$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2a26b521-a3a7-41c2-b6ba-b8cc9a4779ab.roa File: 2a26b521-a3a7-41c2-b6ba-b8cc9a4779ab.roa (raw, json) Hash identifier: SFnjJPYMJgnOmqITgV0Iye4Q7OKGz34ZIUyPrqIgNLQ= Subject key identifier: 41:37:31:AE:2B:99:26:37:98:3E:A5:EF:C4:36:91:48:BB:87:E5:67 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 20942451063DD997CE300E29C1A6B2C2A329F27D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2a26b521-a3a7-41c2-b6ba-b8cc9a4779ab.roa Signing time: Sun 19 Oct 2025 12:02:24 +0000 ROA not before: Sun 19 Oct 2025 12:02:24 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.224.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:94:24:51:06:3d:d9:97:ce:30:0e:29:c1:a6:b2:c2:a3:29:f2:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 12:02:24 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=21290d002336b986b6936eb57f7901d7ddac6ff0292bde590c5a54f5d65d0f07, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2d:a3:1e:bf:ae:14:98:d0:de:84:b5:df:06: c5:f5:36:46:ff:da:2e:5f:7d:ed:fc:07:eb:52:93: 04:35:22:42:bd:6f:d3:d0:f1:06:ba:f8:08:ab:48: af:d3:f7:cc:e9:0d:11:5b:82:e3:d0:9d:2c:04:36: 9d:64:6f:10:0d:f6:67:85:38:3c:a8:e6:77:46:9f: dd:a4:5f:cd:c9:83:a8:15:41:11:71:a5:4d:7c:9a: 08:02:24:76:94:48:a1:dd:22:f9:8e:4d:22:cd:29: 41:57:ca:0c:c2:b2:30:a4:1e:b8:8f:b6:2d:36:92: a6:03:53:85:22:55:f6:27:fd:6b:b9:cb:a0:b4:ed: 0a:bf:a5:7f:01:59:ff:8a:bb:14:af:1c:00:52:eb: c6:03:c6:eb:9e:26:d0:09:20:ba:e2:be:37:d9:37: fc:ef:85:84:e1:62:89:3e:65:62:2b:86:75:a1:f4: 0a:6f:8e:e2:88:f4:35:fd:f3:17:81:8e:be:ac:54: 46:a1:b0:cb:8a:2a:64:42:d3:1e:47:e7:10:ab:6b: eb:6e:cc:df:f6:5b:3d:8b:f0:9a:de:95:9e:a9:03: fe:4f:a2:74:69:9e:9c:2f:60:46:6d:88:09:b6:b6: 7f:e7:fe:6e:7e:0c:ea:bc:c2:1e:a3:3d:4b:49:bb: a3:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:37:31:AE:2B:99:26:37:98:3E:A5:EF:C4:36:91:48:BB:87:E5:67 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2a26b521-a3a7-41c2-b6ba-b8cc9a4779ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.224.214.0/24 Signature Algorithm: sha256WithRSAEncryption 57:78:b6:d2:f7:a7:f0:8f:44:39:85:4f:7a:1b:55:07:72:cf: 49:07:54:cd:44:02:92:ff:60:7d:44:05:5a:39:92:43:77:22: 96:de:98:13:3e:18:ec:b0:38:20:9b:eb:51:f5:29:9f:cd:9e: 65:4e:19:a2:c6:12:13:70:51:69:e2:63:8b:3c:c3:06:0d:32: a3:b6:10:67:5a:2d:25:47:73:91:02:98:13:57:b2:e4:72:51: cf:cb:c6:ad:dc:58:ef:1d:20:fa:38:e9:a7:b2:37:34:42:e2: 6b:35:c4:e9:a0:ef:ba:df:29:15:e7:62:36:5d:17:39:36:9b: 69:b9:6c:23:9b:a2:df:1d:5c:1e:3a:f2:36:0e:56:f1:82:45: 55:ce:c6:48:04:e4:59:3a:e9:39:e4:81:ff:0e:a2:8c:d6:c9: ce:77:f4:fa:d9:50:fe:b2:dc:fc:16:4f:19:ba:40:81:4a:a5: f3:83:c0:4e:84:d7:aa:3b:d6:30:a8:52:83:32:3d:e6:fb:ee: 34:19:8c:b6:f3:2e:d4:81:30:aa:d7:3c:cc:02:27:92:a8:8b: 88:84:0a:bb:60:04:50:3e:f6:f8:67:14:a8:03:fe:77:65:fe: e2:12:67:3a:99:37:d4:27:9e:ea:c2:97:b7:de:75:1c:12:80: 53:44:0c:ff -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIJQkUQY92ZfOMA4pwaaywqMp8n0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTIwMjI0WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AyMTI5MGQwMDIzMzZiOTg2YjY5MzZlYjU3Zjc5MDFkN2Rk YWM2ZmYwMjkyYmRlNTkwYzVhNTRmNWQ2NWQwZjA3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvLaMev64UmNDehLXfBsX1Nkb/2i5ffe38B+tSkwQ1IkK9 b9PQ8Qa6+AirSK/T98zpDRFbguPQnSwENp1kbxAN9meFODyo5ndGn92kX83Jg6gV QRFxpU18mggCJHaUSKHdIvmOTSLNKUFXygzCsjCkHriPti02kqYDU4UiVfYn/Wu5 y6C07Qq/pX8BWf+KuxSvHABS68YDxuueJtAJILrivjfZN/zvhYThYok+ZWIrhnWh 9ApvjuKI9DX98xeBjr6sVEahsMuKKmRC0x5H5xCra+tuzN/2Wz2L8JrelZ6pA/5P onRpnpwvYEZtiAm2tn/n/m5+DOq8wh6jPUtJu6NnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUQTcxriuZJjeYPqXvxDaRSLuH5WcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzJhMjZiNTIxLWEzYTctNDFjMi1iNmJhLWI4Y2M5YTQ3NzlhYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAN4NYwDQYJKoZIhvcNAQELBQADggEBAFd4ttL3p/CPRDmFT3obVQdyz0kH VM1EApL/YH1EBVo5kkN3IpbemBM+GOywOCCb61H1KZ/NnmVOGaLGEhNwUWniY4s8 wwYNMqO2EGdaLSVHc5ECmBNXsuRyUc/Lxq3cWO8dIPo46aeyNzRC4ms1xOmg77rf KRXnYjZdFzk2m2m5bCObot8dXB468jYOVvGCRVXOxkgE5Fk66Tnkgf8OoozWyc53 9PrZUP6y3PwWTxm6QIFKpfODwE6E16o71jCoUoMyPeb77jQZjLbzLtSBMKrXPMwC J5Koi4iECrtgBFA+9vhnFKgD/ndl/uISZzqZN9QnnurCl7fedRwSgFNEDP8= -----END CERTIFICATE-----Generated at Mon Oct 20 17:29:48 2025 by rpki-client