$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/54fb2195-82bc-4612-bcde-97aab16ff31d.roa File: 54fb2195-82bc-4612-bcde-97aab16ff31d.roa (raw, json) Hash identifier: q1hp98hfOkMiV9SouYc2DMHzP+Cydg+0ES8OTXoXl5o= Subject key identifier: 34:DF:EC:73:2E:69:9D:40:0E:72:59:76:5C:C1:BB:6F:C4:B0:42:42 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 752B6225D63E17865410A80486A3CF78F1CF7310 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/54fb2195-82bc-4612-bcde-97aab16ff31d.roa Signing time: Sun 19 Oct 2025 08:21:10 +0000 ROA not before: Sun 19 Oct 2025 08:21:10 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.226.56.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:2b:62:25:d6:3e:17:86:54:10:a8:04:86:a3:cf:78:f1:cf:73:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 08:21:10 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=4ec6f44800e3553f29480f5befbc3a3b585a1a63280b4777e2755ccba5f3685c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:53:d5:c9:0b:5e:02:62:95:98:34:1b:27:b5: ed:a1:7b:72:51:42:7e:a6:ce:dd:86:ab:c5:b0:99: 08:af:e2:3a:fd:b9:26:0b:0b:11:27:b4:79:ca:d3: 19:3c:02:dc:75:8c:70:1d:61:54:a9:81:f6:47:7f: 37:32:e2:fc:78:b0:70:2a:9a:8e:28:26:84:8b:bc: 12:cd:68:38:42:25:b3:28:c3:97:14:2c:ab:6a:e8: ac:93:83:c0:3d:bd:de:3f:e5:8e:f6:41:cc:c4:5c: b2:0f:5f:1e:e5:16:ca:f2:b7:dc:6c:7b:f2:09:1c: 48:35:99:11:3c:f8:16:24:f7:1b:25:f9:98:c3:9a: 7b:00:ab:28:a3:53:76:e7:5f:2d:cf:c1:f2:e9:44: 61:f5:73:51:f0:16:60:cd:31:85:6b:cf:e8:4b:c3: bf:15:bc:ee:33:4d:51:bf:43:0d:1b:09:03:4a:ff: 08:21:6c:f2:1f:3d:fe:47:9b:60:2e:d9:ec:c3:1d: 90:49:8e:9b:3d:db:7a:b0:32:84:99:46:0f:d7:9d: 4e:a2:d2:65:00:7d:03:cf:d7:56:ca:bd:40:39:3b: 3d:d3:92:95:81:c2:0d:6a:14:83:7b:60:bf:f1:1c: 38:d5:2e:a6:fe:15:cb:ae:6d:31:06:8b:c0:20:f7: 0c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:DF:EC:73:2E:69:9D:40:0E:72:59:76:5C:C1:BB:6F:C4:B0:42:42 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/54fb2195-82bc-4612-bcde-97aab16ff31d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.226.56.0/23 Signature Algorithm: sha256WithRSAEncryption 5b:e2:87:a4:72:85:9e:d9:2b:69:cc:c6:06:49:e8:dd:2d:db: 1f:6c:79:77:00:e7:fd:88:0d:4f:3c:4f:1f:ea:fd:59:ec:1e: b2:50:7d:f5:60:db:c5:e7:9c:52:9c:8a:d3:b1:41:ce:fc:31: 4b:f0:ba:e2:67:bf:f9:5d:1b:68:bf:91:80:f4:15:b3:9f:2c: d2:55:dc:ed:84:3b:6f:ab:c3:5f:32:2b:10:90:63:57:97:01: fb:ae:25:95:7a:f8:17:9f:fc:b4:cc:cd:8a:4c:50:8e:8e:fe: 8f:b3:8e:5b:70:5a:0b:5a:33:47:fb:cc:28:76:ef:11:4c:29: a1:18:4b:ec:8d:26:b3:fe:16:ae:f9:51:86:14:14:f0:a7:4a: b8:6e:49:4b:4a:52:55:21:de:90:b2:81:f7:2f:1a:1f:f8:e8: 2e:e6:29:22:c6:31:83:e1:34:7e:2c:e4:d0:3e:f8:29:7b:85: da:0a:3b:4a:e4:6c:02:52:24:42:d3:bc:c6:57:4a:87:cb:71: 90:28:37:72:f3:2b:8f:47:0e:fb:69:bf:3c:27:64:d9:17:5d: 26:69:aa:a5:74:19:9d:96:67:39:12:c6:00:ec:60:4f:25:72: f7:62:94:9e:62:4d:c8:50:93:b2:81:c7:16:7f:55:57:a9:0a: 2d:37:51:d1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdStiJdY+F4ZUEKgEhqPPePHPcxAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MDgyMTEwWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZWM2ZjQ0ODAwZTM1NTNmMjk0ODBmNWJlZmJjM2EzYjU4 NWExYTYzMjgwYjQ3NzdlMjc1NWNjYmE1ZjM2ODVjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpU9XJC14CYpWYNBsnte2he3JRQn6mzt2Gq8WwmQiv4jr9 uSYLCxEntHnK0xk8Atx1jHAdYVSpgfZHfzcy4vx4sHAqmo4oJoSLvBLNaDhCJbMo w5cULKtq6KyTg8A9vd4/5Y72QczEXLIPXx7lFsryt9xse/IJHEg1mRE8+BYk9xsl +ZjDmnsAqyijU3bnXy3PwfLpRGH1c1HwFmDNMYVrz+hLw78VvO4zTVG/Qw0bCQNK /wghbPIfPf5Hm2Au2ezDHZBJjps923qwMoSZRg/XnU6i0mUAfQPP11bKvUA5Oz3T kpWBwg1qFIN7YL/xHDjVLqb+FcuubTEGi8Ag9wybAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUNN/scy5pnUAOcll2XMG7b8SwQkIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzU0ZmIyMTk1LTgyYmMtNDYxMi1iY2RlLTk3YWFiMTZmZjMxZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEN4jgwDQYJKoZIhvcNAQELBQADggEBAFvih6RyhZ7ZK2nMxgZJ6N0t2x9s eXcA5/2IDU88Tx/q/VnsHrJQffVg28XnnFKcitOxQc78MUvwuuJnv/ldG2i/kYD0 FbOfLNJV3O2EO2+rw18yKxCQY1eXAfuuJZV6+Bef/LTMzYpMUI6O/o+zjltwWgta M0f7zCh27xFMKaEYS+yNJrP+Fq75UYYUFPCnSrhuSUtKUlUh3pCygfcvGh/46C7m KSLGMYPhNH4s5NA++Cl7hdoKO0rkbAJSJELTvMZXSofLcZAoN3LzK49HDvtpvzwn ZNkXXSZpqqV0GZ2WZzkSxgDsYE8lcvdilJ5iTchQk7KBxxZ/VVepCi03UdE= -----END CERTIFICATE-----Generated at Mon Oct 20 03:14:18 2025 by rpki-client