$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c386cd04-23ac-4691-be03-5c3fb3ca30c3.roa File: c386cd04-23ac-4691-be03-5c3fb3ca30c3.roa (raw, json) Hash identifier: sWXr39JUzEMOYq8PVq/iRVL9aNPTztZfR++diKKMqfY= Subject key identifier: 9F:EA:78:9D:55:4D:0E:72:A5:60:A6:A2:13:D2:02:4E:F2:08:5E:78 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 55D14A90370D9203E6075F8EB365DFB2A6168A66 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c386cd04-23ac-4691-be03-5c3fb3ca30c3.roa Signing time: Sun 19 Oct 2025 10:30:18 +0000 ROA not before: Sun 19 Oct 2025 10:30:18 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.226.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:d1:4a:90:37:0d:92:03:e6:07:5f:8e:b3:65:df:b2:a6:16:8a:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 10:30:18 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=30e5597d249292af903fe4fc21e610296221ed9d00f05c3ffa1b1da27d6e843d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fb:8d:d3:2b:4d:01:8a:10:ca:f2:f7:a9:75: 20:87:b5:69:d3:6e:bd:79:23:15:ac:25:ee:05:af: 28:0e:c3:86:77:35:19:74:3d:d8:bb:02:9a:0d:89: fa:69:cf:17:b1:22:08:b8:46:2f:fd:65:d5:a8:3b: 84:04:4e:26:6c:ff:9a:1e:06:43:5c:6f:a3:fc:4e: 96:e2:e3:e2:6e:80:05:db:05:ca:da:d3:8d:93:dd: 47:40:14:82:86:57:a8:bb:64:7c:a9:0e:e6:ad:af: 85:1d:d1:6b:a6:25:c3:e0:a2:33:69:0c:5d:d1:75: a1:c3:4d:51:a0:34:cd:8e:f7:a9:be:e9:e0:a6:fd: 56:8f:33:8e:c4:fe:79:4e:5e:a5:fa:38:fe:20:69: ab:2e:e6:cd:ad:8d:12:d5:13:5a:35:a8:56:91:0c: 9f:5a:42:ac:fc:fb:5c:09:34:31:95:87:ca:eb:4c: bb:92:94:07:9a:d8:e3:ae:98:39:8c:6a:2e:ac:4d: 28:ef:53:f8:81:72:76:34:9f:4a:86:68:e5:8d:8f: d2:4a:30:1d:b6:e1:a7:5f:64:ab:a1:b3:d5:ab:e0: b2:74:11:d2:ba:7a:da:09:ed:d0:d4:0b:4a:d5:e7: 07:bc:37:53:26:65:16:83:f2:93:98:f8:f2:18:8b: 70:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:EA:78:9D:55:4D:0E:72:A5:60:A6:A2:13:D2:02:4E:F2:08:5E:78 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c386cd04-23ac-4691-be03-5c3fb3ca30c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.226.212.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:fc:fd:d5:0f:6b:30:00:ca:09:b4:3b:90:d4:b2:39:7e:a8: ac:e0:8f:b3:56:c8:e4:ec:b3:ba:8c:59:d2:7d:6d:41:71:ed: 30:41:bc:f3:91:f4:2c:ac:73:b0:a8:b1:50:a8:ea:26:e3:7a: 91:96:1d:d5:95:42:0c:ac:94:76:62:0b:66:20:db:12:42:16: f3:07:6f:f2:a6:21:8f:6b:7e:81:d0:0a:84:73:e8:72:ad:c3: 87:90:92:c5:46:cd:0f:1d:75:aa:62:20:fd:27:e5:cf:fe:a7: c0:3c:c0:c9:e3:e8:9f:df:23:94:23:91:b9:c4:15:bc:99:ec: b4:5e:e2:bb:23:5e:27:68:c3:f2:cc:7f:a4:d3:68:6d:8c:41: d9:46:67:2b:34:c6:8f:47:a7:94:1e:4f:43:63:dc:e6:87:01: 27:28:76:5c:34:a6:89:8b:e4:45:3a:91:e1:d0:f9:71:94:c4: 33:85:c6:e5:54:57:ce:4a:fb:c8:4a:0c:ee:6d:92:86:4c:62: da:1c:35:6b:49:2a:9b:64:c6:29:e7:d8:51:25:bd:58:76:9b: df:f0:31:eb:22:4d:7e:d8:d1:a1:30:c0:bb:55:5e:66:0f:96: 7c:7a:f7:1e:d2:10:fb:9c:e4:78:05:71:4e:eb:de:b1:0f:17: 21:44:69:01 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVdFKkDcNkgPmB1+Os2XfsqYWimYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTAzMDE4WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AzMGU1NTk3ZDI0OTI5MmFmOTAzZmU0ZmMyMWU2MTAyOTYy MjFlZDlkMDBmMDVjM2ZmYTFiMWRhMjdkNmU4NDNkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1+43TK00BihDK8vepdSCHtWnTbr15IxWsJe4FrygOw4Z3 NRl0Pdi7ApoNifppzxexIgi4Ri/9ZdWoO4QETiZs/5oeBkNcb6P8Tpbi4+JugAXb Bcra042T3UdAFIKGV6i7ZHypDuatr4Ud0WumJcPgojNpDF3RdaHDTVGgNM2O96m+ 6eCm/VaPM47E/nlOXqX6OP4gaasu5s2tjRLVE1o1qFaRDJ9aQqz8+1wJNDGVh8rr TLuSlAea2OOumDmMai6sTSjvU/iBcnY0n0qGaOWNj9JKMB224adfZKuhs9Wr4LJ0 EdK6etoJ7dDUC0rV5we8N1MmZRaD8pOY+PIYi3BdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUn+p4nVVNDnKlYKaiE9ICTvIIXngwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2MzODZjZDA0LTIzYWMtNDY5MS1iZTAzLTVjM2ZiM2NhMzBjMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAN4tQwDQYJKoZIhvcNAQELBQADggEBABz8/dUPazAAygm0O5DUsjl+qKzg j7NWyOTss7qMWdJ9bUFx7TBBvPOR9Cysc7CosVCo6ibjepGWHdWVQgyslHZiC2Yg 2xJCFvMHb/KmIY9rfoHQCoRz6HKtw4eQksVGzQ8ddapiIP0n5c/+p8A8wMnj6J/f I5QjkbnEFbyZ7LRe4rsjXidow/LMf6TTaG2MQdlGZys0xo9Hp5QeT0Nj3OaHASco dlw0pomL5EU6keHQ+XGUxDOFxuVUV85K+8hKDO5tkoZMYtocNWtJKptkxinn2FEl vVh2m9/wMesiTX7Y0aEwwLtVXmYPlnx69x7SEPuc5HgFcU7r3rEPFyFEaQE= -----END CERTIFICATE-----Generated at Mon Oct 20 06:08:34 2025 by rpki-client