$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/51bcbdbb-8c04-42eb-8b1d-af8a8ff849cd.roa File: 51bcbdbb-8c04-42eb-8b1d-af8a8ff849cd.roa (raw, json) Hash identifier: 5dJ6uxxpp5eYeGQkOSboeTReWdlmxQZjbKdICgs9G9o= Subject key identifier: BF:9F:3B:AB:A9:87:8E:13:A0:6F:13:3B:3D:F0:CA:F7:86:18:13:97 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 44DAD3AF0AC9ED44566AB417542C339A03CDF01A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/51bcbdbb-8c04-42eb-8b1d-af8a8ff849cd.roa Signing time: Sun 19 Oct 2025 16:42:30 +0000 ROA not before: Sun 19 Oct 2025 16:42:30 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.225.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:da:d3:af:0a:c9:ed:44:56:6a:b4:17:54:2c:33:9a:03:cd:f0:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 16:42:30 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=304efe8d2a4af9fe6d61833202f7addabfc2a947981613f1bf7f80c6e0e3dfd1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:21:5d:df:fb:e0:74:52:73:13:55:12:d5:4b: db:4d:9d:3a:c4:9f:88:5f:87:c2:7a:07:40:6b:73: 02:94:43:69:c1:e9:81:0a:24:d7:12:03:19:7b:3d: 30:ed:f0:7b:c4:3d:df:8f:08:6a:c7:31:55:ab:14: 91:bd:01:5d:48:34:9a:9c:7c:d6:b8:73:9e:9f:8b: f2:50:11:83:be:7a:d5:37:51:0e:88:db:57:a6:37: 46:b4:bb:b7:6c:6e:20:01:bc:71:35:e0:d1:0a:6d: 29:ac:6b:e4:d6:ab:00:d0:40:7a:9b:27:0f:ef:f5: bd:9b:cb:4d:82:c0:8b:11:60:df:78:3f:17:c2:1a: 1b:54:fc:61:c6:20:99:ab:ec:3e:3b:1a:57:1c:8a: 6d:e1:e7:b7:73:7b:f6:2e:be:ad:f4:0b:15:0d:02: 19:34:c5:96:df:ba:b7:f4:9d:77:59:72:c9:f6:b6: e9:3f:f5:8d:02:94:f8:8e:e2:8d:97:a6:ae:0b:e0: c1:3e:33:e6:21:6f:f8:b9:28:91:7f:8a:61:8e:7e: 90:af:56:98:72:ed:56:f3:bd:4c:39:4a:55:87:00: e9:d7:ae:35:fd:61:04:f9:9a:25:ad:4f:c8:22:f1: 46:14:f7:7a:24:74:e7:b6:4a:48:e5:51:9b:b9:93: bc:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:9F:3B:AB:A9:87:8E:13:A0:6F:13:3B:3D:F0:CA:F7:86:18:13:97 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/51bcbdbb-8c04-42eb-8b1d-af8a8ff849cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.225.184.0/21 Signature Algorithm: sha256WithRSAEncryption ad:cd:a4:6d:3d:ea:11:e3:91:5a:7e:b4:63:ef:33:31:fb:fb: bf:87:69:89:be:02:db:8e:5a:af:82:2d:bc:c6:da:0c:f9:e4: e8:56:a1:a5:44:10:e9:ea:d1:4a:29:a5:38:77:17:97:34:67: c7:56:d1:15:0e:32:d9:1a:92:43:45:78:8e:fb:8a:5d:6b:f0: 70:6a:1e:ff:42:fc:50:a6:ef:c6:b2:06:58:02:cd:52:5f:85: 15:d8:6f:a3:1e:8a:0e:bb:49:5b:74:ed:9d:98:fc:c0:a0:00: e7:aa:d6:1f:1a:75:79:ed:17:22:0a:a0:57:b1:c1:2d:18:b7: 8c:7a:40:46:fa:b9:ab:af:57:c5:a6:4d:c3:d4:82:64:6e:6b: e1:af:ac:2f:bd:f5:1f:d8:a6:d7:88:a4:4e:39:d4:ec:57:e9: 49:a7:2f:ec:ba:91:23:68:3b:64:54:e4:7c:67:ec:d7:a7:a8: 64:d3:f1:65:37:4b:62:94:f2:78:13:8b:bb:cf:03:7f:ab:12: 48:a0:fb:ec:b4:4a:95:4d:1a:55:95:20:9c:eb:5a:a3:d4:16: 8e:66:a4:90:ec:13:9a:9c:a5:df:df:49:04:51:56:e4:3e:0a: bf:6c:f8:db:dc:c3:94:2b:d9:4c:f5:ab:88:93:5c:24:86:0a: be:30:77:12 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURNrTrwrJ7URWarQXVCwzmgPN8BowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTY0MjMwWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AzMDRlZmU4ZDJhNGFmOWZlNmQ2MTgzMzIwMmY3YWRkYWJm YzJhOTQ3OTgxNjEzZjFiZjdmODBjNmUwZTNkZmQxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/IV3f++B0UnMTVRLVS9tNnTrEn4hfh8J6B0BrcwKUQ2nB 6YEKJNcSAxl7PTDt8HvEPd+PCGrHMVWrFJG9AV1INJqcfNa4c56fi/JQEYO+etU3 UQ6I21emN0a0u7dsbiABvHE14NEKbSmsa+TWqwDQQHqbJw/v9b2by02CwIsRYN94 PxfCGhtU/GHGIJmr7D47Glccim3h57dze/Yuvq30CxUNAhk0xZbfurf0nXdZcsn2 tuk/9Y0ClPiO4o2Xpq4L4ME+M+Yhb/i5KJF/imGOfpCvVphy7VbzvUw5SlWHAOnX rjX9YQT5miWtT8gi8UYU93okdOe2SkjlUZu5k7zPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUv587q6mHjhOgbxM7PfDK94YYE5cwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzUxYmNiZGJiLThjMDQtNDJlYi04YjFkLWFmOGE4ZmY4NDljZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMN4bgwDQYJKoZIhvcNAQELBQADggEBAK3NpG096hHjkVp+tGPvMzH7+7+H aYm+AtuOWq+CLbzG2gz55OhWoaVEEOnq0UoppTh3F5c0Z8dW0RUOMtkakkNFeI77 il1r8HBqHv9C/FCm78ayBlgCzVJfhRXYb6Meig67SVt07Z2Y/MCgAOeq1h8adXnt FyIKoFexwS0Yt4x6QEb6uauvV8WmTcPUgmRua+GvrC+99R/YpteIpE451OxX6Umn L+y6kSNoO2RU5Hxn7NenqGTT8WU3S2KU8ngTi7vPA3+rEkig++y0SpVNGlWVIJzr WqPUFo5mpJDsE5qcpd/fSQRRVuQ+Cr9s+Nvcw5Qr2Uz1q4iTXCSGCr4wdxI= -----END CERTIFICATE-----Generated at Mon Oct 20 02:55:59 2025 by rpki-client