$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/55f59f37-f955-4620-a99b-98777007a618.roa File: 55f59f37-f955-4620-a99b-98777007a618.roa (raw, json) Hash identifier: kHzPFdGY45um5CgOjkkRMetS6tLtIe9jRhTbfm2JP1w= Subject key identifier: 2E:9B:D1:03:B1:BB:91:EB:45:A1:BF:FD:31:AD:4F:70:E5:72:E6:D4 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: AC10EC6635DD136AD4544C59AF92C93044543B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/55f59f37-f955-4620-a99b-98777007a618.roa Signing time: Tue 14 Oct 2025 03:06:47 +0000 ROA not before: Tue 14 Oct 2025 03:06:47 +0000 ROA not after: Tue 18 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.158.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: ac:10:ec:66:35:dd:13:6a:d4:54:4c:59:af:92:c9:30:44:54:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 14 03:06:47 2025 GMT Not After : Nov 18 23:59:59 2025 GMT Subject: serialNumber=d965f783e4c56e0a54958464a93ae051e53ca709f0d6570d2c21388ef5f2a5cb, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:19:1d:0a:a1:79:18:6d:62:73:c0:84:fd:92: c7:71:d0:30:80:72:22:9f:4b:39:f0:ac:fa:8b:71: 87:94:0c:97:0d:a6:45:19:8a:d6:be:73:b7:58:8c: 2c:da:b6:79:4c:7a:8e:02:56:f3:6d:74:18:95:16: 14:00:4f:4e:d9:b8:18:be:6e:9e:91:96:1c:69:06: 57:4b:66:6f:ec:e0:76:26:1e:e9:b5:93:23:0d:ac: ab:1d:69:59:66:a3:6d:67:bb:41:e8:37:b5:9d:84: e7:69:c8:6a:e7:4c:a0:96:d7:67:27:21:b0:1f:32: 2e:4d:9d:c5:1a:44:21:44:29:70:f7:11:f8:3a:68: b3:d3:b8:3d:53:ff:56:f8:e0:c2:7d:cf:43:db:94: f5:c2:90:54:30:59:bd:2c:d1:d6:4b:bf:fa:b7:e5: e4:0d:11:e2:b5:ce:13:fd:0b:93:b6:cf:78:b7:0a: 7c:05:87:c7:16:6b:88:a6:3e:6b:51:1e:65:13:d5: 3a:6d:f2:63:e1:c4:7f:43:e8:27:46:32:43:60:60: 77:d1:4a:bf:88:26:98:b6:4e:e0:0d:34:2a:98:e8: 9f:9f:de:5f:58:34:46:21:b1:14:43:e2:1d:d7:d5: 7c:a8:4c:4f:8b:01:e9:39:4e:3f:b4:cf:85:1b:ac: 57:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:9B:D1:03:B1:BB:91:EB:45:A1:BF:FD:31:AD:4F:70:E5:72:E6:D4 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/55f59f37-f955-4620-a99b-98777007a618.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.158.245.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:21:19:b6:f5:8a:fb:8e:6d:36:46:74:92:15:6f:a9:54:f4: ba:63:06:c5:93:10:35:f5:69:b2:bd:76:02:12:ed:fa:92:75: 55:c5:27:f9:a4:25:52:24:90:f1:6d:29:9a:39:48:f8:00:6f: a0:2f:ed:7d:2f:f3:f5:f4:68:d5:5c:5a:c6:8b:3b:03:03:6d: 7d:20:2b:95:94:ab:4f:af:a1:e6:92:50:1e:66:f9:f8:01:37: 21:2c:6d:0b:5b:d5:00:01:c7:45:22:1c:23:6a:4d:38:c3:48: d0:f7:0b:47:0e:cd:43:92:08:85:be:f6:1b:6c:f6:26:79:f0: 7e:8d:db:2f:9e:56:59:cc:d6:a2:a7:4f:3b:31:fa:d8:54:78: a3:00:8d:72:f4:bd:71:57:30:bb:46:e9:0e:db:8c:8e:03:96: 9f:92:e0:f6:2a:ba:6c:67:53:c3:aa:2d:9f:29:e2:89:ab:a7: df:6f:25:2f:89:e0:e9:f0:57:90:10:06:72:bb:13:79:9a:e6: 8f:b9:d0:cd:6b:3d:2b:09:a1:01:b5:f0:33:d3:dd:60:b1:65: 40:e6:7d:ea:5b:e0:35:fd:74:c1:ff:e4:40:c2:ed:1c:25:10: e9:d1:ab:a7:14:d7:55:2e:df:31:29:e3:ba:f5:81:e8:00:cf: b1:ee:46:e0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAKwQ7GY13RNq1FRMWa+SyTBEVDswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE0MDMwNjQ3WhcNMjUxMTE4MjM1OTU5 WjB6MUkwRwYDVQQFE0BkOTY1Zjc4M2U0YzU2ZTBhNTQ5NTg0NjRhOTNhZTA1MWU1 M2NhNzA5ZjBkNjU3MGQyYzIxMzg4ZWY1ZjJhNWNiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxGR0KoXkYbWJzwIT9ksdx0DCAciKfSznwrPqLcYeUDJcN pkUZita+c7dYjCzatnlMeo4CVvNtdBiVFhQAT07ZuBi+bp6RlhxpBldLZm/s4HYm Hum1kyMNrKsdaVlmo21nu0HoN7WdhOdpyGrnTKCW12cnIbAfMi5NncUaRCFEKXD3 Efg6aLPTuD1T/1b44MJ9z0PblPXCkFQwWb0s0dZLv/q35eQNEeK1zhP9C5O2z3i3 CnwFh8cWa4imPmtRHmUT1Tpt8mPhxH9D6CdGMkNgYHfRSr+IJpi2TuANNCqY6J+f 3l9YNEYhsRRD4h3X1XyoTE+LAek5Tj+0z4UbrFeBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQULpvRA7G7ketFob/9Ma1PcOVy5tQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzU1ZjU5ZjM3LWY5NTUtNDYyMC1hOTliLTk4Nzc3MDA3YTYxOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAPnvUwDQYJKoZIhvcNAQELBQADggEBAA0hGbb1ivuObTZGdJIVb6lU9Lpj BsWTEDX1abK9dgIS7fqSdVXFJ/mkJVIkkPFtKZo5SPgAb6Av7X0v8/X0aNVcWsaL OwMDbX0gK5WUq0+voeaSUB5m+fgBNyEsbQtb1QABx0UiHCNqTTjDSND3C0cOzUOS CIW+9hts9iZ58H6N2y+eVlnM1qKnTzsx+thUeKMAjXL0vXFXMLtG6Q7bjI4Dlp+S 4PYqumxnU8OqLZ8p4omrp99vJS+J4OnwV5AQBnK7E3ma5o+50M1rPSsJoQG18DPT 3WCxZUDmfepb4DX9dMH/5EDC7RwlEOnRq6cU11Uu3zEp47r1gegAz7HuRuA= -----END CERTIFICATE-----Generated at Fri Oct 17 21:59:38 2025 by rpki-client