$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/717e306f-c137-4c44-93e1-d70f068734bc.roa File: 717e306f-c137-4c44-93e1-d70f068734bc.roa (raw, json) Hash identifier: W5XgTdOD82Wq/UJdxkzfOEjVEAjjuZ8CxlUIUXqLXQU= Subject key identifier: 01:59:7B:99:A4:24:8B:13:C1:85:FA:CE:B0:DF:C1:20:66:5A:8C:25 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5052209405FC24C04C51717DDE4EF93EE6BD813B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/717e306f-c137-4c44-93e1-d70f068734bc.roa Signing time: Wed 24 Sep 2025 20:21:44 +0000 ROA not before: Wed 24 Sep 2025 20:21:44 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.226.184.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:52:20:94:05:fc:24:c0:4c:51:71:7d:de:4e:f9:3e:e6:bd:81:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 20:21:44 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=9382363ba1a5bbd4837baa08b25abb7da1253d6af1f72487aab7755843567d78, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d7:0e:3a:a5:be:52:47:f2:58:f9:3c:3e:1a: a1:b2:a6:02:15:6e:31:dc:8f:ea:ff:27:74:37:2c: 87:8b:49:f5:61:02:68:6f:24:46:af:e4:8a:98:98: 0e:67:2b:9a:3a:ec:c9:c4:dd:3c:0d:3e:54:44:71: 29:71:0b:31:1f:9e:c4:f0:bb:91:e9:b3:b3:66:8b: 2e:71:e4:f5:a2:bc:06:61:80:c6:84:70:ad:26:b6: df:bc:5f:d9:28:ac:c1:ca:05:3b:29:a9:83:96:5f: 28:8a:fa:c2:20:25:61:28:e9:64:92:ef:17:a5:08: 62:a3:d8:a1:c3:63:41:ec:da:ce:63:6a:a8:d2:3d: b0:6b:db:f6:66:e8:c6:b6:27:bf:e8:65:10:03:2b: 9f:02:bf:82:ec:dd:18:02:e4:6d:29:c2:ee:d6:9f: 30:34:5b:41:47:01:01:56:83:9d:ab:5f:9d:06:26: e8:c3:0f:69:38:87:17:d0:a2:10:9b:9f:87:ce:41: e8:47:e2:d2:e7:cf:a2:67:3b:f1:fa:d3:9c:bf:67: 56:29:cc:2e:90:2c:4a:f8:6a:3c:8b:bc:9f:f5:ea: b5:f4:33:18:49:e5:bb:96:8b:82:52:d8:c4:41:af: 46:31:c8:22:51:b1:48:b5:7e:21:79:e4:6d:d9:a1: e5:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:59:7B:99:A4:24:8B:13:C1:85:FA:CE:B0:DF:C1:20:66:5A:8C:25 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/717e306f-c137-4c44-93e1-d70f068734bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.226.184.0/23 Signature Algorithm: sha256WithRSAEncryption 1e:27:c2:f9:8a:6a:99:ad:28:74:4a:f6:45:85:fb:bb:85:67: f2:d0:af:e9:f2:5f:cc:24:f7:43:51:3c:fa:99:0b:de:39:08: d6:22:ea:65:8f:59:37:34:ae:2f:0d:ac:df:6d:00:d6:56:f1: 1a:b4:8a:bf:10:44:25:bb:7f:c5:01:04:49:d1:5a:00:08:fa: 73:38:4c:24:7f:36:27:f7:3e:0e:ef:3e:be:12:cc:6e:58:7a: 8d:53:4d:e4:c9:4b:a6:af:6b:53:3d:2b:2b:a5:07:f9:89:c4: f4:1a:1a:5f:39:84:89:6f:26:92:a4:7e:8f:f7:3f:27:e9:20: 6a:b7:2c:63:ec:b1:11:8b:91:f9:7a:48:ff:5b:c3:5a:8d:c8: 5d:5b:11:bb:65:6d:c9:0e:ab:3a:87:79:47:b1:b0:c9:1f:d7: a8:b9:f7:e1:c5:21:d7:5b:ae:da:4b:54:df:a0:3f:4f:24:3a: ef:88:9f:53:30:91:e7:9b:a5:51:fe:f5:fc:a2:a1:55:74:99: 25:24:7a:40:af:ae:f4:ce:87:c7:60:b2:ed:ba:62:74:4b:00: bb:d6:79:d7:75:d9:db:59:cb:5f:12:73:95:bf:36:0f:7a:fb: d8:f3:11:ea:c0:86:66:66:e3:27:f6:0b:36:06:11:55:1d:dc: f9:41:fc:e6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUFIglAX8JMBMUXF93k75Pua9gTswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MjAyMTQ0WhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A5MzgyMzYzYmExYTViYmQ0ODM3YmFhMDhiMjVhYmI3ZGEx MjUzZDZhZjFmNzI0ODdhYWI3NzU1ODQzNTY3ZDc4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDO1w46pb5SR/JY+Tw+GqGypgIVbjHcj+r/J3Q3LIeLSfVh AmhvJEav5IqYmA5nK5o67MnE3TwNPlREcSlxCzEfnsTwu5Hps7Nmiy5x5PWivAZh gMaEcK0mtt+8X9korMHKBTspqYOWXyiK+sIgJWEo6WSS7xelCGKj2KHDY0Hs2s5j aqjSPbBr2/Zm6Ma2J7/oZRADK58Cv4Ls3RgC5G0pwu7WnzA0W0FHAQFWg52rX50G JujDD2k4hxfQohCbn4fOQehH4tLnz6JnO/H605y/Z1YpzC6QLEr4ajyLvJ/16rX0 MxhJ5buWi4JS2MRBr0YxyCJRsUi1fiF55G3ZoeV9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUAVl7maQkixPBhfrOsN/BIGZajCUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzcxN2UzMDZmLWMxMzctNGM0NC05M2UxLWQ3MGYwNjg3MzRiYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEN4rgwDQYJKoZIhvcNAQELBQADggEBAB4nwvmKapmtKHRK9kWF+7uFZ/LQ r+nyX8wk90NRPPqZC945CNYi6mWPWTc0ri8NrN9tANZW8Rq0ir8QRCW7f8UBBEnR WgAI+nM4TCR/Nif3Pg7vPr4SzG5Yeo1TTeTJS6ava1M9KyulB/mJxPQaGl85hIlv JpKkfo/3PyfpIGq3LGPssRGLkfl6SP9bw1qNyF1bEbtlbckOqzqHeUexsMkf16i5 9+HFIddbrtpLVN+gP08kOu+In1MwkeebpVH+9fyioVV0mSUkekCvrvTOh8dgsu26 YnRLALvWedd12dtZy18Sc5W/Ng96+9jzEerAhmZm4yf2CzYGEVUd3PlB/OY= -----END CERTIFICATE-----Generated at Fri Oct 17 23:56:25 2025 by rpki-client