$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e3cb3ec6-82d9-4fe2-b7f8-ae2f54f1b04e.roa File: e3cb3ec6-82d9-4fe2-b7f8-ae2f54f1b04e.roa (raw, json) Hash identifier: bi+anJim1XgXQQD97jayYrl2+EVrLhXnx3/lR6IQF9U= Subject key identifier: 47:04:1D:FD:3C:92:96:94:03:D7:EF:31:D8:C3:D7:9E:7A:96:8A:D8 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3D427E583DE8B35C6636959662C92CD7934162B2 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e3cb3ec6-82d9-4fe2-b7f8-ae2f54f1b04e.roa Signing time: Sun 19 Oct 2025 17:22:28 +0000 ROA not before: Sun 19 Oct 2025 17:22:28 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.225.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:42:7e:58:3d:e8:b3:5c:66:36:95:96:62:c9:2c:d7:93:41:62:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 17:22:28 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=d2e04b76277dfd2f213f5912828a68f46740af1f2a190aba04ca4f851d21b5ab, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f6:73:e7:29:d3:2b:03:de:9d:79:8a:2c:57: e9:8d:43:63:a9:9a:54:22:33:a6:b0:8f:af:ae:2d: 1c:0d:14:a1:8a:e8:e8:44:b4:ce:9c:0f:6d:31:dd: d0:27:54:8c:96:59:18:1b:03:c7:17:b3:fc:33:ba: c7:26:94:a7:85:c5:51:84:e3:f6:d1:0f:bc:53:fc: 23:4e:ea:86:dd:32:15:41:a4:70:98:48:bf:f9:b2: 5f:2a:c4:8b:67:c9:7e:6a:29:39:88:3b:62:ed:81: 89:14:2f:fc:b3:45:7c:e4:0b:0d:54:d4:a8:af:13: 52:44:be:32:fb:b2:e4:3f:48:f5:4c:fa:ef:f6:eb: 47:42:0e:48:cf:63:28:34:11:11:23:95:68:16:bc: aa:5c:e1:29:49:fb:ce:f4:1e:52:f8:0a:57:fd:5f: 81:94:bc:cf:62:3a:4a:8f:53:e2:db:c0:6a:da:a4: 59:d1:47:4a:8a:9f:33:2f:1b:d5:b1:13:00:5c:1e: c4:1f:0d:c1:34:88:64:cc:be:81:17:1e:ef:74:b8: de:12:00:30:88:c5:76:a3:0b:d0:3e:e8:bb:dd:72: ab:9e:07:eb:7a:10:69:4a:03:14:a8:96:33:27:cd: 6f:b2:3d:70:ee:63:f5:ac:14:bd:3a:d9:22:98:da: 83:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:04:1D:FD:3C:92:96:94:03:D7:EF:31:D8:C3:D7:9E:7A:96:8A:D8 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e3cb3ec6-82d9-4fe2-b7f8-ae2f54f1b04e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.225.236.0/24 Signature Algorithm: sha256WithRSAEncryption 36:dc:87:40:ba:80:be:1c:ae:2d:bb:8a:ff:a0:e8:12:da:c9: 23:87:56:43:f4:7e:7e:c8:32:ff:07:12:0f:a2:57:be:db:2b: 3e:24:fe:bd:08:ab:b7:a9:f6:e5:9f:74:05:db:ff:2f:4c:c0: d4:b8:14:4b:93:68:fa:e6:39:7b:ca:ff:c5:d6:2c:51:66:33: 81:e4:0a:63:41:4b:11:23:68:f9:ef:69:05:b9:97:88:7f:fc: 3c:3c:fc:0b:39:55:17:ae:f5:20:c0:28:be:18:83:d2:62:57: c2:63:82:cd:d2:26:43:d6:eb:e9:66:ca:7a:fe:e4:66:f1:f5: d4:83:2b:bc:84:93:db:88:8d:f3:c0:95:6b:8e:57:15:bc:14: 60:62:c0:2f:30:9a:25:a4:33:21:7a:bf:a8:0a:07:ff:1a:ba: 24:f9:22:f2:86:f1:78:9c:c8:3a:9b:c4:27:26:ff:8a:20:af: cd:71:f0:aa:1d:c0:96:01:c7:5e:d3:b5:35:de:a4:7f:e9:0c: db:63:35:2b:54:2d:56:86:1d:e9:2e:ae:d4:ff:93:aa:f7:32: 10:9b:a1:80:44:2c:f4:49:53:8f:75:e2:d1:e7:4d:94:5f:2e: 56:e9:cc:62:f4:e4:46:31:cd:84:e0:60:78:db:f7:8e:f8:5b: 00:ff:97:a4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPUJ+WD3os1xmNpWWYsks15NBYrIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTcyMjI4WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BkMmUwNGI3NjI3N2RmZDJmMjEzZjU5MTI4MjhhNjhmNDY3 NDBhZjFmMmExOTBhYmEwNGNhNGY4NTFkMjFiNWFiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCY9nPnKdMrA96deYosV+mNQ2OpmlQiM6awj6+uLRwNFKGK 6OhEtM6cD20x3dAnVIyWWRgbA8cXs/wzuscmlKeFxVGE4/bRD7xT/CNO6obdMhVB pHCYSL/5sl8qxItnyX5qKTmIO2LtgYkUL/yzRXzkCw1U1KivE1JEvjL7suQ/SPVM +u/260dCDkjPYyg0EREjlWgWvKpc4SlJ+870HlL4Clf9X4GUvM9iOkqPU+LbwGra pFnRR0qKnzMvG9WxEwBcHsQfDcE0iGTMvoEXHu90uN4SADCIxXajC9A+6Lvdcque B+t6EGlKAxSoljMnzW+yPXDuY/WsFL062SKY2oODAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQURwQd/TySlpQD1+8x2MPXnnqWitgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2UzY2IzZWM2LTgyZDktNGZlMi1iN2Y4LWFlMmY1NGYxYjA0ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAN4ewwDQYJKoZIhvcNAQELBQADggEBADbch0C6gL4cri27iv+g6BLaySOH VkP0fn7IMv8HEg+iV77bKz4k/r0Iq7ep9uWfdAXb/y9MwNS4FEuTaPrmOXvK/8XW LFFmM4HkCmNBSxEjaPnvaQW5l4h//Dw8/As5VReu9SDAKL4Yg9JiV8Jjgs3SJkPW 6+lmynr+5Gbx9dSDK7yEk9uIjfPAlWuOVxW8FGBiwC8wmiWkMyF6v6gKB/8auiT5 IvKG8XicyDqbxCcm/4ogr81x8KodwJYBx17TtTXepH/pDNtjNStULVaGHekurtT/ k6r3MhCboYBELPRJU4914tHnTZRfLlbpzGL05EYxzYTgYHjb9474WwD/l6Q= -----END CERTIFICATE-----Generated at Mon Oct 20 12:21:14 2025 by rpki-client