$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7aa194c9-efa2-452f-8ed4-f70a543e077c.roa File: 7aa194c9-efa2-452f-8ed4-f70a543e077c.roa (raw, json) Hash identifier: kdmWj5pqveBY3FCO8ZCfIpFQcl6nPlGpmttVnDDwbLs= Subject key identifier: 91:98:BD:E0:3D:E8:EF:40:95:91:4B:46:90:2D:07:3E:FC:82:5D:C3 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 571CD789E38FC3DDC30764D1608186A565354AA3 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7aa194c9-efa2-452f-8ed4-f70a543e077c.roa Signing time: Thu 25 Sep 2025 17:00:01 +0000 ROA not before: Thu 25 Sep 2025 17:00:01 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.161.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:1c:d7:89:e3:8f:c3:dd:c3:07:64:d1:60:81:86:a5:65:35:4a:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 17:00:01 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=543b11632992b597667f454a9ae311cefad68c009c2ad784bf0af03dc3424f51, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f2:61:b6:03:fb:d6:3f:fa:04:75:30:61:07: 87:76:4e:14:f2:f2:b7:c9:8d:e3:2d:20:8d:49:f4: e1:65:6c:45:68:d6:3e:72:34:4e:16:1d:75:26:f5: 6c:3d:cf:53:b7:c4:f2:4b:48:f7:83:ff:fe:ed:e1: 3b:87:ec:89:70:0a:d5:ea:f7:db:ef:9c:41:c5:cb: 6d:0e:24:b6:a9:1a:0b:84:fb:b2:ba:9d:60:2a:68: f0:13:53:f9:0c:de:27:3f:64:7c:8b:3c:c7:7e:ff: 06:06:68:82:e2:b8:19:e8:85:ba:e8:e4:9f:d2:68: a4:0a:b0:42:87:08:63:e4:79:f6:8a:13:da:5b:e8: 4e:f4:2c:78:74:99:5c:0a:e9:33:66:dc:52:6f:c2: fc:7b:72:d8:57:7b:c2:28:e3:99:71:07:d5:0a:be: 1d:89:f7:d6:08:e0:42:a4:bb:dd:dc:4d:63:f9:3d: 77:39:ce:a9:40:c4:e7:ef:d6:ff:ee:95:a0:1e:59: c4:a1:26:53:c3:a5:09:67:3a:f1:3c:a0:b5:0a:59: 2a:fa:47:cd:77:09:fc:f3:8d:8a:88:fc:ed:31:23: 6b:e7:95:f2:98:c8:5a:69:f9:77:de:16:98:ae:ea: b6:e8:c3:d0:fd:fc:f8:d8:f3:03:93:0b:28:b1:e3: bc:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:98:BD:E0:3D:E8:EF:40:95:91:4B:46:90:2D:07:3E:FC:82:5D:C3 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7aa194c9-efa2-452f-8ed4-f70a543e077c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.161.175.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:ad:9e:ef:d9:5f:77:89:ab:3f:39:8a:ff:9f:65:9f:d7:36: 0b:be:71:2b:33:ae:0e:25:61:16:a8:f3:81:17:bd:8d:ea:c9: 0c:ba:74:a6:2e:bd:0d:3b:a0:c8:60:56:2c:79:d3:34:0d:64: c1:f6:8b:f1:d9:ec:ca:bd:96:e8:ad:c6:af:36:4b:18:ab:cb: 57:e8:19:51:10:96:d3:bc:77:96:ca:7b:5e:a0:e4:d4:75:57: 8d:83:d2:1a:8a:ef:c8:da:95:d4:c3:f5:f1:01:96:3e:df:e7: 9c:9d:47:30:b5:93:58:51:00:8e:23:14:ea:23:bd:56:58:61: 0b:07:df:0b:0c:bc:21:bf:c3:0a:79:f3:74:ba:aa:7b:a2:39: 52:57:30:d5:23:44:09:2a:98:30:01:53:08:e0:bb:7c:43:66: 15:ad:db:22:03:d0:b9:b8:06:e6:f6:ce:e0:f4:8a:34:c6:b2: 3c:2c:61:bb:d1:6d:f8:f1:28:de:e0:95:79:49:4d:5f:34:f7: 47:0f:27:ef:32:7d:00:ee:ea:e7:a9:7c:7c:1e:8e:07:98:56: 4b:2c:f0:8e:94:29:da:c1:a6:5f:0d:3f:c3:91:be:6f:f4:27: fc:c9:9c:84:78:89:a9:94:d8:dc:5c:5e:9a:55:87:80:f7:7e: 19:61:f1:33 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVxzXieOPw93DB2TRYIGGpWU1SqMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTcwMDAxWhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A1NDNiMTE2MzI5OTJiNTk3NjY3ZjQ1NGE5YWUzMTFjZWZh ZDY4YzAwOWMyYWQ3ODRiZjBhZjAzZGMzNDI0ZjUxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC58mG2A/vWP/oEdTBhB4d2ThTy8rfJjeMtII1J9OFlbEVo 1j5yNE4WHXUm9Ww9z1O3xPJLSPeD//7t4TuH7IlwCtXq99vvnEHFy20OJLapGguE +7K6nWAqaPATU/kM3ic/ZHyLPMd+/wYGaILiuBnohbro5J/SaKQKsEKHCGPkefaK E9pb6E70LHh0mVwK6TNm3FJvwvx7cthXe8Io45lxB9UKvh2J99YI4EKku93cTWP5 PXc5zqlAxOfv1v/ulaAeWcShJlPDpQlnOvE8oLUKWSr6R813CfzzjYqI/O0xI2vn lfKYyFpp+XfeFpiu6rbow9D9/PjY8wOTCyix47w/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUkZi94D3o70CVkUtGkC0HPvyCXcMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzdhYTE5NGM5LWVmYTItNDUyZi04ZWQ0LWY3MGE1NDNlMDc3Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADoa8wDQYJKoZIhvcNAQELBQADggEBADqtnu/ZX3eJqz85iv+fZZ/XNgu+ cSszrg4lYRao84EXvY3qyQy6dKYuvQ07oMhgVix50zQNZMH2i/HZ7Mq9luitxq82 Sxiry1foGVEQltO8d5bKe16g5NR1V42D0hqK78jaldTD9fEBlj7f55ydRzC1k1hR AI4jFOojvVZYYQsH3wsMvCG/wwp583S6qnuiOVJXMNUjRAkqmDABUwjgu3xDZhWt 2yID0Lm4Bub2zuD0ijTGsjwsYbvRbfjxKN7glXlJTV8090cPJ+8yfQDu6uepfHwe jgeYVkss8I6UKdrBpl8NP8ORvm/0J/zJnIR4iamU2NxcXppVh4D3fhlh8TM= -----END CERTIFICATE-----Generated at Fri Oct 17 23:48:31 2025 by rpki-client