$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3a496cdc-662e-4bf1-b96c-e305fa48b0d1.roa File: 3a496cdc-662e-4bf1-b96c-e305fa48b0d1.roa (raw, json) Hash identifier: wfFQdT3E7Vc325sP8H24sn84aIe0HMFy6y2Dph7e1eY= Subject key identifier: F1:FF:1E:A1:9F:32:D5:CB:5A:E1:4B:F2:94:CB:44:6C:AD:02:BE:AF Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6D5D5A9F293F2C18BBEDBA46A38C3B191ED4E570 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3a496cdc-662e-4bf1-b96c-e305fa48b0d1.roa Signing time: Wed 24 Sep 2025 20:49:04 +0000 ROA not before: Wed 24 Sep 2025 20:49:04 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.224.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:5d:5a:9f:29:3f:2c:18:bb:ed:ba:46:a3:8c:3b:19:1e:d4:e5:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 20:49:04 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=1a05cbd1dc2f9f6a90b11fdc9d4dfc14fcef78e4d57eb015052eecc19e13d9d3, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:64:06:15:ab:94:af:d9:c7:49:bb:16:01:dd: 27:4a:9b:b5:ec:65:0d:6c:17:f0:86:e3:ca:39:1e: 81:e3:ad:24:1d:f8:4d:fa:18:a1:84:46:f2:86:b8: b8:14:f8:1d:ca:2e:22:6a:ec:ae:e8:d9:ba:76:9f: 19:72:0d:f0:d5:d6:3f:d9:47:ec:51:57:57:b5:7b: 5e:2a:20:39:df:b2:8b:fd:c6:0c:ca:4d:73:d1:36: 01:3f:8a:f2:0e:db:bf:1a:f3:3b:06:b4:cd:01:e7: bd:f3:46:e3:c5:2c:aa:8e:44:82:63:9a:35:64:12: b8:dd:de:43:e7:c2:25:c9:96:17:d7:8c:c2:c0:d6: 08:78:07:46:11:94:50:cc:5d:44:e8:9f:6f:d2:e3: 98:df:e8:47:3b:84:62:82:f4:77:f2:5f:2a:ed:ca: 84:4a:6e:07:55:ba:f2:7e:45:96:d7:19:50:f8:c3: 7a:53:97:ce:d6:ed:7b:c1:6b:df:30:28:1d:21:bd: e4:4e:4f:9c:ae:dd:2c:c1:b4:db:11:42:e5:65:2f: eb:51:af:56:da:0a:0a:85:e5:24:26:9c:85:0e:56: 80:c8:ab:2c:94:a3:23:9b:72:96:41:c4:40:db:24: 96:04:2b:89:66:2c:91:99:76:98:62:55:90:05:9f: 51:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:FF:1E:A1:9F:32:D5:CB:5A:E1:4B:F2:94:CB:44:6C:AD:02:BE:AF X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3a496cdc-662e-4bf1-b96c-e305fa48b0d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.224.104.0/21 Signature Algorithm: sha256WithRSAEncryption 2a:5d:96:e2:04:ba:a2:d6:3a:70:2a:70:c8:6a:b6:c8:e0:98: 2d:4c:7c:e9:18:17:ad:ca:ba:71:a1:96:bc:a1:fe:c1:d2:e6: 66:38:ef:3f:dc:4f:fe:a0:6e:b3:9e:f0:68:f0:9a:ef:4e:a5: 4b:f1:69:d6:3d:e9:9f:9c:5a:59:35:b3:e3:aa:28:11:9a:3e: f5:72:fb:c1:17:13:8e:47:eb:71:a6:f8:88:85:2a:25:02:83: 28:4c:2f:be:88:a0:5c:28:90:fc:7c:99:22:39:53:f2:3f:c7: 31:39:3b:98:0a:76:37:de:b2:be:90:e0:21:bd:c2:f4:09:00: ec:c4:1c:76:77:da:d9:9a:05:07:35:73:be:89:2b:36:a7:bc: 47:3a:a3:ff:94:c0:b5:ee:bd:2a:8b:ff:de:57:aa:f3:7d:ef: 38:23:08:af:fa:95:c0:4f:fd:72:86:56:f0:4e:10:3f:7c:bb: 9b:19:1e:2b:6f:81:72:ba:ee:d3:02:73:d6:0c:62:b3:d4:e3: b6:b9:a4:9d:55:00:3f:96:9a:96:5a:37:8b:c3:97:3a:e5:cc: 7f:84:6e:f2:12:44:d9:10:c8:2a:5b:42:dd:4b:0c:52:d0:16: 44:05:35:f6:1a:bf:1f:e2:ae:a6:b9:b8:db:e4:85:19:7b:83: 2c:bc:3e:82 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbV1anyk/LBi77bpGo4w7GR7U5XAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MjA0OTA0WhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0AxYTA1Y2JkMWRjMmY5ZjZhOTBiMTFmZGM5ZDRkZmMxNGZj ZWY3OGU0ZDU3ZWIwMTUwNTJlZWNjMTllMTNkOWQzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDZAYVq5Sv2cdJuxYB3SdKm7XsZQ1sF/CG48o5HoHjrSQd +E36GKGERvKGuLgU+B3KLiJq7K7o2bp2nxlyDfDV1j/ZR+xRV1e1e14qIDnfsov9 xgzKTXPRNgE/ivIO278a8zsGtM0B573zRuPFLKqORIJjmjVkErjd3kPnwiXJlhfX jMLA1gh4B0YRlFDMXUTon2/S45jf6Ec7hGKC9HfyXyrtyoRKbgdVuvJ+RZbXGVD4 w3pTl87W7XvBa98wKB0hveROT5yu3SzBtNsRQuVlL+tRr1baCgqF5SQmnIUOVoDI qyyUoyObcpZBxEDbJJYEK4lmLJGZdphiVZAFn1FlAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU8f8eoZ8y1cta4UvylMtEbK0Cvq8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzNhNDk2Y2RjLTY2MmUtNGJmMS1iOTZjLWUzMDVmYTQ4YjBkMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMN4GgwDQYJKoZIhvcNAQELBQADggEBACpdluIEuqLWOnAqcMhqtsjgmC1M fOkYF63KunGhlryh/sHS5mY47z/cT/6gbrOe8Gjwmu9OpUvxadY96Z+cWlk1s+Oq KBGaPvVy+8EXE45H63Gm+IiFKiUCgyhML76IoFwokPx8mSI5U/I/xzE5O5gKdjfe sr6Q4CG9wvQJAOzEHHZ32tmaBQc1c76JKzanvEc6o/+UwLXuvSqL/95XqvN97zgj CK/6lcBP/XKGVvBOED98u5sZHitvgXK67tMCc9YMYrPU47a5pJ1VAD+WmpZaN4vD lzrlzH+EbvISRNkQyCpbQt1LDFLQFkQFNfYavx/irqa5uNvkhRl7gyy8PoI= -----END CERTIFICATE-----Generated at Sat Oct 18 02:16:39 2025 by rpki-client