$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/39c5b09d-ae36-4292-8b56-9e1070f19db5.roa File: 39c5b09d-ae36-4292-8b56-9e1070f19db5.roa (raw, json) Hash identifier: +aEpzDiLfGLz4n1viaU+CajzmPu+qWn9ZyaCwJO4xd4= Subject key identifier: 24:3B:90:9E:30:D6:F4:50:13:59:93:EE:F5:6A:CB:90:64:2D:06:95 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1F77C5DDCC18ED4681A407F53A0D4A1F2DFDD354 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/39c5b09d-ae36-4292-8b56-9e1070f19db5.roa Signing time: Wed 24 Sep 2025 20:23:56 +0000 ROA not before: Wed 24 Sep 2025 20:23:56 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.226.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:77:c5:dd:cc:18:ed:46:81:a4:07:f5:3a:0d:4a:1f:2d:fd:d3:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 20:23:56 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=e8e5685fdc0fa74d6d99ceee58c49d413b582cec44b97e126f7c44115d97204b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:bf:9a:05:9c:49:22:54:1f:ab:07:e8:36:35: 2b:aa:cf:b7:1b:12:b2:a0:94:a4:c3:4f:3c:01:35: 9b:ba:61:ad:a8:17:c9:88:df:0e:34:52:b9:e5:4c: 80:09:64:cd:b5:9f:29:67:45:ad:73:21:d8:0e:04: 84:22:30:4e:f1:bd:61:27:f3:f8:c2:17:4a:51:c2: f0:9a:51:bf:6e:18:b0:50:82:d4:c7:46:5e:60:4d: 66:90:8d:cf:b5:d3:ed:fb:8c:7a:66:59:60:53:54: cc:0a:8d:cc:77:be:45:33:73:89:52:69:42:5a:a7: da:32:c7:84:b2:da:c2:4a:e8:44:13:af:80:84:c0: dd:aa:b3:ca:dd:1f:56:27:f7:13:27:c0:7a:6e:0e: aa:31:3c:80:e9:bd:0a:1b:1b:21:c2:69:43:ba:99: bf:16:20:6f:b9:6a:eb:2d:9a:b0:91:69:81:0b:24: 26:ec:f0:d9:dd:47:f8:03:b4:aa:73:3a:46:ad:f6: 5d:af:dd:ef:30:aa:59:ad:27:60:4c:9e:7c:6b:cf: 7e:3d:68:e1:bf:f7:a0:dc:28:6b:86:92:ea:1e:6e: 2f:21:7f:3b:db:c9:73:cb:0f:7e:49:c7:99:27:e2: 46:94:6b:5a:a5:ea:84:bd:b8:9c:b7:d1:70:cd:72: 00:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:3B:90:9E:30:D6:F4:50:13:59:93:EE:F5:6A:CB:90:64:2D:06:95 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/39c5b09d-ae36-4292-8b56-9e1070f19db5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.226.252.0/23 Signature Algorithm: sha256WithRSAEncryption 82:cd:29:b1:10:c7:14:47:a5:d7:89:67:90:8d:85:0a:b4:1c: 1a:6a:60:55:24:f8:ae:5d:2d:ae:89:d2:a5:aa:3e:f5:1a:34: f3:14:9d:46:e5:ba:d6:df:b2:0c:a9:36:af:38:cb:eb:c0:b8: 8f:e3:de:08:e9:30:9c:b6:ef:63:d9:01:d4:bf:76:72:09:d5: 6d:49:d6:07:56:c5:04:e6:a3:fa:e1:f0:56:0f:6c:83:f2:d2: 42:77:41:a5:00:2b:8d:20:8f:a1:52:9d:73:a1:25:5e:d4:c0: ef:3a:9d:60:38:a3:75:9e:2a:8f:8f:da:5f:af:04:65:70:60: 4a:b2:a2:e0:62:93:8d:5a:ec:10:c3:27:a2:08:5e:25:b8:33: 9b:77:1a:e1:48:57:50:77:3a:c1:08:3a:0c:87:e4:ee:71:33: 8a:dd:9e:4e:a6:33:e4:b8:53:b6:52:67:fb:a7:6d:f1:5e:fc: a3:14:8a:c3:c5:62:13:3d:1f:07:4a:c8:3d:1c:11:bc:4f:e6: 84:12:40:bd:5b:9e:c6:ca:4a:28:bd:e3:93:8f:95:86:85:cf: 30:34:20:d5:1d:5f:f1:53:c3:85:c0:11:e4:36:66:ea:4a:d7: 5f:ad:f2:5d:10:8a:f6:f9:0c:a2:f4:00:5e:f0:93:3f:d5:5c: dd:9b:ca:b6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUH3fF3cwY7UaBpAf1Og1KHy3901QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MjAyMzU2WhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BlOGU1Njg1ZmRjMGZhNzRkNmQ5OWNlZWU1OGM0OWQ0MTNi NTgyY2VjNDRiOTdlMTI2ZjdjNDQxMTVkOTcyMDRiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCNv5oFnEkiVB+rB+g2NSuqz7cbErKglKTDTzwBNZu6Ya2o F8mI3w40UrnlTIAJZM21nylnRa1zIdgOBIQiME7xvWEn8/jCF0pRwvCaUb9uGLBQ gtTHRl5gTWaQjc+10+37jHpmWWBTVMwKjcx3vkUzc4lSaUJap9oyx4Sy2sJK6EQT r4CEwN2qs8rdH1Yn9xMnwHpuDqoxPIDpvQobGyHCaUO6mb8WIG+5austmrCRaYEL JCbs8NndR/gDtKpzOkat9l2v3e8wqlmtJ2BMnnxrz349aOG/96DcKGuGkuoebi8h fzvbyXPLD35Jx5kn4kaUa1ql6oS9uJy30XDNcgATAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJDuQnjDW9FATWZPu9WrLkGQtBpUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzM5YzViMDlkLWFlMzYtNDI5Mi04YjU2LTllMTA3MGYxOWRiNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEN4vwwDQYJKoZIhvcNAQELBQADggEBAILNKbEQxxRHpdeJZ5CNhQq0HBpq YFUk+K5dLa6J0qWqPvUaNPMUnUblutbfsgypNq84y+vAuI/j3gjpMJy272PZAdS/ dnIJ1W1J1gdWxQTmo/rh8FYPbIPy0kJ3QaUAK40gj6FSnXOhJV7UwO86nWA4o3We Ko+P2l+vBGVwYEqyouBik41a7BDDJ6IIXiW4M5t3GuFIV1B3OsEIOgyH5O5xM4rd nk6mM+S4U7ZSZ/unbfFe/KMUisPFYhM9HwdKyD0cEbxP5oQSQL1bnsbKSii945OP lYaFzzA0INUdX/FTw4XAEeQ2ZupK11+t8l0Qivb5DKL0AF7wkz/VXN2byrY= -----END CERTIFICATE-----Generated at Fri Oct 17 22:17:59 2025 by rpki-client