$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/db76c24b-0228-4812-909f-b2c8df6c6f37.roa File: db76c24b-0228-4812-909f-b2c8df6c6f37.roa (raw, json) Hash identifier: I2coNIDY+chCaABkc1U9AVplb8TwSydwhZeyBiz+SI0= Subject key identifier: E3:7B:FC:A3:13:03:66:50:34:D1:14:50:00:43:13:AF:49:CF:A6:BB Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1338B0E91ADB50E0D6BFB0F00914D3C18A028B4C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/db76c24b-0228-4812-909f-b2c8df6c6f37.roa Signing time: Sun 19 Oct 2025 08:51:16 +0000 ROA not before: Sun 19 Oct 2025 08:51:16 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.226.78.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:38:b0:e9:1a:db:50:e0:d6:bf:b0:f0:09:14:d3:c1:8a:02:8b:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 08:51:16 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=cc67dda154a38a700bbcbec2ecbe152d711a33b2bf57351c03287a54fce97854, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ee:17:79:6d:36:32:bf:12:b3:2a:18:53:3a: 70:3a:64:3c:ee:74:bb:62:3d:bd:a2:3e:13:c6:ae: 6f:e0:6d:0e:75:2d:0e:4c:a3:9b:ba:77:c7:f8:f3: 5a:a8:ce:94:b3:ba:25:5c:3c:93:32:23:a2:50:f3: 1c:ad:6c:d9:cb:82:ed:3d:55:f7:b8:9e:77:96:a9: c1:bb:d1:af:68:5b:4c:93:83:55:ee:ee:57:aa:f9: fa:16:56:fa:ac:38:06:38:05:c7:79:e0:36:29:1e: e6:d5:da:5a:11:4b:54:83:68:0a:ac:92:08:3e:0e: ea:a9:4c:f2:eb:02:b4:e3:90:91:80:e7:f2:48:a6: 80:e6:b1:99:7a:af:1d:9a:67:e5:ff:29:76:27:a9: 1d:47:7b:75:c7:dd:e7:f0:a3:32:10:c6:30:11:ba: 4a:d6:f9:62:e2:97:51:de:6f:21:17:c0:98:18:66: e4:09:8f:5a:c7:c9:cf:14:7c:c8:2d:bd:ea:ad:92: 5e:3a:e9:a2:2b:b4:f2:56:79:b0:7f:25:87:29:dd: 6e:ec:dc:f8:c1:d8:79:46:2e:b9:96:b2:f5:42:0f: 2b:92:f0:cd:1f:23:e5:81:b0:21:82:6f:5e:d5:15: 59:f5:47:39:42:15:67:60:64:f0:3f:f2:b5:1c:76: 68:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:7B:FC:A3:13:03:66:50:34:D1:14:50:00:43:13:AF:49:CF:A6:BB X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/db76c24b-0228-4812-909f-b2c8df6c6f37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.226.78.0/23 Signature Algorithm: sha256WithRSAEncryption 55:c2:19:0c:a2:f6:55:fd:58:02:4d:1c:d4:4f:46:91:a8:79: 72:4c:5b:3c:ab:86:0f:ed:81:75:55:c9:04:26:70:c1:3e:27: ae:a6:aa:33:d1:b9:6d:c6:70:5f:74:09:52:c8:5b:48:a3:c1: 65:d6:d1:a2:21:03:63:af:63:5a:b7:d7:13:2c:be:33:b7:e7: 98:57:98:02:b6:bf:ed:8c:b2:f6:25:1f:ce:c6:2d:93:e3:11: 24:e7:00:a7:b6:30:5d:8b:6e:0a:db:2a:6c:c0:e4:8f:72:2a: 2a:67:d0:97:e2:25:dc:b6:2b:42:be:2e:a7:39:f7:1b:ac:ef: 4a:b8:53:6a:29:95:e9:b0:6a:37:09:ae:21:5a:98:7b:bb:f9: 6f:07:a6:94:3f:15:8d:9a:06:a2:a7:de:92:6f:07:1f:d2:49: 33:68:00:ea:b6:e3:8d:6f:19:62:7e:42:17:49:00:6c:bb:17: 4d:72:76:f2:ca:24:a2:ea:4d:bd:27:ab:b1:d9:86:a3:a3:9d: d0:c8:2b:dd:f6:d0:f8:da:e1:ca:72:21:c2:64:36:50:50:fb: 89:b4:74:4c:5e:0b:43:26:b4:b2:da:1a:2b:c1:5f:16:7a:2b: a3:df:3b:3f:27:2c:37:70:3f:57:6b:84:f0:19:8e:aa:4d:a1: 34:22:34:86 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEziw6RrbUODWv7DwCRTTwYoCi0wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MDg1MTE2WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BjYzY3ZGRhMTU0YTM4YTcwMGJiY2JlYzJlY2JlMTUyZDcx MWEzM2IyYmY1NzM1MWMwMzI4N2E1NGZjZTk3ODU0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCd7hd5bTYyvxKzKhhTOnA6ZDzudLtiPb2iPhPGrm/gbQ51 LQ5Mo5u6d8f481qozpSzuiVcPJMyI6JQ8xytbNnLgu09Vfe4nneWqcG70a9oW0yT g1Xu7leq+foWVvqsOAY4Bcd54DYpHubV2loRS1SDaAqskgg+DuqpTPLrArTjkJGA 5/JIpoDmsZl6rx2aZ+X/KXYnqR1He3XH3efwozIQxjARukrW+WLil1HebyEXwJgY ZuQJj1rHyc8UfMgtveqtkl466aIrtPJWebB/JYcp3W7s3PjB2HlGLrmWsvVCDyuS 8M0fI+WBsCGCb17VFVn1RzlCFWdgZPA/8rUcdmjZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU43v8oxMDZlA00RRQAEMTr0nPprswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2RiNzZjMjRiLTAyMjgtNDgxMi05MDlmLWIyYzhkZjZjNmYzNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEN4k4wDQYJKoZIhvcNAQELBQADggEBAFXCGQyi9lX9WAJNHNRPRpGoeXJM Wzyrhg/tgXVVyQQmcME+J66mqjPRuW3GcF90CVLIW0ijwWXW0aIhA2OvY1q31xMs vjO355hXmAK2v+2MsvYlH87GLZPjESTnAKe2MF2LbgrbKmzA5I9yKipn0JfiJdy2 K0K+Lqc59xus70q4U2oplemwajcJriFamHu7+W8HppQ/FY2aBqKn3pJvBx/SSTNo AOq2441vGWJ+QhdJAGy7F01ydvLKJKLqTb0nq7HZhqOjndDIK9320Pja4cpyIcJk NlBQ+4m0dExeC0MmtLLaGivBXxZ6K6PfOz8nLDdwP1drhPAZjqpNoTQiNIY= -----END CERTIFICATE-----Generated at Mon Oct 20 08:29:48 2025 by rpki-client