$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eeb9c61f-8d45-4202-a34b-0dcbb229c2e6.roa File: eeb9c61f-8d45-4202-a34b-0dcbb229c2e6.roa (raw, json) Hash identifier: YjYlb2D6LNYel+IazokkEN+Li9BtGb4waGCFjoetOsA= Subject key identifier: D1:A3:AC:12:F8:BE:46:69:C8:D0:C6:07:F8:65:D9:E1:8A:1C:34:52 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6A29A96FDAB8C77DF69353089E1A0C19FE12F788 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eeb9c61f-8d45-4202-a34b-0dcbb229c2e6.roa Signing time: Sun 19 Oct 2025 10:01:24 +0000 ROA not before: Sun 19 Oct 2025 10:01:24 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.224.56.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:29:a9:6f:da:b8:c7:7d:f6:93:53:08:9e:1a:0c:19:fe:12:f7:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 10:01:24 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=bad3f0a34844332dbeeb091425c5a158c5ac73f386787eaab20eba49537fe294, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:0a:74:e0:32:9d:41:60:49:f5:19:ed:7c:d7: c2:cc:90:54:6f:11:3f:0d:0c:2d:d2:8f:dc:f2:dd: 9f:5e:e6:d3:bc:95:4b:c9:6e:6f:16:ba:d1:82:12: 09:98:56:e5:0a:ea:86:68:56:50:78:43:7f:17:e9: 30:2f:5d:a1:d0:46:a3:de:2d:3f:35:26:bf:8f:a6: ba:23:80:0b:60:1a:35:88:54:db:09:bc:0d:f9:c7: dd:2f:07:e9:09:d5:e4:ad:7b:71:09:47:b4:41:ba: 67:9e:00:db:01:17:55:ea:f9:48:67:6a:d8:ea:83: 68:8d:32:95:39:c9:3b:f8:6c:b2:ac:7f:7d:ff:c4: b2:45:5f:6d:d3:28:92:9d:8b:00:3c:19:6b:57:52: 44:67:c1:b7:6a:54:ca:3d:ec:1f:e2:00:f5:9b:b3: 8c:b8:64:0a:60:c7:11:69:df:69:49:d2:53:ca:06: a1:b8:62:3a:b7:81:dd:61:16:72:08:56:d1:a0:21: 64:61:da:9f:19:0b:fa:27:70:0f:4c:d0:76:86:58: 5e:10:77:72:33:4d:8e:eb:f3:b9:a3:37:d0:8d:e3: d9:1d:21:17:82:fc:ad:62:e4:ef:46:74:a7:6c:92: aa:05:a0:a4:9e:b0:1a:7e:5b:a4:0a:08:61:9b:c1: 86:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:A3:AC:12:F8:BE:46:69:C8:D0:C6:07:F8:65:D9:E1:8A:1C:34:52 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eeb9c61f-8d45-4202-a34b-0dcbb229c2e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.224.56.0/23 Signature Algorithm: sha256WithRSAEncryption a4:b6:81:ce:e3:02:c6:87:2e:db:f9:e8:c7:80:1f:5c:c4:d5: 52:43:cb:50:50:c3:38:b0:5e:36:3f:25:ea:7a:da:c1:bf:fb: e0:ce:bf:2b:67:5b:13:e7:43:ee:1a:42:6d:ce:c2:80:a7:bc: 87:5b:0c:66:9d:2e:a7:aa:9c:9c:ab:c5:12:57:4d:31:61:1e: f7:cb:44:25:91:ad:13:b7:96:42:95:81:7c:c0:18:a6:2c:91: 37:d7:84:0a:f9:84:ef:c1:d6:06:f3:59:29:48:be:7c:4d:84: 0e:ec:dd:fd:15:38:e4:cb:98:a0:66:33:a4:54:5d:80:b7:a8: e2:ec:bc:b2:c6:61:8e:c4:d9:9f:d3:ae:1d:59:11:a9:6b:c3: 61:d3:80:11:d6:57:c6:44:85:fe:e9:d4:0d:3b:e6:c9:c2:2d: 8d:dd:46:ac:44:58:0c:40:73:99:1a:c8:49:ef:55:30:21:d0: 04:07:9e:a2:ad:95:fa:11:2d:20:2d:df:e7:53:2e:e9:19:fb: 6e:99:13:e9:35:44:92:55:b5:51:83:32:f1:f8:77:72:bc:5f: 2d:15:4c:71:0d:f8:70:4e:7b:41:bd:d2:b7:7a:c4:26:c0:40: 56:e7:12:41:bb:39:00:10:5b:53:1e:03:f5:59:40:fc:7b:48: 16:6d:df:94 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaimpb9q4x332k1MInhoMGf4S94gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTAwMTI0WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BiYWQzZjBhMzQ4NDQzMzJkYmVlYjA5MTQyNWM1YTE1OGM1 YWM3M2YzODY3ODdlYWFiMjBlYmE0OTUzN2ZlMjk0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDSCnTgMp1BYEn1Ge1818LMkFRvET8NDC3Sj9zy3Z9e5tO8 lUvJbm8WutGCEgmYVuUK6oZoVlB4Q38X6TAvXaHQRqPeLT81Jr+PprojgAtgGjWI VNsJvA35x90vB+kJ1eSte3EJR7RBumeeANsBF1Xq+Uhnatjqg2iNMpU5yTv4bLKs f33/xLJFX23TKJKdiwA8GWtXUkRnwbdqVMo97B/iAPWbs4y4ZApgxxFp32lJ0lPK BqG4Yjq3gd1hFnIIVtGgIWRh2p8ZC/oncA9M0HaGWF4Qd3IzTY7r87mjN9CN49kd IReC/K1i5O9GdKdskqoFoKSesBp+W6QKCGGbwYYPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU0aOsEvi+RmnI0MYH+GXZ4YocNFIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2VlYjljNjFmLThkNDUtNDIwMi1hMzRiLTBkY2JiMjI5YzJlNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEN4DgwDQYJKoZIhvcNAQELBQADggEBAKS2gc7jAsaHLtv56MeAH1zE1VJD y1BQwziwXjY/Jep62sG/++DOvytnWxPnQ+4aQm3OwoCnvIdbDGadLqeqnJyrxRJX TTFhHvfLRCWRrRO3lkKVgXzAGKYskTfXhAr5hO/B1gbzWSlIvnxNhA7s3f0VOOTL mKBmM6RUXYC3qOLsvLLGYY7E2Z/Trh1ZEalrw2HTgBHWV8ZEhf7p1A075snCLY3d RqxEWAxAc5kayEnvVTAh0AQHnqKtlfoRLSAt3+dTLukZ+26ZE+k1RJJVtVGDMvH4 d3K8Xy0VTHEN+HBOe0G90rd6xCbAQFbnEkG7OQAQW1MeA/VZQPx7SBZt35Q= -----END CERTIFICATE-----Generated at Mon Oct 20 09:49:23 2025 by rpki-client