$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1c356103-bff3-4711-9ec8-74c45c3fbd08.roa File: 1c356103-bff3-4711-9ec8-74c45c3fbd08.roa (raw, json) Hash identifier: Wc6U+H/2h3g0dko4ClOPPjazJYlUOpYEmAhaNPpbVfU= Subject key identifier: CF:30:7A:AF:CF:03:97:CF:24:5A:DD:49:E4:3C:23:64:4B:98:20:FA Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4A3BC63821598BF8F2A7F8420679D2CB80975145 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1c356103-bff3-4711-9ec8-74c45c3fbd08.roa Signing time: Wed 24 Sep 2025 19:09:19 +0000 ROA not before: Wed 24 Sep 2025 19:09:19 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.224.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:3b:c6:38:21:59:8b:f8:f2:a7:f8:42:06:79:d2:cb:80:97:51:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 19:09:19 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=0329021bdc68f3cad0371e5f3aff823b27ebeee5119a8f7e5e93e41c681581bc, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a3:ff:e9:fd:51:86:b6:24:91:0b:f9:5c:0b: 99:b2:49:50:81:46:51:18:cd:d5:a6:38:1c:02:6a: da:25:00:41:8d:13:92:2a:32:61:2e:90:7b:74:e4: 95:3d:eb:4a:6c:68:06:48:ef:39:98:f9:c9:0c:86: 84:77:f6:0b:8a:c2:ac:5e:32:90:b7:82:9b:e2:a0: 9e:63:4e:ec:c1:bc:4a:9f:7a:08:f0:99:12:7e:30: bc:ae:ac:79:f3:a6:bd:d2:61:85:67:9a:5f:c5:3d: c7:c4:49:34:84:42:2c:c2:12:70:1e:d7:da:33:04: 53:a0:ad:df:2f:8d:57:20:fc:b5:84:6d:8f:b3:f1: 63:7d:56:70:f3:5f:3b:7e:56:31:bf:d0:0e:b0:c3: e7:44:04:4f:e5:a2:1e:92:ec:d2:8e:62:11:c0:dd: 47:3c:41:96:d8:3b:58:af:37:ad:84:2a:ae:ca:31: d6:c7:bb:e6:18:e3:60:29:64:3f:32:75:88:56:3f: ac:42:71:0a:3c:a6:e1:2a:e4:dc:20:f6:03:3b:cd: e0:59:2c:a8:04:8a:ca:c4:48:38:a1:6f:5f:e0:1c: 62:86:28:e5:1c:a5:62:7f:e3:82:8b:96:ce:24:35: 02:ff:fe:c1:b0:37:91:ec:a4:80:f8:0a:94:a8:55: 37:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:30:7A:AF:CF:03:97:CF:24:5A:DD:49:E4:3C:23:64:4B:98:20:FA X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1c356103-bff3-4711-9ec8-74c45c3fbd08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.224.40.0/24 Signature Algorithm: sha256WithRSAEncryption 01:17:28:5a:aa:70:71:d1:af:91:9f:86:07:7f:3d:fb:7d:ff: 87:84:b6:d7:49:1e:73:9f:49:c6:e3:61:7d:e7:a4:c5:ca:da: 0c:62:97:40:f6:6e:40:83:ad:22:04:83:ea:fd:38:cb:e4:f9: 78:57:f2:c8:1d:0c:37:fb:d7:8c:c6:95:01:3d:c6:46:1d:bf: ab:46:78:8d:3f:48:44:66:c0:16:cc:d4:39:9a:40:6c:e2:bf: 72:16:93:f2:06:6d:79:d2:62:a2:11:37:7f:6f:63:35:ef:1f: 26:43:bb:f4:24:90:13:3a:21:1d:45:5c:ef:74:1a:93:b2:7c: b6:1f:da:cd:e9:65:ce:27:ee:e3:2b:c5:03:ef:10:22:6d:5a: 88:0b:d0:ee:4c:9a:88:6a:1f:41:16:e6:5f:d6:ae:9f:2a:37: 1c:0c:2f:24:38:e1:39:57:ca:0e:23:3b:1f:71:19:b1:b6:a8: 78:c3:c8:80:af:4f:75:5e:5a:0a:d0:28:66:98:72:4a:b7:ea: 4b:af:9a:c7:b9:df:9e:4e:a3:44:53:9c:c0:a8:3b:0f:ac:cd: ba:7c:d3:73:da:9d:bd:d6:0a:c4:56:8c:aa:4c:d1:d1:88:02: 37:04:69:c6:e6:9c:41:0c:3a:4a:8f:01:0e:3c:82:49:e6:d4: 61:23:30:a9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSjvGOCFZi/jyp/hCBnnSy4CXUUUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MTkwOTE5WhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0AwMzI5MDIxYmRjNjhmM2NhZDAzNzFlNWYzYWZmODIzYjI3 ZWJlZWU1MTE5YThmN2U1ZTkzZTQxYzY4MTU4MWJjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCto//p/VGGtiSRC/lcC5mySVCBRlEYzdWmOBwCatolAEGN E5IqMmEukHt05JU960psaAZI7zmY+ckMhoR39guKwqxeMpC3gpvioJ5jTuzBvEqf egjwmRJ+MLyurHnzpr3SYYVnml/FPcfESTSEQizCEnAe19ozBFOgrd8vjVcg/LWE bY+z8WN9VnDzXzt+VjG/0A6ww+dEBE/loh6S7NKOYhHA3Uc8QZbYO1ivN62EKq7K MdbHu+YY42ApZD8ydYhWP6xCcQo8puEq5Nwg9gM7zeBZLKgEisrESDihb1/gHGKG KOUcpWJ/44KLls4kNQL//sGwN5HspID4CpSoVTd/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUzzB6r88Dl88kWt1J5DwjZEuYIPowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzFjMzU2MTAzLWJmZjMtNDcxMS05ZWM4LTc0YzQ1YzNmYmQwOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAN4CgwDQYJKoZIhvcNAQELBQADggEBAAEXKFqqcHHRr5Gfhgd/Pft9/4eE ttdJHnOfScbjYX3npMXK2gxil0D2bkCDrSIEg+r9OMvk+XhX8sgdDDf714zGlQE9 xkYdv6tGeI0/SERmwBbM1DmaQGziv3IWk/IGbXnSYqIRN39vYzXvHyZDu/QkkBM6 IR1FXO90GpOyfLYf2s3pZc4n7uMrxQPvECJtWogL0O5MmohqH0EW5l/Wrp8qNxwM LyQ44TlXyg4jOx9xGbG2qHjDyICvT3VeWgrQKGaYckq36kuvmse5355Oo0RTnMCo Ow+szbp803Panb3WCsRWjKpM0dGIAjcEacbmnEEMOkqPAQ48gknm1GEjMKk= -----END CERTIFICATE-----Generated at Fri Oct 17 22:14:30 2025 by rpki-client