82:32:36:7a:dd:e0:41:3f: d4:c4:83:92:b1:96:3f:7b:ab:fe:d0:56:f2:65:01: 74:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:FC:E6:FA:AF:4F:AF:7A:D9:82:D5:E4:61:A5:80:92:54:72:97:9C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0fc3b0f8-111d-4728-9df8-c5317703d0f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.158.142.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:43:e7:55:c5:cc:e8:5d:85:94:77:96:10:70:fe:71:21:3b: dd:e3:6b:7f:51:d4:eb:48:17:62:33:48:8f:b0:c6:58:10:9f: be:21:12:28:3e:ef:cf:3d:ad:43:6c:24:a6:1c:62:37:4f:7a: b5:e5:12:76:b0:59:a2:13:ae:e6:53:75:89:34:06:1d:71:3a: 05:f3:e4:ba:bd:4b:74:8c:88:6a:3b:93:31:de:e1:8d:ec:8a: 24:35:c7:b4:b4:54:15:35:b9:c7:60:68:d1:40:9d:46:7e:02: bf:67:8b:47:03:00:24:d8:f9:ff:71:11:53:03:75:c8:d4:7f: d8:d3:88:d7:8e:e9:41:e9:9b:3e:a7:7c:9d:01:f6:54:ab:d4: 0a:10:d6:05:15:fb:55:67:c3:ab:9f:fa:e6:ca:1a:97:33:96: 51:7d:37:ee:4e:e0:ee:62:fb:20:70:41:da:83:f7:bb:0a:3e: b9:9a:bf:fb:69:f9:d4:93:03:3f:69:a3:20:44:eb:9b:a6:b5: 01:97:be:1a:3e:c8:d3:7c:69:51:08:97:6a:5e:0a:a4:d6:08: 2d:4d:74:8d:c0:5a:d7:cd:ac:06:bc:ad:f3:f9:0b:cd:6f:88: 12:b1:8c:17:ff:69:f7:f9:4b:89:ac:d4:50:b8:79:1f:f4:e7: 34:0b:a3:f7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZVRF88hDR+fgDh3mzRz2WpGpuC4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMTA3MDAxMDQ2WhcNMjUxMjEyMjM1OTU5 WjB6MUkwRwYDVQQFE0AyMjYzZjc1NzRkMDI1NjVhZGM4ZmIzZjYyZTY0Y2RhMjZl MjExOTc0NmY3MDI5OWY3NDNlM2ViNThkNTRiNzQ4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCht9BxeABHhOfba7kiDEOWYlkIol7gQemIvLflZ/Bz3DTM LO6k8qeKzeK345GoTHArPFlax/GOr4i5UQ6TOrtoUrQoNRJK9f+jQ6i+e20tLxqF TBe6TkEsLGVIEq488vWKE8RWnjTKkK3fgNBEBtOMzLU2/bMkSQf1ONi1WuPSMnM/ tET0DVkeZvb6bs/taVt07RlgKA5qzPsdfXGXGItlqzbWyE71cqKFEehgeJUK3D4p RVdCFTe8v23skFvH4eEZ2Zb63fqySvWxHeavXXBUgfEcsoQ6b0vOq0dGgMX6lbM7 V3CDXbaCMjZ63eBBP9TEg5Kxlj97q/7QVvJlAXTHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU3fzm+q9Pr3rZgtXkYaWAklRyl5wwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzBmYzNiMGY4LTExMWQtNDcyOC05ZGY4LWM1MzE3NzAzZDBmMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAPno4wDQYJKoZIhvcNAQELBQADggEBAD5D51XFzOhdhZR3lhBw/nEhO93j a39R1OtIF2IzSI+wxlgQn74hEig+7889rUNsJKYcYjdPerXlEnawWaITruZTdYk0 Bh1xOgXz5Lq9S3SMiGo7kzHe4Y3siiQ1x7S0VBU1ucdgaNFAnUZ+Ar9ni0cDACTY +f9xEVMDdcjUf9jTiNeO6UHpmz6nfJ0B9lSr1AoQ1gUV+1Vnw6uf+ubKGpczllF9 N+5O4O5i+yBwQdqD97sKPrmav/tp+dSTAz9poyBE65umtQGXvho+yNN8aVEIl2pe CqTWCC1NdI3AWtfNrAa8rfP5C81viBKxjBf/aff5S4ms1FC4eR/05zQLo/c= -----END CERTIFICATE-----Generated at Fri Nov 7 20:21:03 2025 by rpki-client