$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/240e3a05-e6a1-4802-81ce-19c4f2501e16.roa File: 240e3a05-e6a1-4802-81ce-19c4f2501e16.roa (raw, json) Hash identifier: qvvZk9qB1IWpvDFxNWuYwAqr6cJeuhJQxk29NMvSzfA= Subject key identifier: 05:38:1C:49:08:78:51:48:46:4D:44:61:35:C4:40:E2:93:1F:C1:F8 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 02DAC81FBF9A1CDDF1065FDDDC3E0EF5A0BFA0F0 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/240e3a05-e6a1-4802-81ce-19c4f2501e16.roa Signing time: Sun 19 Oct 2025 21:20:06 +0000 ROA not before: Sun 19 Oct 2025 21:20:06 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.226.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:da:c8:1f:bf:9a:1c:dd:f1:06:5f:dd:dc:3e:0e:f5:a0:bf:a0:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 21:20:06 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=7e9585b86c5ac6b7f5dc97ebae24367aaaae2b9dfef1f21aea218e8ce9cfb766, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:6f:2a:2a:95:57:b4:00:a9:05:f4:8f:fb:dd: f0:9f:0e:a5:51:f6:5c:fd:25:c2:0f:08:e8:1b:cc: e2:b8:63:39:46:4e:ae:85:db:61:73:a8:93:e9:26: a1:d3:92:f4:04:96:88:93:7a:dd:89:91:37:e7:b1: 46:b1:6c:83:55:18:b5:5c:bd:19:a5:3b:f9:1e:06: 35:a9:b3:7a:ae:c6:82:86:c9:4b:91:c9:cc:21:ce: 28:5d:77:43:e4:83:87:1c:c5:f6:01:e7:ab:ba:ee: bc:24:88:65:cf:9a:c0:a5:a4:d2:fc:aa:af:0e:ca: 60:62:36:be:62:e0:21:3a:b5:49:1d:c9:e5:30:f3: f0:0e:fd:8e:9e:0c:07:0d:31:2d:93:17:70:0b:14: a5:2c:20:94:00:2d:0d:eb:ba:d8:4c:d2:b2:53:0c: d1:79:87:0a:07:ca:20:12:6f:89:e4:00:13:b5:4f: 3d:93:89:38:35:88:f6:74:c7:f2:52:76:5e:25:ae: f0:86:1b:27:30:90:b1:97:7f:56:f7:b1:49:50:8f: e2:12:9e:2c:60:e0:bc:77:6d:71:39:b5:fb:00:d8: 86:85:fd:77:e9:16:e0:dc:7d:90:0f:cf:fd:ce:45: 74:23:ed:4b:6a:7a:4d:76:58:39:87:d7:80:2f:cc: ae:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:38:1C:49:08:78:51:48:46:4D:44:61:35:C4:40:E2:93:1F:C1:F8 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/240e3a05-e6a1-4802-81ce-19c4f2501e16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.226.64.0/22 Signature Algorithm: sha256WithRSAEncryption a8:57:21:4e:86:a6:9c:63:80:2b:2f:d9:27:46:00:46:2e:b9: 8b:4f:1a:fe:2e:c2:73:69:6f:92:3b:5a:bf:0f:5c:98:e5:8e: 3a:f8:bc:c4:91:a4:da:01:1b:a9:04:89:c6:53:16:66:55:9c: 23:7d:e7:66:e2:7a:62:2b:80:cc:b0:0a:0d:44:a2:41:00:2f: 1c:ea:4a:77:36:c8:b7:ed:ae:49:75:6d:68:6e:6d:e8:a8:4f: 7e:43:93:11:4c:41:bc:c3:a3:66:91:3c:cb:ec:da:7c:48:f0: 35:e6:b3:95:f0:5b:9e:fe:20:bb:35:d9:2f:c7:43:40:4c:8b: 94:4f:98:1a:58:e9:a4:57:cf:23:5b:58:d4:b5:d0:4a:dd:01: 15:dd:89:8d:8d:7b:02:a6:e4:c5:90:ae:17:41:30:3d:d7:80: 33:79:bf:00:ec:39:91:c9:e2:2d:dd:11:40:eb:53:59:58:51: 75:03:04:f7:93:12:de:53:7c:a1:23:e8:2b:55:d5:98:5d:d9: 89:0d:b1:6a:ea:60:45:46:ad:3a:10:7f:86:d0:80:aa:55:81: 48:b2:c1:a2:f0:a1:10:eb:0a:2c:a3:a3:29:9a:89:3b:03:f5: 05:3c:09:48:16:87:89:3d:e3:d9:d3:ca:11:a1:e2:80:33:71: 35:15:ae:55 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAtrIH7+aHN3xBl/d3D4O9aC/oPAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MjEyMDA2WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZTk1ODViODZjNWFjNmI3ZjVkYzk3ZWJhZTI0MzY3YWFh YWUyYjlkZmVmMWYyMWFlYTIxOGU4Y2U5Y2ZiNzY2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCdbyoqlVe0AKkF9I/73fCfDqVR9lz9JcIPCOgbzOK4YzlG Tq6F22FzqJPpJqHTkvQEloiTet2JkTfnsUaxbINVGLVcvRmlO/keBjWps3quxoKG yUuRycwhzihdd0Pkg4ccxfYB56u67rwkiGXPmsClpNL8qq8OymBiNr5i4CE6tUkd yeUw8/AO/Y6eDAcNMS2TF3ALFKUsIJQALQ3ruthM0rJTDNF5hwoHyiASb4nkABO1 Tz2TiTg1iPZ0x/JSdl4lrvCGGycwkLGXf1b3sUlQj+ISnixg4Lx3bXE5tfsA2IaF /XfpFuDcfZAPz/3ORXQj7Utqek12WDmH14AvzK4rAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUBTgcSQh4UUhGTURhNcRA4pMfwfgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzI0MGUzYTA1LWU2YTEtNDgwMi04MWNlLTE5YzRmMjUwMWUxNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIN4kAwDQYJKoZIhvcNAQELBQADggEBAKhXIU6GppxjgCsv2SdGAEYuuYtP Gv4uwnNpb5I7Wr8PXJjljjr4vMSRpNoBG6kEicZTFmZVnCN952biemIrgMywCg1E okEALxzqSnc2yLftrkl1bWhubeioT35DkxFMQbzDo2aRPMvs2nxI8DXms5XwW57+ ILs12S/HQ0BMi5RPmBpY6aRXzyNbWNS10ErdARXdiY2NewKm5MWQrhdBMD3XgDN5 vwDsOZHJ4i3dEUDrU1lYUXUDBPeTEt5TfKEj6CtV1Zhd2YkNsWrqYEVGrToQf4bQ gKpVgUiywaLwoRDrCiyjoymaiTsD9QU8CUgWh4k949nTyhGh4oAzcTUVrlU= -----END CERTIFICATE-----Generated at Mon Oct 20 11:14:19 2025 by rpki-client