$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8f606b5b-6611-44ba-8c5a-21f454a313ad.roa File: 8f606b5b-6611-44ba-8c5a-21f454a313ad.roa (raw, json) Hash identifier: 8K/vn76x56KSMIWKAlHJyPr1PXAYdffFQX/NOZsyguc= Subject key identifier: F3:9C:78:C1:83:BE:A2:D6:D1:2C:E6:C3:62:25:ED:75:54:C9:79:6F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 44771319EB877AB370B19FB565F36135EEA22CFF Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8f606b5b-6611-44ba-8c5a-21f454a313ad.roa Signing time: Sun 19 Oct 2025 11:07:50 +0000 ROA not before: Sun 19 Oct 2025 11:07:50 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.225.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:77:13:19:eb:87:7a:b3:70:b1:9f:b5:65:f3:61:35:ee:a2:2c:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 11:07:50 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=83c9197a6f741f8af84b5fab01d60a01816d9ce7da645051dd9b00b28b0658da, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7b:90:b8:3e:9b:1d:7d:96:db:ba:b2:93:42: c2:0a:1b:91:e4:1d:47:a4:d4:4a:59:34:0c:b0:7d: 83:32:b4:54:c9:76:e3:80:03:af:63:42:3a:31:d7: 0e:c7:bf:f9:56:04:d4:58:2f:56:b7:0b:63:07:5e: b0:6a:73:cd:64:1e:e6:e3:e1:4a:10:50:4a:8d:44: 19:b5:99:b9:82:2b:10:37:c8:b9:1a:b6:64:e4:f2: 08:39:c6:0b:dc:63:f3:3a:1f:f5:99:5e:fe:04:39: f7:ff:e5:34:30:cf:cc:80:2a:de:f1:cb:bb:bb:ba: 82:5a:a5:65:a3:9c:30:c5:59:38:87:b5:8f:2b:15: 2f:d2:09:d7:ea:5c:cb:b7:ec:9d:d5:64:a8:52:02: 47:b9:1c:5d:6f:bb:fd:b4:1f:d6:52:67:5c:33:b6: fb:fd:19:c5:b4:fd:20:de:6e:3e:31:aa:f3:c1:b3: 9f:ab:db:b1:09:a6:d7:07:4f:9c:e2:e9:a8:55:cb: 75:38:ef:36:81:25:60:5f:d3:3d:af:b0:6b:ff:ed: 64:aa:66:6c:ec:a6:95:29:eb:af:06:60:d1:b6:34: 61:f4:d3:09:9d:83:5a:32:cc:14:a3:d5:9e:b3:79: 32:3e:c9:21:8a:23:17:ee:0a:c7:e9:74:d3:2c:52: 0a:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:9C:78:C1:83:BE:A2:D6:D1:2C:E6:C3:62:25:ED:75:54:C9:79:6F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8f606b5b-6611-44ba-8c5a-21f454a313ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.225.143.0/24 Signature Algorithm: sha256WithRSAEncryption 25:59:c6:13:81:34:10:99:69:51:1b:e3:8b:ab:9d:eb:59:cd: 94:bb:4b:3b:24:94:f6:86:20:35:39:d7:37:dd:68:2e:2f:43: e5:00:fa:86:b6:05:14:02:b3:23:bf:a6:0d:00:99:f7:27:ef: 05:d2:ee:cd:43:0e:0f:b0:9e:e6:44:5d:a1:f3:ca:8e:e5:de: 59:b0:ff:f2:5e:e6:d2:7f:01:ef:2c:18:f6:23:d1:24:ba:e0: ed:ca:0b:95:fd:6f:9e:c8:11:50:6f:4e:cc:3f:d8:12:a5:6a: 06:21:54:28:6a:f1:62:d5:99:d6:d8:3c:9e:75:43:4b:bb:99: 32:8a:f9:68:50:9a:01:7a:e6:5c:54:0e:dc:26:c6:fb:66:4f: 46:51:ae:7f:7c:a4:85:44:22:e3:4f:d6:8f:75:ff:3c:94:1c: c2:d0:87:b8:7a:9d:b9:cc:29:9e:92:a2:eb:2e:30:b2:22:2a: 5b:7d:32:c6:7a:0a:ad:b3:26:83:ef:48:ea:9a:e5:86:3d:30: d8:78:a8:e0:56:6c:80:b2:7d:62:72:08:4f:8c:3e:6d:8d:fc: a9:5f:ba:40:57:99:ab:a7:7f:70:ef:b4:68:f2:c2:03:20:48: 38:e9:ba:2b:a4:14:14:2d:f8:f4:ce:ab:7b:1f:45:ce:f8:c3: 27:8f:8a:a6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURHcTGeuHerNwsZ+1ZfNhNe6iLP8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTEwNzUwWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4M2M5MTk3YTZmNzQxZjhhZjg0YjVmYWIwMWQ2MGEwMTgx NmQ5Y2U3ZGE2NDUwNTFkZDliMDBiMjhiMDY1OGRhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/e5C4PpsdfZbburKTQsIKG5HkHUek1EpZNAywfYMytFTJ duOAA69jQjox1w7Hv/lWBNRYL1a3C2MHXrBqc81kHubj4UoQUEqNRBm1mbmCKxA3 yLkatmTk8gg5xgvcY/M6H/WZXv4EOff/5TQwz8yAKt7xy7u7uoJapWWjnDDFWTiH tY8rFS/SCdfqXMu37J3VZKhSAke5HF1vu/20H9ZSZ1wztvv9GcW0/SDebj4xqvPB s5+r27EJptcHT5zi6ahVy3U47zaBJWBf0z2vsGv/7WSqZmzsppUp668GYNG2NGH0 0wmdg1oyzBSj1Z6zeTI+ySGKIxfuCsfpdNMsUgr3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU85x4wYO+otbRLObDYiXtdVTJeW8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzhmNjA2YjViLTY2MTEtNDRiYS04YzVhLTIxZjQ1NGEzMTNhZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAN4Y8wDQYJKoZIhvcNAQELBQADggEBACVZxhOBNBCZaVEb44urnetZzZS7 SzsklPaGIDU51zfdaC4vQ+UA+oa2BRQCsyO/pg0Amfcn7wXS7s1DDg+wnuZEXaHz yo7l3lmw//Je5tJ/Ae8sGPYj0SS64O3KC5X9b57IEVBvTsw/2BKlagYhVChq8WLV mdbYPJ51Q0u7mTKK+WhQmgF65lxUDtwmxvtmT0ZRrn98pIVEIuNP1o91/zyUHMLQ h7h6nbnMKZ6SousuMLIiKlt9MsZ6Cq2zJoPvSOqa5YY9MNh4qOBWbICyfWJyCE+M Pm2N/KlfukBXmaunf3DvtGjywgMgSDjpuiukFBQt+PTOq3sfRc74wyePiqY= -----END CERTIFICATE-----Generated at Mon Oct 20 08:41:30 2025 by rpki-client