$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d5464335-5531-4177-bf6b-b26d4dc3e485.roa File: d5464335-5531-4177-bf6b-b26d4dc3e485.roa (raw, json) Hash identifier: bnVn1dXvMVWr0TYz62v67tOpx1Oh3+EgE6olmJaFvi0= Subject key identifier: 3E:81:7B:29:C1:6C:41:57:61:85:37:FA:3F:83:9A:3F:21:5F:EE:2D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7DFABC7125255356E126376A980D6BF562E2A6C1 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d5464335-5531-4177-bf6b-b26d4dc3e485.roa Signing time: Fri 07 Nov 2025 01:41:29 +0000 ROA not before: Fri 07 Nov 2025 01:41:29 +0000 ROA not after: Fri 12 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.158.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:fa:bc:71:25:25:53:56:e1:26:37:6a:98:0d:6b:f5:62:e2:a6:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Nov 7 01:41:29 2025 GMT Not After : Dec 12 23:59:59 2025 GMT Subject: serialNumber=087214689cd55cf44703fa68cd46c94eae964693f985daf97f57c8143f08da63, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:92:97:ea:c9:21:19:e2:79:be:0d:89:d5:f6: 45:06:d1:3c:57:ec:3f:db:8e:c0:d5:ab:ad:5e:ae: 6f:ea:7a:a8:79:8d:f4:a2:3f:9c:3c:af:cd:4d:2b: ce:2d:b1:cb:71:6f:c7:46:46:dc:75:ff:a9:f1:79: df:83:20:1f:e5:9b:b9:97:91:33:10:ae:e3:78:72: 01:8c:c6:34:bb:6c:10:ad:99:d3:da:e7:dd:bc:53: fb:02:58:44:e9:c3:7e:7b:2e:60:41:37:9c:2a:e4: d1:5f:c0:41:68:49:bc:44:44:f3:11:64:f3:0b:a1: 9c:ec:40:e9:46:69:83:c9:cd:3f:5a:e4:c0:23:44: 2e:a2:ff:fc:75:e7:f1:3a:22:6e:d6:b9:69:82:06: 7f:73:61:77:70:ff:c5:4e:bd:82:79:ff:c1:bd:3c: f0:47:81:37:a0:d8:2e:02:60:fd:f9:d5:c3:90:bd: b3:cf:5c:5c:01:c0:44:f6:77:26:fa:1c:92:4d:70: 14:29:cc:9d:ee:77:de:14:dd:65:6e:38:55:2e:19: 38:6a:78:1d:35:4e:23:4c:2e:13:e5:35:72:e3:5d: b4:56:d7:43:9a:2c:e8:c4:9e:b1:07:37:26:e5:ed: 66:76:5a:f3:fe:7e:98:e7:85:c2:ec:15:20:78:f0: a6:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:81:7B:29:C1:6C:41:57:61:85:37:FA:3F:83:9A:3F:21:5F:EE:2D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d5464335-5531-4177-bf6b-b26d4dc3e485.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.158.116.0/24 Signature Algorithm: sha256WithRSAEncryption 63:2d:af:da:ae:89:7d:71:a4:b6:63:b3:61:3f:de:50:0e:84: 48:0a:5a:4b:83:27:72:95:9b:29:b3:39:6c:9c:f4:17:fb:e4: da:59:f3:f3:59:c6:04:d6:93:c5:bd:b1:2f:48:ce:3e:2b:a1: c4:32:26:26:66:c9:1b:70:13:19:d8:89:5d:d6:28:d7:3d:cb: 95:e3:eb:f7:96:ef:66:6e:5f:61:45:c0:21:fc:56:9d:9e:8d: 78:6f:5f:d1:d7:9e:50:48:23:a2:3f:b4:14:5b:8b:d0:de:a1: 2f:11:ae:38:f0:c1:61:58:9b:2b:fc:f1:67:80:1d:ba:17:4d: 4b:e9:82:7d:ce:8f:3d:26:59:5a:d8:61:d1:f2:51:a4:17:c7: b3:8d:73:51:75:89:75:e6:41:2a:d5:85:c8:ab:b6:5b:e9:70: c2:30:15:9c:9e:8f:df:9d:13:0b:19:7f:3c:fd:34:0f:c4:ec: b2:9d:52:bf:db:1b:af:0e:3d:5e:a7:66:c4:29:76:be:5e:b7: 12:63:87:c4:72:5f:f3:23:c5:55:53:f7:f7:79:73:ec:10:87: 23:1b:52:43:c3:08:ac:11:a7:a4:7b:72:e2:b5:8b:e2:ef:36: 5b:64:6f:11:83:71:fb:4c:1b:8c:26:c0:91:df:ad:fb:37:14: 7d:57:48:2d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUffq8cSUlU1bhJjdqmA1r9WLipsEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMTA3MDE0MTI5WhcNMjUxMjEyMjM1OTU5 WjB6MUkwRwYDVQQFE0AwODcyMTQ2ODljZDU1Y2Y0NDcwM2ZhNjhjZDQ2Yzk0ZWFl OTY0NjkzZjk4NWRhZjk3ZjU3YzgxNDNmMDhkYTYzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDdkpfqySEZ4nm+DYnV9kUG0TxX7D/bjsDVq61erm/qeqh5 jfSiP5w8r81NK84tsctxb8dGRtx1/6nxed+DIB/lm7mXkTMQruN4cgGMxjS7bBCt mdPa5928U/sCWETpw357LmBBN5wq5NFfwEFoSbxERPMRZPMLoZzsQOlGaYPJzT9a 5MAjRC6i//x15/E6Im7WuWmCBn9zYXdw/8VOvYJ5/8G9PPBHgTeg2C4CYP351cOQ vbPPXFwBwET2dyb6HJJNcBQpzJ3ud94U3WVuOFUuGThqeB01TiNMLhPlNXLjXbRW 10OaLOjEnrEHNybl7WZ2WvP+fpjnhcLsFSB48KZzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUPoF7KcFsQVdhhTf6P4OaPyFf7i0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Q1NDY0MzM1LTU1MzEtNDE3Ny1iZjZiLWIyNmQ0ZGMzZTQ4NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAPnnQwDQYJKoZIhvcNAQELBQADggEBAGMtr9quiX1xpLZjs2E/3lAOhEgK WkuDJ3KVmymzOWyc9Bf75NpZ8/NZxgTWk8W9sS9Izj4rocQyJiZmyRtwExnYiV3W KNc9y5Xj6/eW72ZuX2FFwCH8Vp2ejXhvX9HXnlBII6I/tBRbi9DeoS8RrjjwwWFY myv88WeAHboXTUvpgn3Ojz0mWVrYYdHyUaQXx7ONc1F1iXXmQSrVhcirtlvpcMIw FZyej9+dEwsZfzz9NA/E7LKdUr/bG68OPV6nZsQpdr5etxJjh8RyX/MjxVVT9/d5 c+wQhyMbUkPDCKwRp6R7cuK1i+LvNltkbxGDcftMG4wmwJHfrfs3FH1XSC0= -----END CERTIFICATE-----Generated at Fri Nov 7 20:14:06 2025 by rpki-client