$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0b9c535a-37c9-47ba-b45f-a3f51652add4.roa File: 0b9c535a-37c9-47ba-b45f-a3f51652add4.roa (raw, json) Hash identifier: TZtP8Uic8epVT2ZczOaq5vuhU+LYA2WPojJe2Cun25c= Subject key identifier: CD:A1:82:41:F8:D0:D6:49:32:F4:4B:32:3C:31:CF:BB:25:77:1E:76 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 437A274CE59751B664325894696E3DC8F0816813 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0b9c535a-37c9-47ba-b45f-a3f51652add4.roa Signing time: Sun 19 Oct 2025 17:41:24 +0000 ROA not before: Sun 19 Oct 2025 17:41:24 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.226.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:7a:27:4c:e5:97:51:b6:64:32:58:94:69:6e:3d:c8:f0:81:68:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 17:41:24 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=985475b3e7faeaf5b8d7dd9a61d6facfd53c137195a013f5ef09aa86eaec9c94, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:da:27:15:e0:ff:b4:b8:79:cd:5f:7e:c6:94: 02:2e:d4:c6:e3:4f:07:b1:14:af:52:7d:46:6c:14: a0:45:4c:52:4e:7d:a9:9f:50:9b:7b:68:fd:96:8c: 08:b8:1a:38:1c:c8:9c:e5:e2:c3:ae:5e:90:cc:0f: 1c:05:3b:a9:ab:34:9f:2a:f6:9d:e8:f5:2b:f4:7e: 7d:6e:ac:69:98:56:51:c8:87:37:a0:b0:60:c6:10: b7:c6:cc:2f:c6:0a:dd:40:bf:34:8f:84:ab:29:0a: 91:c3:3c:ac:87:38:aa:6a:21:a7:fc:46:29:f2:e5: 93:27:b5:6f:2c:06:ea:ad:34:b4:e3:32:21:7f:5d: 09:b2:5d:ef:88:46:7f:a6:d5:a0:80:33:1c:09:92: 1c:7a:1b:ab:63:88:1c:b1:c7:8d:a3:f1:45:66:6c: de:46:d1:8a:4e:7e:09:18:d5:c1:de:90:7b:ca:01: df:20:f3:2f:f8:b8:e9:b2:e2:8d:af:92:9e:65:db: 4a:8b:26:5c:e6:89:1f:2e:d4:13:3b:d4:50:32:5f: 7d:ca:79:30:cb:19:8a:6f:d3:f4:88:f4:df:ae:25: 0a:e3:6c:45:1d:db:02:fa:ba:ac:b0:40:1b:f0:3e: f9:83:b0:84:1b:2c:62:47:1e:e0:77:65:66:27:6b: 62:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:A1:82:41:F8:D0:D6:49:32:F4:4B:32:3C:31:CF:BB:25:77:1E:76 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0b9c535a-37c9-47ba-b45f-a3f51652add4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.226.128.0/19 Signature Algorithm: sha256WithRSAEncryption 30:13:1f:ee:10:22:ff:75:d5:dd:5c:06:a0:88:e8:c4:c1:29: a7:25:87:70:ed:48:b7:3b:8b:29:d5:e1:91:58:41:f8:11:b4: 0a:23:09:05:e8:10:40:7b:f9:bd:29:0f:6e:9c:37:48:24:b8: b9:ad:48:17:08:d7:1d:99:d8:bd:c1:b6:e9:ea:3c:dc:a9:40: 1f:61:8d:7d:a2:03:c6:7e:30:68:48:e5:47:93:2b:18:ef:41: d9:84:fa:e1:57:2e:ad:93:2e:7b:c8:6f:75:2c:5c:3b:fe:29: ae:f5:cb:ba:72:23:5f:d8:b7:c8:e0:4d:3c:6a:bc:f1:18:e0: 73:6a:f3:52:b1:b3:b8:95:3d:81:10:f8:57:aa:3e:e9:22:cf: d6:8c:73:96:d9:f3:2a:72:22:2e:47:47:9e:e1:f1:d1:c7:43: 47:79:29:c7:16:7f:a7:2e:b5:21:28:2c:f5:f5:86:6a:40:67: 77:48:c0:90:8c:02:39:be:5e:45:f7:96:3d:40:52:9f:86:f3: 34:c1:a5:bd:e0:5f:a6:24:1f:22:ad:d8:b5:11:d4:a3:46:e2: e7:6b:b4:c7:5a:ae:47:ae:f5:2b:7d:07:e6:4a:37:ad:f1:94: 9c:db:16:ab:90:95:c2:16:75:a7:6e:ca:a3:e0:9d:49:ff:a7: f3:8c:81:42 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQ3onTOWXUbZkMliUaW49yPCBaBMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTc0MTI0WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A5ODU0NzViM2U3ZmFlYWY1YjhkN2RkOWE2MWQ2ZmFjZmQ1 M2MxMzcxOTVhMDEzZjVlZjA5YWE4NmVhZWM5Yzk0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDA2icV4P+0uHnNX37GlAIu1MbjTwexFK9SfUZsFKBFTFJO famfUJt7aP2WjAi4GjgcyJzl4sOuXpDMDxwFO6mrNJ8q9p3o9Sv0fn1urGmYVlHI hzegsGDGELfGzC/GCt1AvzSPhKspCpHDPKyHOKpqIaf8Riny5ZMntW8sBuqtNLTj MiF/XQmyXe+IRn+m1aCAMxwJkhx6G6tjiByxx42j8UVmbN5G0YpOfgkY1cHekHvK Ad8g8y/4uOmy4o2vkp5l20qLJlzmiR8u1BM71FAyX33KeTDLGYpv0/SI9N+uJQrj bEUd2wL6uqywQBvwPvmDsIQbLGJHHuB3ZWYna2KXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUzaGCQfjQ1kky9EsyPDHPuyV3HnYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzBiOWM1MzVhLTM3YzktNDdiYS1iNDVmLWEzZjUxNjUyYWRkNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUN4oAwDQYJKoZIhvcNAQELBQADggEBADATH+4QIv911d1cBqCI6MTBKacl h3DtSLc7iynV4ZFYQfgRtAojCQXoEEB7+b0pD26cN0gkuLmtSBcI1x2Z2L3Btunq PNypQB9hjX2iA8Z+MGhI5UeTKxjvQdmE+uFXLq2TLnvIb3UsXDv+Ka71y7pyI1/Y t8jgTTxqvPEY4HNq81Kxs7iVPYEQ+FeqPukiz9aMc5bZ8ypyIi5HR57h8dHHQ0d5 KccWf6cutSEoLPX1hmpAZ3dIwJCMAjm+XkX3lj1AUp+G8zTBpb3gX6YkHyKt2LUR 1KNG4udrtMdarkeu9St9B+ZKN63xlJzbFquQlcIWdaduyqPgnUn/p/OMgUI= -----END CERTIFICATE-----Generated at Mon Oct 20 11:11:22 2025 by rpki-client