$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/43f9aab0-0243-4b98-808c-f17410568200.roa File: 43f9aab0-0243-4b98-808c-f17410568200.roa (raw, json) Hash identifier: ksaFLZIzDh7J93DFDl1VkuY7eW9OKIh1N9Ylk5NbHl0= Subject key identifier: 24:CA:84:23:CE:7A:DD:A8:44:A2:05:EC:F3:9D:31:68:C4:2F:B3:66 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2F868E2352620EF384A1D35E27BFB7122A5A5734 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/43f9aab0-0243-4b98-808c-f17410568200.roa Signing time: Thu 25 Sep 2025 18:47:42 +0000 ROA not before: Thu 25 Sep 2025 18:47:42 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.166.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:86:8e:23:52:62:0e:f3:84:a1:d3:5e:27:bf:b7:12:2a:5a:57:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 18:47:42 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=a6b3dfeec27d73c86ff2ce25527aad3e5b07587b16cc1dfb7c9f6980d62379eb, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:39:40:a0:b8:3d:c6:7b:e7:8a:ff:3d:3b:0f: 6f:6e:7d:a6:dc:8c:62:38:72:ae:5a:1d:58:9d:7f: e5:04:6c:d9:6c:b6:93:01:cc:ba:55:66:d4:15:aa: 34:91:96:30:fe:36:7f:7a:1f:f4:40:d6:99:fc:7a: be:2a:79:90:72:e5:bd:86:d8:72:e3:73:e4:9b:10: ce:8d:4f:22:33:b1:3d:f3:f3:33:c1:67:cd:9f:e7: 7c:7d:a0:05:31:b4:17:29:3d:63:7f:4e:b4:84:87: df:22:cc:44:c5:bf:50:ee:09:c9:8a:ef:d9:c6:7e: f5:00:cc:2b:92:20:6e:c0:15:46:3e:55:70:fa:bb: e3:ac:f7:f3:ac:2a:83:f0:5d:a4:0c:35:71:92:a1: 75:51:ed:aa:b1:0e:c6:66:9e:29:e3:69:33:66:51: ff:20:7e:06:3a:13:1e:1a:e3:1a:e1:0f:03:a6:4d: 19:46:bd:96:ca:cd:d0:18:df:0e:ae:86:3a:a7:93: 4a:01:7a:be:19:b8:2b:34:02:01:f0:2b:ac:67:ad: 11:db:25:31:c4:6b:ac:6a:60:9a:b8:c7:3f:ce:76: 07:ff:62:45:bf:b0:6d:3b:c0:86:f2:24:ac:bf:c0: 54:5b:ff:d9:29:f9:62:18:0a:36:7c:8a:91:7a:f4: 29:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:CA:84:23:CE:7A:DD:A8:44:A2:05:EC:F3:9D:31:68:C4:2F:B3:66 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/43f9aab0-0243-4b98-808c-f17410568200.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.166.70.0/24 Signature Algorithm: sha256WithRSAEncryption 50:32:5a:f8:69:26:55:58:6a:ae:6f:94:5d:80:47:92:c7:e1: 9e:16:21:f6:7e:23:8a:d7:40:7b:ef:65:9a:2a:3e:d8:b6:92: 14:4d:98:28:bb:b9:17:a9:e3:ac:77:11:44:9a:c8:46:a8:b6: 8e:f3:35:0e:da:13:9c:72:a5:a4:9e:c1:3e:44:a8:4f:20:5a: 90:48:7a:71:34:b5:e2:c8:ca:75:52:b4:54:01:06:09:3b:0f: d6:ee:9b:f2:bc:45:84:4e:d8:08:8c:84:45:69:a0:c2:73:5e: 65:16:95:30:ae:24:92:79:33:94:b6:3f:46:6b:38:47:35:1c: d2:9d:95:37:c5:44:87:63:e6:b4:c8:4d:c1:e5:0e:9f:65:7d: cc:cf:01:d3:05:4b:94:0c:67:11:4d:44:ad:8b:1b:13:69:3e: 09:87:20:9d:5c:3f:a9:2f:84:80:af:c7:30:f1:3c:95:1b:f0: 4f:19:2f:38:91:d9:df:55:cc:ae:45:84:65:0f:22:b0:89:22: 53:7c:53:ca:d4:f6:90:ef:e7:b0:3d:d8:f8:b1:6c:63:21:da: 3c:3f:37:c8:48:3e:b4:8a:9f:44:e5:f9:a2:da:80:ec:51:55: 08:88:06:f7:1b:2a:95:ff:e9:4f:3b:2a:68:a1:b1:ff:c2:38: 2b:c8:c7:3c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUL4aOI1JiDvOEodNeJ7+3EipaVzQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTg0NzQyWhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BhNmIzZGZlZWMyN2Q3M2M4NmZmMmNlMjU1MjdhYWQzZTVi MDc1ODdiMTZjYzFkZmI3YzlmNjk4MGQ2MjM3OWViMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+OUCguD3Ge+eK/z07D29ufabcjGI4cq5aHVidf+UEbNls tpMBzLpVZtQVqjSRljD+Nn96H/RA1pn8er4qeZBy5b2G2HLjc+SbEM6NTyIzsT3z 8zPBZ82f53x9oAUxtBcpPWN/TrSEh98izETFv1DuCcmK79nGfvUAzCuSIG7AFUY+ VXD6u+Os9/OsKoPwXaQMNXGSoXVR7aqxDsZmninjaTNmUf8gfgY6Ex4a4xrhDwOm TRlGvZbKzdAY3w6uhjqnk0oBer4ZuCs0AgHwK6xnrRHbJTHEa6xqYJq4xz/Odgf/ YkW/sG07wIbyJKy/wFRb/9kp+WIYCjZ8ipF69ClfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJMqEI8563ahEogXs850xaMQvs2YwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQzZjlhYWIwLTAyNDMtNGI5OC04MDhjLWYxNzQxMDU2ODIwMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADpkYwDQYJKoZIhvcNAQELBQADggEBAFAyWvhpJlVYaq5vlF2AR5LH4Z4W IfZ+I4rXQHvvZZoqPti2khRNmCi7uRep46x3EUSayEaoto7zNQ7aE5xypaSewT5E qE8gWpBIenE0teLIynVStFQBBgk7D9bum/K8RYRO2AiMhEVpoMJzXmUWlTCuJJJ5 M5S2P0ZrOEc1HNKdlTfFRIdj5rTITcHlDp9lfczPAdMFS5QMZxFNRK2LGxNpPgmH IJ1cP6kvhICvxzDxPJUb8E8ZLziR2d9VzK5FhGUPIrCJIlN8U8rU9pDv57A92Pix bGMh2jw/N8hIPrSKn0Tl+aLagOxRVQiIBvcbKpX/6U87Kmihsf/COCvIxzw= -----END CERTIFICATE-----Generated at Sat Oct 18 02:14:12 2025 by rpki-client