$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5cd394bc-1103-41a5-b755-e5f49b2a5f6a.roa File: 5cd394bc-1103-41a5-b755-e5f49b2a5f6a.roa (raw, json) Hash identifier: WgngCBfmO3/YLt0ob3PVD2ubmIGbod8EbdAezpF7EdI= Subject key identifier: 65:EF:98:80:41:F9:72:DB:FB:AD:28:51:BD:B5:D1:7F:62:E9:EA:7E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5685EF56982ECA52B124BBDFFCBD55D772AE442E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5cd394bc-1103-41a5-b755-e5f49b2a5f6a.roa Signing time: Sun 19 Oct 2025 20:02:29 +0000 ROA not before: Sun 19 Oct 2025 20:02:29 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.225.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:85:ef:56:98:2e:ca:52:b1:24:bb:df:fc:bd:55:d7:72:ae:44:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 20:02:29 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=7cf584d2d1a2d908e2b2931147bef6d8fffdf5cf6af4517ac348bfc939aa3eba, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4b:35:be:55:58:93:d2:af:1d:0e:33:ba:1c: d1:4a:3a:79:cb:19:b2:ba:36:f8:8f:03:bb:33:4f: dc:be:bf:b3:3c:4f:a7:79:ca:b2:c7:c8:be:d2:72: 69:0e:ce:c9:05:fc:ca:78:2d:93:60:44:2f:6f:1d: 56:3e:ce:1a:f4:7e:a9:4a:f1:b0:92:4e:59:7b:fd: 99:66:f8:5e:8c:00:61:f8:7c:42:97:6f:f5:7c:53: 16:55:21:8e:3d:4e:3a:c6:8f:f4:36:ab:c1:59:44: 5f:f6:2d:d1:0c:cf:47:de:d2:c9:2c:64:63:2d:b3: c7:ed:55:a7:0b:0e:8e:79:18:96:d6:ea:d2:78:a6: 7d:0c:9b:35:3e:d8:f2:9a:c0:f9:36:8a:1e:e5:9f: 4c:06:c2:a2:47:32:db:3d:85:18:9e:9d:ae:b4:19: 6d:3b:3a:ee:05:49:64:ce:cf:db:62:c3:cd:d0:81: da:41:72:8e:8a:25:57:27:71:72:c1:08:2d:d4:fd: 43:e9:5a:02:c6:81:a6:d6:b9:06:74:90:a2:5b:6a: d4:85:a7:ef:98:22:61:72:a6:55:a2:d7:f6:27:57: ed:06:51:65:15:d6:79:99:ae:e0:b5:f4:65:78:fc: cb:b5:65:e2:7b:db:ec:8d:6a:2f:52:f5:a8:78:3c: 80:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:EF:98:80:41:F9:72:DB:FB:AD:28:51:BD:B5:D1:7F:62:E9:EA:7E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5cd394bc-1103-41a5-b755-e5f49b2a5f6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.225.168.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:98:e7:a2:57:73:6b:09:9b:94:1e:59:73:8c:f3:fd:1d:3c: d8:a2:b6:1f:14:89:b0:49:1f:c9:22:65:7a:9c:2c:40:de:e6: 60:80:9e:c6:15:eb:8f:02:1e:53:c2:05:8b:0a:2e:a5:95:00: d6:7e:10:e8:8b:12:c7:9f:b1:f3:95:e0:a7:21:df:e6:fb:b9: 8f:69:c9:a2:bb:3b:03:5a:46:73:a8:41:02:08:03:b5:0f:95: df:7c:02:d2:6f:fc:f3:96:e6:3f:6b:c4:bb:fb:ab:e4:7f:f5: d2:33:a3:8f:60:21:5c:0e:68:be:7f:4b:3d:46:98:60:c4:bf: 7b:15:f8:73:b3:80:fb:4b:d3:8e:98:30:9f:2c:91:d7:f6:bf: 27:eb:f0:59:ea:01:38:bb:c8:50:59:69:39:5c:21:c7:46:53: 99:9e:ef:a3:a8:0e:43:1a:3d:0f:17:a9:2e:28:93:8b:40:86: 07:3a:76:d9:9e:65:08:d9:c5:99:cc:34:78:7a:db:fd:87:ed: 88:1f:3e:7e:35:f1:d0:e5:5b:fb:c9:ff:44:a7:76:33:56:c7: 83:cd:51:70:99:34:b9:98:2a:91:99:b6:e0:ee:a5:08:44:01: d1:42:8d:5e:5c:ed:6d:3a:43:8f:c4:9d:b8:f3:c1:0b:ff:93: de:85:38:54 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVoXvVpguylKxJLvf/L1V13KuRC4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MjAwMjI5WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A3Y2Y1ODRkMmQxYTJkOTA4ZTJiMjkzMTE0N2JlZjZkOGZm ZmRmNWNmNmFmNDUxN2FjMzQ4YmZjOTM5YWEzZWJhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2SzW+VViT0q8dDjO6HNFKOnnLGbK6NviPA7szT9y+v7M8 T6d5yrLHyL7ScmkOzskF/Mp4LZNgRC9vHVY+zhr0fqlK8bCSTll7/Zlm+F6MAGH4 fEKXb/V8UxZVIY49TjrGj/Q2q8FZRF/2LdEMz0fe0sksZGMts8ftVacLDo55GJbW 6tJ4pn0MmzU+2PKawPk2ih7ln0wGwqJHMts9hRiena60GW07Ou4FSWTOz9tiw83Q gdpBco6KJVcncXLBCC3U/UPpWgLGgabWuQZ0kKJbatSFp++YImFyplWi1/YnV+0G UWUV1nmZruC19GV4/Mu1ZeJ72+yNai9S9ah4PIALAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZe+YgEH5ctv7rShRvbXRf2Lp6n4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzVjZDM5NGJjLTExMDMtNDFhNS1iNzU1LWU1ZjQ5YjJhNWY2YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAN4agwDQYJKoZIhvcNAQELBQADggEBAJuY56JXc2sJm5QeWXOM8/0dPNii th8UibBJH8kiZXqcLEDe5mCAnsYV648CHlPCBYsKLqWVANZ+EOiLEsefsfOV4Kch 3+b7uY9pyaK7OwNaRnOoQQIIA7UPld98AtJv/POW5j9rxLv7q+R/9dIzo49gIVwO aL5/Sz1GmGDEv3sV+HOzgPtL046YMJ8skdf2vyfr8FnqATi7yFBZaTlcIcdGU5me 76OoDkMaPQ8XqS4ok4tAhgc6dtmeZQjZxZnMNHh62/2H7YgfPn418dDlW/vJ/0Sn djNWx4PNUXCZNLmYKpGZtuDupQhEAdFCjV5c7W06Q4/EnbjzwQv/k96FOFQ= -----END CERTIFICATE-----Generated at Mon Oct 20 06:06:37 2025 by rpki-client