$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f2a1bad8-a227-4434-8798-191fe560dbd9.roa File: f2a1bad8-a227-4434-8798-191fe560dbd9.roa (raw, json) Hash identifier: diOmjj8rzksV4cbgnJmHijaW9JDkEvd5hlic/J1sbNw= Subject key identifier: C9:2E:CC:36:E2:D1:EC:4A:A1:48:72:25:BE:2D:01:C0:76:A2:28:D8 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 155792D457DE6263FCE379D735A4F3BEE5384901 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f2a1bad8-a227-4434-8798-191fe560dbd9.roa Signing time: Sun 19 Oct 2025 19:31:31 +0000 ROA not before: Sun 19 Oct 2025 19:31:31 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.225.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:57:92:d4:57:de:62:63:fc:e3:79:d7:35:a4:f3:be:e5:38:49:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 19:31:31 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=d6bcec205b3cb6ad5c14fe29eca1813be834dfc9a94d8888bd4db1d6b8dafd5e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c6:54:a5:c5:95:8f:cf:26:83:c3:13:83:4c: 35:c9:41:b0:a0:1e:93:96:ba:21:d0:8e:4e:fb:80: 59:9b:78:ff:40:b6:d0:67:28:da:67:f1:12:78:af: 81:be:35:26:6c:14:b2:a6:31:69:09:b9:76:af:23: 91:ba:d1:88:f0:fe:9d:38:b2:bf:41:50:5e:6e:1e: eb:a4:3c:30:da:7e:ca:e3:e2:9c:ee:e2:b8:74:0c: de:70:41:95:72:a2:de:36:33:d2:82:c8:46:75:bd: 00:01:f3:80:74:41:97:c1:f3:ad:17:8a:4d:af:1b: 03:81:73:16:0b:c7:ae:73:1d:8d:38:65:12:2b:e2: e0:27:95:f5:0e:68:0c:b5:8d:63:08:d9:3b:e5:ef: 02:7b:73:b6:e0:77:ac:48:3a:52:c3:d5:8c:7d:13: e8:45:dd:a3:25:f2:44:60:ca:c2:6d:98:cc:78:d5: 3e:d5:34:7c:c1:54:9c:62:6e:4e:48:f9:a5:f5:f2: b3:f3:7f:2d:de:5a:a3:b6:aa:90:11:d0:56:65:a2: fb:b3:b3:92:fd:1b:82:f1:18:1a:74:93:71:bf:39: 4c:68:79:29:2a:1f:ea:b4:18:a3:d8:05:6a:d5:79: 3d:93:5b:52:f5:a5:02:eb:a1:d6:a3:9c:8e:ec:1c: ed:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:2E:CC:36:E2:D1:EC:4A:A1:48:72:25:BE:2D:01:C0:76:A2:28:D8 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f2a1bad8-a227-4434-8798-191fe560dbd9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.225.196.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:8f:43:8e:77:1c:de:b8:f8:64:cf:ed:bb:2e:d6:46:a4:6b: fe:5d:a2:27:5f:a2:d9:21:eb:5b:fb:78:d7:e0:71:cf:24:6d: 11:aa:c4:b3:a7:3e:11:32:89:d5:47:57:f0:9c:1d:07:7a:9b: 89:63:ea:b4:19:cb:14:6d:fe:0f:ab:7e:b5:9a:90:bf:a4:1d: 19:eb:35:67:38:e9:52:94:51:73:1e:24:92:6c:91:13:db:7e: 4c:b4:24:16:26:a9:7e:95:fe:7d:e7:0a:2d:d1:de:2c:2b:86: fa:7f:6d:3e:1b:af:b8:31:f8:1c:f6:22:df:65:ea:ce:7e:bf: 77:76:8f:56:77:1c:fe:66:82:78:f5:5a:ec:55:7f:6b:c6:6c: 62:8a:d8:2e:70:c8:5e:62:2f:25:47:12:d6:5f:dc:6f:8a:69: be:27:29:0d:9f:96:5e:53:70:da:89:2f:10:86:8b:cc:67:d1: 7a:1f:d2:f5:9e:7a:7e:8b:96:47:b7:37:83:c8:6e:9f:dc:a4: b1:bb:8d:18:69:1b:8f:1d:69:d0:bc:d7:c8:7d:28:be:c7:63: 44:88:bf:77:bb:4b:93:8e:3b:8f:e3:df:fc:f5:9b:00:1a:07: 98:2e:33:9f:7f:43:20:2e:43:3d:4e:bb:b7:59:dd:4d:c1:98: f2:1e:c5:e3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFVeS1FfeYmP843nXNaTzvuU4SQEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTkzMTMxWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BkNmJjZWMyMDViM2NiNmFkNWMxNGZlMjllY2ExODEzYmU4 MzRkZmM5YTk0ZDg4ODhiZDRkYjFkNmI4ZGFmZDVlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpxlSlxZWPzyaDwxODTDXJQbCgHpOWuiHQjk77gFmbeP9A ttBnKNpn8RJ4r4G+NSZsFLKmMWkJuXavI5G60Yjw/p04sr9BUF5uHuukPDDafsrj 4pzu4rh0DN5wQZVyot42M9KCyEZ1vQAB84B0QZfB860Xik2vGwOBcxYLx65zHY04 ZRIr4uAnlfUOaAy1jWMI2Tvl7wJ7c7bgd6xIOlLD1Yx9E+hF3aMl8kRgysJtmMx4 1T7VNHzBVJxibk5I+aX18rPzfy3eWqO2qpAR0FZlovuzs5L9G4LxGBp0k3G/OUxo eSkqH+q0GKPYBWrVeT2TW1L1pQLrodajnI7sHO2JAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUyS7MNuLR7EqhSHIlvi0BwHaiKNgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2YyYTFiYWQ4LWEyMjctNDQzNC04Nzk4LTE5MWZlNTYwZGJkOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAN4cQwDQYJKoZIhvcNAQELBQADggEBABuPQ453HN64+GTP7bsu1kaka/5d oidfotkh61v7eNfgcc8kbRGqxLOnPhEyidVHV/CcHQd6m4lj6rQZyxRt/g+rfrWa kL+kHRnrNWc46VKUUXMeJJJskRPbfky0JBYmqX6V/n3nCi3R3iwrhvp/bT4br7gx +Bz2It9l6s5+v3d2j1Z3HP5mgnj1WuxVf2vGbGKK2C5wyF5iLyVHEtZf3G+Kab4n KQ2fll5TcNqJLxCGi8xn0Xof0vWeen6Llke3N4PIbp/cpLG7jRhpG48dadC818h9 KL7HY0SIv3e7S5OOO4/j3/z1mwAaB5guM59/QyAuQz1Ou7dZ3U3BmPIexeM= -----END CERTIFICATE-----Generated at Mon Oct 20 11:13:48 2025 by rpki-client