$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6580a593-f8a0-4b48-a117-0f14e5e3479d.roa File: 6580a593-f8a0-4b48-a117-0f14e5e3479d.roa (raw, json) Hash identifier: mU7+zIRNX2jBWKmicvn5OcCtSoXj+KNjAeMZG3aNFHQ= Subject key identifier: AF:B3:D1:67:51:0B:FD:E2:B4:37:7B:CC:94:C4:F5:E4:90:CA:7B:27 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5BA11398C42E026392DE07835E6DDEC829C99EB3 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6580a593-f8a0-4b48-a117-0f14e5e3479d.roa Signing time: Wed 24 Sep 2025 19:38:43 +0000 ROA not before: Wed 24 Sep 2025 19:38:43 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.226.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:a1:13:98:c4:2e:02:63:92:de:07:83:5e:6d:de:c8:29:c9:9e:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 19:38:43 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=f143aef62982c4a9eda347244fe453029ed45f25103519cc1732276549b8b09b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7b:46:9a:07:01:c1:f9:3d:50:60:0e:71:c4: 89:56:89:91:b5:c8:f6:cc:c6:89:f7:bf:fc:07:1c: af:b8:f3:b7:68:b8:78:92:60:4a:6c:67:3e:8b:11: 64:2f:63:c7:df:25:79:59:05:80:0a:ac:ad:8a:7f: 55:89:ee:f0:a6:9c:19:ba:37:56:e7:53:72:1c:b0: b5:96:9f:d3:47:14:a0:c3:f6:27:0a:bd:3b:dc:97: 0d:6e:fe:3f:a6:48:f7:8f:67:66:70:38:1e:31:b9: d2:d3:79:0e:bb:0a:1e:7c:8c:ef:7a:a4:fd:67:7a: 29:cc:46:d4:24:94:e4:c7:b7:19:8e:bb:0e:bf:cb: 96:1f:82:fb:61:d2:86:48:bc:38:2b:05:0d:c9:34: 4b:8c:f6:fe:56:ee:52:fa:ab:6c:4f:82:5b:21:8a: 3a:e2:12:32:8d:68:f6:04:be:8d:2d:98:0b:d1:2f: 69:5b:c2:20:61:c2:a8:87:09:21:2c:93:83:35:75: a4:5f:56:51:07:0f:b0:f1:d5:57:2e:b3:28:04:38: 4d:53:0c:0a:cb:25:ac:57:90:6e:89:56:08:5b:9d: 5f:19:b4:f1:e1:be:a1:a2:19:cf:2e:11:9a:50:d4: ab:95:c6:7c:ec:10:52:67:3b:8d:1c:d0:61:ea:84: ea:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:B3:D1:67:51:0B:FD:E2:B4:37:7B:CC:94:C4:F5:E4:90:CA:7B:27 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6580a593-f8a0-4b48-a117-0f14e5e3479d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.226.219.0/24 Signature Algorithm: sha256WithRSAEncryption 78:2f:8c:f7:ac:ba:9a:a8:b3:97:13:40:22:56:e6:c7:fc:3a: db:9e:fd:19:00:bb:1d:c9:e7:59:71:9f:87:a6:b0:bb:c2:c5: 13:21:99:d1:6e:e3:e6:5e:6e:07:f1:d3:98:bf:0d:90:53:ba: 53:38:c8:a4:3d:52:ba:25:96:7c:1c:c4:29:11:8e:79:2d:ee: c6:5a:07:ac:32:32:42:4c:5b:c6:b7:a5:bd:27:c7:e4:09:49: 36:2e:7b:1f:f5:49:9d:bf:71:0e:ac:87:f3:99:47:ec:2b:19: 25:d9:a0:45:50:e4:e8:71:37:b5:88:dd:0b:90:fc:70:6c:eb: 66:1a:ee:53:fd:c9:82:70:af:fe:87:c2:cc:7b:fc:f4:ef:46: b0:9e:67:2b:cc:a2:64:08:db:36:cd:b5:d7:ff:40:0d:71:a7: a0:47:ee:7c:3e:f4:c1:f0:41:24:56:ce:13:92:d7:1e:e4:fe: 51:17:91:28:ac:f4:0c:e2:8d:80:f7:b1:96:a9:89:62:7c:29: b8:e6:c4:6f:f8:26:9c:d8:cb:af:b5:58:ad:1a:7f:76:65:04: ca:2a:29:e1:b5:8d:da:95:a8:62:63:33:3e:eb:a5:e5:a9:b6: bb:20:2a:3c:0e:56:4e:25:8f:2e:43:73:39:ee:5a:40:07:86: 5f:7d:97:58 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUW6ETmMQuAmOS3geDXm3eyCnJnrMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MTkzODQzWhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BmMTQzYWVmNjI5ODJjNGE5ZWRhMzQ3MjQ0ZmU0NTMwMjll ZDQ1ZjI1MTAzNTE5Y2MxNzMyMjc2NTQ5YjhiMDliMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5e0aaBwHB+T1QYA5xxIlWiZG1yPbMxon3v/wHHK+487do uHiSYEpsZz6LEWQvY8ffJXlZBYAKrK2Kf1WJ7vCmnBm6N1bnU3IcsLWWn9NHFKDD 9icKvTvclw1u/j+mSPePZ2ZwOB4xudLTeQ67Ch58jO96pP1neinMRtQklOTHtxmO uw6/y5Yfgvth0oZIvDgrBQ3JNEuM9v5W7lL6q2xPglshijriEjKNaPYEvo0tmAvR L2lbwiBhwqiHCSEsk4M1daRfVlEHD7Dx1VcusygEOE1TDArLJaxXkG6JVghbnV8Z tPHhvqGiGc8uEZpQ1KuVxnzsEFJnO40c0GHqhOq7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUr7PRZ1EL/eK0N3vMlMT15JDKeycwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzY1ODBhNTkzLWY4YTAtNGI0OC1hMTE3LTBmMTRlNWUzNDc5ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAN4tswDQYJKoZIhvcNAQELBQADggEBAHgvjPesupqos5cTQCJW5sf8Otue /RkAux3J51lxn4emsLvCxRMhmdFu4+Zebgfx05i/DZBTulM4yKQ9UrollnwcxCkR jnkt7sZaB6wyMkJMW8a3pb0nx+QJSTYuex/1SZ2/cQ6sh/OZR+wrGSXZoEVQ5Ohx N7WI3QuQ/HBs62Ya7lP9yYJwr/6Hwsx7/PTvRrCeZyvMomQI2zbNtdf/QA1xp6BH 7nw+9MHwQSRWzhOS1x7k/lEXkSis9AzijYD3sZapiWJ8KbjmxG/4JpzYy6+1WK0a f3ZlBMoqKeG1jdqVqGJjMz7rpeWptrsgKjwOVk4ljy5DcznuWkAHhl99l1g= -----END CERTIFICATE-----Generated at Fri Oct 17 22:01:55 2025 by rpki-client