$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/543c88b1-3ba8-42a0-b488-fe0b4f8e6856.roa File: 543c88b1-3ba8-42a0-b488-fe0b4f8e6856.roa (raw, json) Hash identifier: Lw2NZnacBye0u7GJCV7sxdKIIovAez0+rQIZGF6v4lE= Subject key identifier: 8F:4A:E1:8F:71:EE:96:63:85:EF:55:51:0A:6F:EB:44:2C:A8:21:74 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4BA06698DCBAA7BF7D23B38420E2EAE0092E3F02 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/543c88b1-3ba8-42a0-b488-fe0b4f8e6856.roa Signing time: Thu 16 Oct 2025 15:28:42 +0000 ROA not before: Thu 16 Oct 2025 15:28:42 +0000 ROA not after: Thu 20 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.68.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:a0:66:98:dc:ba:a7:bf:7d:23:b3:84:20:e2:ea:e0:09:2e:3f:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 16 15:28:42 2025 GMT Not After : Nov 20 23:59:59 2025 GMT Subject: serialNumber=a11a0756de10e129fef155fd6124f80ce6edd4d4cc6001d3cb3cbe6a5e4bf345, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ea:e4:3e:a8:88:c1:00:29:d7:1a:e3:9a:d1: 83:05:c5:ce:b5:5d:80:21:eb:fc:2d:33:2a:9e:3d: cc:6c:72:10:e5:a4:9d:48:2a:05:2e:02:c7:41:48: eb:51:5c:22:57:bd:4f:8e:37:cb:9f:a1:58:b9:ec: 1b:df:88:c0:35:c8:16:86:18:23:87:e8:e0:6c:dd: 5c:9a:d0:41:89:b0:81:09:77:0d:58:c2:59:63:8a: 09:68:35:6f:1c:87:89:86:19:fa:75:b6:ea:03:72: d9:10:0c:dc:87:10:e1:1f:7f:e5:bc:4b:38:db:e3: 93:e0:72:62:ab:f4:d8:3a:3e:64:76:11:b1:7e:f3: 66:7b:32:a6:11:51:d9:a8:03:20:78:24:57:d1:d8: 6e:e4:ff:69:44:47:fa:6e:7c:d4:90:65:2e:12:f2: 1f:42:e4:0a:14:c0:35:70:81:50:06:fd:da:48:1d: 0b:40:f6:90:f7:2f:5b:6b:16:f6:59:c2:a5:c1:4e: bf:b1:30:12:a5:46:5c:be:47:39:27:57:1b:8f:12: 83:46:1d:6a:9f:60:d3:bc:ee:60:89:93:2c:e3:00: b8:31:6b:4e:b7:a5:87:cb:b6:b6:d3:af:f5:b2:24: ce:8e:da:8e:53:ee:03:5a:b4:33:28:0f:64:45:62: dd:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:4A:E1:8F:71:EE:96:63:85:EF:55:51:0A:6F:EB:44:2C:A8:21:74 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/543c88b1-3ba8-42a0-b488-fe0b4f8e6856.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.68.164.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:95:a1:cd:ff:f6:73:59:77:19:46:7e:b7:bc:82:3e:86:e4: 91:3f:72:d6:36:46:45:a8:cc:cd:3a:4e:03:97:bb:cc:68:97: a2:1f:4a:ee:84:9c:ee:5f:43:d0:2f:bb:cc:7f:6e:39:cc:b4: d6:6a:7c:b5:69:50:e7:dd:b8:d8:7d:96:9d:3e:c9:0c:97:7f: 0e:a2:b3:8f:ab:b4:3d:6c:10:2e:61:ee:0d:ff:43:6a:a4:ab: d3:87:57:6e:12:7b:3d:d9:62:af:64:63:39:ff:b3:91:e6:90: 01:fc:c3:4d:b2:44:10:01:26:34:bf:c3:9a:7a:54:a1:5b:dc: 1c:2c:1e:89:39:a0:01:3c:6a:05:74:2c:da:17:e1:80:36:c5: 16:bc:0b:15:34:96:04:62:1d:b8:b8:64:9f:66:c0:b0:5d:f8: 51:a3:c6:5a:c9:d4:47:aa:d0:be:48:d9:5d:16:8e:58:35:04: f5:ab:8b:e1:9e:4c:71:6e:45:67:04:31:1d:cd:ad:f2:70:e0: 63:b1:1f:84:8a:22:a2:0d:ad:5c:f9:62:c3:e3:4d:c9:a6:f0: 03:45:25:93:d8:cc:1f:17:47:84:c0:9b:dc:14:41:d7:95:10: ba:2f:91:c0:be:84:65:58:57:41:9a:93:81:da:59:24:f2:77: 79:cc:ac:94 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUS6BmmNy6p799I7OEIOLq4AkuPwIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE2MTUyODQyWhcNMjUxMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BhMTFhMDc1NmRlMTBlMTI5ZmVmMTU1ZmQ2MTI0ZjgwY2U2 ZWRkNGQ0Y2M2MDAxZDNjYjNjYmU2YTVlNGJmMzQ1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDC6uQ+qIjBACnXGuOa0YMFxc61XYAh6/wtMyqePcxschDl pJ1IKgUuAsdBSOtRXCJXvU+ON8ufoVi57BvfiMA1yBaGGCOH6OBs3Vya0EGJsIEJ dw1YwlljigloNW8ch4mGGfp1tuoDctkQDNyHEOEff+W8Szjb45PgcmKr9Ng6PmR2 EbF+82Z7MqYRUdmoAyB4JFfR2G7k/2lER/pufNSQZS4S8h9C5AoUwDVwgVAG/dpI HQtA9pD3L1trFvZZwqXBTr+xMBKlRly+RzknVxuPEoNGHWqfYNO87mCJkyzjALgx a063pYfLtrbTr/WyJM6O2o5T7gNatDMoD2RFYt2JAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUj0rhj3HulmOF71VRCm/rRCyoIXQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzU0M2M4OGIxLTNiYTgtNDJhMC1iNDg4LWZlMGI0ZjhlNjg1Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASRKQwDQYJKoZIhvcNAQELBQADggEBADuVoc3/9nNZdxlGfre8gj6G5JE/ ctY2RkWozM06TgOXu8xol6IfSu6EnO5fQ9Avu8x/bjnMtNZqfLVpUOfduNh9lp0+ yQyXfw6is4+rtD1sEC5h7g3/Q2qkq9OHV24Sez3ZYq9kYzn/s5HmkAH8w02yRBAB JjS/w5p6VKFb3BwsHok5oAE8agV0LNoX4YA2xRa8CxU0lgRiHbi4ZJ9mwLBd+FGj xlrJ1Eeq0L5I2V0Wjlg1BPWri+GeTHFuRWcEMR3NrfJw4GOxH4SKIqINrVz5YsPj Tcmm8ANFJZPYzB8XR4TAm9wUQdeVELovkcC+hGVYV0Gak4HaWSTyd3nMrJQ= -----END CERTIFICATE-----Generated at Mon Oct 20 02:57:42 2025 by rpki-client