$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/41c31964-87dc-4aaa-9ebe-1c2dbbafe6b2.roa File: 41c31964-87dc-4aaa-9ebe-1c2dbbafe6b2.roa (raw, json) Hash identifier: HNm5kdxVBAkHvTRwVpXzrL4b0Bju4q+EmiCFygGyukU= Subject key identifier: D2:67:3F:B0:0D:92:A2:BA:CB:DD:80:A9:96:B5:31:AE:E8:11:85:2B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 54CF9A703456E2FD47BCB87BF66557AFC3BA1E20 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/41c31964-87dc-4aaa-9ebe-1c2dbbafe6b2.roa Signing time: Sun 19 Oct 2025 10:32:34 +0000 ROA not before: Sun 19 Oct 2025 10:32:34 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.225.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:cf:9a:70:34:56:e2:fd:47:bc:b8:7b:f6:65:57:af:c3:ba:1e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 10:32:34 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=fd3727ddf1a08372fdb01d515548a7ffa70af8e81369910edf2e77e00bb65d5d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:fc:df:db:fd:f4:97:57:7a:04:e1:cc:62:24: 0c:e5:ed:95:06:3e:fe:77:ee:8e:04:43:27:29:cc: ed:cc:58:ad:60:53:a0:45:0f:f5:b5:cf:92:3a:3d: 84:4b:c5:ad:2b:22:d8:ff:0a:bd:93:03:7b:b7:a5: bb:bd:25:c8:17:55:41:f9:62:b0:b3:9f:6d:a4:ed: 62:af:84:37:37:d6:7a:32:9e:43:7b:51:55:a3:35: d7:c0:84:c6:bf:6e:2d:54:18:be:19:d1:97:11:9f: 6c:ce:9b:58:53:a4:68:8a:85:0e:31:33:39:e9:a2: b8:23:8f:dc:49:6e:13:b7:98:0e:7b:70:78:af:77: 22:b0:8e:69:12:6c:43:8b:c6:4a:90:7f:1e:4d:6e: 64:12:07:c5:d4:f1:c4:88:44:5a:6b:da:52:b1:e6: f1:2c:a8:87:1c:26:af:a2:49:0c:85:ae:c6:87:73: 84:ab:76:c8:7b:c5:d8:a7:69:2e:1d:a2:96:a0:65: f8:cb:a5:32:24:e3:86:52:0b:6c:d7:84:a7:4d:24: ec:48:29:3b:64:df:5a:a5:ae:bc:51:56:9a:43:64: 48:a5:e4:f0:55:18:46:a8:61:d6:77:d8:e0:35:55: 4f:55:b9:94:41:27:03:f2:dc:21:c3:a8:7b:63:2b: d5:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:67:3F:B0:0D:92:A2:BA:CB:DD:80:A9:96:B5:31:AE:E8:11:85:2B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/41c31964-87dc-4aaa-9ebe-1c2dbbafe6b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.225.144.0/20 Signature Algorithm: sha256WithRSAEncryption 99:e4:2c:48:6c:30:f6:41:03:6a:ad:87:d6:74:85:15:6e:95: 47:d7:14:e8:4f:88:63:42:17:66:da:bd:1c:ed:09:b5:74:e1: 59:0c:d7:23:9a:bd:7a:a0:a4:64:07:c3:b5:7a:99:eb:13:6b: df:50:b3:8c:f2:6d:0a:5d:86:ab:53:47:df:f9:a4:c6:d4:b9: 5c:c8:db:fc:09:a2:04:96:b6:36:6c:4e:24:0a:32:9f:2b:f0: 43:e6:b5:e1:5b:b4:a1:7f:0a:29:6f:d8:cb:e6:32:7d:0e:4b: e1:87:13:43:d9:1e:16:5a:00:70:ae:fe:0a:c3:f6:ca:d0:41: 4c:9f:2a:49:0a:b5:b7:ed:13:f5:bb:da:fe:05:2a:29:21:89: 1a:bc:95:4f:6e:7f:35:90:50:86:ef:11:29:30:04:10:e7:83: 9c:5e:4b:44:3a:5e:99:9b:18:1e:86:8f:20:1b:49:b5:99:18: 6a:ef:59:75:4d:d3:22:c1:13:76:ab:5e:c7:a5:ba:84:6d:d2: 22:24:e8:df:95:22:65:fc:87:d7:88:e7:e7:7e:47:6c:11:5b: 2c:99:dc:14:52:4e:49:23:60:80:21:d1:d0:93:11:c3:53:5d: 4b:b3:f5:bd:6e:dd:e3:0d:0c:95:33:28:ab:a8:5a:e7:f7:02: 55:0a:d7:86 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVM+acDRW4v1HvLh79mVXr8O6HiAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTAzMjM0WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BmZDM3MjdkZGYxYTA4MzcyZmRiMDFkNTE1NTQ4YTdmZmE3 MGFmOGU4MTM2OTkxMGVkZjJlNzdlMDBiYjY1ZDVkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDP/N/b/fSXV3oE4cxiJAzl7ZUGPv537o4EQycpzO3MWK1g U6BFD/W1z5I6PYRLxa0rItj/Cr2TA3u3pbu9JcgXVUH5YrCzn22k7WKvhDc31noy nkN7UVWjNdfAhMa/bi1UGL4Z0ZcRn2zOm1hTpGiKhQ4xMznporgjj9xJbhO3mA57 cHivdyKwjmkSbEOLxkqQfx5NbmQSB8XU8cSIRFpr2lKx5vEsqIccJq+iSQyFrsaH c4Srdsh7xdinaS4dopagZfjLpTIk44ZSC2zXhKdNJOxIKTtk31qlrrxRVppDZEil 5PBVGEaoYdZ32OA1VU9VuZRBJwPy3CHDqHtjK9XpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU0mc/sA2SorrL3YCplrUxrugRhSswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQxYzMxOTY0LTg3ZGMtNGFhYS05ZWJlLTFjMmRiYmFmZTZiMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQN4ZAwDQYJKoZIhvcNAQELBQADggEBAJnkLEhsMPZBA2qth9Z0hRVulUfX FOhPiGNCF2bavRztCbV04VkM1yOavXqgpGQHw7V6mesTa99Qs4zybQpdhqtTR9/5 pMbUuVzI2/wJogSWtjZsTiQKMp8r8EPmteFbtKF/Cilv2MvmMn0OS+GHE0PZHhZa AHCu/grD9srQQUyfKkkKtbftE/W72v4FKikhiRq8lU9ufzWQUIbvESkwBBDng5xe S0Q6XpmbGB6GjyAbSbWZGGrvWXVN0yLBE3arXseluoRt0iIk6N+VImX8h9eI5+d+ R2wRWyyZ3BRSTkkjYIAh0dCTEcNTXUuz9b1u3eMNDJUzKKuoWuf3AlUK14Y= -----END CERTIFICATE-----Generated at Mon Oct 20 06:11:56 2025 by rpki-client