$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7f307ea9-8ce1-40ab-98d8-a2dfa0d5dce0.roa File: 7f307ea9-8ce1-40ab-98d8-a2dfa0d5dce0.roa (raw, json) Hash identifier: S7pNRXiEtosO5i77qJ7X18Cncv3XRK5BwqhybsLEYsk= Subject key identifier: E7:C4:D8:3A:3A:29:FD:E9:F3:6D:98:5B:0F:4E:84:C1:31:E6:1B:76 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 67FACD56A4F033BA0CCA5C998B2BA102ED8D67F7 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7f307ea9-8ce1-40ab-98d8-a2dfa0d5dce0.roa Signing time: Sun 19 Oct 2025 14:33:49 +0000 ROA not before: Sun 19 Oct 2025 14:33:49 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.226.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:fa:cd:56:a4:f0:33:ba:0c:ca:5c:99:8b:2b:a1:02:ed:8d:67:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 14:33:49 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=2e4792f5ceb7d279de503ab473a93ab824b481cae42aa5b1e435ccdb712bc474, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9b:5c:d1:06:23:a3:46:3e:d1:e5:25:a5:f5: 09:0f:70:56:da:51:a0:5f:22:95:c5:c4:ee:38:f3: 31:4e:e9:41:57:e1:bc:02:b7:cb:f6:ae:28:72:f2: 5a:e1:d8:c7:60:28:3f:e3:17:c2:6c:07:ad:4d:b3: 4f:fc:d6:5b:3c:cf:eb:b4:a0:bd:28:03:b0:af:9c: 4a:f3:14:07:58:ac:81:31:aa:69:88:21:84:88:bc: c9:d2:5c:26:1d:59:21:be:c7:a1:33:c8:27:85:6d: fe:38:f5:cb:69:1e:68:a0:79:fb:83:37:03:d4:77: 46:fe:89:93:52:5f:1b:7f:13:b1:b7:c7:3b:85:22: 2c:4c:18:6f:2f:29:4e:39:22:22:c7:b5:d3:9b:cd: 08:22:39:58:ae:5f:41:c0:e9:41:bb:86:78:d5:1a: ca:64:2d:a7:f2:82:84:b4:f9:95:ce:bf:b4:1c:de: 58:40:33:d5:06:6d:bc:3f:00:cb:a1:df:ac:60:65: 54:63:38:b8:e0:a6:eb:07:1b:a0:a4:6b:4b:7d:8c: 6c:af:86:81:06:e4:b2:03:4e:94:42:dc:2d:c9:ac: 5a:6e:90:4f:70:70:c4:4e:f5:a4:47:38:12:8b:4c: ab:b2:ab:5c:7b:5c:6e:e5:8e:d2:00:3a:01:ce:53: c2:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:C4:D8:3A:3A:29:FD:E9:F3:6D:98:5B:0F:4E:84:C1:31:E6:1B:76 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7f307ea9-8ce1-40ab-98d8-a2dfa0d5dce0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.226.108.0/22 Signature Algorithm: sha256WithRSAEncryption 93:cf:b8:7f:e1:cc:18:cd:42:f9:b4:17:7e:c6:d4:6c:6a:9a: 5f:2b:b9:92:2d:06:eb:ca:60:bc:cf:1b:9b:5e:63:71:ef:a6: 37:c4:82:6d:d2:5c:08:8f:44:1f:bb:b9:44:1c:72:c5:4c:8c: 90:f8:03:f7:fa:4a:49:98:b6:21:55:02:9c:0c:36:b3:3f:32: dc:8d:30:83:51:33:51:d9:4d:3c:12:94:1a:ee:ec:dd:f7:d0: 02:0c:29:4a:bc:12:c1:98:54:d2:e0:df:e6:29:8e:d0:af:eb: 55:d8:55:7e:8d:3e:3d:71:6a:17:da:07:fa:c1:e2:fe:7f:ca: 11:17:e3:e1:fa:f6:f5:9c:ff:59:e6:60:28:9b:75:af:97:fb: ba:21:e3:89:dd:5c:30:a6:9b:c7:bd:da:c7:05:9a:5d:dd:e4: b2:78:d4:ef:7a:df:5c:51:ca:b7:57:cf:4a:61:08:06:fa:19: 5a:0c:5f:7a:6c:b9:3b:d9:28:c5:2f:87:13:9e:8b:7e:7c:3d: 98:56:0e:3b:ef:ef:f7:80:33:ea:75:ae:61:4f:96:db:f6:18: 39:dd:a2:54:31:61:d9:55:8b:f0:8f:a1:8b:db:70:79:01:04: 81:26:31:f9:0e:d9:cb:51:bb:9a:88:b0:fd:39:69:e8:88:fd: df:c7:23:95 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZ/rNVqTwM7oMylyZiyuhAu2NZ/cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTQzMzQ5WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AyZTQ3OTJmNWNlYjdkMjc5ZGU1MDNhYjQ3M2E5M2FiODI0 YjQ4MWNhZTQyYWE1YjFlNDM1Y2NkYjcxMmJjNDc0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7m1zRBiOjRj7R5SWl9QkPcFbaUaBfIpXFxO448zFO6UFX 4bwCt8v2rihy8lrh2MdgKD/jF8JsB61Ns0/81ls8z+u0oL0oA7CvnErzFAdYrIEx qmmIIYSIvMnSXCYdWSG+x6EzyCeFbf449ctpHmigefuDNwPUd0b+iZNSXxt/E7G3 xzuFIixMGG8vKU45IiLHtdObzQgiOViuX0HA6UG7hnjVGspkLafygoS0+ZXOv7Qc 3lhAM9UGbbw/AMuh36xgZVRjOLjgpusHG6Cka0t9jGyvhoEG5LIDTpRC3C3JrFpu kE9wcMRO9aRHOBKLTKuyq1x7XG7ljtIAOgHOU8KHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU58TYOjop/enzbZhbD06EwTHmG3YwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzdmMzA3ZWE5LThjZTEtNDBhYi05OGQ4LWEyZGZhMGQ1ZGNlMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIN4mwwDQYJKoZIhvcNAQELBQADggEBAJPPuH/hzBjNQvm0F37G1Gxqml8r uZItBuvKYLzPG5teY3HvpjfEgm3SXAiPRB+7uUQccsVMjJD4A/f6SkmYtiFVApwM NrM/MtyNMINRM1HZTTwSlBru7N330AIMKUq8EsGYVNLg3+YpjtCv61XYVX6NPj1x ahfaB/rB4v5/yhEX4+H69vWc/1nmYCibda+X+7oh44ndXDCmm8e92scFml3d5LJ4 1O9631xRyrdXz0phCAb6GVoMX3psuTvZKMUvhxOei358PZhWDjvv7/eAM+p1rmFP ltv2GDndolQxYdlVi/CPoYvbcHkBBIEmMfkO2ctRu5qIsP05aeiI/d/HI5U= -----END CERTIFICATE-----Generated at Mon Oct 20 11:01:35 2025 by rpki-client