$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6097aaf2-bc89-4be0-97fa-4d93c51297a2.roa File: 6097aaf2-bc89-4be0-97fa-4d93c51297a2.roa (raw, json) Hash identifier: O1SxiBM8reh5fD8YGBCNIAahNOGv13ACRCk3kbnQlQ4= Subject key identifier: E8:3B:A9:67:E5:65:13:C7:F2:96:04:7D:9E:19:39:41:F3:04:C9:42 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 68560D49B84F0775AA6A61E5BB5FBF83A9A7FA1D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6097aaf2-bc89-4be0-97fa-4d93c51297a2.roa Signing time: Wed 24 Sep 2025 19:32:57 +0000 ROA not before: Wed 24 Sep 2025 19:32:57 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.226.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:56:0d:49:b8:4f:07:75:aa:6a:61:e5:bb:5f:bf:83:a9:a7:fa:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 19:32:57 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=b6a3dc5a252624a2da1fb85c07e5c9c0cca668d4879c2025ff06fa2fecdc65da, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ea:1f:4c:7d:81:4c:c9:17:42:72:cb:ec:6b: 99:af:24:d6:73:0b:ba:2e:5b:db:f3:a7:62:48:41: e9:4e:9d:41:34:5d:a5:92:ca:61:fc:bc:96:79:5f: b8:3e:66:5c:74:dc:ec:b6:a0:83:27:af:dc:22:1d: 68:de:d9:ae:70:1e:ec:2e:42:ee:63:8a:b9:a9:2c: e9:4d:32:3c:c5:d8:3a:9d:7e:8b:16:49:99:df:3c: 95:f9:9d:09:26:80:1d:d0:ae:df:c4:36:d1:c7:5c: b5:c7:8e:d6:eb:80:89:39:34:36:80:20:27:bf:d2: 21:21:b5:0b:56:66:63:c2:ce:bd:c2:59:d4:d4:76: 15:8b:1d:0b:ae:ba:51:b4:65:1c:97:81:b9:c9:d8: 9a:be:72:2b:c0:32:cb:2e:19:51:4b:0b:ef:ab:93: c6:fe:81:e5:27:4e:05:6b:f3:f2:ae:bf:77:45:29: 06:ef:e3:0e:ea:4f:32:4f:8e:6d:c5:8a:42:50:38: 7d:0d:95:21:cf:60:eb:72:17:1f:5a:25:55:42:1d: 3c:1f:5c:82:7c:b2:2c:e1:0b:e1:4d:d8:49:f2:0e: 39:86:87:ef:af:5a:ec:7d:a2:58:6d:c2:5c:11:bc: 62:84:b7:7c:a7:ee:9a:bd:8a:f5:a3:1f:c3:aa:74: ee:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:3B:A9:67:E5:65:13:C7:F2:96:04:7D:9E:19:39:41:F3:04:C9:42 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6097aaf2-bc89-4be0-97fa-4d93c51297a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.226.17.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:a5:4a:91:a6:d2:8b:66:f5:1f:c7:fc:ea:16:4d:ce:cf:bf: 8d:10:7c:ec:85:62:0b:a4:89:9d:b4:84:43:fc:94:de:8a:98: b3:1c:37:42:2f:66:9f:86:6d:59:69:c0:67:bd:fe:36:c9:b3: 71:64:30:42:27:d7:fd:37:30:1d:7d:66:44:44:ed:58:4d:ac: 61:99:d1:72:88:4a:1b:29:0b:76:92:43:ef:08:84:16:d6:c4: 6d:29:64:e2:ed:4b:3d:27:c0:66:5a:c3:45:32:d1:01:76:9c: 1c:b3:8c:6a:06:ee:be:92:66:23:58:b1:56:e5:a5:0f:dd:26: 67:f0:bd:dc:c0:ff:26:b4:8f:33:fa:95:fc:88:20:6c:4d:9d: 68:37:af:53:1a:20:f8:a6:6e:ec:82:e2:7e:ae:22:66:07:e8: 94:3b:89:df:3a:4e:0c:56:1b:f1:c9:4a:46:bc:7f:6c:ff:38: 99:f7:d8:27:fc:ea:d8:16:57:a5:53:d6:da:f1:3a:b0:c6:7c: f1:04:03:38:63:63:45:34:b4:b1:a7:57:ad:ee:47:0e:e7:91: 07:e1:c7:d1:95:aa:d4:6c:c8:3e:70:2d:9a:33:37:51:c5:c6: 6d:06:dd:3d:04:63:ac:3e:03:2b:6e:76:60:35:98:25:ea:c7: 5b:ff:a2:b2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaFYNSbhPB3WqamHlu1+/g6mn+h0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MTkzMjU3WhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BiNmEzZGM1YTI1MjYyNGEyZGExZmI4NWMwN2U1YzljMGNj YTY2OGQ0ODc5YzIwMjVmZjA2ZmEyZmVjZGM2NWRhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/6h9MfYFMyRdCcsvsa5mvJNZzC7ouW9vzp2JIQelOnUE0 XaWSymH8vJZ5X7g+Zlx03Oy2oIMnr9wiHWje2a5wHuwuQu5jirmpLOlNMjzF2Dqd fosWSZnfPJX5nQkmgB3Qrt/ENtHHXLXHjtbrgIk5NDaAICe/0iEhtQtWZmPCzr3C WdTUdhWLHQuuulG0ZRyXgbnJ2Jq+civAMssuGVFLC++rk8b+geUnTgVr8/Kuv3dF KQbv4w7qTzJPjm3FikJQOH0NlSHPYOtyFx9aJVVCHTwfXIJ8sizhC+FN2EnyDjmG h++vWux9olhtwlwRvGKEt3yn7pq9ivWjH8OqdO6tAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU6DupZ+VlE8fylgR9nhk5QfMEyUIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzYwOTdhYWYyLWJjODktNGJlMC05N2ZhLTRkOTNjNTEyOTdhMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAN4hEwDQYJKoZIhvcNAQELBQADggEBABylSpGm0otm9R/H/OoWTc7Pv40Q fOyFYgukiZ20hEP8lN6KmLMcN0IvZp+GbVlpwGe9/jbJs3FkMEIn1/03MB19ZkRE 7VhNrGGZ0XKIShspC3aSQ+8IhBbWxG0pZOLtSz0nwGZaw0Uy0QF2nByzjGoG7r6S ZiNYsVblpQ/dJmfwvdzA/ya0jzP6lfyIIGxNnWg3r1MaIPimbuyC4n6uImYH6JQ7 id86TgxWG/HJSka8f2z/OJn32Cf86tgWV6VT1trxOrDGfPEEAzhjY0U0tLGnV63u Rw7nkQfhx9GVqtRsyD5wLZozN1HFxm0G3T0EY6w+AytudmA1mCXqx1v/orI= -----END CERTIFICATE-----Generated at Fri Oct 17 22:03:28 2025 by rpki-client