$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4693bb6c-b44d-44af-b206-6dd7d361df43.roa File: 4693bb6c-b44d-44af-b206-6dd7d361df43.roa (raw, json) Hash identifier: KMJ6rfmwS1AzS53ap+JDD5oZx8FTEpnSZKfoZ7Zivys= Subject key identifier: AA:D7:9C:91:77:D3:88:82:F9:3C:BD:FC:B8:EF:96:C5:79:BB:D0:56 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 08036801A121E976B9C10BD10A32EFC099EFD84A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4693bb6c-b44d-44af-b206-6dd7d361df43.roa Signing time: Sun 19 Oct 2025 11:53:44 +0000 ROA not before: Sun 19 Oct 2025 11:53:44 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.226.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:03:68:01:a1:21:e9:76:b9:c1:0b:d1:0a:32:ef:c0:99:ef:d8:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 11:53:44 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=3ea2a564480fb9ae6b1ca5424db43eb9c1ef54f493e272b8bcc8ec393e7ac678, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8e:5f:26:f6:93:f6:fb:b4:42:dd:02:14:35: 88:32:80:bf:0f:b1:b2:c2:00:4f:56:b2:43:a6:62: 77:87:f1:65:0d:9a:df:5b:0f:65:b6:ca:fc:39:1f: 3e:2f:35:6f:b4:1e:d6:7b:12:45:6e:d7:43:8d:5f: 37:78:5f:ee:c4:c1:83:b5:2a:05:77:a0:c5:1b:34: b2:43:c1:a8:0d:37:00:56:3b:16:84:97:6d:68:0d: 3f:5f:9d:a2:b5:85:30:32:1e:a8:4a:cf:92:55:bf: 58:4a:b8:59:0e:60:a1:81:a1:b6:53:d6:55:9e:39: 9c:c0:79:fa:51:90:56:df:5d:14:cc:19:43:eb:eb: dd:38:2c:cf:97:01:85:8f:b7:1e:c4:50:53:52:49: d4:15:7c:f8:4a:63:0a:bf:4f:7c:d1:0b:d4:04:e7: 7f:b3:9c:55:de:48:05:d5:3a:a2:51:0e:7d:53:fb: 9e:22:a0:ee:b3:be:c7:2f:3c:0b:c3:c9:4d:c7:52: 71:de:27:0f:44:2b:13:a3:f6:4c:69:ec:d0:17:09: 16:7d:7a:ab:d4:6a:25:b0:fc:b5:19:72:7c:ee:0e: ae:47:33:44:c6:3f:65:a3:e0:7e:c0:08:9a:2e:27: fc:be:3b:5e:1d:bb:e1:c9:bd:65:02:ea:cc:ac:13: 51:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:D7:9C:91:77:D3:88:82:F9:3C:BD:FC:B8:EF:96:C5:79:BB:D0:56 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4693bb6c-b44d-44af-b206-6dd7d361df43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.226.13.0/24 Signature Algorithm: sha256WithRSAEncryption 94:41:af:c3:95:e7:b4:3e:1a:c6:96:7d:46:b7:4b:bf:f9:cd: d3:9e:57:c2:97:1b:94:ff:63:f4:6f:e0:de:40:0f:7e:6e:ed: b6:99:dc:33:96:dd:4a:0c:ec:76:49:be:ff:9b:83:1c:2e:0d: 44:d4:a0:01:30:f8:35:b6:2a:64:25:c9:17:35:66:d1:e9:ac: 8f:67:5e:b0:1b:54:58:d9:16:05:ca:c2:26:c0:8b:b3:17:20: b2:b9:e0:03:81:c0:fb:31:a5:e7:64:90:56:95:0e:9f:da:1a: 56:3c:39:4c:a9:d0:ce:25:49:02:1f:c7:1b:b8:a9:04:d5:50: 03:e9:30:65:a6:d5:1f:22:55:3e:99:92:07:49:fc:45:f4:00: eb:bf:9a:11:c4:8b:e3:38:09:e5:fa:dd:08:a8:33:75:21:3c: fc:d6:3b:61:26:04:e6:48:d9:06:d5:f3:bf:9e:aa:98:1c:ea: a4:7d:4a:23:05:70:38:c4:49:ea:9e:90:de:03:be:44:2f:6b: 36:53:ff:bd:24:00:e2:78:ad:5d:b7:7e:25:31:00:05:0c:20: 2a:04:ac:a3:ec:23:a7:02:40:a1:19:f2:12:0d:a6:0b:ba:ac: d2:cc:9a:6c:ec:0b:f7:78:c8:a1:7d:ec:af:95:1d:99:e9:fd: bc:c2:ed:31 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCANoAaEh6Xa5wQvRCjLvwJnv2EowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTE1MzQ0WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AzZWEyYTU2NDQ4MGZiOWFlNmIxY2E1NDI0ZGI0M2ViOWMx ZWY1NGY0OTNlMjcyYjhiY2M4ZWMzOTNlN2FjNjc4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDEjl8m9pP2+7RC3QIUNYgygL8PsbLCAE9WskOmYneH8WUN mt9bD2W2yvw5Hz4vNW+0HtZ7EkVu10ONXzd4X+7EwYO1KgV3oMUbNLJDwagNNwBW OxaEl21oDT9fnaK1hTAyHqhKz5JVv1hKuFkOYKGBobZT1lWeOZzAefpRkFbfXRTM GUPr6904LM+XAYWPtx7EUFNSSdQVfPhKYwq/T3zRC9QE53+znFXeSAXVOqJRDn1T +54ioO6zvscvPAvDyU3HUnHeJw9EKxOj9kxp7NAXCRZ9eqvUaiWw/LUZcnzuDq5H M0TGP2Wj4H7ACJouJ/y+O14du+HJvWUC6sysE1FjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUqteckXfTiIL5PL38uO+WxXm70FYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQ2OTNiYjZjLWI0NGQtNDRhZi1iMjA2LTZkZDdkMzYxZGY0My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAN4g0wDQYJKoZIhvcNAQELBQADggEBAJRBr8OV57Q+GsaWfUa3S7/5zdOe V8KXG5T/Y/Rv4N5AD35u7baZ3DOW3UoM7HZJvv+bgxwuDUTUoAEw+DW2KmQlyRc1 ZtHprI9nXrAbVFjZFgXKwibAi7MXILK54AOBwPsxpedkkFaVDp/aGlY8OUyp0M4l SQIfxxu4qQTVUAPpMGWm1R8iVT6ZkgdJ/EX0AOu/mhHEi+M4CeX63QioM3UhPPzW O2EmBOZI2QbV87+eqpgc6qR9SiMFcDjESeqekN4DvkQvazZT/70kAOJ4rV23fiUx AAUMICoErKPsI6cCQKEZ8hINpgu6rNLMmmzsC/d4yKF97K+VHZnp/bzC7TE= -----END CERTIFICATE-----Generated at Mon Oct 20 03:00:32 2025 by rpki-client