$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/99ded2ce-0a90-415f-9aa2-f1c8631c058c.roa File: 99ded2ce-0a90-415f-9aa2-f1c8631c058c.roa (raw, json) Hash identifier: k9dNdk6MYxnN82MPV/+sl67xtekP44w+0OOApwX/Cgk= Subject key identifier: CA:38:38:C6:33:3D:E5:76:FA:18:9A:FF:83:F6:24:1A:3D:44:FC:BD Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7E27044E2FC045FB7051D23395BC90E1FA883A37 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/99ded2ce-0a90-415f-9aa2-f1c8631c058c.roa Signing time: Sun 19 Oct 2025 16:11:23 +0000 ROA not before: Sun 19 Oct 2025 16:11:23 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.226.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:27:04:4e:2f:c0:45:fb:70:51:d2:33:95:bc:90:e1:fa:88:3a:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 16:11:23 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=d5b7a1d60f9aa8d67014ad57a463f5b6fd1c342558806ca928839e904c5c9825, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:22:51:2b:ea:24:00:14:85:33:cd:79:80:ee: 1a:68:0a:30:52:46:9a:85:5e:31:ad:e9:c8:79:68: 97:a0:6d:8c:fe:14:65:31:6e:46:c0:2a:7d:8b:cb: cf:c2:37:bc:82:d7:6a:b9:53:4b:92:8a:93:ea:d5: 7f:66:55:9d:65:86:d9:ef:0f:57:e7:af:c2:16:c9: e8:f7:06:d2:9b:42:39:e9:9d:91:50:72:33:b8:34: 8f:e4:6c:e7:9c:b3:fb:7f:aa:b9:36:15:e9:ab:d2: 70:67:a1:fc:c8:bf:14:02:57:db:86:31:7f:d6:3a: 73:ed:de:ee:b4:a2:4d:70:f8:93:ae:4b:7b:a4:a5: 24:f8:62:72:0c:8c:19:9b:33:21:7e:53:b4:9c:b2: 0c:b1:f3:b0:a7:d7:50:95:60:48:17:b7:c3:ec:3a: 75:68:ce:9f:c4:80:0e:a7:75:28:4a:4f:59:83:ba: c1:22:b3:8b:bb:e9:97:27:7c:bc:83:13:e0:e1:40: 65:89:28:04:28:69:4b:ce:d4:92:81:a0:af:15:b4: 6e:f3:d3:cc:b9:47:4f:94:c1:96:99:5a:6f:58:f8: 09:b0:19:95:4e:e2:4d:a7:3b:9d:45:ce:b2:af:67: dc:e5:98:28:ba:8f:ea:7b:85:75:51:67:6c:90:bf: b3:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:38:38:C6:33:3D:E5:76:FA:18:9A:FF:83:F6:24:1A:3D:44:FC:BD X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/99ded2ce-0a90-415f-9aa2-f1c8631c058c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.226.8.0/24 Signature Algorithm: sha256WithRSAEncryption 47:9b:62:48:4e:25:f6:43:3d:66:6d:c9:1a:56:77:44:36:83: 2b:26:19:cd:ac:06:8d:e9:28:bb:d8:64:40:61:3e:c9:e2:8b: b4:3f:d0:b7:94:65:7b:5b:21:d2:c1:98:0a:ea:5d:62:40:7f: 09:cc:eb:00:b5:1e:0b:fb:f6:f3:16:8d:24:67:71:c6:eb:94: ce:e5:34:85:ea:cb:00:51:a1:9e:03:77:eb:21:09:86:22:52: ef:2d:b4:c5:33:54:ff:11:27:5f:ce:6c:53:73:5d:68:fb:ab: 2f:97:66:73:85:2b:57:89:16:cf:68:57:6d:a4:e8:ad:fe:80: 77:70:9a:d6:41:c3:2d:9a:15:73:f6:56:bf:51:1a:67:43:64: 9e:b0:eb:22:9a:e9:84:22:3d:13:c8:37:25:c7:27:aa:7c:51: 30:36:7d:0a:e6:9a:b6:cf:ee:6a:6c:b8:20:f2:25:82:0f:0b: 20:7f:53:3c:73:e4:90:6e:41:c4:c8:c5:a7:ab:7c:a8:75:fe: ea:4d:08:ff:a6:a0:70:9c:d9:e8:17:2c:9f:25:eb:f0:9f:7a: 5b:53:9d:df:30:2d:97:3e:e2:cd:a0:a3:ce:30:17:3a:ae:4f: 70:6d:bf:a8:c0:57:dd:31:b9:71:11:29:4c:0a:9e:8b:0c:c4: 73:a4:cc:cb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUficETi/ARftwUdIzlbyQ4fqIOjcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTYxMTIzWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BkNWI3YTFkNjBmOWFhOGQ2NzAxNGFkNTdhNDYzZjViNmZk MWMzNDI1NTg4MDZjYTkyODgzOWU5MDRjNWM5ODI1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDnIlEr6iQAFIUzzXmA7hpoCjBSRpqFXjGt6ch5aJegbYz+ FGUxbkbAKn2Ly8/CN7yC12q5U0uSipPq1X9mVZ1lhtnvD1fnr8IWyej3BtKbQjnp nZFQcjO4NI/kbOecs/t/qrk2Femr0nBnofzIvxQCV9uGMX/WOnPt3u60ok1w+JOu S3ukpST4YnIMjBmbMyF+U7Scsgyx87Cn11CVYEgXt8PsOnVozp/EgA6ndShKT1mD usEis4u76ZcnfLyDE+DhQGWJKAQoaUvO1JKBoK8VtG7z08y5R0+UwZaZWm9Y+Amw GZVO4k2nO51FzrKvZ9zlmCi6j+p7hXVRZ2yQv7NXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUyjg4xjM95Xb6GJr/g/YkGj1E/L0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzk5ZGVkMmNlLTBhOTAtNDE1Zi05YWEyLWYxYzg2MzFjMDU4Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAN4ggwDQYJKoZIhvcNAQELBQADggEBAEebYkhOJfZDPWZtyRpWd0Q2gysm Gc2sBo3pKLvYZEBhPsnii7Q/0LeUZXtbIdLBmArqXWJAfwnM6wC1Hgv79vMWjSRn ccbrlM7lNIXqywBRoZ4Dd+shCYYiUu8ttMUzVP8RJ1/ObFNzXWj7qy+XZnOFK1eJ Fs9oV22k6K3+gHdwmtZBwy2aFXP2Vr9RGmdDZJ6w6yKa6YQiPRPINyXHJ6p8UTA2 fQrmmrbP7mpsuCDyJYIPCyB/Uzxz5JBuQcTIxaerfKh1/upNCP+moHCc2egXLJ8l 6/CfeltTnd8wLZc+4s2go84wFzquT3Btv6jAV90xuXERKUwKnosMxHOkzMs= -----END CERTIFICATE-----Generated at Mon Oct 20 05:16:44 2025 by rpki-client