$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/165fea98-45c1-41ae-a957-e637ec01188b.roa File: 165fea98-45c1-41ae-a957-e637ec01188b.roa (raw, json) Hash identifier: iMAzLQ8tSHfJw8TuSnXJOdVa0F+J5JkqnZjw8wsolfs= Subject key identifier: D4:F3:58:4E:D1:1B:2B:24:B0:EA:11:09:AF:66:F1:86:6B:6B:B7:CD Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0E434EA083E08A424B0137D8DA4092F3A4A9A243 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/165fea98-45c1-41ae-a957-e637ec01188b.roa Signing time: Sun 19 Oct 2025 11:53:42 +0000 ROA not before: Sun 19 Oct 2025 11:53:42 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.225.234.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:43:4e:a0:83:e0:8a:42:4b:01:37:d8:da:40:92:f3:a4:a9:a2:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 11:53:42 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=be037a768974d70294e438f0bfa96ce9d70d5d42b609e8a514ad3f4195afb82d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:64:27:42:7d:4d:ad:70:a4:d5:c9:83:4f:ea: 39:50:13:ca:5d:e5:92:f7:e9:7a:42:2d:0a:50:c6: 51:ce:06:21:fe:ab:ee:68:40:39:ab:0f:68:f7:1d: a6:f2:75:03:16:93:3c:1f:68:eb:0a:92:92:55:63: ab:7b:a6:87:52:47:7e:e1:9b:07:d0:8c:fe:f7:39: fd:b4:0d:f4:ff:2e:47:8b:4a:71:53:53:24:3c:ec: 88:2c:e6:7f:8b:53:d2:fe:bb:b9:ed:d3:f4:78:ee: 57:f5:8a:39:2d:15:45:26:d4:30:11:cb:5b:d4:85: d1:dc:58:a7:b8:33:ff:f0:af:14:4c:cb:5e:62:7b: 12:49:aa:19:a8:60:4b:fc:d1:08:1e:02:59:72:cc: b9:cd:58:c7:b3:c6:6f:24:53:fe:a7:54:14:55:72: c6:4a:0b:c1:7c:d7:f3:d1:b7:bc:88:c2:c6:51:b5: 4d:1a:b3:5a:8c:04:a6:f4:b6:00:1c:06:f0:96:a9: 05:38:f2:3c:dc:55:f4:37:5b:3e:31:28:12:f5:98: fc:f8:b4:84:d4:cf:f2:73:b6:8e:ad:05:25:f5:94: e6:47:5c:26:63:ae:12:77:e1:14:e1:e3:6d:fa:c7: 36:1a:77:71:da:ad:a4:88:54:be:75:3c:5c:5d:30: cf:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:F3:58:4E:D1:1B:2B:24:B0:EA:11:09:AF:66:F1:86:6B:6B:B7:CD X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/165fea98-45c1-41ae-a957-e637ec01188b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.225.234.0/23 Signature Algorithm: sha256WithRSAEncryption 51:94:cc:d6:02:67:c0:3b:1d:72:4b:9d:39:8a:49:3a:1b:53: fb:2a:ea:1c:5d:df:8a:19:21:ec:24:32:49:46:84:6d:ad:9a: 4e:80:83:4a:d6:d0:65:a6:ec:b1:fc:b5:3f:ce:29:bc:45:77: 5a:b5:e5:82:8d:33:9f:7f:b0:0c:c1:d6:0a:8d:1e:d9:29:f6: 0e:54:aa:fa:fd:4b:f3:63:f7:db:3e:5a:3f:7d:f6:81:1a:3b: 30:eb:23:61:49:6a:2d:63:4c:d3:56:49:ca:2a:19:53:69:79: ce:63:2b:f1:77:d5:f7:e5:30:ff:a1:f9:a8:93:35:41:64:b3: 90:b7:b4:26:a2:93:2b:eb:eb:20:91:45:72:41:ad:eb:80:b6: d5:83:aa:4c:95:45:74:13:5c:a1:e6:42:ff:33:71:aa:fd:48: 35:f5:fc:0e:0d:db:59:5e:17:4f:69:a2:b0:92:22:cc:5c:ce: 17:76:91:b4:a0:b0:61:ed:20:21:2b:d7:14:99:cf:61:f7:f8: c0:84:41:f2:2e:6e:22:88:96:2f:aa:61:38:c5:07:ab:17:ef: 30:ce:1c:00:ed:33:9f:3e:0b:b6:e1:c4:00:8d:63:64:36:59: b1:5b:e0:37:f4:fd:36:ad:10:ab:73:32:9d:42:2e:4d:c2:2f: 00:03:6f:d2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDkNOoIPgikJLATfY2kCS86SpokMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTE1MzQyWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BiZTAzN2E3Njg5NzRkNzAyOTRlNDM4ZjBiZmE5NmNlOWQ3 MGQ1ZDQyYjYwOWU4YTUxNGFkM2Y0MTk1YWZiODJkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8ZCdCfU2tcKTVyYNP6jlQE8pd5ZL36XpCLQpQxlHOBiH+ q+5oQDmrD2j3HabydQMWkzwfaOsKkpJVY6t7podSR37hmwfQjP73Of20DfT/LkeL SnFTUyQ87Igs5n+LU9L+u7nt0/R47lf1ijktFUUm1DARy1vUhdHcWKe4M//wrxRM y15iexJJqhmoYEv80QgeAllyzLnNWMezxm8kU/6nVBRVcsZKC8F81/PRt7yIwsZR tU0as1qMBKb0tgAcBvCWqQU48jzcVfQ3Wz4xKBL1mPz4tITUz/Jzto6tBSX1lOZH XCZjrhJ34RTh4236xzYad3HaraSIVL51PFxdMM8nAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU1PNYTtEbKySw6hEJr2bxhmtrt80wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzE2NWZlYTk4LTQ1YzEtNDFhZS1hOTU3LWU2MzdlYzAxMTg4Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEN4eowDQYJKoZIhvcNAQELBQADggEBAFGUzNYCZ8A7HXJLnTmKSTobU/sq 6hxd34oZIewkMklGhG2tmk6Ag0rW0GWm7LH8tT/OKbxFd1q15YKNM59/sAzB1gqN Htkp9g5Uqvr9S/Nj99s+Wj999oEaOzDrI2FJai1jTNNWScoqGVNpec5jK/F31ffl MP+h+aiTNUFks5C3tCaikyvr6yCRRXJBreuAttWDqkyVRXQTXKHmQv8zcar9SDX1 /A4N21leF09porCSIsxczhd2kbSgsGHtICEr1xSZz2H3+MCEQfIubiKIli+qYTjF B6sX7zDOHADtM58+C7bhxACNY2Q2WbFb4Df0/TatEKtzMp1CLk3CLwADb9I= -----END CERTIFICATE-----Generated at Mon Oct 20 06:12:09 2025 by rpki-client