$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0d3e379f-6e9c-482f-86d4-eabeefcfbf91.roa File: 0d3e379f-6e9c-482f-86d4-eabeefcfbf91.roa (raw, json) Hash identifier: fbyn079n0kQ18EO2dZ5ZhqTiZCMDA6W2d0PNnxtfIAw= Subject key identifier: 7D:DA:51:21:F2:25:9F:D9:20:55:31:42:74:7E:93:53:3C:33:38:58 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 64229378A9D799D3E42B23081E44F6BD05D0B9A8 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0d3e379f-6e9c-482f-86d4-eabeefcfbf91.roa Signing time: Wed 24 Sep 2025 19:13:16 +0000 ROA not before: Wed 24 Sep 2025 19:13:16 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.224.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:22:93:78:a9:d7:99:d3:e4:2b:23:08:1e:44:f6:bd:05:d0:b9:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 19:13:16 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=157182a57d516684e3b63775bca1e8f1211cd4a0ad7152ef2574ae9cd23d8402, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:75:56:bf:04:10:f4:f1:d4:f9:46:3c:b4:ac: 35:0f:c7:34:18:27:0d:f8:0c:e7:67:9f:5a:df:b0: 10:e4:0d:9c:da:77:29:f0:17:a4:fd:0f:f9:d0:67: b0:ec:e2:ec:6b:05:49:9a:72:7c:62:32:a3:47:31: b3:23:c0:51:75:4f:6a:57:14:fe:68:98:a6:c2:97: f6:c1:6b:29:5c:8e:99:2a:7c:bf:21:6a:95:3f:33: c9:b7:fe:20:dc:ca:9c:1d:a6:7a:4b:a5:e3:e7:ff: 22:13:87:30:88:fc:58:cd:7b:95:ca:e4:37:96:1b: 62:ad:d1:6e:4f:b3:22:b6:3b:48:76:7d:7d:af:b6: f7:e5:fa:23:80:dc:b5:97:a9:4f:fb:c8:29:e4:30: 82:52:ca:03:d5:8b:52:ca:64:8d:e3:9b:a0:6c:a8: 95:fa:14:24:73:c5:d4:d4:bb:f3:ea:f0:be:26:7c: 0a:fa:53:36:eb:a9:72:74:3b:c2:3e:bc:8e:db:86: 5f:86:00:1b:f7:56:16:f4:58:bf:4b:c5:24:b0:29: b7:fc:5a:ed:2a:95:f2:92:fb:f7:33:f6:86:91:01: 8d:d1:c5:36:49:c9:4c:7b:fb:9b:81:b9:5b:47:37: f2:c8:95:59:10:7c:2e:ab:4f:10:75:fa:20:f5:9c: da:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:DA:51:21:F2:25:9F:D9:20:55:31:42:74:7E:93:53:3C:33:38:58 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0d3e379f-6e9c-482f-86d4-eabeefcfbf91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.224.89.0/24 Signature Algorithm: sha256WithRSAEncryption 67:7e:ad:b1:88:f6:1b:33:99:a0:e2:35:7a:ea:d4:ce:8a:09: 8e:cb:78:f3:4f:f6:8d:db:b7:fd:2c:a9:9f:dd:70:0b:1b:28: 6e:e1:f6:fb:10:83:0a:1e:79:9e:e8:cb:73:63:93:73:91:fa: de:cc:50:f3:d1:b0:62:da:29:ae:24:b6:47:4f:35:ab:97:d9: 5e:b1:ed:5f:5c:0c:30:48:ec:6d:7b:e0:6e:46:bb:b3:39:b8: 3a:2e:8a:20:ac:88:56:30:a2:a2:45:96:3e:00:a0:a1:5d:aa: ef:dd:7f:20:ec:7e:e3:28:b2:4c:77:20:d1:ef:ed:3a:cd:ef: 8e:0b:1f:af:4d:61:7a:25:f3:5a:bc:05:c9:8c:af:df:3e:7f: 87:99:ef:92:26:e2:e0:ed:5e:ed:b3:ab:5b:56:6a:b2:af:a5: 92:04:6d:c4:75:35:50:d9:6c:f7:54:77:b2:f3:1c:fe:70:8c: e0:d8:9f:be:cb:77:81:01:dc:10:47:19:78:d4:5a:bf:20:97: 22:7b:1b:f0:2b:db:a2:4a:4b:70:bb:dd:42:f8:6a:63:0e:f0: 08:fa:ba:1a:d2:c7:69:26:51:3e:3a:d5:3f:30:3c:f1:1f:aa: 2c:52:da:bf:76:25:9b:f8:c8:64:0a:46:48:95:57:32:d8:50: b6:76:5a:a6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZCKTeKnXmdPkKyMIHkT2vQXQuagwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MTkxMzE2WhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0AxNTcxODJhNTdkNTE2Njg0ZTNiNjM3NzViY2ExZThmMTIx MWNkNGEwYWQ3MTUyZWYyNTc0YWU5Y2QyM2Q4NDAyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCOdVa/BBD08dT5Rjy0rDUPxzQYJw34DOdnn1rfsBDkDZza dynwF6T9D/nQZ7Ds4uxrBUmacnxiMqNHMbMjwFF1T2pXFP5omKbCl/bBaylcjpkq fL8hapU/M8m3/iDcypwdpnpLpePn/yIThzCI/FjNe5XK5DeWG2Kt0W5PsyK2O0h2 fX2vtvfl+iOA3LWXqU/7yCnkMIJSygPVi1LKZI3jm6BsqJX6FCRzxdTUu/Pq8L4m fAr6UzbrqXJ0O8I+vI7bhl+GABv3Vhb0WL9LxSSwKbf8Wu0qlfKS+/cz9oaRAY3R xTZJyUx7+5uBuVtHN/LIlVkQfC6rTxB1+iD1nNoDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUfdpRIfIln9kgVTFCdH6TUzwzOFgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzBkM2UzNzlmLTZlOWMtNDgyZi04NmQ0LWVhYmVlZmNmYmY5MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAN4FkwDQYJKoZIhvcNAQELBQADggEBAGd+rbGI9hszmaDiNXrq1M6KCY7L ePNP9o3bt/0sqZ/dcAsbKG7h9vsQgwoeeZ7oy3Njk3OR+t7MUPPRsGLaKa4ktkdP NauX2V6x7V9cDDBI7G174G5Gu7M5uDouiiCsiFYwoqJFlj4AoKFdqu/dfyDsfuMo skx3INHv7TrN744LH69NYXol81q8BcmMr98+f4eZ75Im4uDtXu2zq1tWarKvpZIE bcR1NVDZbPdUd7LzHP5wjODYn77Ld4EB3BBHGXjUWr8glyJ7G/Ar26JKS3C73UL4 amMO8Aj6uhrSx2kmUT461T8wPPEfqixS2r92JZv4yGQKRkiVVzLYULZ2WqY= -----END CERTIFICATE-----Generated at Sat Oct 18 02:13:01 2025 by rpki-client