$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8c452012-95e5-4588-bc0b-bb255bff6654.roa File: 8c452012-95e5-4588-bc0b-bb255bff6654.roa (raw, json) Hash identifier: fSM7HxmWcgW61AYh7mGzlmakSkJOxrp4AqVG6yVyxho= Subject key identifier: F6:79:F9:DB:61:59:8B:79:B4:17:92:04:A8:8E:50:FC:28:4C:1E:E0 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 50C372AC0DAD759BF7F3733FFD26CA880AB5B9E6 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8c452012-95e5-4588-bc0b-bb255bff6654.roa Signing time: Sun 19 Oct 2025 14:03:28 +0000 ROA not before: Sun 19 Oct 2025 14:03:28 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.226.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:c3:72:ac:0d:ad:75:9b:f7:f3:73:3f:fd:26:ca:88:0a:b5:b9:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 14:03:28 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=df8f0a8e642f616dd8a2b244c3cf4ff904d8e2dc5942a3f9774200c58f8f7666, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:61:42:84:ab:24:11:ad:ba:ad:b2:3d:59:29: 62:dd:27:4c:6d:2d:38:e1:45:c7:c9:9c:da:53:3d: 5e:fc:82:dc:d3:73:78:dc:5e:b2:d5:34:82:5c:56: 48:77:b8:ec:e5:62:2f:ce:db:50:5c:14:ad:d0:09: 03:fc:62:6f:9c:21:33:e0:9b:e5:af:24:bf:ec:98: 95:c5:07:d4:d7:fc:d6:d1:21:8e:ce:33:86:f7:35: b1:a2:dc:2e:c7:19:ad:d1:da:50:8b:09:08:66:27: b8:44:8b:93:29:27:11:6f:e8:1c:03:59:e3:fa:55: 72:4a:1f:f0:30:15:33:3b:79:dc:4d:ea:f8:50:65: 21:78:5a:a8:1d:1b:0c:83:95:fd:1c:8c:6c:9f:00: 59:19:f7:51:c9:b9:ad:8d:cc:42:9a:f8:a8:12:0e: 9b:fb:e8:9f:ca:54:00:84:d9:d8:fd:50:49:ec:15: 1f:33:09:79:61:63:aa:ad:42:da:46:92:0e:c5:89: 9b:aa:43:1d:a2:b8:7a:5b:0f:89:83:77:9d:84:d4: 80:96:77:63:fb:66:31:18:4c:a5:b4:a9:62:54:79: 4b:af:80:28:06:ab:4e:e8:77:75:e2:46:2e:1c:f8: 50:d9:74:06:04:93:b3:64:c8:79:a2:44:bd:d6:58: cf:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:79:F9:DB:61:59:8B:79:B4:17:92:04:A8:8E:50:FC:28:4C:1E:E0 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8c452012-95e5-4588-bc0b-bb255bff6654.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.226.165.0/24 Signature Algorithm: sha256WithRSAEncryption 78:00:7a:9c:9c:eb:7d:d5:21:c6:96:53:74:c7:59:4d:39:26: 65:6a:4f:09:9a:25:b1:b4:06:6d:5b:44:1a:47:54:d9:ed:48: 4f:15:ed:cd:a4:b1:6c:8e:c6:66:1f:83:39:6e:45:a5:da:67: 01:d7:55:c3:80:37:0f:aa:39:80:2a:11:94:e6:01:d4:e2:7e: b2:5a:1a:8f:5c:51:47:4c:8b:43:04:45:36:3d:74:b5:52:36: 68:39:07:97:b5:9a:49:14:c1:2b:5e:b9:54:45:30:48:63:0c: eb:68:9f:33:f1:6e:05:f6:2f:9f:d8:6c:fe:6f:30:5b:62:a0: ae:cf:e6:e9:1a:34:36:63:2c:b7:87:e7:f8:30:52:57:c2:e0: 2a:93:70:6d:1e:22:e8:08:b1:b9:68:9a:7b:ff:fe:97:2c:61: 23:a1:5c:cd:31:0d:21:32:98:3a:71:a5:f2:b4:dd:44:b3:0e: 7a:0f:c1:4d:9d:4b:87:65:81:9e:09:4b:83:70:3d:5a:8a:94: 71:8b:e5:c4:71:8b:0c:68:2b:71:62:85:06:1a:ba:51:f5:60: 1d:1f:7a:90:41:1f:e7:cf:7f:c0:66:a7:f0:80:44:25:86:07: 2b:6f:78:80:9c:11:16:e2:c8:d8:cc:ef:f1:68:54:9b:35:03: 9e:54:43:2a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUMNyrA2tdZv383M//SbKiAq1ueYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTQwMzI4WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BkZjhmMGE4ZTY0MmY2MTZkZDhhMmIyNDRjM2NmNGZmOTA0 ZDhlMmRjNTk0MmEzZjk3NzQyMDBjNThmOGY3NjY2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDIYUKEqyQRrbqtsj1ZKWLdJ0xtLTjhRcfJnNpTPV78gtzT c3jcXrLVNIJcVkh3uOzlYi/O21BcFK3QCQP8Ym+cITPgm+WvJL/smJXFB9TX/NbR IY7OM4b3NbGi3C7HGa3R2lCLCQhmJ7hEi5MpJxFv6BwDWeP6VXJKH/AwFTM7edxN 6vhQZSF4WqgdGwyDlf0cjGyfAFkZ91HJua2NzEKa+KgSDpv76J/KVACE2dj9UEns FR8zCXlhY6qtQtpGkg7FiZuqQx2iuHpbD4mDd52E1ICWd2P7ZjEYTKW0qWJUeUuv gCgGq07od3XiRi4c+FDZdAYEk7NkyHmiRL3WWM/PAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU9nn522FZi3m0F5IEqI5Q/ChMHuAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzhjNDUyMDEyLTk1ZTUtNDU4OC1iYzBiLWJiMjU1YmZmNjY1NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAN4qUwDQYJKoZIhvcNAQELBQADggEBAHgAepyc633VIcaWU3THWU05JmVq TwmaJbG0Bm1bRBpHVNntSE8V7c2ksWyOxmYfgzluRaXaZwHXVcOANw+qOYAqEZTm AdTifrJaGo9cUUdMi0MERTY9dLVSNmg5B5e1mkkUwSteuVRFMEhjDOtonzPxbgX2 L5/YbP5vMFtioK7P5ukaNDZjLLeH5/gwUlfC4CqTcG0eIugIsblomnv//pcsYSOh XM0xDSEymDpxpfK03USzDnoPwU2dS4dlgZ4JS4NwPVqKlHGL5cRxiwxoK3FihQYa ulH1YB0fepBBH+fPf8Bmp/CARCWGBytveICcERbiyNjM7/FoVJs1A55UQyo= -----END CERTIFICATE-----Generated at Mon Oct 20 11:14:16 2025 by rpki-client