$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4d95c07a-e116-4f22-84e9-7dbdd9632951.roa File: 4d95c07a-e116-4f22-84e9-7dbdd9632951.roa (raw, json) Hash identifier: 0Xn5Qxl5fbiPGvrKBxOlel+x+D6eneui8612f+Ktmmc= Subject key identifier: 3F:5A:72:0E:34:C5:D6:9C:8D:FA:3E:C8:FA:B3:A1:49:CA:29:AE:2E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3AFC1ACD1F9ADFC57836419397D7A19B25A84EB3 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4d95c07a-e116-4f22-84e9-7dbdd9632951.roa Signing time: Sun 19 Oct 2025 12:42:38 +0000 ROA not before: Sun 19 Oct 2025 12:42:38 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.225.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:fc:1a:cd:1f:9a:df:c5:78:36:41:93:97:d7:a1:9b:25:a8:4e:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 12:42:38 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=4e787146dc7a66023da5436735a123f05f8f2c6a0bea5838b03632c9e1436fa8, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f9:81:78:95:e4:d2:2a:3e:e8:58:81:71:c8: 27:15:3c:3a:54:f0:d9:05:72:79:83:c1:d8:e2:72: bc:2f:89:22:3e:44:94:24:5b:79:47:39:aa:5d:11: 3c:c5:95:28:2c:02:63:7d:84:4e:05:00:94:02:1b: 03:c7:89:52:c1:04:bf:89:ee:8d:5f:59:c5:3b:9a: 12:0f:9e:7a:68:d0:21:71:1c:6e:98:5a:71:2f:3a: 5f:32:91:3b:b8:49:eb:4c:55:12:34:fe:8b:ae:6f: 18:85:4f:a3:1e:ac:7d:c1:4a:ff:38:e2:e5:02:d6: b3:f0:a5:5f:7b:79:94:dd:54:08:ef:ab:d6:1d:77: 33:75:08:84:cc:cf:38:ef:7b:8b:af:46:39:ad:b4: 24:95:cb:fe:02:78:41:ab:8e:70:4b:d3:f8:db:8b: a7:8f:85:ad:04:01:6f:d8:57:90:09:c2:06:b6:c3: ab:ab:11:89:1d:0e:34:67:c4:3e:83:1d:04:b0:16: f1:1d:35:4c:ae:ef:5f:14:b1:61:95:4a:bf:d9:de: 75:02:82:b4:2b:1d:50:06:c5:1d:45:d4:02:af:50: 3a:4a:11:fd:af:eb:0e:3a:19:0d:2b:0b:4e:cf:75: 2b:dc:b3:fe:e5:f5:89:16:bb:90:d5:df:49:8f:aa: 2b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:5A:72:0E:34:C5:D6:9C:8D:FA:3E:C8:FA:B3:A1:49:CA:29:AE:2E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4d95c07a-e116-4f22-84e9-7dbdd9632951.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.225.188.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:0f:d9:65:e6:d8:d4:1e:ed:da:de:bc:3d:71:7a:93:c2:56: a9:33:7a:8e:3e:e6:88:3c:9f:cc:ed:26:f6:bd:c8:a7:10:9d: 10:68:1c:65:34:0d:bd:b2:ee:a4:18:cd:cd:dd:80:fe:33:8a: 2d:50:04:6d:ab:42:e4:0a:64:6d:37:0f:8d:c8:d0:55:80:c8: 6c:f0:fb:e0:96:00:79:05:6d:2a:b0:ad:a9:70:50:e6:a5:79: 58:2b:30:c4:41:c5:56:f4:5f:25:3d:2c:98:77:1d:41:ef:f4: a3:46:49:9d:bc:99:f3:2e:d7:66:e5:d4:b3:73:25:7c:52:1b: f9:95:3b:c4:0d:c0:96:0d:07:8a:68:7e:70:9b:51:3b:9e:f1: ee:41:f8:20:6f:be:8c:88:34:7a:ef:3a:02:92:df:85:a5:a3: 8c:47:fd:9f:15:05:ab:14:4e:c2:ba:37:32:59:79:1e:bc:d2: dd:35:f7:d0:49:1c:7f:bd:39:c4:42:97:85:b1:09:e6:50:69: e9:18:46:12:bb:56:c1:c2:a9:ce:c2:29:94:e9:ec:d6:de:4f: e2:45:1b:06:54:d4:77:90:44:38:b7:d2:62:b0:c6:8e:5c:b9: 1a:52:94:f5:c1:88:4d:2a:45:f2:18:23:af:59:22:e2:83:3c: 30:3e:0a:c8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOvwazR+a38V4NkGTl9ehmyWoTrMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTI0MjM4WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZTc4NzE0NmRjN2E2NjAyM2RhNTQzNjczNWExMjNmMDVm OGYyYzZhMGJlYTU4MzhiMDM2MzJjOWUxNDM2ZmE4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDG+YF4leTSKj7oWIFxyCcVPDpU8NkFcnmDwdjicrwviSI+ RJQkW3lHOapdETzFlSgsAmN9hE4FAJQCGwPHiVLBBL+J7o1fWcU7mhIPnnpo0CFx HG6YWnEvOl8ykTu4SetMVRI0/ouubxiFT6MerH3BSv844uUC1rPwpV97eZTdVAjv q9YddzN1CITMzzjve4uvRjmttCSVy/4CeEGrjnBL0/jbi6ePha0EAW/YV5AJwga2 w6urEYkdDjRnxD6DHQSwFvEdNUyu718UsWGVSr/Z3nUCgrQrHVAGxR1F1AKvUDpK Ef2v6w46GQ0rC07PdSvcs/7l9YkWu5DV30mPqiubAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUP1pyDjTF1pyN+j7I+rOhScopri4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzRkOTVjMDdhLWUxMTYtNGYyMi04NGU5LTdkYmRkOTYzMjk1MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAN4bwwDQYJKoZIhvcNAQELBQADggEBAG0P2WXm2NQe7drevD1xepPCVqkz eo4+5og8n8ztJva9yKcQnRBoHGU0Db2y7qQYzc3dgP4zii1QBG2rQuQKZG03D43I 0FWAyGzw++CWAHkFbSqwralwUOaleVgrMMRBxVb0XyU9LJh3HUHv9KNGSZ28mfMu 12bl1LNzJXxSG/mVO8QNwJYNB4pofnCbUTue8e5B+CBvvoyINHrvOgKS34Wlo4xH /Z8VBasUTsK6NzJZeR680t0199BJHH+9OcRCl4WxCeZQaekYRhK7VsHCqc7CKZTp 7NbeT+JFGwZU1HeQRDi30mKwxo5cuRpSlPXBiE0qRfIYI69ZIuKDPDA+Csg= -----END CERTIFICATE-----Generated at Mon Oct 20 11:55:05 2025 by rpki-client