$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/db8c5d3c-7efd-480a-b972-4fac8fe0c357.roa File: db8c5d3c-7efd-480a-b972-4fac8fe0c357.roa (raw, json) Hash identifier: q1Koe357r7IZ6yKjExdgES9tGf+Wa8VtEVIzKW9rEiw= Subject key identifier: B4:86:61:D2:3F:47:B6:AC:E6:D6:B5:53:DC:F1:54:96:F8:11:17:9F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 25A6528DF4162026423B689747F0F1E0E648CCC6 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/db8c5d3c-7efd-480a-b972-4fac8fe0c357.roa Signing time: Sun 19 Oct 2025 12:16:47 +0000 ROA not before: Sun 19 Oct 2025 12:16:47 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.224.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:a6:52:8d:f4:16:20:26:42:3b:68:97:47:f0:f1:e0:e6:48:cc:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 12:16:47 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=b16cc68b6caba8511c11a5e39aab038a17e3626095e2c6227ef7b8c97c38bebb, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:58:4d:ea:84:f8:4b:60:53:22:89:57:a7:f2: df:00:ca:91:62:6d:6f:4a:0c:f5:cd:bd:28:fd:c4: c3:c2:ee:27:34:76:74:fe:20:d7:b2:f8:2e:c7:dc: ec:47:fc:ed:78:c0:96:db:41:b3:a3:9a:16:25:1e: db:06:58:eb:aa:c4:97:80:75:85:26:59:65:98:bf: 35:30:7d:61:57:e4:64:85:e8:ee:35:29:f4:44:1f: 7b:a8:74:67:3f:3a:8b:98:17:42:72:48:35:10:fa: 41:1c:f4:6d:91:8b:ad:45:e5:82:7a:0b:2c:d1:ce: 7c:99:9c:94:e5:38:ce:54:38:3d:b3:4b:3f:07:b4: c2:ca:a8:06:c4:49:02:5d:9b:56:1f:7f:c1:ec:33: 8f:f3:9f:1b:57:c3:e7:2c:b1:74:2f:ba:42:cd:45: 27:16:3f:e7:db:5d:7b:f8:d2:e5:01:30:fe:cb:70: 2d:be:c8:76:13:06:63:66:00:2c:83:9b:58:47:b5: 6a:62:2f:da:47:6a:16:a4:1e:38:28:27:34:77:eb: a0:30:3b:79:52:af:88:d2:9d:ff:a7:a3:22:fe:42: be:7a:94:94:af:e5:12:9a:25:2d:66:ae:d3:59:c8: 55:d4:ac:03:16:c2:bc:82:e3:57:42:3d:09:34:99: 39:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:86:61:D2:3F:47:B6:AC:E6:D6:B5:53:DC:F1:54:96:F8:11:17:9F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/db8c5d3c-7efd-480a-b972-4fac8fe0c357.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.224.96.0/21 Signature Algorithm: sha256WithRSAEncryption a6:ab:67:81:98:0a:da:5d:7a:a9:08:4e:c8:dc:a0:96:2d:97: ac:96:fe:e0:fc:42:fd:ae:1b:1f:19:17:26:dd:61:82:97:49: de:b6:ae:7d:07:06:7e:c4:e3:3a:4d:3f:da:3b:ef:b6:8b:55: a9:ec:d9:87:67:f1:c8:15:fb:01:de:7d:cc:a0:e0:28:dd:dd: fc:24:8a:03:ff:19:53:c6:8d:13:2c:f9:4f:7e:f9:95:64:3e: df:3b:34:e0:52:83:1e:68:17:fc:a7:ed:87:d0:4c:e7:22:bb: 9c:7a:97:7b:6a:b4:c5:5d:de:20:72:1b:d8:5c:c4:ea:d9:ef: da:2f:11:03:24:e2:39:80:7c:49:75:64:91:1d:89:aa:7d:a1: 36:2c:0b:1c:59:fa:64:e1:33:76:ba:fc:5e:e9:6d:37:d9:04: 10:ba:52:67:dd:5c:46:20:b6:bc:31:ce:71:36:39:55:9a:81: f6:08:62:d3:6c:08:2e:b7:e0:e6:8d:2d:cc:91:cf:32:58:5a: ef:c5:95:2e:1e:16:bc:89:f0:6e:3a:7a:41:93:6e:88:4c:23: 97:a8:a9:33:b7:37:5c:7b:d2:23:7b:15:93:86:f8:30:39:6b: 4a:1f:e4:c5:3c:c1:5e:db:2b:3b:93:b0:d8:0d:10:ae:dc:58: 2d:d8:72:2b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJaZSjfQWICZCO2iXR/Dx4OZIzMYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTIxNjQ3WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BiMTZjYzY4YjZjYWJhODUxMWMxMWE1ZTM5YWFiMDM4YTE3 ZTM2MjYwOTVlMmM2MjI3ZWY3YjhjOTdjMzhiZWJiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLWE3qhPhLYFMiiVen8t8AypFibW9KDPXNvSj9xMPC7ic0 dnT+INey+C7H3OxH/O14wJbbQbOjmhYlHtsGWOuqxJeAdYUmWWWYvzUwfWFX5GSF 6O41KfREH3uodGc/OouYF0JySDUQ+kEc9G2Ri61F5YJ6CyzRznyZnJTlOM5UOD2z Sz8HtMLKqAbESQJdm1Yff8HsM4/znxtXw+cssXQvukLNRScWP+fbXXv40uUBMP7L cC2+yHYTBmNmACyDm1hHtWpiL9pHahakHjgoJzR366AwO3lSr4jSnf+noyL+Qr56 lJSv5RKaJS1mrtNZyFXUrAMWwryC41dCPQk0mTk5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUtIZh0j9Htqzm1rVT3PFUlvgRF58wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2RiOGM1ZDNjLTdlZmQtNDgwYS1iOTcyLTRmYWM4ZmUwYzM1Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMN4GAwDQYJKoZIhvcNAQELBQADggEBAKarZ4GYCtpdeqkITsjcoJYtl6yW /uD8Qv2uGx8ZFybdYYKXSd62rn0HBn7E4zpNP9o777aLVans2Ydn8cgV+wHefcyg 4Cjd3fwkigP/GVPGjRMs+U9++ZVkPt87NOBSgx5oF/yn7YfQTOciu5x6l3tqtMVd 3iByG9hcxOrZ79ovEQMk4jmAfEl1ZJEdiap9oTYsCxxZ+mThM3a6/F7pbTfZBBC6 UmfdXEYgtrwxznE2OVWagfYIYtNsCC634OaNLcyRzzJYWu/FlS4eFryJ8G46ekGT bohMI5eoqTO3N1x70iN7FZOG+DA5a0of5MU8wV7bKzuTsNgNEK7cWC3Ycis= -----END CERTIFICATE-----Generated at Mon Oct 20 19:16:50 2025 by rpki-client