$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b36dbb49-bf0d-4b7a-b870-dba693f06923.roa File: b36dbb49-bf0d-4b7a-b870-dba693f06923.roa (raw, json) Hash identifier: qe/oo5TnYl31kvPFoaMyU27hMh9V1eENEy2i6/iqO1Y= Subject key identifier: 1E:15:08:48:1C:ED:D3:6E:55:96:61:AD:39:B6:40:B5:C2:01:75:2E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 12969BAFDD5D15076E7A992DB58C3A1EDABD41D6 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b36dbb49-bf0d-4b7a-b870-dba693f06923.roa Signing time: Sun 19 Oct 2025 19:31:28 +0000 ROA not before: Sun 19 Oct 2025 19:31:28 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.224.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:96:9b:af:dd:5d:15:07:6e:7a:99:2d:b5:8c:3a:1e:da:bd:41:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 19:31:28 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=23602c8a6421392f4d1fc67ef4c5bd882d876a552eead06a16f9e97a6e34eadc, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:26:99:5c:7f:76:f2:b5:04:54:62:a3:e9:46: 27:d1:97:08:b4:fe:c7:be:f9:bf:95:03:94:d6:0a: b4:9e:db:b1:be:e0:8d:e3:13:20:f1:36:f6:ed:f0: 55:a7:d3:f7:d3:1f:25:3d:d3:ae:eb:d4:59:07:69: be:4e:47:8a:9a:c0:ec:ca:a5:ad:3f:86:6d:2e:4c: b8:d3:fd:c9:37:4e:bf:74:98:3f:8f:4a:d7:79:dc: c5:0c:eb:26:82:cb:0a:14:ae:e7:35:3c:bb:91:29: 20:97:a6:ce:59:63:af:99:1a:e8:d6:67:50:ef:bb: d8:dc:f3:d4:1a:d6:d1:b9:1e:46:d8:40:1d:8b:a4: 79:1f:99:60:18:6b:37:34:ab:47:d0:7b:68:c7:20: 62:68:49:80:cd:0a:16:b1:51:99:b3:b0:ba:77:a9: 88:4c:4f:09:27:2b:ca:55:dc:c2:a7:7a:47:34:5a: b3:0b:3d:8d:aa:fd:df:db:a2:77:a1:be:36:42:6c: ef:11:a2:86:bc:b4:14:12:c3:92:cd:b5:3f:79:e1: d2:63:1f:a4:26:07:fe:09:74:33:80:f5:3b:64:e1: 81:b2:a3:df:00:6e:5f:38:e5:a8:23:0b:28:1f:23: 5a:da:1c:95:85:13:32:e7:6e:77:a7:4f:50:d4:eb: 41:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:15:08:48:1C:ED:D3:6E:55:96:61:AD:39:B6:40:B5:C2:01:75:2E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b36dbb49-bf0d-4b7a-b870-dba693f06923.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.224.54.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:97:53:f1:2b:df:9e:ee:63:36:ea:49:66:5c:18:33:66:b7: d8:85:37:9a:eb:27:e1:78:35:2c:b7:54:78:51:92:2c:a1:f1: ba:c3:43:5d:59:26:91:2f:82:8a:d6:89:e8:d9:b9:75:a1:91: 5c:73:ab:58:b9:2e:ab:0d:2d:eb:14:80:1b:1e:63:5d:b7:5f: 0c:ab:b4:32:13:fc:20:7c:e3:83:33:79:e4:8b:76:06:0a:7a: 58:16:81:d7:29:80:3d:ac:8f:d1:8a:ee:91:9d:06:c9:30:db: a1:fc:6d:9a:9f:da:ec:79:9b:1b:39:9e:1c:e6:24:35:4b:16: f5:92:ad:aa:27:b5:24:34:0a:f0:29:97:09:b4:4b:9b:54:96: 50:92:96:f1:fb:29:ab:44:46:f3:45:70:eb:83:18:b7:db:fc: 5e:9f:ad:76:5c:37:80:d5:12:da:8b:1d:a0:91:cc:8a:de:a7: 0e:e5:2b:aa:0c:42:cc:ae:97:6b:bd:cb:31:53:b1:b7:5d:b5: d2:35:61:4e:54:f7:03:36:bd:b6:e5:04:52:52:b8:e5:af:2c: 66:00:ec:da:1e:ab:c1:e2:08:d2:11:08:33:57:cc:f8:c2:95: 9a:35:9a:4f:11:3f:be:06:d1:59:3e:b3:20:7e:36:7c:07:d8: be:04:cb:26 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEpabr91dFQduepkttYw6Htq9QdYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTkzMTI4WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AyMzYwMmM4YTY0MjEzOTJmNGQxZmM2N2VmNGM1YmQ4ODJk ODc2YTU1MmVlYWQwNmExNmY5ZTk3YTZlMzRlYWRjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCmJplcf3bytQRUYqPpRifRlwi0/se++b+VA5TWCrSe27G+ 4I3jEyDxNvbt8FWn0/fTHyU9067r1FkHab5OR4qawOzKpa0/hm0uTLjT/ck3Tr90 mD+PStd53MUM6yaCywoUruc1PLuRKSCXps5ZY6+ZGujWZ1Dvu9jc89Qa1tG5HkbY QB2LpHkfmWAYazc0q0fQe2jHIGJoSYDNChaxUZmzsLp3qYhMTwknK8pV3MKnekc0 WrMLPY2q/d/bonehvjZCbO8Rooa8tBQSw5LNtT954dJjH6QmB/4JdDOA9Ttk4YGy o98Abl845agjCygfI1raHJWFEzLnbnenT1DU60EFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUHhUISBzt025VlmGtObZAtcIBdS4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2IzNmRiYjQ5LWJmMGQtNGI3YS1iODcwLWRiYTY5M2YwNjkyMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAN4DYwDQYJKoZIhvcNAQELBQADggEBAGyXU/Er357uYzbqSWZcGDNmt9iF N5rrJ+F4NSy3VHhRkiyh8brDQ11ZJpEvgorWiejZuXWhkVxzq1i5LqsNLesUgBse Y123XwyrtDIT/CB844MzeeSLdgYKelgWgdcpgD2sj9GK7pGdBskw26H8bZqf2ux5 mxs5nhzmJDVLFvWSraontSQ0CvAplwm0S5tUllCSlvH7KatERvNFcOuDGLfb/F6f rXZcN4DVEtqLHaCRzIrepw7lK6oMQsyul2u9yzFTsbddtdI1YU5U9wM2vbblBFJS uOWvLGYA7Noeq8HiCNIRCDNXzPjClZo1mk8RP74G0Vk+syB+NnwH2L4EyyY= -----END CERTIFICATE-----Generated at Mon Oct 20 15:44:37 2025 by rpki-client