$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/353b7976-6571-4aa8-a89a-422642813305.roa File: 353b7976-6571-4aa8-a89a-422642813305.roa (raw, json) Hash identifier: sT6SBAo3XBAsjuGB/nfsrrXGtMJhUUTStXyx1VO1vw8= Subject key identifier: 9D:B5:1E:A3:24:D5:D4:C6:6D:27:FD:70:AF:4E:08:60:57:51:BA:9F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 609A6C7F477EE7E6A30ECA1CB84668DE77CB5FE9 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/353b7976-6571-4aa8-a89a-422642813305.roa Signing time: Wed 24 Sep 2025 19:28:32 +0000 ROA not before: Wed 24 Sep 2025 19:28:32 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.225.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:9a:6c:7f:47:7e:e7:e6:a3:0e:ca:1c:b8:46:68:de:77:cb:5f:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 19:28:32 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=78a9e370b46c471a89e03f737be9bf1b23adc6837276985a587c637da259a043, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a0:0c:0c:ac:01:fe:99:c4:c2:27:3a:14:68: 7d:72:d4:a4:94:cc:0d:23:f9:17:69:ea:3c:e6:7f: c0:89:39:5c:d3:72:05:84:7d:a3:69:00:f1:25:fc: 4d:78:ef:40:02:52:d4:d4:00:f7:8a:cf:31:b2:46: b4:f2:82:82:20:a0:13:c0:d1:e9:e3:20:fb:26:95: 41:0f:20:27:e4:be:2e:b6:8e:58:aa:f6:8e:02:3a: 16:53:d0:0d:9e:36:57:d3:6e:12:95:0d:fb:64:89: 32:0f:66:83:de:c1:36:8d:c2:db:7c:54:0e:1e:7c: e8:74:71:3f:60:8c:5a:1a:b5:5f:a8:2f:cd:c8:0c: e8:8e:53:fe:ad:bb:b3:81:3d:f4:2f:cd:2e:ef:d5: 70:a2:12:c7:23:a6:59:4d:ba:da:fd:97:81:00:18: 6e:d3:d1:cf:03:dd:37:09:aa:9e:2e:4d:7c:09:99: 0a:eb:ec:91:f6:ba:1f:86:8f:e6:40:8a:ae:a7:26: 38:b6:14:27:90:bb:dd:c1:a4:26:76:77:ed:21:89: ac:1b:03:91:7d:70:d3:03:63:b2:8f:9d:77:f2:ce: 09:9c:6b:61:e1:73:28:3b:99:1e:19:4c:3d:dc:e1: 1c:fb:32:39:3d:59:ce:18:1c:d8:9b:48:73:62:14: dd:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:B5:1E:A3:24:D5:D4:C6:6D:27:FD:70:AF:4E:08:60:57:51:BA:9F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/353b7976-6571-4aa8-a89a-422642813305.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.225.88.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:84:c4:9d:3c:24:c6:c7:cb:82:ed:96:48:98:64:2f:ae:b1: ff:9a:b4:22:31:3b:1a:8e:ec:4e:b4:ba:fb:91:02:c8:80:ba: f6:6b:0f:9c:13:25:f3:fb:63:ae:88:47:6f:1c:82:dc:76:cf: 73:eb:85:e1:0d:32:89:ba:d1:8c:43:85:ea:71:bc:a6:f3:24: 64:1a:08:ca:04:95:ac:2b:5f:b4:a7:82:c4:cc:6f:45:39:62: de:be:c9:f0:4b:e8:a5:f5:20:26:04:b0:9b:0a:d3:6f:2e:22: cc:b6:74:84:a0:23:ef:ea:28:29:ef:df:f0:03:8d:06:2a:63: cf:00:fe:7e:a6:95:97:ac:ad:fe:1a:32:d7:97:3c:65:96:70: 8d:5f:d6:e8:13:f8:32:60:45:d2:99:8f:a1:bb:d0:41:80:14: fb:89:dc:21:de:be:9c:81:28:da:76:4c:7e:03:dc:e9:e7:ba: d2:c8:aa:80:e5:0b:2e:18:c6:72:34:19:45:a2:dc:eb:6e:f3: ae:07:a4:96:eb:c8:d3:e0:31:f9:c7:15:9b:f7:28:8b:66:57: bf:7c:0b:27:ef:0e:de:b7:6a:86:d5:6c:48:cd:e4:93:39:09: ab:4f:0a:c3:a8:22:26:61:d0:70:35:eb:60:68:a3:5c:7c:d6: 44:22:12:ad -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYJpsf0d+5+ajDsocuEZo3nfLX+kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MTkyODMyWhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A3OGE5ZTM3MGI0NmM0NzFhODllMDNmNzM3YmU5YmYxYjIz YWRjNjgzNzI3Njk4NWE1ODdjNjM3ZGEyNTlhMDQzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCoAwMrAH+mcTCJzoUaH1y1KSUzA0j+Rdp6jzmf8CJOVzT cgWEfaNpAPEl/E1470ACUtTUAPeKzzGyRrTygoIgoBPA0enjIPsmlUEPICfkvi62 jliq9o4COhZT0A2eNlfTbhKVDftkiTIPZoPewTaNwtt8VA4efOh0cT9gjFoatV+o L83IDOiOU/6tu7OBPfQvzS7v1XCiEscjpllNutr9l4EAGG7T0c8D3TcJqp4uTXwJ mQrr7JH2uh+Gj+ZAiq6nJji2FCeQu93BpCZ2d+0hiawbA5F9cNMDY7KPnXfyzgmc a2Hhcyg7mR4ZTD3c4Rz7Mjk9Wc4YHNibSHNiFN15AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUnbUeoyTV1MZtJ/1wr04IYFdRup8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzM1M2I3OTc2LTY1NzEtNGFhOC1hODlhLTQyMjY0MjgxMzMwNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAN4VgwDQYJKoZIhvcNAQELBQADggEBAIyExJ08JMbHy4LtlkiYZC+usf+a tCIxOxqO7E60uvuRAsiAuvZrD5wTJfP7Y66IR28cgtx2z3PrheENMom60YxDhepx vKbzJGQaCMoElawrX7SngsTMb0U5Yt6+yfBL6KX1ICYEsJsK028uIsy2dISgI+/q KCnv3/ADjQYqY88A/n6mlZesrf4aMteXPGWWcI1f1ugT+DJgRdKZj6G70EGAFPuJ 3CHevpyBKNp2TH4D3OnnutLIqoDlCy4YxnI0GUWi3Otu864HpJbryNPgMfnHFZv3 KItmV798CyfvDt63aobVbEjN5JM5CatPCsOoIiZh0HA162Boo1x81kQiEq0= -----END CERTIFICATE-----Generated at Sat Oct 18 00:00:11 2025 by rpki-client