$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/514c4406-494a-43cc-9673-03c19ef03b12.roa File: 514c4406-494a-43cc-9673-03c19ef03b12.roa (raw, json) Hash identifier: lvINv4xHlR2M+sGF1qtfj+oq20Xf534+fLVr9mt6UPk= Subject key identifier: B1:A4:FA:7A:3A:EE:29:2D:6B:5A:F4:3B:CC:74:B3:69:38:85:10:D7 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5901CF1B40C4BE4E77B15876448ED929B3A5FA68 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/514c4406-494a-43cc-9673-03c19ef03b12.roa Signing time: Sun 19 Oct 2025 17:53:33 +0000 ROA not before: Sun 19 Oct 2025 17:53:33 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.226.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:01:cf:1b:40:c4:be:4e:77:b1:58:76:44:8e:d9:29:b3:a5:fa:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 17:53:33 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=9ae49a3591a6dcf186c6917ca2a818a58a75a248999a985dfa9097fc85114178, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:d1:2c:3d:b4:1d:c8:e2:9a:ab:1c:a5:24:4e: 60:49:ea:58:60:fb:2f:5c:3b:c0:2b:fc:30:1f:9a: b4:c2:00:0b:11:08:ed:08:66:50:7a:54:af:55:99: e7:0a:57:20:4f:39:21:71:06:2c:c9:c5:8d:bc:29: 42:b9:c5:82:46:a2:c4:43:3a:ff:dc:0e:50:f9:74: 6a:c5:9c:7a:cb:d0:fb:87:bd:5d:af:5d:bb:8e:15: e7:70:c9:c9:59:e6:46:eb:24:df:53:6e:19:90:0a: 59:9e:b8:b7:f6:c3:ad:d6:53:49:ce:49:18:4e:70: 79:b5:e9:04:ab:29:70:7b:09:8c:d3:2a:d8:73:2b: d6:9d:d8:86:68:cd:b9:6b:ac:3e:36:06:61:8a:80: 06:60:05:17:d3:2e:0f:3b:a2:04:47:b2:91:43:33: a0:df:92:f1:2a:e3:60:da:28:08:05:f2:4a:04:f0: 7f:8b:08:4e:f8:52:1e:f3:5a:b7:e4:2e:09:41:b7: 33:16:ad:43:fa:aa:13:bd:b6:3b:24:50:b3:e6:53: ad:6c:fb:1f:69:3d:28:89:d4:65:10:ee:c4:f8:6f: 88:1b:48:10:d1:77:f2:da:10:ac:c0:ae:e4:03:d7: be:0b:f5:fc:ab:b1:1d:84:9b:7e:aa:fd:9f:1f:30: 9d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:A4:FA:7A:3A:EE:29:2D:6B:5A:F4:3B:CC:74:B3:69:38:85:10:D7 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/514c4406-494a-43cc-9673-03c19ef03b12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.226.144.0/24 Signature Algorithm: sha256WithRSAEncryption 22:b6:d1:03:48:46:a3:55:5c:cf:e7:c5:78:99:e4:4d:fd:38: 0b:54:08:74:22:4e:84:92:7c:c5:c0:4e:6a:25:10:51:1b:87: ea:19:47:d3:da:7a:f0:d1:69:ad:d2:cd:8e:32:70:8d:26:3b: 21:60:86:a3:fa:5f:a2:3f:52:57:35:f3:6e:20:68:df:f7:c9: 90:85:53:9d:73:bb:0a:c6:6d:ee:6f:61:d4:63:69:63:53:67: 96:dd:77:47:c2:5c:f5:73:fe:e3:d8:94:da:54:d7:85:99:3a: 3e:0a:f2:cd:ab:a1:44:a3:d2:12:1e:83:6f:d3:7c:6f:28:ef: 8c:53:9e:23:73:5a:ec:69:61:59:6d:40:4f:5b:00:37:dd:ed: 4e:77:ad:28:ef:92:1b:f5:d0:92:56:81:05:ba:d2:7a:cd:03: 4d:d7:33:5e:77:0d:aa:57:11:43:d1:de:f5:ff:b6:20:c8:cb: 77:e7:09:54:17:cc:5e:5e:6f:4e:27:79:55:66:44:ba:ab:21: be:93:0a:e0:9e:98:5d:29:d9:98:9c:1c:44:79:27:5f:fa:f8: f6:49:52:f6:1c:fc:5b:c8:20:3f:a1:3d:40:16:c0:49:62:e0: 45:74:f2:87:bc:27:cf:de:a5:48:b6:04:5f:a7:32:5b:24:f0: b8:77:df:d1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWQHPG0DEvk53sVh2RI7ZKbOl+mgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTc1MzMzWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A5YWU0OWEzNTkxYTZkY2YxODZjNjkxN2NhMmE4MThhNThh NzVhMjQ4OTk5YTk4NWRmYTkwOTdmYzg1MTE0MTc4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDz0Sw9tB3I4pqrHKUkTmBJ6lhg+y9cO8Ar/DAfmrTCAAsR CO0IZlB6VK9VmecKVyBPOSFxBizJxY28KUK5xYJGosRDOv/cDlD5dGrFnHrL0PuH vV2vXbuOFedwyclZ5kbrJN9TbhmQClmeuLf2w63WU0nOSRhOcHm16QSrKXB7CYzT KthzK9ad2IZozblrrD42BmGKgAZgBRfTLg87ogRHspFDM6DfkvEq42DaKAgF8koE 8H+LCE74Uh7zWrfkLglBtzMWrUP6qhO9tjskULPmU61s+x9pPSiJ1GUQ7sT4b4gb SBDRd/LaEKzAruQD174L9fyrsR2Em36q/Z8fMJ1xAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUsaT6ejruKS1rWvQ7zHSzaTiFENcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzUxNGM0NDA2LTQ5NGEtNDNjYy05NjczLTAzYzE5ZWYwM2IxMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAN4pAwDQYJKoZIhvcNAQELBQADggEBACK20QNIRqNVXM/nxXiZ5E39OAtU CHQiToSSfMXATmolEFEbh+oZR9PaevDRaa3SzY4ycI0mOyFghqP6X6I/Ulc1824g aN/3yZCFU51zuwrGbe5vYdRjaWNTZ5bdd0fCXPVz/uPYlNpU14WZOj4K8s2roUSj 0hIeg2/TfG8o74xTniNzWuxpYVltQE9bADfd7U53rSjvkhv10JJWgQW60nrNA03X M153DapXEUPR3vX/tiDIy3fnCVQXzF5eb04neVVmRLqrIb6TCuCemF0p2ZicHER5 J1/6+PZJUvYc/FvIID+hPUAWwEli4EV08oe8J8/epUi2BF+nMlsk8Lh339E= -----END CERTIFICATE-----Generated at Mon Oct 20 03:10:49 2025 by rpki-client