$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7a8b9930-0207-4c48-b837-c079cf6554a1.roa File: 7a8b9930-0207-4c48-b837-c079cf6554a1.roa (raw, json) Hash identifier: FO1oKxr4DEML6J4/kkLn3vW88F34O27C4u/HMnsDm1s= Subject key identifier: 40:30:7C:30:CC:FF:9E:F8:4A:EE:05:D5:9E:5D:BE:2A:DA:2C:92:55 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0F51BE0865461DB80BE4CE1773B55B79FD59D620 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7a8b9930-0207-4c48-b837-c079cf6554a1.roa Signing time: Sun 19 Oct 2025 23:12:30 +0000 ROA not before: Sun 19 Oct 2025 23:12:30 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.226.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:51:be:08:65:46:1d:b8:0b:e4:ce:17:73:b5:5b:79:fd:59:d6:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 23:12:30 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=9eda70f049cfdade5c33f2c417732301133655e540044042211326f3edb50563, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d5:76:e8:73:07:85:7a:30:35:2d:45:fe:4c: a2:ca:ba:04:60:cf:de:42:75:71:2c:ca:6d:8a:10: 49:7b:dd:85:52:bd:cd:a6:3b:e2:9d:d7:58:61:1b: f9:5a:7c:7d:e4:9e:c0:5b:ee:88:03:bc:a1:ba:f4: 2c:09:63:9d:58:7b:b4:d5:32:d1:e3:0f:3e:7c:f1: bf:42:a8:78:3c:06:da:34:5f:fc:2f:6f:e7:c3:48: 5d:a9:75:ae:9f:38:e7:59:94:3f:88:26:8c:40:92: 9f:ba:30:f8:51:ff:fa:89:bb:73:fe:71:fb:6c:33: 3f:1e:16:d2:b6:24:1f:1c:9f:51:aa:63:2b:3f:6f: 16:94:cf:2f:64:b4:49:89:4c:6e:71:da:1a:54:de: 36:e7:18:68:be:b0:65:4f:f7:88:4d:59:f5:43:4c: 1f:f8:3b:cf:45:53:31:6d:db:ff:2d:ca:76:42:c8: 7f:72:7c:48:a2:2d:e2:23:90:70:da:ba:81:77:61: 21:9e:03:66:8d:a9:09:27:a1:fa:48:53:ea:53:7a: 47:93:1b:22:97:3d:8e:9d:b1:20:35:7d:56:fa:01: fb:ae:0f:2b:71:6e:53:35:62:d7:3c:e5:07:3d:08: fc:77:e8:05:af:51:f6:bc:d6:ee:18:5c:ef:6a:7c: 46:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:30:7C:30:CC:FF:9E:F8:4A:EE:05:D5:9E:5D:BE:2A:DA:2C:92:55 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7a8b9930-0207-4c48-b837-c079cf6554a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.226.132.0/22 Signature Algorithm: sha256WithRSAEncryption 1f:41:4f:76:92:55:2d:c0:00:23:8f:59:ef:ac:e7:28:22:2c: f0:6a:11:8c:7f:be:5f:8c:c3:44:3a:2a:cb:1d:dd:35:2d:ca: 9d:8d:9e:70:c7:e1:00:c2:8e:e9:04:27:6b:96:41:97:0b:5d: e4:3d:1c:9f:48:8a:d8:7e:a8:c4:26:c4:66:4e:a2:b7:84:99: 03:fb:36:2b:3d:ff:dd:32:87:42:f3:66:59:0b:2b:ba:c5:be: 37:49:6a:da:e1:bd:9b:89:c7:2e:ba:1a:a7:d0:6a:70:7c:aa: f7:8d:4a:04:8a:3e:9b:74:0d:35:82:52:83:d3:6d:74:4b:50: bd:70:ed:65:81:0f:8f:31:88:56:de:13:50:25:02:ef:86:a0: 6a:a0:da:26:5b:94:24:bb:c0:03:a2:ef:f2:ce:f5:62:e9:b9: fd:b8:56:c8:58:b7:01:fe:ea:45:31:db:27:08:e2:e4:b3:c3: a6:48:59:5c:9b:09:66:c5:70:f2:8e:55:ab:85:0c:b7:59:6a: 90:55:8f:dc:ef:6f:aa:1d:9f:92:8d:2f:f2:e6:82:c9:e1:2e: 19:36:d0:4c:d7:b5:ed:02:d8:27:9d:8b:6b:00:1a:e0:a0:5f: 2a:af:e3:ea:3f:8c:6e:da:88:a3:a4:9d:51:08:0a:4c:7d:a9: 0d:31:6c:26 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUD1G+CGVGHbgL5M4Xc7Vbef1Z1iAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MjMxMjMwWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZWRhNzBmMDQ5Y2ZkYWRlNWMzM2YyYzQxNzczMjMwMTEz MzY1NWU1NDAwNDQwNDIyMTEzMjZmM2VkYjUwNTYzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCy1XbocweFejA1LUX+TKLKugRgz95CdXEsym2KEEl73YVS vc2mO+Kd11hhG/lafH3knsBb7ogDvKG69CwJY51Ye7TVMtHjDz588b9CqHg8Bto0 X/wvb+fDSF2pda6fOOdZlD+IJoxAkp+6MPhR//qJu3P+cftsMz8eFtK2JB8cn1Gq Yys/bxaUzy9ktEmJTG5x2hpU3jbnGGi+sGVP94hNWfVDTB/4O89FUzFt2/8tynZC yH9yfEiiLeIjkHDauoF3YSGeA2aNqQknofpIU+pTekeTGyKXPY6dsSA1fVb6Afuu DytxblM1Ytc85Qc9CPx36AWvUfa81u4YXO9qfEahAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUQDB8MMz/nvhK7gXVnl2+KtosklUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzdhOGI5OTMwLTAyMDctNGM0OC1iODM3LWMwNzljZjY1NTRhMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIN4oQwDQYJKoZIhvcNAQELBQADggEBAB9BT3aSVS3AACOPWe+s5ygiLPBq EYx/vl+Mw0Q6Kssd3TUtyp2NnnDH4QDCjukEJ2uWQZcLXeQ9HJ9Iith+qMQmxGZO oreEmQP7Nis9/90yh0LzZlkLK7rFvjdJatrhvZuJxy66GqfQanB8qveNSgSKPpt0 DTWCUoPTbXRLUL1w7WWBD48xiFbeE1AlAu+GoGqg2iZblCS7wAOi7/LO9WLpuf24 VshYtwH+6kUx2ycI4uSzw6ZIWVybCWbFcPKOVauFDLdZapBVj9zvb6odn5KNL/Lm gsnhLhk20EzXte0C2Cedi2sAGuCgXyqv4+o/jG7aiKOknVEICkx9qQ0xbCY= -----END CERTIFICATE-----Generated at Mon Oct 20 11:08:47 2025 by rpki-client