$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1cf5e98d-8a06-4598-a6b6-51398729a911.roa File: 1cf5e98d-8a06-4598-a6b6-51398729a911.roa (raw, json) Hash identifier: rpLQnDxoE4I9o0EoWGx00QhUzd/5qQ/do76ypzd3hzg= Subject key identifier: 7D:A2:D4:F3:62:52:DE:9A:6B:78:D5:9D:FD:28:44:86:90:DB:86:26 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7F336DA5E9781A60A4B40D477EB04700EFBDC53D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1cf5e98d-8a06-4598-a6b6-51398729a911.roa Signing time: Wed 24 Sep 2025 20:11:08 +0000 ROA not before: Wed 24 Sep 2025 20:11:08 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.225.178.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:33:6d:a5:e9:78:1a:60:a4:b4:0d:47:7e:b0:47:00:ef:bd:c5:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 20:11:08 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=003d6f74c54df9e124cb36c3a64a3dba238ef1d9620bc58c5a8f9e151c167408, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:af:c9:cb:91:fa:5d:fe:18:f9:f8:9e:02:d8: ca:54:06:cb:d7:c7:61:61:b6:6f:cd:9f:a4:45:85: 7c:ce:57:cd:45:61:8c:cc:c6:09:dd:90:38:09:c1: 60:a7:e9:ad:20:40:67:c8:e5:b3:e9:25:52:66:71: d6:0b:3a:fd:77:6c:ee:f2:c9:2f:ea:f1:59:83:2b: f3:f7:ae:b1:b2:f8:93:22:dd:3e:7a:d2:da:13:81: 29:a0:ea:8e:1f:22:31:ad:e3:0c:1b:fb:74:04:f6: f3:c6:3a:c0:5d:08:a2:2b:d9:51:24:39:80:da:40: b2:59:eb:b2:0d:35:25:bf:04:4b:e0:92:2b:4a:86: 74:10:c2:cc:67:4e:0a:0c:de:1b:19:37:b5:46:a1: fc:ef:8c:47:ae:f0:eb:ee:2a:3d:39:e4:0d:40:4f: 68:cb:34:28:bf:14:d4:7f:6b:cf:90:5e:32:48:90: 64:af:b4:15:61:c9:42:4c:71:34:b0:ce:88:fe:24: 1f:d5:39:e3:98:f9:f7:71:92:41:11:9f:4c:26:c8: 33:75:a6:45:4a:90:e0:6b:11:7e:db:17:7d:c1:fc: 30:0b:1c:14:8a:90:92:e7:96:b8:87:73:be:ce:f5: 8a:b2:a4:b8:e6:51:e9:1b:29:d3:c5:b7:1b:b6:b5: f7:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:A2:D4:F3:62:52:DE:9A:6B:78:D5:9D:FD:28:44:86:90:DB:86:26 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1cf5e98d-8a06-4598-a6b6-51398729a911.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.225.178.0/23 Signature Algorithm: sha256WithRSAEncryption 25:98:88:ba:50:05:87:e9:4b:d8:2e:f8:d8:5a:70:4a:3d:9e: 91:f0:21:25:65:59:0a:01:ae:59:01:73:b5:23:8d:e2:e0:75: 0f:cf:47:4e:14:30:1a:19:69:c8:2a:ab:e0:99:66:6a:2b:af: b3:6b:bc:ee:03:5b:8a:80:e2:ec:71:47:3e:ca:32:33:29:5a: 26:b2:8d:50:8e:6d:44:f5:a0:1d:64:82:b0:8f:19:81:f5:b5: 30:85:1c:98:ff:14:5c:67:fe:31:75:c0:46:da:8d:cf:6a:ac: 08:b0:94:3f:db:2c:10:4b:dd:c4:1f:d6:4e:bd:c6:ef:ab:c6: d5:f7:8c:89:ae:66:dd:9b:9f:0b:ca:23:68:05:41:ed:c1:67: 24:ae:3d:93:a9:48:ce:0d:b6:ce:38:e3:ea:fc:52:9c:44:5c: 53:84:5c:5a:28:9f:e4:5e:49:c6:8b:b1:f9:19:22:a3:47:a3: e0:bd:3b:d8:0e:d6:91:47:96:5f:13:24:8e:b8:ff:7b:e3:ea: c4:b5:08:91:fe:bd:7e:9e:08:59:e4:09:b9:12:c9:a8:be:5a: e5:be:d0:65:71:ba:fc:80:c9:85:74:32:04:4a:2f:23:8c:75: 3f:7c:f3:39:b2:66:8a:4a:84:28:d3:0e:34:d0:fa:e3:db:a1: aa:4a:e9:62 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfzNtpel4GmCktA1HfrBHAO+9xT0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MjAxMTA4WhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0AwMDNkNmY3NGM1NGRmOWUxMjRjYjM2YzNhNjRhM2RiYTIz OGVmMWQ5NjIwYmM1OGM1YThmOWUxNTFjMTY3NDA4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDr8nLkfpd/hj5+J4C2MpUBsvXx2Fhtm/Nn6RFhXzOV81F YYzMxgndkDgJwWCn6a0gQGfI5bPpJVJmcdYLOv13bO7yyS/q8VmDK/P3rrGy+JMi 3T560toTgSmg6o4fIjGt4wwb+3QE9vPGOsBdCKIr2VEkOYDaQLJZ67INNSW/BEvg kitKhnQQwsxnTgoM3hsZN7VGofzvjEeu8OvuKj055A1AT2jLNCi/FNR/a8+QXjJI kGSvtBVhyUJMcTSwzoj+JB/VOeOY+fdxkkERn0wmyDN1pkVKkOBrEX7bF33B/DAL HBSKkJLnlriHc77O9YqypLjmUekbKdPFtxu2tfcvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUfaLU82JS3ppreNWd/ShEhpDbhiYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzFjZjVlOThkLThhMDYtNDU5OC1hNmI2LTUxMzk4NzI5YTkxMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEN4bIwDQYJKoZIhvcNAQELBQADggEBACWYiLpQBYfpS9gu+NhacEo9npHw ISVlWQoBrlkBc7UjjeLgdQ/PR04UMBoZacgqq+CZZmorr7NrvO4DW4qA4uxxRz7K MjMpWiayjVCObUT1oB1kgrCPGYH1tTCFHJj/FFxn/jF1wEbajc9qrAiwlD/bLBBL 3cQf1k69xu+rxtX3jImuZt2bnwvKI2gFQe3BZySuPZOpSM4Nts444+r8UpxEXFOE XFoon+ReScaLsfkZIqNHo+C9O9gO1pFHll8TJI64/3vj6sS1CJH+vX6eCFnkCbkS yai+WuW+0GVxuvyAyYV0MgRKLyOMdT988zmyZopKhCjTDjTQ+uPboapK6WI= -----END CERTIFICATE-----Generated at Sat Oct 18 05:11:54 2025 by rpki-client