$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cc382e67-4944-40c2-89ad-cc1138555a5b.roa File: cc382e67-4944-40c2-89ad-cc1138555a5b.roa (raw, json) Hash identifier: 0DkR+hFqChCQnM/kueXDxyHK+u7Lgmi8wY4M85SlkGY= Subject key identifier: B2:6F:AA:F5:CB:75:2C:66:45:8D:53:05:FF:A0:09:E1:B3:3E:3A:BF Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1C53824E06C8080E5A65923A44A69D8BDFD02B43 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cc382e67-4944-40c2-89ad-cc1138555a5b.roa Signing time: Sun 19 Oct 2025 11:20:08 +0000 ROA not before: Sun 19 Oct 2025 11:20:08 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.226.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:53:82:4e:06:c8:08:0e:5a:65:92:3a:44:a6:9d:8b:df:d0:2b:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 11:20:08 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=9a46f30b8ddd545fd427da37d3ef4cef91e9c39ed88126c43df1e27226b5b973, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:89:ae:ae:bb:5d:af:0c:b3:95:bd:e4:1b:25: ed:04:42:53:46:d3:41:c0:42:09:6c:00:c1:6e:8c: f8:df:d2:5c:cd:2a:47:87:e0:74:d6:3a:75:23:af: e7:dc:db:85:cf:65:c3:2f:6b:cc:cf:71:df:e0:b8: 33:fd:a7:1e:2a:f6:95:fb:5d:ee:6a:a7:96:02:5a: f3:3d:f5:54:6e:9c:c1:7c:10:5d:e6:14:eb:b8:2b: 7d:83:4b:e3:bb:56:e4:20:26:02:e5:3a:38:04:61: ca:b8:5d:61:56:cf:21:b3:9b:86:8f:02:a6:74:e2: 66:25:bd:0b:06:b4:43:6b:1e:15:1a:b5:b1:74:82: bf:62:05:c6:19:cf:32:47:cb:20:d0:0d:7d:6c:bb: 5b:a9:91:9c:22:2d:73:8c:53:50:e4:7d:6a:36:3d: 22:29:51:70:88:6a:ea:a6:42:fd:5a:04:04:6d:17: ff:bc:5d:b0:c2:12:d0:11:a8:ba:8d:2e:7a:cf:da: 34:e9:2b:27:65:60:3a:f5:27:56:87:e5:d1:c7:ac: d3:b0:a5:bf:6e:4b:66:a2:87:f5:fb:94:5c:31:84: c6:dd:d7:1d:06:06:10:59:ba:84:12:24:d3:1e:eb: 44:66:e9:79:c3:b6:b1:cb:91:d2:24:2a:2f:5f:0a: 20:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:6F:AA:F5:CB:75:2C:66:45:8D:53:05:FF:A0:09:E1:B3:3E:3A:BF X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cc382e67-4944-40c2-89ad-cc1138555a5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.226.96.0/20 Signature Algorithm: sha256WithRSAEncryption 06:9d:4c:5b:ec:e9:3a:46:e8:95:90:b4:04:9a:32:fc:13:34: db:00:9a:6a:db:c4:47:96:a5:02:5b:d6:d7:9c:47:8b:48:6c: 22:a9:f7:ec:7a:82:02:d2:ba:3a:7f:e3:c8:0a:a7:73:9f:dc: 99:84:f4:af:3a:3d:91:21:5f:89:41:9e:f4:a3:f7:1f:5e:85: 2c:18:8b:b9:8e:b6:13:a4:df:01:49:93:23:33:52:4f:84:eb: 59:cb:74:96:c2:d8:ff:6f:68:8d:a7:28:58:04:2f:44:e3:ef: b7:c4:00:6a:96:bd:03:eb:0e:23:9a:14:03:94:f8:74:32:94: a5:bf:18:6f:b0:d9:ab:1f:a1:a9:9b:77:9f:86:96:18:91:d7: 87:91:58:65:f3:bf:b5:53:d9:21:73:25:1a:f3:57:c5:fc:6b: 56:6b:63:e6:b5:c6:bf:8f:5b:cf:e7:03:c6:5f:7d:a4:f1:66: 47:4a:43:e3:c4:82:71:f2:61:15:de:99:3c:3e:8a:22:8f:fe: 03:d6:2a:ae:8e:fc:2e:e0:13:82:c0:71:65:88:c7:ea:0f:83: 48:df:ee:1d:ad:cc:a6:b3:c1:0a:fd:3d:cd:22:05:5f:d6:97: 40:00:12:09:22:d0:dd:aa:ff:58:9f:fa:1a:49:e0:22:f7:1a: 76:4a:4a:0b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHFOCTgbICA5aZZI6RKadi9/QK0MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTEyMDA4WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A5YTQ2ZjMwYjhkZGQ1NDVmZDQyN2RhMzdkM2VmNGNlZjkx ZTljMzllZDg4MTI2YzQzZGYxZTI3MjI2YjViOTczMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCia6uu12vDLOVveQbJe0EQlNG00HAQglsAMFujPjf0lzN KkeH4HTWOnUjr+fc24XPZcMva8zPcd/guDP9px4q9pX7Xe5qp5YCWvM99VRunMF8 EF3mFOu4K32DS+O7VuQgJgLlOjgEYcq4XWFWzyGzm4aPAqZ04mYlvQsGtENrHhUa tbF0gr9iBcYZzzJHyyDQDX1su1upkZwiLXOMU1DkfWo2PSIpUXCIauqmQv1aBARt F/+8XbDCEtARqLqNLnrP2jTpKydlYDr1J1aH5dHHrNOwpb9uS2aih/X7lFwxhMbd 1x0GBhBZuoQSJNMe60Rm6XnDtrHLkdIkKi9fCiCvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUsm+q9ct1LGZFjVMF/6AJ4bM+Or8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2NjMzgyZTY3LTQ5NDQtNDBjMi04OWFkLWNjMTEzODU1NWE1Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQN4mAwDQYJKoZIhvcNAQELBQADggEBAAadTFvs6TpG6JWQtASaMvwTNNsA mmrbxEeWpQJb1tecR4tIbCKp9+x6ggLSujp/48gKp3Of3JmE9K86PZEhX4lBnvSj 9x9ehSwYi7mOthOk3wFJkyMzUk+E61nLdJbC2P9vaI2nKFgEL0Tj77fEAGqWvQPr DiOaFAOU+HQylKW/GG+w2asfoambd5+GlhiR14eRWGXzv7VT2SFzJRrzV8X8a1Zr Y+a1xr+PW8/nA8ZffaTxZkdKQ+PEgnHyYRXemTw+iiKP/gPWKq6O/C7gE4LAcWWI x+oPg0jf7h2tzKazwQr9Pc0iBV/Wl0AAEgki0N2q/1if+hpJ4CL3GnZKSgs= -----END CERTIFICATE-----Generated at Mon Oct 20 06:11:52 2025 by rpki-client