$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a18597f9-e4d5-4904-a70e-a8eb91d784ba.roa File: a18597f9-e4d5-4904-a70e-a8eb91d784ba.roa (raw, json) Hash identifier: FG/n7O1knkze459Aqqq2psu/I4ZHhfQn+ONzw/9Z7dQ= Subject key identifier: F9:4C:AA:96:DF:C7:69:D7:B5:21:9D:F7:32:E3:0E:91:FC:EC:91:A8 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 353F65BE864D56C88386F49BD7A906465923ADA9 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a18597f9-e4d5-4904-a70e-a8eb91d784ba.roa Signing time: Sun 19 Oct 2025 09:00:05 +0000 ROA not before: Sun 19 Oct 2025 09:00:05 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.224.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:3f:65:be:86:4d:56:c8:83:86:f4:9b:d7:a9:06:46:59:23:ad:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 09:00:05 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=4a17da69cd46791d520b8dc955e683a49d329e7ed01fac36a9d4b404a0000bf0, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bb:8e:10:a3:46:c3:d5:de:92:40:2c:54:42: 4a:cf:49:fa:de:58:69:ce:59:bb:e9:3c:1c:8c:5c: bf:31:ce:5d:3a:fc:ef:41:2a:a1:d2:ac:e0:fc:02: d7:03:3d:8e:5f:8b:85:86:1a:60:94:cf:33:98:f7: 28:d4:60:7c:63:2f:39:a1:7f:2f:01:59:60:18:b0: 80:fb:02:ed:f8:b1:dc:fa:79:69:4b:ab:a9:54:b7: 85:84:c1:ff:88:55:1a:5b:d7:cc:0f:51:96:23:6c: 02:04:b7:1b:91:95:51:86:82:9e:bf:66:72:e8:e4: 4f:31:60:8b:09:20:1d:4d:9a:fb:00:c0:14:e0:f7: 01:98:d1:1d:fe:71:61:0e:33:5a:58:95:b7:1f:d5: b4:a1:e0:81:54:aa:ee:37:e7:c6:26:0d:36:8b:9d: 0c:31:96:86:56:cf:47:03:4c:e1:58:46:98:16:e6: 5f:7a:3c:fb:21:b9:1f:34:b1:f6:fd:5f:ae:31:10: 85:3d:b0:27:22:e2:76:c3:4f:24:80:b3:a6:2b:6b: e0:60:b5:06:9a:cb:c5:59:cb:e2:21:5e:b2:d2:0f: 7a:64:d6:03:15:be:9e:9f:de:88:e1:97:30:b8:91: 9f:ff:f3:9d:a8:e7:52:59:58:a1:67:90:04:7b:18: 7f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:4C:AA:96:DF:C7:69:D7:B5:21:9D:F7:32:E3:0E:91:FC:EC:91:A8 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a18597f9-e4d5-4904-a70e-a8eb91d784ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.224.228.0/23 Signature Algorithm: sha256WithRSAEncryption 53:d7:b2:74:68:c2:6c:0f:e1:07:12:34:00:9a:3b:92:2f:1c: 7b:1a:29:f7:e2:fd:40:72:eb:b2:75:67:20:03:62:12:f1:d5: 8e:3a:c6:2a:58:58:24:e1:78:c8:43:06:8e:48:a7:b1:84:e8: 82:a5:ba:34:27:08:70:1f:63:91:18:4e:a9:0a:df:14:ce:17: 3f:e0:69:29:a1:6e:59:cf:1f:86:3a:10:eb:ff:32:86:ad:3f: 67:da:05:35:8b:63:09:b5:43:ab:ec:2d:05:54:b3:b7:b1:db: f1:6c:b4:e0:2f:b1:62:5c:2e:d1:cc:1d:b0:55:6a:5e:b4:6f: b6:5e:bd:5d:d4:83:d6:ec:05:08:03:e6:a9:b7:db:d0:29:9b: ac:f3:fc:43:55:a9:f0:53:61:0f:fe:a2:c5:33:a7:81:3c:3e: 12:c8:56:90:49:5f:da:38:03:b2:6e:0e:89:15:7b:1d:ca:ff: 1c:cc:5b:dc:95:66:99:d6:2d:18:16:f2:64:e0:3f:c3:f3:85: 11:0f:8f:f5:2a:d7:04:77:2e:cc:57:58:94:21:51:50:40:53: 4d:09:da:f6:5f:3d:67:7f:93:86:a7:ce:a3:d5:27:75:dc:86: 8c:6e:45:24:2c:81:f6:b0:19:d2:ec:06:97:67:cc:66:4c:60: c2:bb:48:02 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNT9lvoZNVsiDhvSb16kGRlkjrakwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MDkwMDA1WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A0YTE3ZGE2OWNkNDY3OTFkNTIwYjhkYzk1NWU2ODNhNDlk MzI5ZTdlZDAxZmFjMzZhOWQ0YjQwNGEwMDAwYmYwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7u44Qo0bD1d6SQCxUQkrPSfreWGnOWbvpPByMXL8xzl06 /O9BKqHSrOD8AtcDPY5fi4WGGmCUzzOY9yjUYHxjLzmhfy8BWWAYsID7Au34sdz6 eWlLq6lUt4WEwf+IVRpb18wPUZYjbAIEtxuRlVGGgp6/ZnLo5E8xYIsJIB1NmvsA wBTg9wGY0R3+cWEOM1pYlbcf1bSh4IFUqu4358YmDTaLnQwxloZWz0cDTOFYRpgW 5l96PPshuR80sfb9X64xEIU9sCci4nbDTySAs6Yra+BgtQaay8VZy+IhXrLSD3pk 1gMVvp6f3ojhlzC4kZ//852o51JZWKFnkAR7GH/NAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU+Uyqlt/Hade1IZ33MuMOkfzskagwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2ExODU5N2Y5LWU0ZDUtNDkwNC1hNzBlLWE4ZWI5MWQ3ODRiYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEN4OQwDQYJKoZIhvcNAQELBQADggEBAFPXsnRowmwP4QcSNACaO5IvHHsa Kffi/UBy67J1ZyADYhLx1Y46xipYWCTheMhDBo5Ip7GE6IKlujQnCHAfY5EYTqkK 3xTOFz/gaSmhblnPH4Y6EOv/MoatP2faBTWLYwm1Q6vsLQVUs7ex2/FstOAvsWJc LtHMHbBVal60b7ZevV3Ug9bsBQgD5qm329Apm6zz/ENVqfBTYQ/+osUzp4E8PhLI VpBJX9o4A7JuDokVex3K/xzMW9yVZpnWLRgW8mTgP8PzhREPj/Uq1wR3LsxXWJQh UVBAU00J2vZfPWd/k4anzqPVJ3XchoxuRSQsgfawGdLsBpdnzGZMYMK7SAI= -----END CERTIFICATE-----Generated at Mon Oct 20 15:44:16 2025 by rpki-client