$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/036dbcc9-094b-4c55-b132-60c7dce01685.roa File: 036dbcc9-094b-4c55-b132-60c7dce01685.roa (raw, json) Hash identifier: mYMbG2inKUdvEbNGUPYfQuF1DmXxv3fOYqO3N0hFVVg= Subject key identifier: D9:20:7D:3A:E0:A1:5A:D8:7A:48:1D:5E:7F:51:57:CD:A5:CB:EC:7F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6D71B7403CBDCF13B7D4AB3EF3C6814B0ABEA482 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/036dbcc9-094b-4c55-b132-60c7dce01685.roa Signing time: Wed 24 Sep 2025 20:32:37 +0000 ROA not before: Wed 24 Sep 2025 20:32:37 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.224.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:71:b7:40:3c:bd:cf:13:b7:d4:ab:3e:f3:c6:81:4b:0a:be:a4:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 20:32:37 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=85bc386857198ec580c7f9dcb304dfee11c1e66dde1bae756d2111b3e60ecbe7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:32:c7:c3:21:24:bc:13:bf:f6:fc:1b:63:70: de:39:99:4b:df:64:b2:96:2c:7c:51:47:a0:35:00: a5:b6:73:6f:4e:12:41:b4:ca:b0:29:38:a7:7f:16: 90:81:28:cd:f9:23:a8:18:35:2f:dc:3f:52:61:fb: 7a:bf:3e:9e:98:a4:a2:74:1d:92:8f:e1:1e:b4:93: ad:3a:b2:bd:32:6f:34:0a:84:d1:a7:63:74:4b:49: 4b:55:ef:2a:58:be:7c:af:ff:21:53:ae:0e:6e:27: d8:b0:81:cd:3c:53:65:66:03:b8:c7:55:b7:c5:56: 5d:7a:a7:33:70:b9:49:03:55:83:e4:13:32:8c:b3: c8:db:f4:e0:cf:c1:a8:c2:bf:cb:e6:2f:d1:2c:52: ea:3b:5b:0b:8c:80:ec:c7:8b:c6:bd:95:ea:d6:89: a0:95:82:b6:d7:22:1d:d1:d6:f0:f3:66:d2:69:8f: bc:7e:93:1b:1a:c4:cd:65:8d:9f:ab:b1:15:ee:9f: 74:ec:bb:4f:fd:e5:6e:0c:24:e8:a7:21:44:38:30: 0b:6e:98:47:43:04:72:9f:2c:90:d3:ad:fe:9e:d5: 24:db:e6:91:e0:6f:e9:7f:2a:1b:d0:32:4a:c8:b2: 6c:af:ee:51:c7:9c:f8:a8:4d:a8:90:2f:c7:9d:43: 3b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:20:7D:3A:E0:A1:5A:D8:7A:48:1D:5E:7F:51:57:CD:A5:CB:EC:7F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/036dbcc9-094b-4c55-b132-60c7dce01685.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.224.152.0/22 Signature Algorithm: sha256WithRSAEncryption 5e:97:cc:10:31:5c:ec:e0:4c:1c:fe:ae:1e:f5:84:75:52:5b: a4:c8:28:b3:53:49:cf:26:ea:62:16:48:b6:71:10:28:27:13: 18:db:fb:87:56:5e:2a:90:92:83:ae:7c:a7:67:b7:cf:55:6c: 0d:26:92:88:41:22:2f:ec:b3:12:84:47:3e:60:9b:d9:00:ed: a6:fd:10:63:a8:7d:a8:74:6b:22:f6:84:38:8d:7a:a6:95:b3: e6:53:fb:62:5a:f6:16:86:18:8f:f2:e9:86:7b:10:87:82:21: 89:58:ab:e7:6d:f3:e2:31:e6:ce:59:e5:13:03:8a:5b:06:96: fb:00:34:9d:3e:03:57:2d:9b:1c:c3:3f:c4:c5:09:d0:31:80: de:f9:3f:06:42:bd:a0:19:53:db:e8:c3:4e:76:a2:92:dc:70: df:d5:5b:33:98:9b:a6:70:c5:48:32:47:f1:b0:e9:d3:3e:ac: 1a:1f:f9:10:aa:95:11:14:99:c1:1b:61:c3:45:f0:92:8b:41: f7:0a:22:b0:bc:2e:06:8b:3b:0a:0f:62:d0:3e:dc:b7:64:e2: f3:bf:30:c3:3c:f4:ac:76:a2:c4:be:9a:3b:4e:68:ba:6b:f4: 64:dd:c8:ed:d6:c2:cb:b8:fb:44:1b:ec:de:06:b7:07:28:ea: 0a:fb:7f:dd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbXG3QDy9zxO31Ks+88aBSwq+pIIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MjAzMjM3WhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A4NWJjMzg2ODU3MTk4ZWM1ODBjN2Y5ZGNiMzA0ZGZlZTEx YzFlNjZkZGUxYmFlNzU2ZDIxMTFiM2U2MGVjYmU3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCsMsfDISS8E7/2/BtjcN45mUvfZLKWLHxRR6A1AKW2c29O EkG0yrApOKd/FpCBKM35I6gYNS/cP1Jh+3q/Pp6YpKJ0HZKP4R60k606sr0ybzQK hNGnY3RLSUtV7ypYvnyv/yFTrg5uJ9iwgc08U2VmA7jHVbfFVl16pzNwuUkDVYPk EzKMs8jb9ODPwajCv8vmL9EsUuo7WwuMgOzHi8a9lerWiaCVgrbXIh3R1vDzZtJp j7x+kxsaxM1ljZ+rsRXun3Tsu0/95W4MJOinIUQ4MAtumEdDBHKfLJDTrf6e1STb 5pHgb+l/KhvQMkrIsmyv7lHHnPioTaiQL8edQzuTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU2SB9OuChWth6SB1ef1FXzaXL7H8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzAzNmRiY2M5LTA5NGItNGM1NS1iMTMyLTYwYzdkY2UwMTY4NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIN4JgwDQYJKoZIhvcNAQELBQADggEBAF6XzBAxXOzgTBz+rh71hHVSW6TI KLNTSc8m6mIWSLZxECgnExjb+4dWXiqQkoOufKdnt89VbA0mkohBIi/ssxKERz5g m9kA7ab9EGOofah0ayL2hDiNeqaVs+ZT+2Ja9haGGI/y6YZ7EIeCIYlYq+dt8+Ix 5s5Z5RMDilsGlvsANJ0+A1ctmxzDP8TFCdAxgN75PwZCvaAZU9vow052opLccN/V WzOYm6ZwxUgyR/Gw6dM+rBof+RCqlREUmcEbYcNF8JKLQfcKIrC8LgaLOwoPYtA+ 3Ldk4vO/MMM89Kx2osS+mjtOaLpr9GTdyO3Wwsu4+0Qb7N4Gtwco6gr7f90= -----END CERTIFICATE-----Generated at Fri Oct 17 22:18:59 2025 by rpki-client