$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8ff5c2d6-b939-47f5-a0aa-07920bbbc0c1.roa File: 8ff5c2d6-b939-47f5-a0aa-07920bbbc0c1.roa (raw, json) Hash identifier: tBsdt/u/01djW3I1eh12YjSGkLwNe7bzTDFVilf4We0= Subject key identifier: 30:F0:21:81:2D:F1:30:CD:9C:9B:37:10:F0:CA:D3:48:18:88:45:C4 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 174E9D4829D14CCC34C0E16839A6A45FEF9F54EE Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8ff5c2d6-b939-47f5-a0aa-07920bbbc0c1.roa Signing time: Sun 19 Oct 2025 13:10:05 +0000 ROA not before: Sun 19 Oct 2025 13:10:05 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.224.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:4e:9d:48:29:d1:4c:cc:34:c0:e1:68:39:a6:a4:5f:ef:9f:54:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 13:10:05 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=77b57b9b031f9de67ed0699aceb84191f802e9498c90ece1f0cade117a94f3c6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a1:50:6e:c9:a1:ff:9e:aa:76:c9:7a:cb:1e: b5:00:14:12:54:4e:92:39:b3:7c:21:4b:60:4d:da: 50:7a:d1:a3:b5:82:6d:72:50:26:7f:04:a5:37:07: 14:c6:5c:9e:65:f2:b0:b1:b5:da:68:64:59:94:21: f6:84:c1:ad:85:ee:8f:65:ac:9a:a5:0f:a7:24:5c: d5:ae:5e:5a:e8:95:76:74:bc:9d:f4:75:ca:d3:60: ba:53:a6:2f:63:9a:a8:0a:f4:63:c9:c4:5a:50:17: 1b:38:b2:30:06:44:d8:52:3b:53:ba:ab:75:3d:da: 40:0b:96:81:9d:61:24:ba:46:98:71:98:0b:d2:2a: b8:d9:40:5d:e4:f3:9c:fb:ae:7e:13:ba:a3:6e:ae: 6b:ca:a9:37:96:28:a2:81:35:57:40:57:8d:e8:28: c2:77:de:86:07:51:f7:03:60:ce:57:75:36:5d:8f: 80:3b:f2:90:dd:e9:20:c1:66:7d:06:cc:49:f9:67: d2:69:f7:6e:c7:e7:bd:46:b1:21:53:ae:3c:37:0d: 37:55:bb:2f:1a:8e:6f:4c:7b:91:8c:5e:36:21:a1: 6a:75:2a:59:31:64:1b:33:3b:3b:94:58:c3:5f:53: dc:d2:dc:0e:0c:27:25:f9:aa:fe:38:2e:7c:b1:0a: 10:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:F0:21:81:2D:F1:30:CD:9C:9B:37:10:F0:CA:D3:48:18:88:45:C4 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8ff5c2d6-b939-47f5-a0aa-07920bbbc0c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.224.254.0/23 Signature Algorithm: sha256WithRSAEncryption 54:d0:9d:17:2a:12:34:d3:0d:13:bf:3b:bf:dd:b6:95:1c:5b: a6:59:c4:bd:5f:5f:8f:93:0c:32:98:47:31:66:61:a1:93:11: 1d:6e:10:cb:48:33:e1:1e:b8:cf:47:91:a7:bd:a0:1c:9a:93: 5b:5e:bf:44:3c:7c:d9:2f:b9:d6:12:af:87:7e:8f:90:38:6c: 24:58:b3:46:06:65:99:9c:ce:fe:64:4e:90:17:be:5a:38:0d: 92:43:31:d5:8c:86:92:c6:7f:3f:05:3b:10:4f:e1:79:84:92: 1a:57:28:e1:d5:ad:d0:ab:73:e8:36:83:d4:5e:e9:4d:8a:42: 2c:2e:80:61:4e:4f:3d:44:51:6f:e5:37:8b:24:60:cf:87:9b: 7b:53:64:b1:9f:61:4e:1b:69:7b:8e:67:40:98:55:5e:99:f3: a4:0d:ab:05:89:a6:42:1a:76:09:30:15:8b:15:19:35:81:d6: 49:30:33:c6:6a:3e:b4:c8:5e:76:0b:4f:15:b8:34:eb:9c:01: 18:8f:b0:2f:9a:28:2a:a1:39:a1:f8:12:ff:ef:81:55:ce:2b: 6a:dc:33:ef:6a:4a:59:f1:c8:77:7c:e6:f7:4a:61:07:7d:1f: b9:97:c0:e4:ce:11:0c:66:19:3e:07:a5:dd:f8:dd:f2:2d:66: e7:72:fe:16 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUF06dSCnRTMw0wOFoOaakX++fVO4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTMxMDA1WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A3N2I1N2I5YjAzMWY5ZGU2N2VkMDY5OWFjZWI4NDE5MWY4 MDJlOTQ5OGM5MGVjZTFmMGNhZGUxMTdhOTRmM2M2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwoVBuyaH/nqp2yXrLHrUAFBJUTpI5s3whS2BN2lB60aO1 gm1yUCZ/BKU3BxTGXJ5l8rCxtdpoZFmUIfaEwa2F7o9lrJqlD6ckXNWuXlrolXZ0 vJ30dcrTYLpTpi9jmqgK9GPJxFpQFxs4sjAGRNhSO1O6q3U92kALloGdYSS6Rphx mAvSKrjZQF3k85z7rn4TuqNurmvKqTeWKKKBNVdAV43oKMJ33oYHUfcDYM5XdTZd j4A78pDd6SDBZn0GzEn5Z9Jp927H571GsSFTrjw3DTdVuy8ajm9Me5GMXjYhoWp1 KlkxZBszOzuUWMNfU9zS3A4MJyX5qv44LnyxChAVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUMPAhgS3xMM2cmzcQ8MrTSBiIRcQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzhmZjVjMmQ2LWI5MzktNDdmNS1hMGFhLTA3OTIwYmJiYzBjMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEN4P4wDQYJKoZIhvcNAQELBQADggEBAFTQnRcqEjTTDRO/O7/dtpUcW6ZZ xL1fX4+TDDKYRzFmYaGTER1uEMtIM+EeuM9Hkae9oByak1tev0Q8fNkvudYSr4d+ j5A4bCRYs0YGZZmczv5kTpAXvlo4DZJDMdWMhpLGfz8FOxBP4XmEkhpXKOHVrdCr c+g2g9Re6U2KQiwugGFOTz1EUW/lN4skYM+Hm3tTZLGfYU4baXuOZ0CYVV6Z86QN qwWJpkIadgkwFYsVGTWB1kkwM8ZqPrTIXnYLTxW4NOucARiPsC+aKCqhOaH4Ev/v gVXOK2rcM+9qSlnxyHd85vdKYQd9H7mXwOTOEQxmGT4Hpd343fItZudy/hY= -----END CERTIFICATE-----Generated at Mon Oct 20 15:46:06 2025 by rpki-client