$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9716dc9d-4566-4e82-9092-0d70f3ae8321.roa File: 9716dc9d-4566-4e82-9092-0d70f3ae8321.roa (raw, json) Hash identifier: M2T/UFVg6kp9i9/iLwCMAu3tcMiOYDxnv0OfdP0U7s0= Subject key identifier: F9:BD:F5:C6:E1:C5:C5:A7:95:C1:05:EE:09:07:2F:70:B8:49:AB:50 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0E9A06933371BACED84F8D07C05F0006CB4C04B0 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9716dc9d-4566-4e82-9092-0d70f3ae8321.roa Signing time: Sun 19 Oct 2025 19:00:27 +0000 ROA not before: Sun 19 Oct 2025 19:00:27 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.224.230.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:9a:06:93:33:71:ba:ce:d8:4f:8d:07:c0:5f:00:06:cb:4c:04:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 19:00:27 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=865b199b53a49aae3cc3700ac22c3d96be0d57ef1735f989b082653b6edd2b48, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:03:3b:c6:2a:f2:10:5c:06:c2:1c:ff:e0:4e: d5:43:6f:ab:58:83:69:6d:e5:58:7b:b4:ca:08:08: f0:e4:43:31:14:ce:49:64:f4:86:03:30:34:ea:6c: 98:bb:f2:3e:75:8a:c5:73:e6:ba:ea:d8:59:ca:ed: df:a1:86:bd:f8:c6:c6:67:09:02:ed:c3:10:5b:4a: 59:bb:a5:3c:df:5c:8a:47:cb:48:df:98:15:8c:8f: be:7e:07:66:0d:39:05:f4:ed:22:61:eb:47:ed:68: 35:26:20:8e:63:31:d5:1c:9b:5c:72:6c:b7:73:cc: a9:cc:5a:d7:71:32:a3:4f:b9:03:fd:16:9e:cf:5d: f3:32:63:f0:0e:85:17:a3:c9:9d:cc:b6:b7:d1:3f: 50:c9:22:d8:d6:b8:e4:be:a2:e3:09:ed:5a:1b:ec: fe:99:13:44:42:56:5b:3a:12:cd:af:6c:cb:0a:09: 8b:53:fd:c8:0d:3a:87:18:61:c7:2d:e2:21:21:f2: c5:f3:c9:56:e1:a5:7e:9d:46:55:fb:39:60:7b:69: f7:07:09:68:4c:6f:54:06:4d:86:3b:a5:14:ea:91: 1b:65:03:21:40:2d:b1:9b:87:f5:4a:78:98:5c:11: f7:eb:bf:96:41:20:10:a3:12:e6:93:a1:d9:2e:78: 2f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:BD:F5:C6:E1:C5:C5:A7:95:C1:05:EE:09:07:2F:70:B8:49:AB:50 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9716dc9d-4566-4e82-9092-0d70f3ae8321.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.224.230.0/23 Signature Algorithm: sha256WithRSAEncryption 97:09:0c:4b:67:d8:1e:fb:2d:f6:3f:17:0d:4d:a9:84:28:17: f5:47:ec:55:f7:f8:34:1f:e4:70:10:c5:04:a4:7d:15:ad:81: 39:46:64:2a:4e:24:15:2e:22:de:0e:e3:39:80:b9:d4:64:d3: dc:ba:0b:7a:6c:83:2e:56:9b:35:5a:eb:79:76:d9:c3:52:13: 77:23:c9:89:a8:ac:8e:25:e9:19:ea:a0:96:88:1a:c0:1d:62: 85:55:68:f6:13:57:f2:90:18:c7:77:e7:2d:34:18:7c:b6:28: c4:26:93:a0:ba:9b:f0:2a:c7:0d:80:b4:fc:10:2c:18:b3:20: 3d:aa:51:91:12:ab:5e:74:c2:df:92:8d:d0:22:64:ae:ee:11: 92:2c:06:44:89:8b:83:a6:0f:73:a5:61:ed:db:c4:e0:51:71: e0:b6:65:0a:2a:e7:0c:55:54:c2:88:3a:d0:0d:97:34:e8:34: 9d:b9:a4:db:72:e2:32:87:2c:6f:6c:df:a0:1a:c1:d2:25:12: 14:a9:92:1b:12:14:ae:58:8f:85:54:bf:9f:60:13:7d:b0:aa: b9:d6:1d:3b:85:46:e5:47:37:c0:64:b1:d8:fd:b4:96:c4:ba: e6:1a:9f:79:9a:44:43:fd:91:f7:40:32:c4:78:36:9d:9a:f6: a5:04:6e:be -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDpoGkzNxus7YT40HwF8ABstMBLAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTkwMDI3WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4NjViMTk5YjUzYTQ5YWFlM2NjMzcwMGFjMjJjM2Q5NmJl MGQ1N2VmMTczNWY5ODliMDgyNjUzYjZlZGQyYjQ4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCRAzvGKvIQXAbCHP/gTtVDb6tYg2lt5Vh7tMoICPDkQzEU zklk9IYDMDTqbJi78j51isVz5rrq2FnK7d+hhr34xsZnCQLtwxBbSlm7pTzfXIpH y0jfmBWMj75+B2YNOQX07SJh60ftaDUmII5jMdUcm1xybLdzzKnMWtdxMqNPuQP9 Fp7PXfMyY/AOhRejyZ3MtrfRP1DJItjWuOS+ouMJ7Vob7P6ZE0RCVls6Es2vbMsK CYtT/cgNOocYYcct4iEh8sXzyVbhpX6dRlX7OWB7afcHCWhMb1QGTYY7pRTqkRtl AyFALbGbh/VKeJhcEffrv5ZBIBCjEuaTodkueC8ZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU+b31xuHFxaeVwQXuCQcvcLhJq1AwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzk3MTZkYzlkLTQ1NjYtNGU4Mi05MDkyLTBkNzBmM2FlODMyMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEN4OYwDQYJKoZIhvcNAQELBQADggEBAJcJDEtn2B77LfY/Fw1NqYQoF/VH 7FX3+DQf5HAQxQSkfRWtgTlGZCpOJBUuIt4O4zmAudRk09y6C3psgy5WmzVa63l2 2cNSE3cjyYmorI4l6RnqoJaIGsAdYoVVaPYTV/KQGMd35y00GHy2KMQmk6C6m/Aq xw2AtPwQLBizID2qUZESq150wt+SjdAiZK7uEZIsBkSJi4OmD3OlYe3bxOBRceC2 ZQoq5wxVVMKIOtANlzToNJ25pNty4jKHLG9s36AawdIlEhSpkhsSFK5Yj4VUv59g E32wqrnWHTuFRuVHN8Bksdj9tJbEuuYan3maREP9kfdAMsR4Np2a9qUEbr4= -----END CERTIFICATE-----Generated at Mon Oct 20 06:09:13 2025 by rpki-client