$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/76d0b88a-265f-4c83-8ac1-5e6e7f2669f2.roa File: 76d0b88a-265f-4c83-8ac1-5e6e7f2669f2.roa (raw, json) Hash identifier: Bl8kNudyWxqG5Pgj0AxR87cyptQks0HJ6BXpkPS+DMg= Subject key identifier: 13:36:02:3D:CB:11:9E:7F:89:03:DB:0D:6C:20:7C:3D:8D:B6:F5:A7 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 459FDA2F6C0D417100CE048CA7AAE8A0191B7672 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/76d0b88a-265f-4c83-8ac1-5e6e7f2669f2.roa Signing time: Wed 24 Sep 2025 19:28:39 +0000 ROA not before: Wed 24 Sep 2025 19:28:39 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.225.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:9f:da:2f:6c:0d:41:71:00:ce:04:8c:a7:aa:e8:a0:19:1b:76:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 19:28:39 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=12c9345a1d1433525ad038c27a6c58a2dff2f28e9413e8185783571bc5f27adb, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:47:85:90:e8:65:73:82:e7:40:97:34:d5:07: 82:c6:29:3f:b9:2c:07:eb:ab:e3:73:2e:2b:e3:8a: 16:1c:1f:b4:98:7f:b6:c6:76:2a:f4:39:94:b4:62: 8d:4b:19:47:7f:37:03:19:ad:65:3c:75:fd:88:33: b2:93:43:21:78:20:6b:ac:6a:15:90:82:fc:63:d8: 2b:89:b4:d5:f5:ad:9e:e1:cf:67:3a:a3:e3:9f:de: 43:c0:60:0c:34:3c:45:10:85:2f:5b:5d:53:e5:64: 2c:a4:16:f8:a5:60:6e:03:b2:14:3b:42:55:93:9c: 24:45:70:9f:71:6c:4e:d4:63:09:9e:69:84:0a:1d: fb:c7:d5:8b:74:33:2d:79:e5:0f:35:6a:f9:7e:9b: f2:be:fd:e1:33:8e:4d:22:34:e4:92:34:b7:19:72: 04:8a:cc:80:9f:8b:7a:35:5b:b1:44:c5:16:19:72: 94:61:61:d3:f5:08:81:a4:f9:d3:ef:76:4f:4c:eb: 5d:1f:9f:fa:9c:54:5a:ac:ee:c4:29:9a:ae:48:9e: 41:fa:d2:2f:14:0f:25:ed:27:45:9a:7f:a5:19:b2: f9:40:bb:b4:c7:2d:bc:a3:84:0d:dd:82:90:f3:c3: f0:0f:70:8b:b9:dd:9e:a0:35:f9:ea:76:f7:8e:53: 56:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:36:02:3D:CB:11:9E:7F:89:03:DB:0D:6C:20:7C:3D:8D:B6:F5:A7 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/76d0b88a-265f-4c83-8ac1-5e6e7f2669f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.225.95.0/24 Signature Algorithm: sha256WithRSAEncryption 32:4c:45:88:02:0d:f2:e9:5d:4f:d3:81:ff:c7:d0:49:2a:fe: 08:a2:04:4d:d1:af:2e:b6:5e:4d:0a:1d:d4:f9:a0:ce:99:b6: 62:a1:ef:aa:df:b3:f4:64:cc:8e:93:aa:3c:69:08:a8:5b:cb: 34:df:af:ff:14:c1:c7:05:5b:74:5e:d1:13:ae:4e:fc:27:72: 7a:05:b6:6d:ea:86:a5:92:eb:7b:68:03:bf:bf:34:21:18:3d: bb:a9:a9:d6:aa:e7:c6:05:95:ef:63:3f:5c:a2:53:1f:75:a6: 2f:10:8a:59:e6:db:ce:6c:c8:bc:54:07:bc:76:36:01:0d:9f: cb:2a:aa:12:b0:0b:a5:43:57:b6:b5:00:7c:9b:66:74:f8:28: 44:4f:1e:ce:b8:24:ab:1a:c9:94:e9:e7:fb:ab:d3:e3:58:51: f8:1f:3b:26:66:44:0b:d7:1a:05:92:a9:d3:bb:09:5c:1a:e3: 2e:32:5a:33:86:ca:f5:a0:c8:04:f4:f5:c4:2f:d6:a6:d1:97: 23:4e:9d:00:e1:58:e7:4a:25:55:f7:d0:a3:fe:b3:77:3d:4b: 93:e6:8b:ed:d9:17:c0:cb:83:77:23:e9:fb:07:87:66:0c:46: 8b:12:f1:00:b0:e5:79:b0:96:b7:88:f9:c1:c8:96:d0:fc:1e: 94:a4:fd:7e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURZ/aL2wNQXEAzgSMp6rooBkbdnIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MTkyODM5WhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0AxMmM5MzQ1YTFkMTQzMzUyNWFkMDM4YzI3YTZjNThhMmRm ZjJmMjhlOTQxM2U4MTg1NzgzNTcxYmM1ZjI3YWRiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvR4WQ6GVzgudAlzTVB4LGKT+5LAfrq+NzLivjihYcH7SY f7bGdir0OZS0Yo1LGUd/NwMZrWU8df2IM7KTQyF4IGusahWQgvxj2CuJtNX1rZ7h z2c6o+Of3kPAYAw0PEUQhS9bXVPlZCykFvilYG4DshQ7QlWTnCRFcJ9xbE7UYwme aYQKHfvH1Yt0My155Q81avl+m/K+/eEzjk0iNOSSNLcZcgSKzICfi3o1W7FExRYZ cpRhYdP1CIGk+dPvdk9M610fn/qcVFqs7sQpmq5InkH60i8UDyXtJ0Waf6UZsvlA u7THLbyjhA3dgpDzw/APcIu53Z6gNfnqdveOU1ZpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUEzYCPcsRnn+JA9sNbCB8PY229acwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzc2ZDBiODhhLTI2NWYtNGM4My04YWMxLTVlNmU3ZjI2NjlmMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAN4V8wDQYJKoZIhvcNAQELBQADggEBADJMRYgCDfLpXU/Tgf/H0Ekq/gii BE3Rry62Xk0KHdT5oM6ZtmKh76rfs/RkzI6TqjxpCKhbyzTfr/8UwccFW3Re0ROu TvwncnoFtm3qhqWS63toA7+/NCEYPbupqdaq58YFle9jP1yiUx91pi8Qilnm285s yLxUB7x2NgENn8sqqhKwC6VDV7a1AHybZnT4KERPHs64JKsayZTp5/ur0+NYUfgf OyZmRAvXGgWSqdO7CVwa4y4yWjOGyvWgyAT09cQv1qbRlyNOnQDhWOdKJVX30KP+ s3c9S5Pmi+3ZF8DLg3cj6fsHh2YMRosS8QCw5XmwlreI+cHIltD8HpSk/X4= -----END CERTIFICATE-----Generated at Sat Oct 18 02:14:01 2025 by rpki-client