$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/17c9535a-3bd7-4b52-989a-811d904a688e.roa File: 17c9535a-3bd7-4b52-989a-811d904a688e.roa (raw, json) Hash identifier: 6KX1iyOf0Md/6ltYsQrlAE3X6Aw9c86dpZPDQROcb7Y= Subject key identifier: CB:02:70:5E:C2:51:33:D4:CA:0A:D3:04:49:74:61:3B:71:A8:A2:D4 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 09793C221C66F90EF2B779B9C44491F880CBD009 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/17c9535a-3bd7-4b52-989a-811d904a688e.roa Signing time: Wed 24 Sep 2025 19:36:40 +0000 ROA not before: Wed 24 Sep 2025 19:36:40 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.226.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:79:3c:22:1c:66:f9:0e:f2:b7:79:b9:c4:44:91:f8:80:cb:d0:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 19:36:40 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=4462dfb4a639dcf01960c2fea536b66483a3908ef84dc5e1217e2a892fed2d15, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:2a:69:96:46:4d:21:a3:a8:f0:27:74:d6:db: 3e:d9:e6:fc:df:4b:00:c3:50:03:8e:f1:e4:cb:71: 06:18:7b:4f:fb:c5:79:34:24:75:0e:99:64:65:33: 7e:49:36:7e:d1:35:31:bc:48:fe:d3:b6:f4:66:5d: 4a:f9:d9:64:6c:16:09:1a:fd:b3:b6:a2:cd:76:4d: bb:8b:2e:d2:5d:2b:29:86:d0:d2:12:6e:fb:18:c7: d1:47:b0:b7:f5:f5:e9:ae:7b:50:e5:52:80:50:5f: a8:94:e0:91:0c:c8:2c:e5:2b:3e:64:9a:70:eb:b3: bf:a4:13:6c:2c:e7:73:4e:5d:cb:60:82:cf:f1:d8: 16:b9:4d:b3:17:a7:ea:92:09:06:2a:b7:4e:b4:c0: 0c:e0:fc:1c:43:f6:5f:c4:eb:61:ca:fe:e5:c4:c7: dd:07:d2:5f:fe:4a:cb:70:dd:d5:3d:6a:cf:35:f9: 2f:f7:e2:51:a8:9a:4e:2e:3d:c7:f3:cc:02:76:4a: 85:90:47:5e:5c:e4:ea:ee:61:ee:92:50:75:4a:43: 83:f0:e4:80:1e:61:61:e9:19:aa:88:1f:a4:7d:7e: 0b:7e:64:3f:92:0e:46:74:2a:10:8f:27:c9:fe:c5: 2d:42:1c:3b:8c:84:5d:97:1d:89:3a:09:65:8a:e6: d6:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:02:70:5E:C2:51:33:D4:CA:0A:D3:04:49:74:61:3B:71:A8:A2:D4 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/17c9535a-3bd7-4b52-989a-811d904a688e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.226.19.0/24 Signature Algorithm: sha256WithRSAEncryption 20:ff:a5:0f:f5:2f:7e:2d:f1:32:07:b7:39:13:7d:22:3e:28: 42:a7:b9:6a:e1:75:f5:a3:44:79:a8:5a:31:99:21:05:c6:58: 4c:d6:72:1d:b6:5a:d3:ba:96:35:6b:4d:e6:11:e6:dc:8f:b1: 7b:03:ad:68:b7:9b:4d:de:bf:00:3d:5d:15:7d:b4:e9:57:ff: ea:ea:97:06:51:56:f5:d4:cd:ec:73:81:d0:6c:da:ed:e0:b2: 48:2f:f1:6a:9c:06:c4:c9:a7:96:20:28:43:19:2d:5a:4c:50: a2:48:95:45:12:fc:13:be:1d:b4:59:23:ed:62:6e:0c:0e:be: a7:09:46:0b:fc:88:bf:1c:68:09:48:11:ee:80:7a:fc:bd:92: c1:c4:ef:c7:bf:21:93:de:41:5d:fe:d6:72:cd:8b:00:c4:1a: 45:8f:08:b7:fd:15:7e:fb:1d:fd:86:26:5c:a3:4b:5e:4f:1e: 39:58:c7:25:57:5c:58:fc:d2:82:10:26:9d:93:e7:f2:19:65: 32:1d:b7:36:74:5c:ef:82:73:ad:54:3a:97:b6:44:d7:88:3e: 38:51:4f:93:20:17:7c:93:3c:90:1f:99:65:72:25:b2:77:21: e1:c2:f4:c3:1b:f5:a3:3b:7d:76:d0:a4:9e:8c:6c:7d:1b:4d: 2d:c4:2a:8c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCXk8Ihxm+Q7yt3m5xESR+IDL0AkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MTkzNjQwWhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A0NDYyZGZiNGE2MzlkY2YwMTk2MGMyZmVhNTM2YjY2NDgz YTM5MDhlZjg0ZGM1ZTEyMTdlMmE4OTJmZWQyZDE1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCTKmmWRk0ho6jwJ3TW2z7Z5vzfSwDDUAOO8eTLcQYYe0/7 xXk0JHUOmWRlM35JNn7RNTG8SP7TtvRmXUr52WRsFgka/bO2os12TbuLLtJdKymG 0NISbvsYx9FHsLf19emue1DlUoBQX6iU4JEMyCzlKz5kmnDrs7+kE2ws53NOXctg gs/x2Ba5TbMXp+qSCQYqt060wAzg/BxD9l/E62HK/uXEx90H0l/+Sstw3dU9as81 +S/34lGomk4uPcfzzAJ2SoWQR15c5OruYe6SUHVKQ4Pw5IAeYWHpGaqIH6R9fgt+ ZD+SDkZ0KhCPJ8n+xS1CHDuMhF2XHYk6CWWK5tYdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUywJwXsJRM9TKCtMESXRhO3GootQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzE3Yzk1MzVhLTNiZDctNGI1Mi05ODlhLTgxMWQ5MDRhNjg4ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAN4hMwDQYJKoZIhvcNAQELBQADggEBACD/pQ/1L34t8TIHtzkTfSI+KEKn uWrhdfWjRHmoWjGZIQXGWEzWch22WtO6ljVrTeYR5tyPsXsDrWi3m03evwA9XRV9 tOlX/+rqlwZRVvXUzexzgdBs2u3gskgv8WqcBsTJp5YgKEMZLVpMUKJIlUUS/BO+ HbRZI+1ibgwOvqcJRgv8iL8caAlIEe6Aevy9ksHE78e/IZPeQV3+1nLNiwDEGkWP CLf9FX77Hf2GJlyjS15PHjlYxyVXXFj80oIQJp2T5/IZZTIdtzZ0XO+Cc61UOpe2 RNeIPjhRT5MgF3yTPJAfmWVyJbJ3IeHC9MMb9aM7fXbQpJ6MbH0bTS3EKow= -----END CERTIFICATE-----Generated at Sat Oct 18 05:14:24 2025 by rpki-client