$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7543caa3-ded2-4aab-a2aa-542c699342b3.roa File: 7543caa3-ded2-4aab-a2aa-542c699342b3.roa (raw, json) Hash identifier: sHUJMa04nwBQRXX1O4Wkv0lb2ABUJMuIUeMjNoo+Bxk= Subject key identifier: 8D:0F:E9:64:D9:C3:D8:1B:6B:86:A0:52:94:32:69:74:94:58:DD:51 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5D656349D7367475455074C7F0D0B664D5E97994 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7543caa3-ded2-4aab-a2aa-542c699342b3.roa Signing time: Fri 31 Oct 2025 20:06:58 +0000 ROA not before: Fri 31 Oct 2025 20:06:58 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.2.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:65:63:49:d7:36:74:75:45:50:74:c7:f0:d0:b6:64:d5:e9:79:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 31 20:06:58 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=1a805a3ff6efdd72a67ae352a34fb5d347d39c94fc330f37379a4101bae80b60, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0e:ee:e4:5b:d5:86:51:07:33:c9:a8:1a:0e: 1e:ee:7c:bf:02:88:99:44:34:4f:34:8c:b8:aa:57: 39:b1:c9:63:eb:6a:5d:72:aa:55:3c:bc:51:3f:bf: 43:15:da:09:76:e5:21:12:aa:23:f1:db:88:ad:f1: 73:46:2b:0a:82:07:6a:10:11:fc:20:0a:ad:ea:47: 36:c8:ba:61:2f:14:a6:d8:1e:85:c9:b2:60:aa:ae: df:66:49:70:e9:e5:7c:01:36:0e:72:96:3c:07:66: a3:86:2e:14:d0:57:75:cd:01:7f:e0:df:3e:11:ee: 76:dd:11:f2:41:7e:40:a3:82:34:a4:0f:a3:97:3b: a1:24:0e:27:44:f1:c9:08:d8:5c:3f:60:3b:77:19: 65:5d:34:fb:c4:7e:94:4f:00:97:28:7d:a9:1e:4c: f8:ec:f7:e1:74:d4:7e:f6:40:a0:7d:66:d4:cb:71: 49:30:80:9a:60:1a:50:60:ee:b6:bd:f2:b2:8d:9b: f1:5f:37:c4:33:fb:c0:e0:0c:1f:29:99:ab:d8:74: 8e:f3:ba:c3:e3:1b:4b:5e:ae:b6:14:1d:04:1d:78: 31:de:c6:71:62:fe:fb:da:97:87:ab:76:9d:61:f8: 04:a9:b0:5a:47:99:d4:be:fe:fc:55:dc:84:41:ec: a3:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:0F:E9:64:D9:C3:D8:1B:6B:86:A0:52:94:32:69:74:94:58:DD:51 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7543caa3-ded2-4aab-a2aa-542c699342b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.2.15.0/24 Signature Algorithm: sha256WithRSAEncryption 32:95:af:64:85:32:e9:e5:70:c0:ec:f0:32:ff:e9:40:f8:db: 61:d6:d2:9e:54:f0:b3:ff:4e:fa:88:44:dd:19:44:09:ed:8b: 1c:97:60:d0:84:0d:d1:5d:16:b5:f4:cb:e9:71:0a:d0:6f:ec: 88:81:93:37:1d:33:00:77:8a:69:46:41:60:1a:b9:bd:88:ca: ab:fb:0b:d4:c6:4c:9d:c9:20:15:f7:0a:a4:45:7c:92:b6:8c: 75:b9:dc:f8:52:0a:4e:06:0b:7f:6c:60:4f:f9:53:7d:ec:f0: a5:c7:26:d6:46:d3:aa:7d:f0:ad:77:37:34:6d:97:fd:63:55: 54:d5:aa:70:aa:fd:32:71:85:31:dc:df:51:73:81:6a:13:69: 0c:df:5d:40:a0:ff:e0:6d:1e:7c:74:76:f4:2a:57:28:36:72: 74:8d:84:50:25:13:f5:e4:0f:9c:a2:1e:a1:28:79:64:07:15: b0:1b:a5:63:e3:c5:bf:26:49:2f:88:2e:a2:24:83:99:92:bc: 26:a1:7c:bb:1e:0f:41:1e:3b:ea:a0:fc:2d:0d:73:49:4e:55: a8:1a:0f:4c:20:ca:a3:28:a9:f8:98:a0:ea:45:91:f3:82:36: 6e:4e:a2:71:e4:1d:1f:ec:07:8d:4d:3c:c7:40:0c:91:1c:20: 38:d8:30:4b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXWVjSdc2dHVFUHTH8NC2ZNXpeZQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDMxMjAwNjU4WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AxYTgwNWEzZmY2ZWZkZDcyYTY3YWUzNTJhMzRmYjVkMzQ3 ZDM5Yzk0ZmMzMzBmMzczNzlhNDEwMWJhZTgwYjYwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGDu7kW9WGUQczyagaDh7ufL8CiJlENE80jLiqVzmxyWPr al1yqlU8vFE/v0MV2gl25SESqiPx24it8XNGKwqCB2oQEfwgCq3qRzbIumEvFKbY HoXJsmCqrt9mSXDp5XwBNg5yljwHZqOGLhTQV3XNAX/g3z4R7nbdEfJBfkCjgjSk D6OXO6EkDidE8ckI2Fw/YDt3GWVdNPvEfpRPAJcofakeTPjs9+F01H72QKB9ZtTL cUkwgJpgGlBg7ra98rKNm/FfN8Qz+8DgDB8pmavYdI7zusPjG0terrYUHQQdeDHe xnFi/vval4erdp1h+ASpsFpHmdS+/vxV3IRB7KPXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUjQ/pZNnD2BtrhqBSlDJpdJRY3VEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzc1NDNjYWEzLWRlZDItNGFhYi1hMmFhLTU0MmM2OTkzNDJiMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADAg8wDQYJKoZIhvcNAQELBQADggEBADKVr2SFMunlcMDs8DL/6UD422HW 0p5U8LP/TvqIRN0ZRAntixyXYNCEDdFdFrX0y+lxCtBv7IiBkzcdMwB3imlGQWAa ub2Iyqv7C9TGTJ3JIBX3CqRFfJK2jHW53PhSCk4GC39sYE/5U33s8KXHJtZG06p9 8K13NzRtl/1jVVTVqnCq/TJxhTHc31FzgWoTaQzfXUCg/+BtHnx0dvQqVyg2cnSN hFAlE/XkD5yiHqEoeWQHFbAbpWPjxb8mSS+ILqIkg5mSvCahfLseD0EeO+qg/C0N c0lOVagaD0wgyqMoqfiYoOpFkfOCNm5OonHkHR/sB41NPMdADJEcIDjYMEs= -----END CERTIFICATE-----Generated at Wed Nov 5 01:46:13 2025 by rpki-client