$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/143b735d-84a6-45b1-aca7-b21b4d119e80.roa File: 143b735d-84a6-45b1-aca7-b21b4d119e80.roa (raw, json) Hash identifier: KUfSmnifV1VKm49ZM9KmiPbxAv5tQe7nLh7ls2YYzkI= Subject key identifier: 6A:55:65:B8:72:81:37:1C:ED:E1:1D:F5:3C:C3:E3:1E:2F:CC:F7:38 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5C0C707CD8B2DC5DC4E1DBEC653524EC4A205CAD Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/143b735d-84a6-45b1-aca7-b21b4d119e80.roa Signing time: Fri 26 Sep 2025 01:32:02 +0000 ROA not before: Fri 26 Sep 2025 01:32:02 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.170.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:0c:70:7c:d8:b2:dc:5d:c4:e1:db:ec:65:35:24:ec:4a:20:5c:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 01:32:02 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=e90d9d0f037e07e821f73f6e81bcde7e9e69a7323d03e9ec030221148799a26b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:53:7a:09:6a:0e:9a:78:a9:b9:62:06:37:d0: 26:67:b9:ac:bc:91:09:a9:30:97:f9:d4:b6:3b:a6: a6:b8:23:37:cc:26:be:9f:ab:dd:fe:e2:7b:34:2c: d0:69:58:22:a8:d2:d6:92:23:64:3e:92:db:6f:d4: 16:04:c8:a6:18:60:6e:5e:61:fc:e0:04:4c:42:74: 5f:75:88:ad:3f:d3:aa:4d:ef:db:25:2b:d9:d0:5b: 44:e0:ba:90:4c:4e:c8:a4:8e:69:2d:84:b9:56:ef: d0:89:fa:e3:c7:9d:b5:0e:9f:c8:c2:d3:a4:ed:32: 5c:2f:ad:67:2f:d2:98:a4:f5:fa:9e:1c:f7:ec:a7: fb:c1:4e:a4:7c:eb:52:41:b0:d9:4b:e0:62:ea:ae: 54:30:45:73:28:50:52:5d:ad:6b:47:a5:e1:40:40: e5:2b:7d:6b:6b:f9:7a:e6:5e:cc:f3:88:6f:f0:9e: 17:62:93:80:5c:44:aa:eb:f5:9d:53:9e:63:20:0c: d1:60:66:22:65:32:b0:5a:59:e2:db:a2:6d:61:a5: ad:68:74:97:62:88:9d:15:bc:58:cd:5b:9b:22:48: 40:a7:bd:75:25:af:ac:c3:f0:0c:3d:5a:4b:83:e7: f6:18:9e:62:53:af:60:1c:7f:33:22:9e:cc:a1:2a: 17:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:55:65:B8:72:81:37:1C:ED:E1:1D:F5:3C:C3:E3:1E:2F:CC:F7:38 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/143b735d-84a6-45b1-aca7-b21b4d119e80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.170.80.0/21 Signature Algorithm: sha256WithRSAEncryption 50:04:b4:dc:76:d9:33:af:99:19:c3:02:72:71:ab:82:ff:22: fb:53:31:f4:c8:a1:df:c1:bb:08:53:e9:36:a9:75:9c:ec:45: 38:62:2b:cc:a8:d4:b7:85:bd:18:e2:4b:03:03:2e:11:2b:24: 35:4f:8c:b9:08:4d:2c:91:67:2c:cf:6c:e7:0d:28:97:04:43: 8c:9f:53:28:5e:70:7d:2d:8b:d3:8e:83:d6:ce:dc:5d:d8:56: 01:40:b7:c9:cb:e4:c5:bc:4f:ab:4b:69:83:1d:c7:ef:c2:e8: 24:02:f8:ff:29:28:49:3d:ff:f0:df:ed:a3:48:35:af:f2:e0: f7:f1:32:0f:fd:09:1b:92:71:ce:d0:6b:80:f8:aa:de:f2:c3: 66:f3:ea:f8:07:8e:42:67:6d:fc:6b:0e:51:88:1a:d3:c2:79: b4:9c:93:5a:3a:eb:87:78:1e:ec:ea:22:0e:04:e3:bb:af:6d: 9a:64:0c:39:2a:67:df:a9:08:07:21:54:4c:ee:23:62:50:b0: 0e:98:0e:03:ff:13:63:9f:dc:29:ad:10:08:73:e2:e2:68:0b: 17:e2:fa:8a:e6:86:3c:2f:62:14:a0:b1:6f:f0:f2:be:28:ab: 46:11:21:75:1b:3d:1e:3d:a2:ac:26:fc:d3:29:e0:96:61:cd: 99:fc:9f:e3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXAxwfNiy3F3E4dvsZTUk7EogXK0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDEzMjAyWhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BlOTBkOWQwZjAzN2UwN2U4MjFmNzNmNmU4MWJjZGU3ZTll NjlhNzMyM2QwM2U5ZWMwMzAyMjExNDg3OTlhMjZiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQChU3oJag6aeKm5YgY30CZnuay8kQmpMJf51LY7pqa4IzfM Jr6fq93+4ns0LNBpWCKo0taSI2Q+kttv1BYEyKYYYG5eYfzgBExCdF91iK0/06pN 79slK9nQW0TgupBMTsikjmkthLlW79CJ+uPHnbUOn8jC06TtMlwvrWcv0pik9fqe HPfsp/vBTqR861JBsNlL4GLqrlQwRXMoUFJdrWtHpeFAQOUrfWtr+XrmXszziG/w nhdik4BcRKrr9Z1TnmMgDNFgZiJlMrBaWeLbom1hpa1odJdiiJ0VvFjNW5siSECn vXUlr6zD8Aw9WkuD5/YYnmJTr2AcfzMinsyhKhcjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUalVluHKBNxzt4R31PMPjHi/M9zgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzE0M2I3MzVkLTg0YTYtNDViMS1hY2E3LWIyMWI0ZDExOWU4MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMDqlAwDQYJKoZIhvcNAQELBQADggEBAFAEtNx22TOvmRnDAnJxq4L/IvtT MfTIod/BuwhT6TapdZzsRThiK8yo1LeFvRjiSwMDLhErJDVPjLkITSyRZyzPbOcN KJcEQ4yfUyhecH0ti9OOg9bO3F3YVgFAt8nL5MW8T6tLaYMdx+/C6CQC+P8pKEk9 //Df7aNINa/y4PfxMg/9CRuScc7Qa4D4qt7yw2bz6vgHjkJnbfxrDlGIGtPCebSc k1o664d4HuzqIg4E47uvbZpkDDkqZ9+pCAchVEzuI2JQsA6YDgP/E2Of3CmtEAhz 4uJoCxfi+ormhjwvYhSgsW/w8r4oq0YRIXUbPR49oqwm/NMp4JZhzZn8n+M= -----END CERTIFICATE-----Generated at Fri Oct 17 22:17:42 2025 by rpki-client