$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3645d887-572b-4fbd-b02b-9306f0281b03.roa File: 3645d887-572b-4fbd-b02b-9306f0281b03.roa (raw, json) Hash identifier: E9M2ENdvrYQoMhoUCArOfNV1gEo5JzszbbMVlcg4HGU= Subject key identifier: 84:50:C7:32:0C:71:83:BE:33:0A:BD:2A:FA:A7:C5:FA:78:AF:80:8F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6004D800D064EC9B1B0CD52EDBDBEDFDA5228D1D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3645d887-572b-4fbd-b02b-9306f0281b03.roa Signing time: Wed 22 Oct 2025 22:06:58 +0000 ROA not before: Wed 22 Oct 2025 22:06:58 +0000 ROA not after: Wed 26 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.158.246.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:04:d8:00:d0:64:ec:9b:1b:0c:d5:2e:db:db:ed:fd:a5:22:8d:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 22 22:06:58 2025 GMT Not After : Nov 26 23:59:59 2025 GMT Subject: serialNumber=01496b6180efccd41baaa47f959e1d3a42abf2130db62f52928f0a26476cd519, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ce:d6:dc:a4:83:14:68:a4:13:5a:18:2f:c3: 05:2f:5f:73:51:93:ec:6c:4c:5f:d7:7e:22:ad:ae: ac:dc:a2:60:b8:1a:f8:be:70:18:3c:59:e7:2d:27: 29:59:33:23:fd:97:b3:96:28:df:11:a6:53:8a:29: 79:65:1e:3d:aa:80:e2:93:02:94:89:ae:30:66:0b: 08:6c:da:fc:45:7f:5b:d7:fd:c9:97:8f:5f:d2:d7: c6:c9:e9:71:b3:19:29:27:00:36:58:41:11:ff:fa: 09:00:e6:79:e7:11:17:40:88:7c:dc:87:a3:7e:2a: 5a:ca:9b:6b:53:6a:52:a2:2b:d0:37:c1:03:53:f2: 5c:ea:00:2f:ed:94:d1:27:b7:9d:c6:1f:2c:44:dc: be:f8:e2:94:64:c6:54:20:a7:a5:59:59:cc:ac:4c: cf:47:2c:7c:02:1e:bd:c4:f9:af:a6:d5:be:b2:86: 47:4e:a5:63:48:c1:c9:a0:84:5a:30:75:09:b8:d8: f6:65:33:8f:da:a5:59:87:06:79:cb:5f:73:84:e9: 6d:45:5a:6f:7d:81:ff:ec:6d:84:91:b5:11:6c:d3: b7:f5:ea:26:93:7e:a1:37:d7:b3:5b:e5:8f:58:3f: e1:45:ef:8c:9f:20:a9:21:06:d6:ca:fd:78:0a:7f: 4c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:50:C7:32:0C:71:83:BE:33:0A:BD:2A:FA:A7:C5:FA:78:AF:80:8F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3645d887-572b-4fbd-b02b-9306f0281b03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.158.246.0/23 Signature Algorithm: sha256WithRSAEncryption 8f:c1:81:d6:b5:0a:af:d1:2b:42:3e:f1:cb:d0:d8:11:c4:6a: ff:d7:82:d0:f4:f2:13:e7:23:dc:4d:78:bc:43:7c:44:8a:c5: da:91:48:f0:b0:30:a5:98:ad:be:ba:da:03:56:32:fc:e4:c3: 35:8c:99:a5:3d:1e:e0:78:fa:6d:24:c1:8c:ba:fd:7f:37:85: c9:75:68:c4:84:aa:04:06:e8:55:76:e3:42:22:d5:3a:0a:d4: fb:ed:23:86:d3:2b:53:11:55:e3:fd:55:2d:09:0b:f4:b3:87: e9:74:28:f3:ed:81:8a:06:eb:ed:b3:99:fc:bb:7d:0e:f5:d2: 98:2c:bc:33:18:ac:e9:f0:f2:57:91:1f:f1:46:a9:73:7d:fb: 9f:01:2b:bd:43:b6:cc:ed:33:fe:07:45:c9:a2:1c:13:e9:d3: 79:f6:ff:65:ff:21:f8:65:31:22:fa:3b:67:0f:e4:f5:2d:76: 9a:80:56:e2:7a:d5:82:3c:9f:ec:00:5e:cc:b6:55:13:54:37: 11:8e:a2:9b:f9:e3:d3:36:61:38:07:15:bf:a8:aa:c1:95:19: 9d:94:06:e1:7b:9e:48:fb:c5:41:6b:70:a7:2f:1d:52:ab:a0: d3:40:35:4d:89:19:7d:15:3c:55:93:6b:04:72:80:bd:c9:44: 58:c6:6b:ea -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYATYANBk7JsbDNUu29vt/aUijR0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDIyMjIwNjU4WhcNMjUxMTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0AwMTQ5NmI2MTgwZWZjY2Q0MWJhYWE0N2Y5NTllMWQzYTQy YWJmMjEzMGRiNjJmNTI5MjhmMGEyNjQ3NmNkNTE5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJztbcpIMUaKQTWhgvwwUvX3NRk+xsTF/XfiKtrqzcomC4 Gvi+cBg8WectJylZMyP9l7OWKN8RplOKKXllHj2qgOKTApSJrjBmCwhs2vxFf1vX /cmXj1/S18bJ6XGzGSknADZYQRH/+gkA5nnnERdAiHzch6N+KlrKm2tTalKiK9A3 wQNT8lzqAC/tlNEnt53GHyxE3L744pRkxlQgp6VZWcysTM9HLHwCHr3E+a+m1b6y hkdOpWNIwcmghFowdQm42PZlM4/apVmHBnnLX3OE6W1FWm99gf/sbYSRtRFs07f1 6iaTfqE317Nb5Y9YP+FF74yfIKkhBtbK/XgKf0ztAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhFDHMgxxg74zCr0q+qfF+nivgI8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzM2NDVkODg3LTU3MmItNGZiZC1iMDJiLTkzMDZmMDI4MWIwMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEPnvYwDQYJKoZIhvcNAQELBQADggEBAI/Bgda1Cq/RK0I+8cvQ2BHEav/X gtD08hPnI9xNeLxDfESKxdqRSPCwMKWYrb662gNWMvzkwzWMmaU9HuB4+m0kwYy6 /X83hcl1aMSEqgQG6FV240Ii1ToK1PvtI4bTK1MRVeP9VS0JC/Szh+l0KPPtgYoG 6+2zmfy7fQ710pgsvDMYrOnw8leRH/FGqXN9+58BK71DtsztM/4HRcmiHBPp03n2 /2X/IfhlMSL6O2cP5PUtdpqAVuJ61YI8n+wAXsy2VRNUNxGOopv549M2YTgHFb+o qsGVGZ2UBuF7nkj7xUFrcKcvHVKroNNANU2JGX0VPFWTawRygL3JRFjGa+o= -----END CERTIFICATE-----Generated at Wed Nov 5 01:46:15 2025 by rpki-client