$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/678e5933-f161-468b-a2cc-6870d075c919.roa File: 678e5933-f161-468b-a2cc-6870d075c919.roa (raw, json) Hash identifier: zMZ+trmhswHP73bAmzv2tvVXDm+gko2Viai0ViXSXw8= Subject key identifier: 9B:B7:82:40:45:F8:5E:84:D5:82:1C:3E:F4:7B:00:12:E2:2D:D4:DD Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1E8F8C088BA79F9D9142311FA817A9E0E72BAF2A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/678e5933-f161-468b-a2cc-6870d075c919.roa Signing time: Sun 19 Oct 2025 09:02:37 +0000 ROA not before: Sun 19 Oct 2025 09:02:37 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.226.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:8f:8c:08:8b:a7:9f:9d:91:42:31:1f:a8:17:a9:e0:e7:2b:af:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 09:02:37 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=53ed31fe50b7e3abbee7833e495268ffb8fa3f00e8dde4465d2753d3e6ea3ef1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:de:64:37:93:d9:43:01:45:63:e3:1b:93:89: 34:62:b8:15:c1:17:3d:d1:8c:57:e6:9d:a4:34:f3: 0c:eb:99:23:e4:f9:68:1f:1f:ab:6e:ba:a7:75:b1: 22:4c:6c:5b:9d:0e:b1:be:a5:8d:8f:20:1f:8c:a3: 68:2b:df:c6:78:38:17:fa:8e:78:99:7d:89:ad:96: ac:08:c5:d1:35:25:23:98:a0:91:a6:92:dc:d6:98: 9c:c7:d0:e0:50:d5:1a:64:e5:b4:c8:75:f1:aa:78: e1:1a:0c:07:7a:e8:e2:5f:37:e7:b8:b8:7e:62:34: ff:86:2d:1d:c2:65:9f:36:d4:77:3c:66:d6:44:95: af:d5:5c:a7:5f:65:31:d7:97:43:ca:56:7a:d8:98: 33:a8:c2:29:3b:ae:f5:ae:9e:e9:05:89:17:1b:ff: 50:2e:c7:6f:2c:55:e6:3f:d4:dd:51:8a:36:7e:2b: a5:3c:f6:89:26:b8:6a:d8:7b:aa:4e:ef:2f:e7:04: 63:58:8f:97:63:61:2a:77:0f:03:84:6f:9e:da:96: 52:df:73:9b:a4:8c:7c:63:f0:74:bb:2c:62:77:bf: 04:10:26:3e:b9:bf:1f:98:d3:96:b8:5e:88:91:b7: f6:e4:fa:fc:e2:78:97:e4:73:23:8c:35:d8:e6:7c: fc:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:B7:82:40:45:F8:5E:84:D5:82:1C:3E:F4:7B:00:12:E2:2D:D4:DD X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/678e5933-f161-468b-a2cc-6870d075c919.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.226.251.0/24 Signature Algorithm: sha256WithRSAEncryption 66:74:38:91:1e:3b:05:15:d1:df:fb:54:28:8c:d2:85:e7:5b: fc:51:a7:0d:65:70:30:2b:51:2f:82:64:00:78:69:8e:48:83: c6:63:1b:b8:b7:8d:53:b4:6e:15:b4:cf:06:c9:62:9b:08:51: 4e:22:e2:f0:30:ed:be:41:e1:45:84:07:74:c1:87:94:38:8c: cc:e8:2d:b3:22:73:c4:eb:d5:aa:02:f0:91:b7:98:aa:b4:b0: 32:87:08:df:15:80:07:ef:7e:3b:98:fc:83:8c:4f:57:d0:86: 5b:25:4b:20:33:64:89:16:dc:b1:03:a0:bb:69:0e:57:09:b2: f2:9b:0c:a3:5f:0d:bd:0e:f1:45:51:5e:95:3b:f8:ee:3d:c4: 23:cd:2d:78:57:00:c6:af:b6:1a:6a:e3:47:32:ac:7e:52:9e: dc:f3:9c:0e:92:e0:f2:10:4c:e3:24:e1:29:12:fe:59:ac:d5: c5:8e:49:c6:45:8a:59:58:75:f2:10:7e:58:5e:e8:a9:23:4a: fa:b5:0e:98:02:b5:f2:29:24:a9:d2:ed:23:d0:f5:fd:3f:17: 91:b0:1f:8f:18:e5:2c:95:79:b3:49:93:0a:e3:f6:be:82:46: 67:42:af:08:41:96:1d:2c:0e:7f:04:47:6e:a5:e8:33:77:76: 28:de:55:9e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHo+MCIunn52RQjEfqBep4OcrryowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MDkwMjM3WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A1M2VkMzFmZTUwYjdlM2FiYmVlNzgzM2U0OTUyNjhmZmI4 ZmEzZjAwZThkZGU0NDY1ZDI3NTNkM2U2ZWEzZWYxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCX3mQ3k9lDAUVj4xuTiTRiuBXBFz3RjFfmnaQ08wzrmSPk +WgfH6tuuqd1sSJMbFudDrG+pY2PIB+Mo2gr38Z4OBf6jniZfYmtlqwIxdE1JSOY oJGmktzWmJzH0OBQ1Rpk5bTIdfGqeOEaDAd66OJfN+e4uH5iNP+GLR3CZZ821Hc8 ZtZEla/VXKdfZTHXl0PKVnrYmDOowik7rvWunukFiRcb/1Aux28sVeY/1N1RijZ+ K6U89okmuGrYe6pO7y/nBGNYj5djYSp3DwOEb57allLfc5ukjHxj8HS7LGJ3vwQQ Jj65vx+Y05a4XoiRt/bk+vzieJfkcyOMNdjmfPx3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUm7eCQEX4XoTVghw+9HsAEuIt1N0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzY3OGU1OTMzLWYxNjEtNDY4Yi1hMmNjLTY4NzBkMDc1YzkxOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAN4vswDQYJKoZIhvcNAQELBQADggEBAGZ0OJEeOwUV0d/7VCiM0oXnW/xR pw1lcDArUS+CZAB4aY5Ig8ZjG7i3jVO0bhW0zwbJYpsIUU4i4vAw7b5B4UWEB3TB h5Q4jMzoLbMic8Tr1aoC8JG3mKq0sDKHCN8VgAfvfjuY/IOMT1fQhlslSyAzZIkW 3LEDoLtpDlcJsvKbDKNfDb0O8UVRXpU7+O49xCPNLXhXAMavthpq40cyrH5Sntzz nA6S4PIQTOMk4SkS/lms1cWOScZFillYdfIQflhe6KkjSvq1DpgCtfIpJKnS7SPQ 9f0/F5GwH48Y5SyVebNJkwrj9r6CRmdCrwhBlh0sDn8ER26l6DN3dijeVZ4= -----END CERTIFICATE-----Generated at Mon Oct 20 03:02:35 2025 by rpki-client