$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4d23ef8b-18bf-4746-b9a4-fd8b54e61e8c.roa File: 4d23ef8b-18bf-4746-b9a4-fd8b54e61e8c.roa (raw, json) Hash identifier: CoJY/cNFyhmbJ2q9ZpRKERn+fSP0y74delqGT8a6Yvo= Subject key identifier: 33:68:7B:32:F1:FE:56:4E:FF:0D:29:75:69:F2:E9:59:B2:C6:70:FF Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4DB159189D7B311DCD64DB164B1AB3FE475F3641 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4d23ef8b-18bf-4746-b9a4-fd8b54e61e8c.roa Signing time: Fri 07 Nov 2025 01:41:32 +0000 ROA not before: Fri 07 Nov 2025 01:41:32 +0000 ROA not after: Fri 12 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.158.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:b1:59:18:9d:7b:31:1d:cd:64:db:16:4b:1a:b3:fe:47:5f:36:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Nov 7 01:41:32 2025 GMT Not After : Dec 12 23:59:59 2025 GMT Subject: serialNumber=1f8829ff999bf65a123763a386d439f7309d9b07d27457ff36132a1bea642e28, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fc:af:b3:d9:56:e0:b8:5e:a6:0f:1c:42:39: d8:1d:1f:5b:8c:2a:46:d2:0d:46:bc:2e:44:0d:e8: 08:85:5e:e7:f4:4a:c3:df:8e:16:9f:48:b7:ad:ed: 40:7b:9c:41:e5:40:d9:9e:b4:de:f3:00:c1:2c:a9: dc:62:dc:54:e8:2d:71:63:62:f6:f9:d1:7e:d3:13: 57:24:8b:0a:05:40:b5:67:88:70:54:40:40:bb:51: 89:9a:29:81:9c:2c:ad:3d:9b:74:11:5b:b9:0f:9a: 1e:69:1b:5c:c9:ca:ae:cb:29:66:34:c1:f9:e7:54: e9:33:d1:44:89:13:b7:be:cf:a2:cf:91:a5:e5:55: 06:fd:cd:e7:d7:69:59:6a:83:9f:e9:56:3f:9c:80: 04:14:99:00:55:df:21:f6:87:65:80:e7:12:0d:30: 03:56:b2:67:9b:ef:2e:4d:11:b4:a2:07:f2:a1:ac: 20:2c:77:d3:52:4e:1c:bb:4c:5c:c1:6f:fe:ce:af: 42:5d:bb:fc:9b:db:2a:7a:bc:dc:7a:a7:37:9c:26: 05:d9:c6:66:91:ba:6c:26:d4:36:d4:84:d2:1c:bf: ab:66:93:e9:d0:49:74:d6:4f:79:7d:5c:18:f6:e0: b8:70:91:7a:70:19:8b:77:9a:c8:e9:19:7c:4c:7d: d8:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:68:7B:32:F1:FE:56:4E:FF:0D:29:75:69:F2:E9:59:B2:C6:70:FF X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4d23ef8b-18bf-4746-b9a4-fd8b54e61e8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.158.179.0/24 Signature Algorithm: sha256WithRSAEncryption 59:d9:bc:0d:60:b8:03:59:f0:8c:60:ee:c6:e1:bd:c7:bf:1d: 49:87:bf:e5:b7:98:84:e4:f7:3b:b4:81:03:bd:ef:a5:00:e4: 41:e6:da:0a:a4:44:d7:a5:2d:bb:b9:b0:35:9e:ba:35:7e:0c: 2c:64:33:c9:17:a4:42:16:4d:d6:73:26:4c:bc:c8:9f:79:ab: 9a:dd:c8:9f:7c:fa:83:51:0b:9d:e6:7d:d2:48:f6:cc:1f:a2: ee:a0:5c:94:75:6f:c9:18:9b:c1:60:b5:96:26:40:71:fb:d4: 27:68:51:3e:4c:11:a7:ff:48:bc:c2:90:b9:af:9f:3b:c7:87: bd:03:51:cc:d0:89:90:12:6e:6d:09:91:d3:50:dd:b1:d7:2d: 00:44:be:4b:96:e4:bd:47:69:9e:49:20:91:ac:86:cc:aa:25: 93:b1:2e:59:11:f5:c5:79:53:16:75:24:e1:fe:e0:c5:44:89: 80:bd:43:a1:c3:77:cb:ab:38:4a:25:a1:c6:71:6b:d6:5a:b8: af:c7:20:50:51:1d:36:5c:1d:00:4e:d4:4f:1d:6b:a3:7e:fb: 5b:c3:22:cd:c1:7a:f1:7a:c4:72:20:a4:58:6a:d8:17:44:cd: c8:d8:04:5d:26:8d:c9:5e:5b:57:6f:ee:05:0e:cb:df:21:68: 7b:b9:71:be -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTbFZGJ17MR3NZNsWSxqz/kdfNkEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMTA3MDE0MTMyWhcNMjUxMjEyMjM1OTU5 WjB6MUkwRwYDVQQFE0AxZjg4MjlmZjk5OWJmNjVhMTIzNzYzYTM4NmQ0MzlmNzMw OWQ5YjA3ZDI3NDU3ZmYzNjEzMmExYmVhNjQyZTI4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6/K+z2VbguF6mDxxCOdgdH1uMKkbSDUa8LkQN6AiFXuf0 SsPfjhafSLet7UB7nEHlQNmetN7zAMEsqdxi3FToLXFjYvb50X7TE1ckiwoFQLVn iHBUQEC7UYmaKYGcLK09m3QRW7kPmh5pG1zJyq7LKWY0wfnnVOkz0USJE7e+z6LP kaXlVQb9zefXaVlqg5/pVj+cgAQUmQBV3yH2h2WA5xINMANWsmeb7y5NEbSiB/Kh rCAsd9NSThy7TFzBb/7Or0Jdu/yb2yp6vNx6pzecJgXZxmaRumwm1DbUhNIcv6tm k+nQSXTWT3l9XBj24LhwkXpwGYt3msjpGXxMfdjPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUM2h7MvH+Vk7/DSl1afLpWbLGcP8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzRkMjNlZjhiLTE4YmYtNDc0Ni1iOWE0LWZkOGI1NGU2MWU4Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAPnrMwDQYJKoZIhvcNAQELBQADggEBAFnZvA1guANZ8Ixg7sbhvce/HUmH v+W3mITk9zu0gQO976UA5EHm2gqkRNelLbu5sDWeujV+DCxkM8kXpEIWTdZzJky8 yJ95q5rdyJ98+oNRC53mfdJI9swfou6gXJR1b8kYm8FgtZYmQHH71CdoUT5MEaf/ SLzCkLmvnzvHh70DUczQiZASbm0JkdNQ3bHXLQBEvkuW5L1HaZ5JIJGshsyqJZOx LlkR9cV5UxZ1JOH+4MVEiYC9Q6HDd8urOEolocZxa9ZauK/HIFBRHTZcHQBO1E8d a6N++1vDIs3BevF6xHIgpFhq2BdEzcjYBF0mjcleW1dv7gUOy98haHu5cb4= -----END CERTIFICATE-----Generated at Fri Nov 7 20:22:53 2025 by rpki-client