$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a6f35248-1b8c-4659-a2e8-a5afc05927a0.roa File: a6f35248-1b8c-4659-a2e8-a5afc05927a0.roa (raw, json) Hash identifier: Vi/z4V4RQnEISarpPgbSBjC0B87xFc3j9N3KvQF4pxE= Subject key identifier: AF:94:DC:CC:5B:BB:C9:EC:E8:9C:16:46:9D:D0:26:53:EC:AE:BF:AE Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5B0EEBE83706FDD42F2452994C961483820A3B3A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a6f35248-1b8c-4659-a2e8-a5afc05927a0.roa Signing time: Sun 19 Oct 2025 14:41:21 +0000 ROA not before: Sun 19 Oct 2025 14:41:21 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.226.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:0e:eb:e8:37:06:fd:d4:2f:24:52:99:4c:96:14:83:82:0a:3b:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 14:41:21 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=24c85e35bb0236a55c99effcf13f7993348e9db869dd45885c077ed4b7f18dd8, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0d:d0:31:e2:8e:f9:30:02:34:e4:9a:96:1a: 72:6d:61:31:60:6d:28:ae:b4:de:a7:24:70:6a:ca: fc:af:0c:f7:52:7d:4e:9b:0b:20:9e:ff:4b:de:8a: 70:bd:32:b2:97:ba:8d:64:10:aa:e9:07:95:af:96: 29:49:50:c1:0b:f0:91:4d:8a:db:17:e3:4e:4a:79: d2:c7:8d:41:af:26:13:bc:1d:a3:66:f9:41:75:64: 2f:41:a8:e9:27:d8:88:41:b6:41:90:90:36:e7:57: d3:7f:b5:85:9c:1c:92:88:e4:bb:f0:4a:2c:bc:0f: e8:9b:f2:19:0a:61:a1:1e:90:7c:0b:ee:9a:db:07: d3:76:a2:ac:fd:c6:50:35:fa:0e:75:53:58:30:35: 06:c8:bb:05:d8:6c:fa:29:20:4d:c5:0b:03:e9:b6: 43:88:6c:36:79:5d:4c:b3:b2:10:14:0f:48:b9:d2: 10:b4:50:19:78:f3:66:4c:9d:09:0e:03:cd:3a:41: 0e:35:50:a4:6a:ec:47:0c:4f:7a:6b:dc:5e:7f:01: f6:fa:d3:88:80:e8:43:a6:42:21:5f:0a:6f:f6:43: d8:d3:33:18:4d:fb:75:00:67:8e:0e:87:d5:28:90: da:58:fe:b7:05:26:0f:23:54:51:4c:b3:5d:b1:d2: e3:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:94:DC:CC:5B:BB:C9:EC:E8:9C:16:46:9D:D0:26:53:EC:AE:BF:AE X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a6f35248-1b8c-4659-a2e8-a5afc05927a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.226.155.0/24 Signature Algorithm: sha256WithRSAEncryption 25:73:d1:26:ef:28:57:ba:86:dd:07:98:dc:b0:29:dc:0d:11: 5c:5e:c9:cb:55:fa:cd:5e:11:bc:a7:38:b0:7f:11:38:d9:0f: 88:78:fc:9a:4d:41:82:63:db:2c:c3:7f:1e:5a:be:4c:29:e3: dd:e3:fa:c2:94:2b:44:f9:f4:de:52:9c:62:60:e1:c3:6b:51: f7:04:6d:fd:ae:de:30:5d:29:78:4e:7d:c2:8b:35:04:8a:18: b7:0a:c6:bc:83:f1:1d:61:99:57:68:08:f8:ad:a9:74:12:7e: 88:76:c3:88:a0:9b:09:71:8b:a4:b4:cf:e6:9a:e3:7c:91:1c: d3:fe:37:87:c9:d1:47:b1:aa:06:ec:fc:8e:8d:52:4b:6f:e4: d5:68:47:8b:57:62:8a:68:94:a6:8f:e6:b4:38:19:ef:fd:97: 1c:37:f2:44:a8:dc:79:e1:91:80:68:bd:4a:ff:5e:cb:8f:22: 79:d1:a5:33:54:56:d2:e7:9c:b2:30:27:06:cf:bc:a9:d1:59: d6:b7:85:62:aa:1e:22:8e:88:64:79:9e:44:08:a6:ce:13:27: 03:66:dd:dd:28:cc:24:9c:76:37:f0:85:b9:eb:78:bd:4a:c2: ce:26:26:54:69:87:ce:95:20:00:79:e0:34:88:fb:e8:bc:d7: 7c:fb:f0:7e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWw7r6DcG/dQvJFKZTJYUg4IKOzowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTQ0MTIxWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AyNGM4NWUzNWJiMDIzNmE1NWM5OWVmZmNmMTNmNzk5MzM0 OGU5ZGI4NjlkZDQ1ODg1YzA3N2VkNGI3ZjE4ZGQ4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQClDdAx4o75MAI05JqWGnJtYTFgbSiutN6nJHBqyvyvDPdS fU6bCyCe/0veinC9MrKXuo1kEKrpB5WvlilJUMEL8JFNitsX405KedLHjUGvJhO8 HaNm+UF1ZC9BqOkn2IhBtkGQkDbnV9N/tYWcHJKI5LvwSiy8D+ib8hkKYaEekHwL 7prbB9N2oqz9xlA1+g51U1gwNQbIuwXYbPopIE3FCwPptkOIbDZ5XUyzshAUD0i5 0hC0UBl482ZMnQkOA806QQ41UKRq7EcMT3pr3F5/Afb604iA6EOmQiFfCm/2Q9jT MxhN+3UAZ44Oh9UokNpY/rcFJg8jVFFMs12x0uPTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUr5TczFu7yezonBZGndAmU+yuv64wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2E2ZjM1MjQ4LTFiOGMtNDY1OS1hMmU4LWE1YWZjMDU5MjdhMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAN4pswDQYJKoZIhvcNAQELBQADggEBACVz0SbvKFe6ht0HmNywKdwNEVxe yctV+s1eEbynOLB/ETjZD4h4/JpNQYJj2yzDfx5avkwp493j+sKUK0T59N5SnGJg 4cNrUfcEbf2u3jBdKXhOfcKLNQSKGLcKxryD8R1hmVdoCPitqXQSfoh2w4igmwlx i6S0z+aa43yRHNP+N4fJ0Uexqgbs/I6NUktv5NVoR4tXYopolKaP5rQ4Ge/9lxw3 8kSo3HnhkYBovUr/XsuPInnRpTNUVtLnnLIwJwbPvKnRWda3hWKqHiKOiGR5nkQI ps4TJwNm3d0ozCScdjfwhbnreL1Kws4mJlRph86VIAB54DSI++i813z78H4= -----END CERTIFICATE-----Generated at Mon Oct 20 17:29:13 2025 by rpki-client