$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3da7e45d-166e-4c9c-ab80-0786ff77d12b.roa File: 3da7e45d-166e-4c9c-ab80-0786ff77d12b.roa (raw, json) Hash identifier: aii72dfpkUQe+o+ehptPbcTMJnxjMgO1Igl8fhZC/Ag= Subject key identifier: 65:C4:3E:45:77:F8:43:CD:9D:7F:AE:B6:A2:07:6E:44:28:EC:21:C1 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 23FF51D702E2279435F4B582470B04A8B17CC561 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3da7e45d-166e-4c9c-ab80-0786ff77d12b.roa Signing time: Fri 07 Nov 2025 01:20:54 +0000 ROA not before: Fri 07 Nov 2025 01:20:54 +0000 ROA not after: Fri 12 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.158.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:ff:51:d7:02:e2:27:94:35:f4:b5:82:47:0b:04:a8:b1:7c:c5:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Nov 7 01:20:54 2025 GMT Not After : Dec 12 23:59:59 2025 GMT Subject: serialNumber=2abd5fec208fca24c227bc97f3a26fbca13710e7323e45155844193d77a35b53, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:74:96:ae:dd:23:c3:d9:09:20:f2:25:f1:f4: 59:b8:fb:c8:95:02:2a:41:a2:11:3c:b6:44:9f:60: d6:7e:e2:e7:2d:fe:92:c6:8d:79:58:d5:a5:1a:f2: da:7c:cc:6f:dd:ae:7a:5f:95:09:34:2c:75:65:49: 8e:df:95:6b:07:a1:8e:94:8c:be:11:b1:04:9b:23: 6e:d6:d4:08:43:12:b9:96:bb:51:bf:17:b0:bc:90: 2d:8c:cc:04:d1:44:bb:06:ed:35:5e:8f:13:88:80: 61:97:c0:ee:61:44:9e:ed:9e:2d:ca:d2:29:eb:92: 0d:8f:14:0d:1f:c6:66:76:30:b2:06:fc:b5:14:72: 6f:c1:77:3b:7e:df:ba:17:6f:14:e3:7e:32:6c:57: 68:ac:cf:14:82:6a:87:88:46:df:d4:18:cc:e2:b0: 8d:6f:2d:61:d4:15:bd:dc:8e:36:0f:37:a6:89:60: 65:ce:a5:89:e8:b0:f0:33:47:69:94:12:0a:c3:85: bb:66:03:29:d6:fd:49:9c:b3:dc:c6:80:34:90:d3: b4:95:74:28:52:75:3b:1f:50:31:72:05:63:ab:33: 2c:95:15:16:a5:d7:e8:c3:5d:54:e3:35:e5:32:f6: d3:49:6d:fe:4a:7d:39:38:65:69:1c:e8:b2:7b:c4: 57:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:C4:3E:45:77:F8:43:CD:9D:7F:AE:B6:A2:07:6E:44:28:EC:21:C1 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3da7e45d-166e-4c9c-ab80-0786ff77d12b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.158.180.0/24 Signature Algorithm: sha256WithRSAEncryption 27:39:a6:5d:c7:06:81:b7:51:47:9d:eb:bb:a2:d5:93:64:55: 00:b0:81:75:5f:c2:db:bf:a0:57:ae:4e:4e:94:1a:ba:23:bc: 6e:2b:59:40:1d:c8:f8:cb:a6:ae:2c:ea:ae:5d:c7:99:05:1c: c5:b1:63:e8:11:96:a3:45:74:e3:b3:f2:3c:b8:a0:86:19:c5: 68:4d:16:4b:0e:fb:4e:72:5c:ef:05:ab:d8:2c:75:17:d8:58: c2:20:4c:04:c5:1b:8b:f1:f1:39:00:2b:92:b2:c7:1b:09:dd: d6:15:57:7f:41:a4:63:9e:37:db:3b:2a:b1:d4:d2:6f:65:30: df:ec:11:42:50:db:77:df:a3:30:05:b8:87:a4:4b:6d:8e:0b: 6a:d6:44:ed:77:64:40:a1:21:ab:8e:ad:a0:7a:30:27:a2:ea: 6d:a4:34:be:3c:cd:96:f2:ae:4a:90:92:0d:84:58:d1:41:57: 56:2f:57:5a:b0:09:e2:6a:a7:e4:cf:62:5f:1a:7f:fa:be:08: a0:72:70:d0:d3:4a:6a:49:bf:55:c5:d6:62:c5:17:67:8c:fc: 8a:9d:ed:1c:1f:bc:1f:24:3a:1c:fa:27:6b:dc:ab:b9:e4:4e: 3a:59:9a:6d:0d:7e:4b:05:40:21:15:a7:b1:85:19:c4:a8:03: 43:72:cc:04 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUI/9R1wLiJ5Q19LWCRwsEqLF8xWEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMTA3MDEyMDU0WhcNMjUxMjEyMjM1OTU5 WjB6MUkwRwYDVQQFE0AyYWJkNWZlYzIwOGZjYTI0YzIyN2JjOTdmM2EyNmZiY2Ex MzcxMGU3MzIzZTQ1MTU1ODQ0MTkzZDc3YTM1YjUzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDVdJau3SPD2Qkg8iXx9Fm4+8iVAipBohE8tkSfYNZ+4uct /pLGjXlY1aUa8tp8zG/drnpflQk0LHVlSY7flWsHoY6UjL4RsQSbI27W1AhDErmW u1G/F7C8kC2MzATRRLsG7TVejxOIgGGXwO5hRJ7tni3K0inrkg2PFA0fxmZ2MLIG /LUUcm/Bdzt+37oXbxTjfjJsV2iszxSCaoeIRt/UGMzisI1vLWHUFb3cjjYPN6aJ YGXOpYnosPAzR2mUEgrDhbtmAynW/Umcs9zGgDSQ07SVdChSdTsfUDFyBWOrMyyV FRal1+jDXVTjNeUy9tNJbf5KfTk4ZWkc6LJ7xFcNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZcQ+RXf4Q82df662ogduRCjsIcEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzNkYTdlNDVkLTE2NmUtNGM5Yy1hYjgwLTA3ODZmZjc3ZDEyYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAPnrQwDQYJKoZIhvcNAQELBQADggEBACc5pl3HBoG3UUed67ui1ZNkVQCw gXVfwtu/oFeuTk6UGrojvG4rWUAdyPjLpq4s6q5dx5kFHMWxY+gRlqNFdOOz8jy4 oIYZxWhNFksO+05yXO8Fq9gsdRfYWMIgTATFG4vx8TkAK5KyxxsJ3dYVV39BpGOe N9s7KrHU0m9lMN/sEUJQ23ffozAFuIekS22OC2rWRO13ZEChIauOraB6MCei6m2k NL48zZbyrkqQkg2EWNFBV1YvV1qwCeJqp+TPYl8af/q+CKBycNDTSmpJv1XF1mLF F2eM/Iqd7RwfvB8kOhz6J2vcq7nkTjpZmm0NfksFQCEVp7GFGcSoA0NyzAQ= -----END CERTIFICATE-----Generated at Fri Nov 7 20:24:34 2025 by rpki-client