$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/240ce952-925c-4906-8cb9-0e6485a36e7a.roa File: 240ce952-925c-4906-8cb9-0e6485a36e7a.roa (raw, json) Hash identifier: aBjH6IlW4nRkZf2VMe4lJk1eyVTidnPhcD/Cg4oyY/E= Subject key identifier: D0:ED:BB:D3:A0:82:1F:42:46:A9:9A:B7:F2:4E:08:B9:27:39:E3:28 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6CF5AC45F334248855A7DC6DCB9326C41C7F49D5 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/240ce952-925c-4906-8cb9-0e6485a36e7a.roa Signing time: Sun 19 Oct 2025 09:31:36 +0000 ROA not before: Sun 19 Oct 2025 09:31:36 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.226.110.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:f5:ac:45:f3:34:24:88:55:a7:dc:6d:cb:93:26:c4:1c:7f:49:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 09:31:36 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=6a16c22ea51e72ac2ff63ed72cf7f8d5b74a699a306777a13b6bb67911078d27, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:10:39:9d:78:f2:e1:64:00:e9:d8:40:87:99: 41:60:d5:6d:6a:5b:5f:bd:df:81:a2:77:48:75:3f: 2e:e1:26:41:ed:51:b7:83:ab:55:5d:b5:82:58:51: 2a:7d:2c:a8:42:e9:30:05:14:26:cb:14:87:bd:c9: 58:95:8d:fe:05:4a:77:8c:81:57:ca:73:f6:52:30: e1:a3:c3:d1:dd:e3:9f:6f:2d:1f:50:e7:27:dd:e0: 76:5b:9a:99:4a:19:67:2b:73:86:d1:53:7a:04:d9: 01:76:32:8d:f2:11:2c:a5:74:cd:62:54:18:56:2b: a7:ff:18:96:13:17:ad:51:ff:fd:cd:94:d9:96:dd: 6f:15:62:6e:6e:7d:b7:be:db:14:a6:bb:5f:86:0d: 0b:d7:fe:3d:ad:31:83:92:82:29:01:64:fd:bd:86: 01:a4:bc:71:92:f7:cd:8a:de:10:c2:c2:69:67:3a: 66:d8:eb:15:08:70:dd:31:47:e1:9b:d1:d0:99:9c: 06:8e:61:ab:ba:9e:36:3b:b5:12:88:8e:0d:be:79: 03:d9:e2:9c:75:bb:df:bc:dc:5e:0c:c5:51:bd:8f: df:66:2f:87:c7:41:b8:1f:3e:ed:c8:fb:08:89:49: f8:06:68:01:1f:30:75:8b:81:fd:aa:2b:b4:81:35: 75:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:ED:BB:D3:A0:82:1F:42:46:A9:9A:B7:F2:4E:08:B9:27:39:E3:28 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/240ce952-925c-4906-8cb9-0e6485a36e7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.226.110.0/23 Signature Algorithm: sha256WithRSAEncryption 4a:ad:32:40:e5:aa:4c:20:e8:5f:97:33:13:e8:39:ac:cf:04: 6a:ce:a3:38:d8:18:a4:f2:f4:1e:d3:fb:89:15:d7:d7:fd:ca: c3:70:4d:d3:ed:32:58:4a:6b:a2:78:70:16:31:61:ca:cc:88: df:78:a3:24:c4:02:76:78:7f:5e:28:55:11:89:6a:42:14:b6: 3f:c5:55:94:a4:ff:e3:4b:ca:79:01:c3:e5:c0:c7:07:b2:5c: 2e:32:ce:39:a6:c7:40:1e:bf:a2:d4:3f:f8:92:aa:76:85:b8: 0a:41:fc:93:e8:1f:63:d6:1e:4b:1c:65:d4:8c:0d:2b:0e:1a: 26:05:f4:ea:71:e2:d9:87:53:08:3c:de:c7:0f:f2:d5:ac:cd: 19:eb:22:e2:ff:2b:b4:31:99:30:d9:00:46:37:b2:a7:6f:f6: 4b:bb:4b:bb:0c:59:98:01:7c:b4:74:5c:1f:8f:ae:c3:cd:9f: 1b:c4:65:65:0d:f0:fb:65:77:7a:55:98:a1:74:db:b8:99:85: fb:c6:03:63:87:4c:52:8e:4a:53:7b:69:3b:ca:24:a0:b9:5a: 07:39:43:45:b5:e7:d8:41:2b:e1:df:4d:c8:04:66:49:24:8d: 48:66:80:3d:c9:e5:e5:ef:96:bc:a0:19:3c:2c:95:c9:fd:32: c8:02:57:da -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbPWsRfM0JIhVp9xty5MmxBx/SdUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MDkzMTM2WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A2YTE2YzIyZWE1MWU3MmFjMmZmNjNlZDcyY2Y3ZjhkNWI3 NGE2OTlhMzA2Nzc3YTEzYjZiYjY3OTExMDc4ZDI3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCnEDmdePLhZADp2ECHmUFg1W1qW1+934Gid0h1Py7hJkHt UbeDq1VdtYJYUSp9LKhC6TAFFCbLFIe9yViVjf4FSneMgVfKc/ZSMOGjw9Hd459v LR9Q5yfd4HZbmplKGWcrc4bRU3oE2QF2Mo3yESyldM1iVBhWK6f/GJYTF61R//3N lNmW3W8VYm5ufbe+2xSmu1+GDQvX/j2tMYOSgikBZP29hgGkvHGS982K3hDCwmln OmbY6xUIcN0xR+Gb0dCZnAaOYau6njY7tRKIjg2+eQPZ4px1u9+83F4MxVG9j99m L4fHQbgfPu3I+wiJSfgGaAEfMHWLgf2qK7SBNXUHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU0O2706CCH0JGqZq38k4IuSc54ygwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzI0MGNlOTUyLTkyNWMtNDkwNi04Y2I5LTBlNjQ4NWEzNmU3YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEN4m4wDQYJKoZIhvcNAQELBQADggEBAEqtMkDlqkwg6F+XMxPoOazPBGrO ozjYGKTy9B7T+4kV19f9ysNwTdPtMlhKa6J4cBYxYcrMiN94oyTEAnZ4f14oVRGJ akIUtj/FVZSk/+NLynkBw+XAxweyXC4yzjmmx0Aev6LUP/iSqnaFuApB/JPoH2PW HkscZdSMDSsOGiYF9Opx4tmHUwg83scP8tWszRnrIuL/K7QxmTDZAEY3sqdv9ku7 S7sMWZgBfLR0XB+PrsPNnxvEZWUN8Ptld3pVmKF027iZhfvGA2OHTFKOSlN7aTvK JKC5Wgc5Q0W159hBK+HfTcgEZkkkjUhmgD3J5eXvlrygGTwslcn9MsgCV9o= -----END CERTIFICATE-----Generated at Mon Oct 20 03:00:26 2025 by rpki-client