$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/543a521c-e26b-4cbc-b445-9bc522bc55ba.roa File: 543a521c-e26b-4cbc-b445-9bc522bc55ba.roa (raw, json) Hash identifier: g4Vz/yO97SLKyKpsSrOrr+w/BUoHvRAf/rEB77gOEW4= Subject key identifier: C1:7F:BF:B8:5B:0A:DF:C6:31:1F:3B:E0:1E:AE:8B:19:A1:71:76:66 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0A8B99639B348AE15A28C74AABF220F7F2B1C370 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/543a521c-e26b-4cbc-b445-9bc522bc55ba.roa Signing time: Thu 25 Sep 2025 19:59:20 +0000 ROA not before: Thu 25 Sep 2025 19:59:20 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.170.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:8b:99:63:9b:34:8a:e1:5a:28:c7:4a:ab:f2:20:f7:f2:b1:c3:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 19:59:20 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=518067e7475724561efe9c34a099476ff2e70782077969a13002010c7659f246, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:45:d7:bb:15:dc:03:08:15:c4:bf:c7:24:34: f1:1c:c4:c7:06:36:69:bf:72:9e:17:ae:28:78:e1: cf:f3:e1:c4:6a:9d:55:a5:f7:51:e8:5f:f8:59:5e: 58:51:e4:a0:b3:5c:20:b0:90:b6:e6:7b:b4:7e:24: 80:b9:43:e5:f4:91:80:9b:52:5a:ea:c9:71:be:54: b5:f6:27:3a:d9:ec:85:9f:0f:aa:9a:ee:1f:49:1e: 78:d5:ff:d9:4f:e6:8e:87:10:8b:68:9f:df:de:da: 7d:83:de:6c:eb:f2:36:bb:2b:7e:bc:ce:40:40:67: 74:7a:59:40:d1:9e:36:24:15:63:46:96:37:25:eb: c2:8d:bd:dd:be:d9:99:5f:55:c0:b7:49:ed:f1:0d: a0:27:4e:34:cb:8f:ed:2f:bd:8b:99:fb:27:79:4b: 02:42:fb:d6:56:33:34:1e:81:d4:af:58:85:bf:34: eb:26:32:a3:47:2f:be:f6:fb:3a:f7:d2:03:06:50: 66:24:f1:26:a1:da:6d:4f:81:c3:b2:29:5f:b1:00: c7:d5:00:08:87:6f:d4:dd:e3:22:83:7b:93:5a:f4: 77:a3:4b:f9:98:de:95:f4:5f:fb:a5:70:86:8b:a4: d3:85:96:6a:2d:b5:c7:65:b0:5e:62:25:de:39:70: f5:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:7F:BF:B8:5B:0A:DF:C6:31:1F:3B:E0:1E:AE:8B:19:A1:71:76:66 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/543a521c-e26b-4cbc-b445-9bc522bc55ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.170.57.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:e0:e8:3f:79:70:3c:e6:cc:57:d4:23:24:18:e9:79:72:25: 0f:b8:19:e3:ed:72:4c:bb:70:11:11:89:c2:51:19:04:e1:ad: ab:99:3e:12:e5:87:b2:00:b9:b1:62:ba:1d:98:7b:04:6a:76: 85:9d:19:14:ac:78:cf:23:15:82:ac:83:cc:b6:99:60:71:9e: f1:7b:e4:0a:aa:15:45:dc:be:e7:88:f4:50:f6:3e:68:2b:39: 47:d6:a8:56:a9:16:a6:6e:ec:96:34:ef:d8:94:e4:a4:0c:6e: 54:4d:37:e6:64:44:b4:b8:0f:48:38:d7:6d:8d:57:2b:7c:af: 79:42:cf:fa:c8:a1:68:a7:1e:16:99:31:54:33:e6:bc:89:08: e9:ea:24:56:36:9d:3f:b5:63:d7:16:b8:57:24:1e:1b:88:15: 3d:6d:2c:38:83:74:67:a9:1b:9b:e3:01:a2:4b:45:e3:4f:b1: db:e9:cb:24:60:80:88:52:d8:46:55:0b:70:d0:a6:ef:91:a7: 57:8c:c1:41:da:36:ef:22:c5:35:28:4e:1d:dd:b7:cc:6a:24: 34:bb:b0:ad:2e:52:37:b2:a2:06:39:f3:a5:bc:3e:2e:bf:72: bc:7d:9d:7d:44:a3:27:a2:02:14:61:b3:35:cc:2a:88:e8:77: d7:72:75:08 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCouZY5s0iuFaKMdKq/Ig9/Kxw3AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTk1OTIwWhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A1MTgwNjdlNzQ3NTcyNDU2MWVmZTljMzRhMDk5NDc2ZmYy ZTcwNzgyMDc3OTY5YTEzMDAyMDEwYzc2NTlmMjQ2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpRde7FdwDCBXEv8ckNPEcxMcGNmm/cp4Xrih44c/z4cRq nVWl91HoX/hZXlhR5KCzXCCwkLbme7R+JIC5Q+X0kYCbUlrqyXG+VLX2JzrZ7IWf D6qa7h9JHnjV/9lP5o6HEIton9/e2n2D3mzr8ja7K368zkBAZ3R6WUDRnjYkFWNG ljcl68KNvd2+2ZlfVcC3Se3xDaAnTjTLj+0vvYuZ+yd5SwJC+9ZWMzQegdSvWIW/ NOsmMqNHL772+zr30gMGUGYk8Sah2m1PgcOyKV+xAMfVAAiHb9Td4yKDe5Na9Hej S/mY3pX0X/ulcIaLpNOFlmottcdlsF5iJd45cPWzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUwX+/uFsK38YxHzvgHq6LGaFxdmYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzU0M2E1MjFjLWUyNmItNGNiYy1iNDQ1LTliYzUyMmJjNTViYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADqjkwDQYJKoZIhvcNAQELBQADggEBADvg6D95cDzmzFfUIyQY6XlyJQ+4 GePtcky7cBERicJRGQThrauZPhLlh7IAubFiuh2YewRqdoWdGRSseM8jFYKsg8y2 mWBxnvF75AqqFUXcvueI9FD2PmgrOUfWqFapFqZu7JY079iU5KQMblRNN+ZkRLS4 D0g4122NVyt8r3lCz/rIoWinHhaZMVQz5ryJCOnqJFY2nT+1Y9cWuFckHhuIFT1t LDiDdGepG5vjAaJLReNPsdvpyyRggIhS2EZVC3DQpu+Rp1eMwUHaNu8ixTUoTh3d t8xqJDS7sK0uUjeyogY586W8Pi6/crx9nX1EoyeiAhRhszXMKojod9dydQg= -----END CERTIFICATE-----Generated at Fri Oct 17 23:58:30 2025 by rpki-client