$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e09cd94d-c6f8-4d22-9cff-4889d71b7177.roa File: e09cd94d-c6f8-4d22-9cff-4889d71b7177.roa (raw, json) Hash identifier: CiXy7wNzja92Rj8UaiIc+p1HqPGPVLNPXEB8kVJfyKM= Subject key identifier: 27:42:5E:3E:EF:11:CB:0C:69:32:C0:66:6E:CA:AE:05:F1:95:1B:3F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4C3672F4E88AD5E61BA878AFDD1E9B91FD43618E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e09cd94d-c6f8-4d22-9cff-4889d71b7177.roa Signing time: Sun 19 Oct 2025 12:53:32 +0000 ROA not before: Sun 19 Oct 2025 12:53:32 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.224.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:36:72:f4:e8:8a:d5:e6:1b:a8:78:af:dd:1e:9b:91:fd:43:61:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 12:53:32 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=d22839cf7499b3bafa371d327340b859733b555f187180260b6253a5c70c4ed4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7f:15:96:c9:62:39:6d:08:d3:50:cd:13:4e: 46:75:56:e8:6f:70:7c:fc:fe:d1:81:cc:c3:b8:27: 5a:43:88:75:dc:b1:f6:d5:a9:4c:6d:0d:0e:56:47: c0:38:48:a7:a7:8f:c6:21:55:07:10:ba:cc:b5:6e: dd:79:e8:8b:7a:35:9e:93:30:ef:f8:95:3c:0d:37: 91:99:67:62:a2:b4:88:80:a6:be:29:83:de:e8:5a: e1:81:ea:69:24:2e:bc:bb:e0:fd:13:57:b2:cc:03: 51:ff:98:ff:e8:07:d0:77:9c:3a:f3:28:7b:e9:a7: 30:4b:50:d4:2c:a2:d9:da:31:9f:e8:7a:15:7f:5f: e3:e0:c0:0a:ea:4d:f5:85:b5:3c:23:b1:5f:3b:e3: 36:49:1c:1e:36:34:1f:7b:50:b9:50:59:af:e4:dd: b7:46:53:e8:2b:69:3a:d2:e1:08:6e:99:ad:71:7f: 42:af:ec:e4:16:fc:06:3d:1a:1c:4e:87:4d:e8:17: f5:e3:86:7b:a3:a2:62:ff:28:aa:85:b0:8a:52:f5: 0a:46:d7:27:79:30:54:82:29:77:61:65:84:31:2d: ad:fe:22:ce:ba:16:67:4c:6a:f1:3e:3f:ca:ce:ec: aa:a6:fd:8d:17:ef:9e:fb:80:4d:53:a7:2b:a6:0d: e2:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:42:5E:3E:EF:11:CB:0C:69:32:C0:66:6E:CA:AE:05:F1:95:1B:3F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e09cd94d-c6f8-4d22-9cff-4889d71b7177.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.224.140.0/22 Signature Algorithm: sha256WithRSAEncryption ad:38:27:6e:69:2d:25:41:c5:0c:fe:cc:8f:5c:99:5f:ff:82: 35:37:22:a7:73:f9:51:40:e5:8c:fb:8b:0e:43:10:66:0c:86: ef:d5:64:da:85:0e:44:08:e7:6f:81:e4:69:61:60:9d:81:d8: 05:f9:f1:74:4e:59:55:15:c3:81:cd:47:24:92:75:c8:7e:2f: e2:5a:3d:fd:52:64:f3:75:8f:97:73:e6:52:0c:f8:54:bf:c4: 53:5c:a2:79:ac:7b:8a:fd:9c:1f:e6:55:a5:09:14:8d:12:e6: be:40:59:04:5a:d3:13:ac:26:1e:60:61:7f:ff:fc:87:79:76: 39:f0:8b:4d:ae:24:66:b7:6a:b4:5f:67:07:db:85:8d:11:64: ee:d1:e5:e7:a5:91:9f:6e:5c:c9:c4:8f:71:9b:4b:50:e1:50: 8b:18:2e:85:1c:5d:08:fe:8b:df:94:4b:96:02:cc:9e:a5:11: 22:90:bd:52:5d:01:25:87:17:4c:36:23:74:34:3c:88:10:d3: e8:be:cd:ac:f8:f1:17:d0:82:98:66:32:47:db:3e:12:f6:1e: 2d:ca:cf:d7:47:da:6a:94:e4:34:db:d6:78:79:3c:f8:c1:c7: 5a:d8:46:bf:61:56:96:78:e9:d5:c6:e1:d2:50:ec:77:d0:33: 3d:f3:3c:7e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTDZy9OiK1eYbqHiv3R6bkf1DYY4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTI1MzMyWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BkMjI4MzljZjc0OTliM2JhZmEzNzFkMzI3MzQwYjg1OTcz M2I1NTVmMTg3MTgwMjYwYjYyNTNhNWM3MGM0ZWQ0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCsfxWWyWI5bQjTUM0TTkZ1VuhvcHz8/tGBzMO4J1pDiHXc sfbVqUxtDQ5WR8A4SKenj8YhVQcQusy1bt156It6NZ6TMO/4lTwNN5GZZ2KitIiA pr4pg97oWuGB6mkkLry74P0TV7LMA1H/mP/oB9B3nDrzKHvppzBLUNQsotnaMZ/o ehV/X+PgwArqTfWFtTwjsV874zZJHB42NB97ULlQWa/k3bdGU+graTrS4Qhuma1x f0Kv7OQW/AY9GhxOh03oF/XjhnujomL/KKqFsIpS9QpG1yd5MFSCKXdhZYQxLa3+ Is66FmdMavE+P8rO7Kqm/Y0X7577gE1TpyumDeI9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJ0JePu8RywxpMsBmbsquBfGVGz8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2UwOWNkOTRkLWM2ZjgtNGQyMi05Y2ZmLTQ4ODlkNzFiNzE3Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIN4IwwDQYJKoZIhvcNAQELBQADggEBAK04J25pLSVBxQz+zI9cmV//gjU3 Iqdz+VFA5Yz7iw5DEGYMhu/VZNqFDkQI52+B5GlhYJ2B2AX58XROWVUVw4HNRySS dch+L+JaPf1SZPN1j5dz5lIM+FS/xFNconmse4r9nB/mVaUJFI0S5r5AWQRa0xOs Jh5gYX///Id5djnwi02uJGa3arRfZwfbhY0RZO7R5eelkZ9uXMnEj3GbS1DhUIsY LoUcXQj+i9+US5YCzJ6lESKQvVJdASWHF0w2I3Q0PIgQ0+i+zaz48RfQgphmMkfb PhL2Hi3Kz9dH2mqU5DTb1nh5PPjBx1rYRr9hVpZ46dXG4dJQ7HfQMz3zPH4= -----END CERTIFICATE-----Generated at Mon Oct 20 15:46:29 2025 by rpki-client