$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/610088ee-47db-49ea-841a-23154f2bed48.roa File: 610088ee-47db-49ea-841a-23154f2bed48.roa (raw, json) Hash identifier: 0IaR4tmxnMTR/YuqZWwJWNelatt+Xn8j4jRpEs4mAbQ= Subject key identifier: 30:21:32:2E:CC:23:B0:33:B1:59:16:52:2B:11:F0:AB:52:98:03:50 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 45A6D3A22BDA5F9396AA97F8225F5E68DA5379D6 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/610088ee-47db-49ea-841a-23154f2bed48.roa Signing time: Sun 19 Oct 2025 11:40:08 +0000 ROA not before: Sun 19 Oct 2025 11:40:08 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.225.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:a6:d3:a2:2b:da:5f:93:96:aa:97:f8:22:5f:5e:68:da:53:79:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 11:40:08 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=6185a658fd47d227929f961f9a9ee3293c070e021743bd7092ff99d03f1f369a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2b:2b:16:26:25:b4:a6:41:8c:0d:a8:25:a2: ae:aa:50:49:07:a7:53:45:25:00:28:eb:98:c9:56: 18:32:66:66:2d:ec:93:95:bd:0e:49:d4:ad:74:2f: 46:00:fc:16:13:86:19:e2:e8:7b:f3:30:a4:b7:cc: 84:c6:00:f7:43:98:9b:23:e9:3d:b3:88:cc:ca:bc: 8a:09:ae:35:9b:ac:e8:96:12:a4:33:32:7c:ca:a8: e1:3a:85:f2:25:ad:86:b0:04:50:51:0d:50:ae:d3: 37:06:11:ab:aa:c2:eb:de:76:8e:10:5b:82:9e:e9: f7:09:41:2a:d3:36:c3:06:c3:c8:53:d3:92:08:a1: 49:17:38:07:f5:5f:ec:84:a8:d3:64:36:43:a4:4b: 9d:50:55:06:ba:5d:1f:79:d1:4f:3d:2d:e0:b5:3a: 87:97:94:36:9e:28:bb:6f:cf:d4:88:30:33:bf:b5: 8b:64:a3:68:34:89:2c:63:eb:76:40:30:b5:ac:4a: 38:ce:e6:f1:f5:a7:a4:a2:8f:bf:f0:74:70:85:bc: e4:a5:56:ad:00:29:f6:8b:9a:65:a1:0f:e0:d0:30: 78:40:3a:d7:fd:94:93:38:cc:5a:26:21:d4:d2:64: 2e:fc:2c:b1:74:80:f7:06:98:f8:fc:00:bf:83:a9: 26:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:21:32:2E:CC:23:B0:33:B1:59:16:52:2B:11:F0:AB:52:98:03:50 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/610088ee-47db-49ea-841a-23154f2bed48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.225.195.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:7f:a1:43:d5:65:c5:07:3c:c7:25:f7:2c:7c:3b:25:93:5c: d9:2b:89:be:73:6c:46:ae:cc:7a:eb:d3:66:b0:5e:43:6c:ba: c8:95:dd:e2:5e:f8:8b:49:c1:20:6d:b6:9a:15:76:4a:c3:04: 8a:e5:12:49:ec:51:9a:d7:38:6a:2a:fa:82:7e:2f:0a:04:7e: 2c:3d:64:bc:bd:16:cf:a6:2f:79:0f:a9:48:f6:88:96:70:8a: 50:19:82:f2:60:3f:2c:9a:f1:ef:f2:cc:2e:62:2e:a0:e4:f3: a9:9f:fc:08:91:d5:66:05:19:b2:bf:24:88:d3:45:53:7f:62: e6:08:eb:d0:c7:1d:fc:da:21:22:0d:ea:23:54:0c:ae:15:e0: 41:53:f5:4e:14:77:ca:30:93:9a:5c:75:01:13:d7:77:7a:86: 2a:b7:ba:71:ab:5d:fb:8b:52:d6:c5:12:8e:04:d7:1d:a1:13: 99:64:c2:be:33:ef:af:ec:ff:7f:cc:a3:06:1d:88:19:ea:08: 84:43:e4:b8:f2:01:ce:ff:f7:17:30:d5:59:12:69:49:7b:19: ba:3c:86:10:b6:2d:ce:e3:0d:6e:4f:da:80:0c:5b:98:ea:96: ae:12:10:a3:42:02:48:d2:71:98:58:a3:81:56:bc:8f:aa:c0: 71:04:ff:34 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURabToivaX5OWqpf4Il9eaNpTedYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTE0MDA4WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A2MTg1YTY1OGZkNDdkMjI3OTI5Zjk2MWY5YTllZTMyOTNj MDcwZTAyMTc0M2JkNzA5MmZmOTlkMDNmMWYzNjlhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0KysWJiW0pkGMDagloq6qUEkHp1NFJQAo65jJVhgyZmYt 7JOVvQ5J1K10L0YA/BYThhni6HvzMKS3zITGAPdDmJsj6T2ziMzKvIoJrjWbrOiW EqQzMnzKqOE6hfIlrYawBFBRDVCu0zcGEauqwuvedo4QW4Ke6fcJQSrTNsMGw8hT 05IIoUkXOAf1X+yEqNNkNkOkS51QVQa6XR950U89LeC1OoeXlDaeKLtvz9SIMDO/ tYtko2g0iSxj63ZAMLWsSjjO5vH1p6Sij7/wdHCFvOSlVq0AKfaLmmWhD+DQMHhA Otf9lJM4zFomIdTSZC78LLF0gPcGmPj8AL+DqSYLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUMCEyLswjsDOxWRZSKxHwq1KYA1AwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzYxMDA4OGVlLTQ3ZGItNDllYS04NDFhLTIzMTU0ZjJiZWQ0OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAN4cMwDQYJKoZIhvcNAQELBQADggEBAD5/oUPVZcUHPMcl9yx8OyWTXNkr ib5zbEauzHrr02awXkNsusiV3eJe+ItJwSBttpoVdkrDBIrlEknsUZrXOGoq+oJ+ LwoEfiw9ZLy9Fs+mL3kPqUj2iJZwilAZgvJgPyya8e/yzC5iLqDk86mf/AiR1WYF GbK/JIjTRVN/YuYI69DHHfzaISIN6iNUDK4V4EFT9U4Ud8owk5pcdQET13d6hiq3 unGrXfuLUtbFEo4E1x2hE5lkwr4z76/s/3/MowYdiBnqCIRD5LjyAc7/9xcw1VkS aUl7Gbo8hhC2Lc7jDW5P2oAMW5jqlq4SEKNCAkjScZhYo4FWvI+qwHEE/zQ= -----END CERTIFICATE-----Generated at Mon Oct 20 11:10:00 2025 by rpki-client