$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/21bf1ad2-a5ee-4c2a-9ede-8c72f3bfd7f8.roa File: 21bf1ad2-a5ee-4c2a-9ede-8c72f3bfd7f8.roa (raw, json) Hash identifier: T53Ws5ssFSEhmMAjymd2rXYxm2Z1lpWgxUcx+YBN2uk= Subject key identifier: E6:91:DE:08:3A:14:7E:C6:6B:33:EF:3D:87:FC:4F:06:59:A5:B6:E6 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4301B4133BF0AE66B142FD8FC0C290BED63395DB Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/21bf1ad2-a5ee-4c2a-9ede-8c72f3bfd7f8.roa Signing time: Sun 19 Oct 2025 16:42:31 +0000 ROA not before: Sun 19 Oct 2025 16:42:31 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.225.206.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:01:b4:13:3b:f0:ae:66:b1:42:fd:8f:c0:c2:90:be:d6:33:95:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 16:42:31 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=aa3ea9d5624366b22dbaaf05e502e9a3b24d777727f93ed6ce97600566af431a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0a:7d:37:ef:fd:9d:5a:c9:d9:2b:c6:41:4e: a0:95:05:7e:7a:a1:90:0b:2d:d0:5f:f0:ae:91:e9: 8e:bf:61:3e:13:56:1d:f4:0b:17:4e:e2:60:03:d9: cc:34:97:8d:55:aa:33:59:30:48:e6:13:e4:f3:5d: 41:92:7d:cc:ea:ad:2a:f1:43:9e:93:cf:a8:a2:ab: ab:b6:12:c1:ba:7d:82:38:ee:39:48:87:82:cd:9c: a2:f2:b3:b7:1f:1b:15:55:39:31:ae:4a:78:31:80: 17:10:f5:da:41:76:8e:29:c9:c8:af:c0:5a:ed:d2: 90:bc:a4:55:09:6d:97:de:f0:c4:f0:bc:ef:90:fd: 7e:c4:8f:bb:3f:92:48:e5:b4:a4:3b:5d:62:83:5f: a1:ea:b5:49:39:4b:b4:2b:aa:7c:74:a5:29:42:5d: db:00:b7:59:17:99:21:71:ef:59:54:84:b5:7c:2b: e0:f4:00:10:47:b0:8d:ba:0a:5e:40:ba:bc:eb:6c: eb:92:c0:6c:37:f1:20:8d:db:21:ab:1e:33:6e:98: 4f:f6:9c:f2:34:a4:65:7f:53:cb:d7:97:43:81:64: 57:cc:6f:54:d2:fb:e0:0f:88:1e:1f:f2:51:2a:cf: d3:c3:69:72:8e:97:0f:f2:ab:14:b8:9d:1f:11:3b: 59:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:91:DE:08:3A:14:7E:C6:6B:33:EF:3D:87:FC:4F:06:59:A5:B6:E6 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/21bf1ad2-a5ee-4c2a-9ede-8c72f3bfd7f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.225.206.0/23 Signature Algorithm: sha256WithRSAEncryption 12:ea:d5:8f:95:13:0f:ab:46:ed:bf:af:c5:69:81:e6:b8:8d: 13:c0:26:8a:00:a8:33:42:83:2e:4e:b8:66:da:6b:e3:bd:82: a5:3a:a6:c4:d4:a9:9b:6d:04:5e:e9:79:40:41:ba:b9:6c:bd: 3e:20:05:90:93:e8:06:e1:e2:8e:eb:8b:69:28:ff:96:ed:8d: 87:16:3a:7b:be:6d:24:9d:cd:ab:a1:41:8e:82:c4:db:b1:15: 4d:d8:5b:bb:40:8f:30:9a:ae:19:f2:b6:21:be:d0:91:6c:65: 76:ec:08:1a:19:c2:a1:7e:7c:a8:46:4b:ad:58:cb:72:d4:ae: 07:a5:09:a9:42:b7:97:cf:77:22:41:54:d6:89:bc:36:8e:86: b5:4e:b5:df:b0:2d:14:f8:22:5e:15:10:0d:ff:82:33:65:0a: bb:41:69:72:a8:c8:72:86:be:c1:db:59:63:00:ec:a9:9a:7a: 20:78:8c:ca:be:d2:f1:53:fc:c2:b7:7a:7c:c6:3a:22:e7:59: 2f:bd:15:a8:c8:b6:a0:ab:af:5c:a0:eb:0d:ca:b3:a3:60:d2: 85:3b:b2:99:d7:78:f6:cc:8d:5b:da:d4:a7:44:ef:3f:3d:4b: 09:57:07:ee:2d:e0:4c:9d:c5:1b:5b:ce:fb:64:77:44:33:9b: 2e:54:41:2e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQwG0EzvwrmaxQv2PwMKQvtYzldswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTY0MjMxWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BhYTNlYTlkNTYyNDM2NmIyMmRiYWFmMDVlNTAyZTlhM2Iy NGQ3Nzc3MjdmOTNlZDZjZTk3NjAwNTY2YWY0MzFhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDCn037/2dWsnZK8ZBTqCVBX56oZALLdBf8K6R6Y6/YT4T Vh30CxdO4mAD2cw0l41VqjNZMEjmE+TzXUGSfczqrSrxQ56Tz6iiq6u2EsG6fYI4 7jlIh4LNnKLys7cfGxVVOTGuSngxgBcQ9dpBdo4pycivwFrt0pC8pFUJbZfe8MTw vO+Q/X7Ej7s/kkjltKQ7XWKDX6HqtUk5S7Qrqnx0pSlCXdsAt1kXmSFx71lUhLV8 K+D0ABBHsI26Cl5AurzrbOuSwGw38SCN2yGrHjNumE/2nPI0pGV/U8vXl0OBZFfM b1TS++APiB4f8lEqz9PDaXKOlw/yqxS4nR8RO1lFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5pHeCDoUfsZrM+89h/xPBlmltuYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzIxYmYxYWQyLWE1ZWUtNGMyYS05ZWRlLThjNzJmM2JmZDdmOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEN4c4wDQYJKoZIhvcNAQELBQADggEBABLq1Y+VEw+rRu2/r8Vpgea4jRPA JooAqDNCgy5OuGbaa+O9gqU6psTUqZttBF7peUBBurlsvT4gBZCT6Abh4o7ri2ko /5btjYcWOnu+bSSdzauhQY6CxNuxFU3YW7tAjzCarhnytiG+0JFsZXbsCBoZwqF+ fKhGS61Yy3LUrgelCalCt5fPdyJBVNaJvDaOhrVOtd+wLRT4Il4VEA3/gjNlCrtB aXKoyHKGvsHbWWMA7KmaeiB4jMq+0vFT/MK3enzGOiLnWS+9FajItqCrr1yg6w3K s6Ng0oU7spnXePbMjVva1KdE7z89SwlXB+4t4EydxRtbzvtkd0Qzmy5UQS4= -----END CERTIFICATE-----Generated at Mon Oct 20 10:59:10 2025 by rpki-client