$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cf16abd5-3460-48d6-ba82-f0d652b7b837.roa File: cf16abd5-3460-48d6-ba82-f0d652b7b837.roa (raw, json) Hash identifier: MhLJ52nZlkTiEl7QNBUM3yX+uSa7g0rD7NkNIAit5vQ= Subject key identifier: 30:9A:EE:F9:94:04:A3:E7:1D:72:E5:36:89:F2:EB:54:76:CF:AD:85 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3A14822A16B3C71ED7B91264D5095A3BAB718D53 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cf16abd5-3460-48d6-ba82-f0d652b7b837.roa Signing time: Fri 07 Nov 2025 01:10:13 +0000 ROA not before: Fri 07 Nov 2025 01:10:13 +0000 ROA not after: Fri 12 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.158.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:14:82:2a:16:b3:c7:1e:d7:b9:12:64:d5:09:5a:3b:ab:71:8d:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Nov 7 01:10:13 2025 GMT Not After : Dec 12 23:59:59 2025 GMT Subject: serialNumber=9fe588ec6f4cb46496e46170339f2ee737e5a3b727ba2ada5c03b29613a1de2c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:37:9d:64:1a:19:3b:71:64:f0:a6:ff:36:fb: 27:18:59:84:e6:2c:c4:98:0e:ed:f4:71:b8:ab:54: 30:05:d0:5a:67:68:0a:71:a5:c0:c3:ce:79:ae:72: 1c:6d:a8:34:ba:e9:ea:7a:bc:38:22:21:b5:1a:cc: f4:ec:39:2d:dc:f1:d5:20:4b:b9:a0:de:b7:67:6b: f8:ca:ec:2c:1a:2c:e7:3a:02:61:f0:cf:6b:78:1f: 4a:58:51:86:4b:8d:89:fa:ae:fe:39:21:49:45:29: 11:96:38:6e:c3:c9:99:19:c2:bf:c6:b0:e7:b5:84: e6:2f:71:87:03:36:22:99:29:2d:69:e4:b9:b6:63: 79:88:b9:12:41:02:c4:72:0b:23:92:12:2d:97:11: e3:87:e2:ca:a5:a7:a9:89:50:b5:ea:ef:29:a3:d3: ab:d5:51:a5:2e:58:5c:3f:26:87:59:5d:1a:34:c0: 22:88:34:de:51:9b:24:fe:45:ef:7d:99:31:cd:3d: f5:7a:e8:5b:71:46:fe:ea:12:1c:19:7c:4e:dd:ff: eb:c4:de:78:e2:17:7d:d6:80:d8:d7:c9:23:57:cb: 40:2e:7d:18:cc:2c:78:68:77:47:4a:6e:02:15:e3: 2a:dc:f8:2d:a4:62:c3:b9:2d:10:b4:ec:97:dc:53: 0e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:9A:EE:F9:94:04:A3:E7:1D:72:E5:36:89:F2:EB:54:76:CF:AD:85 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cf16abd5-3460-48d6-ba82-f0d652b7b837.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.158.148.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:c5:2b:9f:bf:4f:e9:41:21:fd:fe:46:df:a7:3f:95:50:09: 8e:57:78:94:7d:89:a4:75:9e:ee:ef:48:5f:5c:b3:b3:7b:46: 2f:71:83:3c:9c:b4:97:58:30:15:a9:af:06:39:da:c1:f3:6a: 78:9a:59:c0:a0:33:a3:ef:a4:4d:03:b8:78:61:06:d1:56:f9: 01:2d:45:4b:3e:09:f8:3f:11:7d:9c:77:9a:64:fb:6f:1c:55: 9f:70:52:ca:54:e0:c8:66:94:2a:f8:24:0b:35:73:92:41:aa: 11:33:e5:b7:21:8f:77:56:d8:60:f7:0d:7c:d5:e9:a6:52:e0: 79:49:ef:b8:7d:0a:e7:3a:0a:bf:dc:44:f9:37:d0:0c:f2:fb: c5:2e:7c:e5:30:19:03:11:73:9c:99:cd:39:bc:c5:4e:a4:ef: 16:93:7e:3e:21:b6:67:69:50:0c:a0:c1:3e:de:57:3f:35:29: 02:2e:4b:78:a5:ba:f9:40:8a:1c:fe:b4:ca:1b:6e:83:0d:13: f5:11:3d:ee:29:6c:7e:c7:c4:5f:e1:6e:5c:85:08:26:10:0b: 60:1c:8f:f3:fd:c6:8e:b9:1a:76:bb:f1:48:10:34:e2:8b:95: 94:c0:dc:b2:fe:3b:80:56:6a:e4:45:00:ef:53:d3:00:df:58: 41:e0:1e:7f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOhSCKhazxx7XuRJk1QlaO6txjVMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMTA3MDExMDEzWhcNMjUxMjEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZmU1ODhlYzZmNGNiNDY0OTZlNDYxNzAzMzlmMmVlNzM3 ZTVhM2I3MjdiYTJhZGE1YzAzYjI5NjEzYTFkZTJjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfN51kGhk7cWTwpv82+ycYWYTmLMSYDu30cbirVDAF0Fpn aApxpcDDznmuchxtqDS66ep6vDgiIbUazPTsOS3c8dUgS7mg3rdna/jK7CwaLOc6 AmHwz2t4H0pYUYZLjYn6rv45IUlFKRGWOG7DyZkZwr/GsOe1hOYvcYcDNiKZKS1p 5Lm2Y3mIuRJBAsRyCyOSEi2XEeOH4sqlp6mJULXq7ymj06vVUaUuWFw/JodZXRo0 wCKINN5RmyT+Re99mTHNPfV66FtxRv7qEhwZfE7d/+vE3njiF33WgNjXySNXy0Au fRjMLHhod0dKbgIV4yrc+C2kYsO5LRC07JfcUw7XAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUMJru+ZQEo+cdcuU2ifLrVHbPrYUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2NmMTZhYmQ1LTM0NjAtNDhkNi1iYTgyLWYwZDY1MmI3YjgzNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAPnpQwDQYJKoZIhvcNAQELBQADggEBAI/FK5+/T+lBIf3+Rt+nP5VQCY5X eJR9iaR1nu7vSF9cs7N7Ri9xgzyctJdYMBWprwY52sHzaniaWcCgM6PvpE0DuHhh BtFW+QEtRUs+Cfg/EX2cd5pk+28cVZ9wUspU4MhmlCr4JAs1c5JBqhEz5bchj3dW 2GD3DXzV6aZS4HlJ77h9Cuc6Cr/cRPk30Azy+8UufOUwGQMRc5yZzTm8xU6k7xaT fj4htmdpUAygwT7eVz81KQIuS3iluvlAihz+tMobboMNE/URPe4pbH7HxF/hblyF CCYQC2Acj/P9xo65Gna78UgQNOKLlZTA3LL+O4BWauRFAO9T0wDfWEHgHn8= -----END CERTIFICATE-----Generated at Fri Nov 7 20:20:59 2025 by rpki-client