$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3dfa004e-da7d-4a9a-99da-a84baf955fd1.roa File: 3dfa004e-da7d-4a9a-99da-a84baf955fd1.roa (raw, json) Hash identifier: hWnauoKdib+sp8LakHZOidnExd+7bDiCnzRi5/xCiOg= Subject key identifier: 2F:31:6E:14:A7:12:94:47:71:1B:07:E5:D6:16:7A:2E:6D:8B:54:16 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4A5BCF05EB7DF4D28EF21D528FF0970C5C38E8DA Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3dfa004e-da7d-4a9a-99da-a84baf955fd1.roa Signing time: Wed 24 Sep 2025 20:21:43 +0000 ROA not before: Wed 24 Sep 2025 20:21:43 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.226.182.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:5b:cf:05:eb:7d:f4:d2:8e:f2:1d:52:8f:f0:97:0c:5c:38:e8:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 20:21:43 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=2375480a95a3be8145e4fdd1ddbecf28d7a1b5511c809417f67efe0c5ff0f640, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:44:70:1a:9a:06:db:92:a0:35:11:09:b5:bf: ea:45:d1:a8:0f:5c:df:13:b0:29:95:4d:d4:6d:e1: 2a:01:d6:71:8f:51:58:37:e0:23:98:e3:21:60:c0: 22:d5:24:e1:72:c5:59:6a:6e:be:f5:ef:f2:3b:e7: 31:fe:24:d9:85:83:2e:3f:da:2e:a2:16:7d:4c:14: 69:5c:42:c5:d7:80:4d:e4:7b:0d:63:cf:54:93:c6: e6:7d:18:4d:e3:7f:89:62:19:d2:43:91:78:2b:c4: 0a:bf:f1:12:f5:c5:a4:e9:f3:bf:80:23:df:2a:bb: 25:ca:f7:0b:82:dd:1c:51:b0:48:aa:0b:0c:c5:4e: fb:a3:20:03:01:50:38:3a:cd:52:a6:2c:23:ce:1a: d4:af:f6:01:c8:c9:7d:76:1b:1c:36:d9:16:2f:07: 9e:bc:13:05:51:f4:43:87:2c:e2:2e:e1:a1:37:48: 35:e0:a9:4e:33:24:57:40:d8:48:dc:b3:05:57:55: 44:a8:a9:25:f3:4c:bb:05:23:d6:43:dd:69:ff:8a: b1:12:8b:5d:de:b8:f2:39:9e:27:0a:18:0f:3a:45: 6f:35:57:7d:7a:4c:93:97:3e:1c:70:93:31:2a:6e: 97:56:49:64:1e:e4:27:12:c7:35:5a:58:a6:76:94: 4d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:31:6E:14:A7:12:94:47:71:1B:07:E5:D6:16:7A:2E:6D:8B:54:16 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3dfa004e-da7d-4a9a-99da-a84baf955fd1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.226.182.0/23 Signature Algorithm: sha256WithRSAEncryption 0a:f1:38:ad:96:18:f8:0b:4b:cd:cd:29:b5:3b:4f:15:19:42: 13:fe:5a:3b:da:3d:c1:32:f9:dd:62:d3:b2:17:41:d8:d8:14: 4f:e7:56:e5:50:10:12:de:d9:c2:82:fa:10:e8:70:e4:c7:5a: 44:56:8d:a4:6c:50:5d:23:b1:c8:a9:75:8d:6a:c6:c9:80:b8: af:e8:c7:89:40:8b:52:bc:5c:db:dc:f2:70:58:a2:ba:36:95: fe:f4:a5:c9:b4:84:a4:81:72:e9:0b:a9:ab:0a:df:85:a8:1d: fd:fe:08:d5:05:cd:c2:b2:eb:33:46:67:20:06:6b:d9:58:5d: f3:8a:db:c5:98:28:a5:68:57:a9:4e:5b:0b:d5:2a:de:57:16: fb:d3:4a:39:df:14:2b:8c:2d:da:68:07:e6:83:80:33:cd:73: fc:4e:7d:97:54:5a:11:33:29:7b:f0:46:06:a7:e6:73:77:ca: fd:a1:97:1e:e0:83:8b:ca:1c:85:29:b6:07:a7:2c:f3:98:ce: e1:cf:b3:cc:95:34:84:eb:d0:47:69:34:1b:56:24:ad:9d:f6: 2a:de:95:c5:de:2a:60:02:47:9b:63:0b:0f:e2:54:39:68:d5: 16:7b:1e:66:cd:6e:77:a3:03:25:10:e4:f8:58:cf:e5:fd:73: 18:8e:30:c2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSlvPBet99NKO8h1Sj/CXDFw46NowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MjAyMTQzWhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0AyMzc1NDgwYTk1YTNiZTgxNDVlNGZkZDFkZGJlY2YyOGQ3 YTFiNTUxMWM4MDk0MTdmNjdlZmUwYzVmZjBmNjQwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCQRHAamgbbkqA1EQm1v+pF0agPXN8TsCmVTdRt4SoB1nGP UVg34COY4yFgwCLVJOFyxVlqbr717/I75zH+JNmFgy4/2i6iFn1MFGlcQsXXgE3k ew1jz1STxuZ9GE3jf4liGdJDkXgrxAq/8RL1xaTp87+AI98quyXK9wuC3RxRsEiq CwzFTvujIAMBUDg6zVKmLCPOGtSv9gHIyX12Gxw22RYvB568EwVR9EOHLOIu4aE3 SDXgqU4zJFdA2EjcswVXVUSoqSXzTLsFI9ZD3Wn/irESi13euPI5nicKGA86RW81 V316TJOXPhxwkzEqbpdWSWQe5CcSxzVaWKZ2lE1zAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQULzFuFKcSlEdxGwfl1hZ6Lm2LVBYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzNkZmEwMDRlLWRhN2QtNGE5YS05OWRhLWE4NGJhZjk1NWZkMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEN4rYwDQYJKoZIhvcNAQELBQADggEBAArxOK2WGPgLS83NKbU7TxUZQhP+ WjvaPcEy+d1i07IXQdjYFE/nVuVQEBLe2cKC+hDocOTHWkRWjaRsUF0jscipdY1q xsmAuK/ox4lAi1K8XNvc8nBYoro2lf70pcm0hKSBcukLqasK34WoHf3+CNUFzcKy 6zNGZyAGa9lYXfOK28WYKKVoV6lOWwvVKt5XFvvTSjnfFCuMLdpoB+aDgDPNc/xO fZdUWhEzKXvwRgan5nN3yv2hlx7gg4vKHIUptgenLPOYzuHPs8yVNITr0EdpNBtW JK2d9irelcXeKmACR5tjCw/iVDlo1RZ7HmbNbnejAyUQ5PhYz+X9cxiOMMI= -----END CERTIFICATE-----Generated at Sat Oct 18 00:00:47 2025 by rpki-client