$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/66af07de-652f-4444-9eef-65e2a45f9d2d.roa File: 66af07de-652f-4444-9eef-65e2a45f9d2d.roa (raw, json) Hash identifier: 2zVOBF9yGS0J+x4jr9jIeZiHrF6XclYsJXjOCaJ9EUM= Subject key identifier: 16:C4:2E:9D:1F:65:23:EE:B3:DB:F4:B1:3E:5E:CA:32:55:15:52:AD Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 624774F8E9B7832812326872EC7490F5E4AA7D16 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/66af07de-652f-4444-9eef-65e2a45f9d2d.roa Signing time: Sun 19 Oct 2025 22:22:42 +0000 ROA not before: Sun 19 Oct 2025 22:22:42 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.226.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:47:74:f8:e9:b7:83:28:12:32:68:72:ec:74:90:f5:e4:aa:7d:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 22:22:42 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=c10c42dee0791ab4d63f9d9e4e05925b79e8553465cc318800d95d7842e98bf7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d2:af:5e:88:5d:21:be:de:a4:e3:b5:16:5e: 7f:62:59:5a:5d:f6:4e:6e:37:be:4f:a8:e2:a6:9f: 19:2c:16:51:04:51:cd:51:c5:fa:24:5f:de:a0:bc: 49:18:2b:a6:90:f3:41:49:58:72:17:49:77:bb:d6: ae:02:97:ad:46:ea:91:2e:ab:f7:96:89:1a:a0:53: 17:eb:f4:58:3f:df:77:30:e9:13:4b:1e:55:e7:6d: df:f1:54:37:a0:53:bc:4a:22:44:e9:93:a4:14:96: 6a:eb:14:d7:47:60:16:cf:43:c9:9a:9a:63:b0:56: 29:68:f3:6b:8d:b5:58:15:b7:11:21:cf:c7:07:00: 85:ec:d5:55:fc:60:5a:cf:05:c6:90:19:fb:26:33: 79:73:77:06:94:db:a4:29:db:17:a2:58:4d:e5:63: fb:68:aa:31:ec:cb:9b:2e:e6:d5:d0:61:7b:e8:df: 26:b6:a5:ca:0f:05:54:da:c1:1b:dd:45:8f:c2:31: 22:4c:2c:d9:db:52:9c:03:d3:d6:d3:c9:d1:c9:e2: ab:31:11:2c:25:ec:09:73:36:bf:fa:54:de:e2:7d: 01:1f:f9:02:5c:1c:32:60:80:c2:8c:df:e6:25:0b: 60:ff:9e:e6:e4:2f:37:9b:cb:37:da:ec:b4:00:50: 29:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:C4:2E:9D:1F:65:23:EE:B3:DB:F4:B1:3E:5E:CA:32:55:15:52:AD X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/66af07de-652f-4444-9eef-65e2a45f9d2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.226.185.0/24 Signature Algorithm: sha256WithRSAEncryption 34:72:1f:65:88:9e:ad:42:97:63:82:13:8d:e8:11:c2:9e:f0: 45:62:bf:5a:60:4c:b4:05:2a:a9:b2:ff:ef:68:0c:86:bc:53: 63:77:66:dc:bb:eb:db:5a:d7:8d:bd:61:af:26:16:b5:47:b8: dd:18:27:78:b0:87:ae:47:c8:31:22:6c:2d:32:b7:b0:a0:5a: 18:54:e2:fa:18:5b:12:39:e9:1a:f8:6d:d4:2c:d5:0f:4a:91: d4:af:bb:3c:9b:0e:fb:01:49:33:2a:f2:61:ab:dc:c1:c5:57: 77:82:97:01:76:99:fe:13:39:bf:32:9f:b4:d4:3e:41:ab:ab: a9:50:84:0a:54:e1:fe:fc:8b:56:e9:72:f5:ee:54:a4:b1:4c: 9b:fb:2d:0c:64:54:13:56:2e:42:11:48:90:ff:d1:99:d6:46: 8e:e1:fc:98:a0:15:8b:ab:59:ae:b8:e2:fa:b4:9e:5e:93:14: f4:e7:54:65:3a:6c:65:f1:a6:80:7e:17:06:bc:16:94:5a:a2: a9:9a:21:1d:b7:c7:13:31:c5:cb:cd:04:ff:df:15:d4:f4:bd: ee:7f:bc:48:31:d1:c6:db:57:5e:69:42:2e:68:dc:24:ed:fc: 16:41:19:ee:ec:61:45:06:e6:41:66:3e:4a:da:49:54:dd:11: 5a:28:1f:08 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYkd0+Om3gygSMmhy7HSQ9eSqfRYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MjIyMjQyWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BjMTBjNDJkZWUwNzkxYWI0ZDYzZjlkOWU0ZTA1OTI1Yjc5 ZTg1NTM0NjVjYzMxODgwMGQ5NWQ3ODQyZTk4YmY3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCw0q9eiF0hvt6k47UWXn9iWVpd9k5uN75PqOKmnxksFlEE Uc1RxfokX96gvEkYK6aQ80FJWHIXSXe71q4Cl61G6pEuq/eWiRqgUxfr9Fg/33cw 6RNLHlXnbd/xVDegU7xKIkTpk6QUlmrrFNdHYBbPQ8mammOwVilo82uNtVgVtxEh z8cHAIXs1VX8YFrPBcaQGfsmM3lzdwaU26Qp2xeiWE3lY/toqjHsy5su5tXQYXvo 3ya2pcoPBVTawRvdRY/CMSJMLNnbUpwD09bTydHJ4qsxESwl7AlzNr/6VN7ifQEf +QJcHDJggMKM3+YlC2D/nubkLzebyzfa7LQAUCkFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUFsQunR9lI+6z2/SxPl7KMlUVUq0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzY2YWYwN2RlLTY1MmYtNDQ0NC05ZWVmLTY1ZTJhNDVmOWQyZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAN4rkwDQYJKoZIhvcNAQELBQADggEBADRyH2WInq1Cl2OCE43oEcKe8EVi v1pgTLQFKqmy/+9oDIa8U2N3Zty769ta1429Ya8mFrVHuN0YJ3iwh65HyDEibC0y t7CgWhhU4voYWxI56Rr4bdQs1Q9KkdSvuzybDvsBSTMq8mGr3MHFV3eClwF2mf4T Ob8yn7TUPkGrq6lQhApU4f78i1bpcvXuVKSxTJv7LQxkVBNWLkIRSJD/0ZnWRo7h /JigFYurWa644vq0nl6TFPTnVGU6bGXxpoB+Fwa8FpRaoqmaIR23xxMxxcvNBP/f FdT0ve5/vEgx0cbbV15pQi5o3CTt/BZBGe7sYUUG5kFmPkraSVTdEVooHwg= -----END CERTIFICATE-----Generated at Mon Oct 20 11:10:34 2025 by rpki-client