$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/31f06ba2-9a82-45dd-8d58-a0299d305b10.roa File: 31f06ba2-9a82-45dd-8d58-a0299d305b10.roa (raw, json) Hash identifier: 26GDGtdWopJ4hLrDk/9tgP9w0H/NTXXZBvES7a31LSU= Subject key identifier: 74:C8:E5:BF:F6:C4:02:9B:A0:6C:07:A3:13:9F:6B:BD:5B:E5:72:5F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 614B873A59FFA1864CFE2774D1A1A0B46264EB39 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/31f06ba2-9a82-45dd-8d58-a0299d305b10.roa Signing time: Wed 24 Sep 2025 20:15:15 +0000 ROA not before: Wed 24 Sep 2025 20:15:15 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.225.36.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:4b:87:3a:59:ff:a1:86:4c:fe:27:74:d1:a1:a0:b4:62:64:eb:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 20:15:15 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=2eaec58663f3ee6a0036a2ef7ffc067e2795f47daa9d045e7bef6b88b5971c04, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:51:da:dc:a8:c2:1d:a6:c0:cf:27:e8:dd:9f: e9:23:cb:28:95:23:d7:af:f3:c3:11:2d:aa:a5:1f: 2b:6e:31:67:a2:fe:bb:71:c9:b3:39:d4:65:c5:e0: 44:2f:09:2a:7d:13:83:b1:fa:f4:9a:ae:f0:f1:57: ac:14:00:44:d6:3f:91:70:16:ab:49:6c:24:fe:8c: c6:5c:38:e5:8b:9d:c5:b7:f0:f6:92:44:2f:83:79: 2e:7e:b6:27:00:71:2d:39:1c:c2:6e:b4:97:db:86: 9b:fb:ca:c2:42:af:8b:53:6e:c1:79:4b:43:c6:eb: 62:b8:cc:1e:99:31:37:66:42:ce:74:da:58:0b:1b: f5:3e:bd:10:a6:3c:de:85:da:6f:2b:0d:52:f4:09: 50:af:76:18:9d:02:38:50:bf:91:fb:1e:1e:5e:bd: 80:75:90:4a:d5:6d:3c:c8:86:d4:3b:8a:20:8d:ce: ba:d0:55:0f:20:de:60:0a:d0:42:ed:65:8b:6a:f5: 5f:16:5d:80:76:4c:fa:fe:a7:e2:53:20:dd:f8:2d: 9b:ae:74:cb:fd:92:dc:d5:1b:21:27:15:cc:0d:21: 5f:15:13:25:c5:0f:91:4d:5d:c9:99:d3:7b:20:31: 5e:4f:fd:7f:94:84:3d:9a:d9:b9:59:a0:37:39:88: 41:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:C8:E5:BF:F6:C4:02:9B:A0:6C:07:A3:13:9F:6B:BD:5B:E5:72:5F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/31f06ba2-9a82-45dd-8d58-a0299d305b10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.225.36.0/23 Signature Algorithm: sha256WithRSAEncryption 35:aa:ad:fd:7f:99:c3:55:dd:31:ec:13:34:c7:22:08:2b:17: b9:6a:1f:29:e9:75:46:de:86:7d:30:4c:6d:9d:a3:af:dc:69: 2b:48:d8:2e:e6:5c:23:86:aa:91:88:7c:aa:86:ee:48:d3:e1: 5d:5b:b6:99:c7:34:88:08:21:6c:88:4f:87:ee:f4:83:2b:b7: 50:c7:c5:09:60:05:da:17:92:a5:57:27:87:82:23:e7:9f:5f: b6:f4:13:57:6e:d5:e3:2b:c1:35:1f:77:3a:d6:80:43:9b:52: 40:7d:af:be:97:76:f0:9d:bd:d2:32:f3:ab:fa:81:fc:d2:6a: a8:3e:2d:5f:bd:8e:ed:d1:ca:0a:7b:2a:10:f5:cc:94:d9:25: d9:e5:5a:4d:f1:78:6d:95:a8:65:ce:24:f6:41:2a:06:e9:24: 54:98:19:78:8f:9d:42:7c:5a:58:00:74:f2:5b:55:c4:af:f2: 19:a7:6a:29:b6:49:f4:bb:2f:ce:68:fb:87:d6:6e:ea:1c:2e: be:d5:11:7f:5f:2f:b1:eb:a5:41:01:a6:99:94:d4:bf:75:36: df:38:b5:18:9e:47:69:b9:b8:45:5f:76:65:7d:ec:fe:8a:fa: ad:53:6a:0b:53:ae:3e:4f:b4:d7:df:ea:ed:d0:c7:43:7c:43: 8d:e8:12:2e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYUuHOln/oYZM/id00aGgtGJk6zkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MjAxNTE1WhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0AyZWFlYzU4NjYzZjNlZTZhMDAzNmEyZWY3ZmZjMDY3ZTI3 OTVmNDdkYWE5ZDA0NWU3YmVmNmI4OGI1OTcxYzA0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwUdrcqMIdpsDPJ+jdn+kjyyiVI9ev88MRLaqlHytuMWei /rtxybM51GXF4EQvCSp9E4Ox+vSarvDxV6wUAETWP5FwFqtJbCT+jMZcOOWLncW3 8PaSRC+DeS5+ticAcS05HMJutJfbhpv7ysJCr4tTbsF5S0PG62K4zB6ZMTdmQs50 2lgLG/U+vRCmPN6F2m8rDVL0CVCvdhidAjhQv5H7Hh5evYB1kErVbTzIhtQ7iiCN zrrQVQ8g3mAK0ELtZYtq9V8WXYB2TPr+p+JTIN34LZuudMv9ktzVGyEnFcwNIV8V EyXFD5FNXcmZ03sgMV5P/X+UhD2a2blZoDc5iEFjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUdMjlv/bEApugbAejE59rvVvlcl8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzMxZjA2YmEyLTlhODItNDVkZC04ZDU4LWEwMjk5ZDMwNWIxMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEN4SQwDQYJKoZIhvcNAQELBQADggEBADWqrf1/mcNV3THsEzTHIggrF7lq HynpdUbehn0wTG2do6/caStI2C7mXCOGqpGIfKqG7kjT4V1btpnHNIgIIWyIT4fu 9IMrt1DHxQlgBdoXkqVXJ4eCI+efX7b0E1du1eMrwTUfdzrWgEObUkB9r76XdvCd vdIy86v6gfzSaqg+LV+9ju3Rygp7KhD1zJTZJdnlWk3xeG2VqGXOJPZBKgbpJFSY GXiPnUJ8WlgAdPJbVcSv8hmnaim2SfS7L85o+4fWbuocLr7VEX9fL7HrpUEBppmU 1L91Nt84tRieR2m5uEVfdmV97P6K+q1TagtTrj5PtNff6u3Qx0N8Q43oEi4= -----END CERTIFICATE-----Generated at Fri Oct 17 23:58:25 2025 by rpki-client