$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/94a10d01-9dfb-4709-a5fc-d716a69a333d.roa File: 94a10d01-9dfb-4709-a5fc-d716a69a333d.roa (raw, json) Hash identifier: r/WeR11D1sv0FyUqrGvmnauOOzeklEJunLeHmX7fPzs= Subject key identifier: 3D:74:A8:A3:C8:FC:A1:A7:10:59:4C:BF:7A:49:5E:2A:E3:A0:B3:D6 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 522693F230B63754416808EA8F1A46B9B896CCA7 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/94a10d01-9dfb-4709-a5fc-d716a69a333d.roa Signing time: Sun 19 Oct 2025 21:33:45 +0000 ROA not before: Sun 19 Oct 2025 21:33:45 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.225.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:26:93:f2:30:b6:37:54:41:68:08:ea:8f:1a:46:b9:b8:96:cc:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 21:33:45 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=c4ac479891ae26a175cb149d8022dd84d9cae0e9d9f5c8c503b6d7ff53be6ce1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0d:d4:1f:82:fc:1a:7f:dd:d7:b5:c8:a1:67: 27:65:2a:fb:e0:e3:7d:0e:83:37:22:22:76:b2:39: 50:f8:e4:b2:f6:b2:56:c0:84:7a:e8:ae:92:36:73: 74:ef:bc:07:46:d9:c5:65:5b:f7:d4:2c:5e:99:61: 1a:9b:82:45:87:db:2b:3f:41:9d:56:8b:c9:4f:5e: f1:12:75:dc:a6:ae:5a:9d:cf:12:d9:ee:c6:e2:2a: 78:ab:32:09:1c:f2:0a:88:53:3a:57:55:56:81:e9: 61:ab:fd:c6:7c:e0:32:2c:b3:b3:88:69:3b:f5:54: d7:03:ba:ad:f9:2a:13:48:b1:11:96:60:eb:7f:18: 0d:6c:ed:31:cc:fb:47:6d:b7:07:73:d1:58:a0:2e: e1:7b:4b:a7:1c:17:34:79:20:69:e5:cb:c7:96:69: 15:22:11:4e:76:1f:62:a4:d0:de:cb:fb:4f:d5:44: 82:5d:00:91:99:aa:82:56:5e:0e:3d:e4:5c:09:73: 1f:cd:bb:12:57:48:04:5b:78:ad:fb:c2:07:69:a8: 3b:fd:9d:3c:26:e5:bd:cc:52:0f:be:61:20:a3:5c: 72:b8:1f:78:88:b3:3a:3b:ff:c5:1f:44:41:6b:fb: 12:cd:29:33:b6:18:85:0f:cc:74:7d:43:e3:80:e2: 06:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:74:A8:A3:C8:FC:A1:A7:10:59:4C:BF:7A:49:5E:2A:E3:A0:B3:D6 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/94a10d01-9dfb-4709-a5fc-d716a69a333d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.225.134.0/24 Signature Algorithm: sha256WithRSAEncryption 85:a5:02:1e:28:cb:eb:fb:9b:3c:64:31:71:d0:36:12:59:6f: 53:01:d1:14:a5:2a:aa:be:9f:a1:89:3e:b0:f0:49:00:c8:64: 62:6f:52:cd:86:38:fc:1e:c6:c1:11:9e:53:4e:42:86:a7:58: a0:19:94:82:3a:3d:69:93:9d:b6:b6:c5:a3:27:8b:98:d2:01: 38:30:26:d3:53:b4:4c:6b:d1:d0:af:18:f6:9e:31:aa:52:46: 28:2f:f3:6a:46:5c:c9:e2:8f:6e:33:b0:2f:42:c9:ba:77:d8: 8f:cd:67:08:b9:84:85:00:78:a3:8a:fc:ea:ea:36:41:59:f1: 0f:d6:fe:2d:2e:b1:d0:a4:4b:3e:b7:ce:14:04:9b:68:8b:40: 35:60:1f:7e:4f:7d:9a:96:4e:94:63:88:06:b0:e0:77:bb:a4: 35:9d:5c:5b:e7:35:42:9f:24:7c:97:f3:a1:de:cc:8d:a2:48: 12:b2:66:9c:47:97:1b:4f:01:af:21:93:12:1d:5a:75:7e:05: 46:e0:dc:9c:eb:cc:0b:f4:7d:97:05:ba:1a:61:f0:de:67:58: 0d:80:6a:9e:6a:26:18:71:99:fa:85:e8:15:4e:f5:8c:4b:91: ca:de:7f:b5:5d:8e:2e:44:67:62:61:6d:63:51:97:5b:5d:dc: 0d:4c:28:3e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUiaT8jC2N1RBaAjqjxpGubiWzKcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MjEzMzQ1WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BjNGFjNDc5ODkxYWUyNmExNzVjYjE0OWQ4MDIyZGQ4NGQ5 Y2FlMGU5ZDlmNWM4YzUwM2I2ZDdmZjUzYmU2Y2UxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2DdQfgvwaf93XtcihZydlKvvg430OgzciInayOVD45LL2 slbAhHrorpI2c3TvvAdG2cVlW/fULF6ZYRqbgkWH2ys/QZ1Wi8lPXvESddymrlqd zxLZ7sbiKnirMgkc8gqIUzpXVVaB6WGr/cZ84DIss7OIaTv1VNcDuq35KhNIsRGW YOt/GA1s7THM+0dttwdz0VigLuF7S6ccFzR5IGnly8eWaRUiEU52H2Kk0N7L+0/V RIJdAJGZqoJWXg495FwJcx/NuxJXSARbeK37wgdpqDv9nTwm5b3MUg++YSCjXHK4 H3iIszo7/8UfREFr+xLNKTO2GIUPzHR9Q+OA4gYzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUPXSoo8j8oacQWUy/ekleKuOgs9YwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzk0YTEwZDAxLTlkZmItNDcwOS1hNWZjLWQ3MTZhNjlhMzMzZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAN4YYwDQYJKoZIhvcNAQELBQADggEBAIWlAh4oy+v7mzxkMXHQNhJZb1MB 0RSlKqq+n6GJPrDwSQDIZGJvUs2GOPwexsERnlNOQoanWKAZlII6PWmTnba2xaMn i5jSATgwJtNTtExr0dCvGPaeMapSRigv82pGXMnij24zsC9Cybp32I/NZwi5hIUA eKOK/OrqNkFZ8Q/W/i0usdCkSz63zhQEm2iLQDVgH35PfZqWTpRjiAaw4He7pDWd XFvnNUKfJHyX86HezI2iSBKyZpxHlxtPAa8hkxIdWnV+BUbg3JzrzAv0fZcFuhph 8N5nWA2Aap5qJhhxmfqF6BVO9YxLkcref7Vdji5EZ2JhbWNRl1td3A1MKD4= -----END CERTIFICATE-----Generated at Mon Oct 20 18:12:17 2025 by rpki-client