$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5be3724f-3941-44d0-bb7e-061c6d3e7310.roa File: 5be3724f-3941-44d0-bb7e-061c6d3e7310.roa (raw, json) Hash identifier: QAO+QMKDerH0K+W3rDTWBwgYiyKUFfJhIb8R26fjOpE= Subject key identifier: BD:BA:83:A2:77:CC:0E:AA:C0:5D:4B:14:98:4B:C5:4B:1B:85:49:C1 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3EB812B2F74CF63C81D77B7969CB3DA46CE8CF8E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5be3724f-3941-44d0-bb7e-061c6d3e7310.roa Signing time: Wed 24 Sep 2025 18:58:09 +0000 ROA not before: Wed 24 Sep 2025 18:58:09 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.224.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:b8:12:b2:f7:4c:f6:3c:81:d7:7b:79:69:cb:3d:a4:6c:e8:cf:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 18:58:09 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=d0c67893536a625e2a9debac4b19ebd6c09ab7dfeaf1f2f7eb227c49b09049d1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c8:0f:03:86:f7:25:b3:8f:c1:46:2b:f6:0a: d1:74:e7:3f:9b:cf:52:e3:90:71:9e:f0:fa:f2:6f: 18:25:54:c9:5d:32:90:4b:6a:90:ac:fc:bc:83:5d: c5:53:d9:11:3b:f4:9b:d1:fe:9c:d5:83:82:8c:7e: c2:b1:2b:6f:ac:dd:e2:74:4a:e9:b9:5b:88:41:6b: 77:63:6d:d9:78:b7:48:80:b0:53:1b:78:c6:ee:e6: 89:f8:39:60:96:18:23:ee:eb:cf:e2:e0:e1:a5:d5: 1c:bb:3d:be:a6:88:db:38:5c:4b:57:2c:20:6d:59: 75:13:e8:07:8c:b2:bb:0e:7e:90:93:12:10:53:3a: ce:fd:62:8d:90:2b:ff:88:71:80:aa:fd:ef:de:e9: 91:95:b3:32:b6:80:43:19:19:65:9c:3e:4d:fd:94: 12:93:41:ea:81:f9:7c:ab:42:42:70:2d:a7:73:a5: 23:9c:b8:bf:5a:2b:a7:b7:ed:42:94:e3:e0:bd:fc: 62:94:bf:0d:65:cc:04:d9:27:bb:a9:53:9f:9a:f0: aa:39:c2:16:60:7d:b7:fa:8b:2c:0f:ff:e5:55:7a: 8c:f8:81:78:5b:42:be:2a:4c:fa:93:7a:d7:c4:32: 72:8c:4b:2c:0d:82:9d:77:12:56:c5:85:e1:51:f2: b9:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:BA:83:A2:77:CC:0E:AA:C0:5D:4B:14:98:4B:C5:4B:1B:85:49:C1 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5be3724f-3941-44d0-bb7e-061c6d3e7310.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.224.120.0/24 Signature Algorithm: sha256WithRSAEncryption 68:c2:7d:00:00:4f:65:09:b0:08:97:73:fa:5c:67:c8:b4:03: 32:0d:a8:d1:4f:88:0b:23:03:a3:cb:61:17:00:25:2b:8b:25: 02:e5:c6:fc:4c:d2:e6:44:dc:80:5d:0d:0d:12:06:e4:1f:c5: ee:29:e8:83:89:6d:42:5c:a4:90:f8:6a:9a:2b:45:5d:21:6a: 52:36:af:6b:31:2a:99:11:b6:92:4c:9f:c5:df:17:f1:c9:e7: 70:41:80:95:39:b4:d6:d4:6d:13:6a:b2:76:9b:40:62:95:55: de:2f:d6:4d:d7:e5:00:59:fc:16:85:fa:7b:30:f8:a1:1f:93: ed:ac:b2:de:09:6c:4c:f2:42:19:96:e4:c9:a6:a4:5d:ee:4f: 16:17:88:d8:cc:07:4d:7b:a2:6f:2c:d2:29:8f:bb:fb:d8:ac: e7:f2:2d:a9:f8:66:eb:aa:1e:a6:b0:d6:ce:e3:96:8f:34:31: c9:15:ae:71:9c:b0:e4:c1:61:d3:cd:ea:f6:b2:b5:d2:79:70: e9:6a:f8:aa:0b:ac:5d:f3:7b:38:5a:87:ef:db:f0:ce:3c:d0: d4:e6:d7:5b:1f:00:f3:32:1e:49:84:96:3d:34:cc:b1:ba:50: 09:a6:80:32:d3:5f:8c:ac:ff:4a:f4:c1:2e:90:cf:40:01:3e: c8:4a:be:fb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPrgSsvdM9jyB13t5acs9pGzoz44wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MTg1ODA5WhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMGM2Nzg5MzUzNmE2MjVlMmE5ZGViYWM0YjE5ZWJkNmMw OWFiN2RmZWFmMWYyZjdlYjIyN2M0OWIwOTA0OWQxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCkyA8Dhvcls4/BRiv2CtF05z+bz1LjkHGe8PrybxglVMld MpBLapCs/LyDXcVT2RE79JvR/pzVg4KMfsKxK2+s3eJ0Sum5W4hBa3djbdl4t0iA sFMbeMbu5on4OWCWGCPu68/i4OGl1Ry7Pb6miNs4XEtXLCBtWXUT6AeMsrsOfpCT EhBTOs79Yo2QK/+IcYCq/e/e6ZGVszK2gEMZGWWcPk39lBKTQeqB+XyrQkJwLadz pSOcuL9aK6e37UKU4+C9/GKUvw1lzATZJ7upU5+a8Ko5whZgfbf6iywP/+VVeoz4 gXhbQr4qTPqTetfEMnKMSywNgp13ElbFheFR8rkjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUvbqDonfMDqrAXUsUmEvFSxuFScEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzViZTM3MjRmLTM5NDEtNDRkMC1iYjdlLTA2MWM2ZDNlNzMxMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAN4HgwDQYJKoZIhvcNAQELBQADggEBAGjCfQAAT2UJsAiXc/pcZ8i0AzIN qNFPiAsjA6PLYRcAJSuLJQLlxvxM0uZE3IBdDQ0SBuQfxe4p6IOJbUJcpJD4apor RV0halI2r2sxKpkRtpJMn8XfF/HJ53BBgJU5tNbUbRNqsnabQGKVVd4v1k3X5QBZ /BaF+nsw+KEfk+2sst4JbEzyQhmW5MmmpF3uTxYXiNjMB017om8s0imPu/vYrOfy Lan4ZuuqHqaw1s7jlo80MckVrnGcsOTBYdPN6vaytdJ5cOlq+KoLrF3zezhah+/b 8M480NTm11sfAPMyHkmElj00zLG6UAmmgDLTX4ys/0r0wS6Qz0ABPshKvvs= -----END CERTIFICATE-----Generated at Sat Oct 18 02:17:30 2025 by rpki-client