$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5b14f069-01af-44d5-b741-9d6beeef1c02.roa File: 5b14f069-01af-44d5-b741-9d6beeef1c02.roa (raw, json) Hash identifier: DJi2i2KZZ+09Pyf9EuIXkPfbLOjuYkt/2d6cTuEt8+c= Subject key identifier: 6F:A9:35:9A:C3:27:A6:BB:2E:23:16:7A:65:4B:4F:57:52:99:81:11 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1821BB517B5777F55CA3AC6D807C49C87BD7F2B3 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5b14f069-01af-44d5-b741-9d6beeef1c02.roa Signing time: Sun 19 Oct 2025 17:03:44 +0000 ROA not before: Sun 19 Oct 2025 17:03:44 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.224.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:21:bb:51:7b:57:77:f5:5c:a3:ac:6d:80:7c:49:c8:7b:d7:f2:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 17:03:44 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=6d84b57000792bcbd605fd146a93617f398841c82465444bb0403fc45990e5be, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:61:df:3a:de:6b:65:fe:bc:c0:b7:3a:64:5b: 9f:67:d8:bb:7c:9d:ec:c9:90:e9:0b:b6:05:7f:e7: 87:44:39:27:48:02:70:46:37:19:a4:ab:3d:33:01: b9:6f:ee:8f:49:60:d7:df:35:99:2e:ff:64:f8:70: 1b:56:5d:94:61:8f:92:29:b4:aa:b8:0b:1c:f2:61: b5:69:fa:ef:87:05:98:4a:3d:9b:0d:c1:5f:be:e7: f1:36:9b:2a:d5:e7:eb:fd:54:8d:50:1d:d5:c7:db: 22:fa:2e:cc:47:3c:68:e8:92:48:9a:14:5f:54:a1: 6e:7f:fb:c3:98:e4:15:02:65:91:e3:7e:77:84:cf: a2:9e:10:6c:ad:57:d4:38:34:3d:04:b0:cc:4d:6d: 41:3e:18:ef:a3:aa:f2:ac:e5:04:13:5f:de:d8:e8: b0:59:cb:99:3b:ae:da:28:af:c2:c4:87:e0:5c:27: 60:72:eb:1b:69:e9:88:d7:2c:0b:ac:4f:c9:53:15: b4:d1:49:9d:6b:4d:a5:dc:7e:a4:8f:c6:d9:3e:88: 44:43:51:26:b5:a9:51:2b:29:d2:4e:e4:9d:b2:43: 6e:5e:6a:48:5d:7e:58:e3:85:a7:22:6b:8a:2f:5c: 3e:d4:01:95:c8:01:f7:a1:df:9a:94:21:1c:f7:a4: 5a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:A9:35:9A:C3:27:A6:BB:2E:23:16:7A:65:4B:4F:57:52:99:81:11 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5b14f069-01af-44d5-b741-9d6beeef1c02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.224.0.0/15 Signature Algorithm: sha256WithRSAEncryption 31:14:c8:e7:f6:fb:17:d0:00:b0:b4:cd:d9:9f:cb:0d:b1:4b: 0a:57:6a:4b:03:e8:f7:94:e1:7b:8f:9d:16:0b:c4:ea:0a:45: b2:9a:dc:b9:b2:ad:85:f9:2a:5c:db:70:b4:42:df:1d:02:08: 4b:9a:14:7d:42:1d:b8:06:ca:c8:50:80:20:bd:10:18:78:21: d6:a2:c7:33:d7:c6:96:d1:43:23:d9:09:b1:02:ef:5d:85:57: 8b:15:7d:f3:d0:45:a5:85:22:f0:7b:d2:4b:89:2f:74:c0:38: 83:26:b7:6b:a9:a5:c0:39:0e:7b:42:47:84:76:cc:69:0e:86: 39:39:58:d6:6d:2b:f6:f5:02:16:a6:fb:8f:22:20:c3:91:67: 92:8c:2b:18:9c:b0:1b:61:cd:22:87:63:b2:d7:ee:55:e7:e8: 07:b1:12:bc:d7:71:8c:a9:46:05:5d:f1:84:ed:f3:81:22:47: 83:e2:ec:54:0d:7a:21:58:6b:70:c5:30:24:60:62:bb:81:0c: de:9a:cd:c9:d5:14:59:91:eb:f7:81:bb:69:5f:42:50:e6:d8: b1:54:ea:16:d2:b7:6b:2d:41:f3:cb:18:53:1c:79:c9:f7:e0: c9:97:19:03:69:86:c8:52:9d:e8:c1:e9:c0:d4:48:b7:bd:05: d8:23:05:5f -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUGCG7UXtXd/Vco6xtgHxJyHvX8rMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTcwMzQ0WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZDg0YjU3MDAwNzkyYmNiZDYwNWZkMTQ2YTkzNjE3ZjM5 ODg0MWM4MjQ2NTQ0NGJiMDQwM2ZjNDU5OTBlNWJlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfYd863mtl/rzAtzpkW59n2Lt8nezJkOkLtgV/54dEOSdI AnBGNxmkqz0zAblv7o9JYNffNZku/2T4cBtWXZRhj5IptKq4CxzyYbVp+u+HBZhK PZsNwV++5/E2myrV5+v9VI1QHdXH2yL6LsxHPGjokkiaFF9UoW5/+8OY5BUCZZHj fneEz6KeEGytV9Q4ND0EsMxNbUE+GO+jqvKs5QQTX97Y6LBZy5k7rtoor8LEh+Bc J2By6xtp6YjXLAusT8lTFbTRSZ1rTaXcfqSPxtk+iERDUSa1qVErKdJO5J2yQ25e akhdfljjhacia4ovXD7UAZXIAfeh35qUIRz3pFr7AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUb6k1msMnprsuIxZ6ZUtPV1KZgREwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzViMTRmMDY5LTAxYWYtNDRkNS1iNzQxLTlkNmJlZWVmMWMwMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwEN4DANBgkqhkiG9w0BAQsFAAOCAQEAMRTI5/b7F9AAsLTN2Z/LDbFLCldq SwPo95The4+dFgvE6gpFsprcubKthfkqXNtwtELfHQIIS5oUfUIduAbKyFCAIL0Q GHgh1qLHM9fGltFDI9kJsQLvXYVXixV989BFpYUi8HvSS4kvdMA4gya3a6mlwDkO e0JHhHbMaQ6GOTlY1m0r9vUCFqb7jyIgw5FnkowrGJywG2HNIodjstfuVefoB7ES vNdxjKlGBV3xhO3zgSJHg+LsVA16IVhrcMUwJGBiu4EM3prNydUUWZHr94G7aV9C UObYsVTqFtK3ay1B88sYUxx5yffgyZcZA2mGyFKd6MHpwNRIt70F2CMFXw== -----END CERTIFICATE-----Generated at Mon Oct 20 02:59:18 2025 by rpki-client