$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7bf7949d-a686-4f1e-954d-e717b2415c71.roa File: 7bf7949d-a686-4f1e-954d-e717b2415c71.roa (raw, json) Hash identifier: /B2z+NS7Iwn5LR3UFHaoN1vPjBr2FPixPhBSKrFhXU0= Subject key identifier: E1:58:FA:13:B9:B9:A1:76:28:65:CE:04:E2:26:16:F3:1E:20:57:78 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1E767311D1A9CDF8CFFDEE08558F72B5922907D0 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7bf7949d-a686-4f1e-954d-e717b2415c71.roa Signing time: Wed 24 Sep 2025 19:41:18 +0000 ROA not before: Wed 24 Sep 2025 19:41:18 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.226.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:76:73:11:d1:a9:cd:f8:cf:fd:ee:08:55:8f:72:b5:92:29:07:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 19:41:18 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=5a96214bbd0b29c4e6ca91f8e42f95af624a3c6bce8ef2364e42d8920b20742b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:62:35:40:90:fe:75:c7:bb:75:d2:02:f4:64: 3a:28:ab:fb:1f:d4:54:af:fb:6d:fc:29:ae:c6:4d: c7:0b:41:13:2d:81:64:9d:57:cf:b0:b0:00:25:69: d9:c0:5e:39:3e:e6:a8:b7:11:1b:b4:70:0f:b1:cd: e7:2f:a8:b9:90:23:3d:e8:54:1e:ab:8f:ff:a6:5f: f2:df:0d:7f:4a:96:5a:57:3f:1d:db:fa:4e:ab:72: 20:89:b8:7e:13:3f:ca:7d:34:01:8f:bd:65:0b:42: 4c:83:5c:d3:1f:ca:e1:30:dd:df:c2:d1:f2:55:9e: 24:af:3a:45:5d:7c:be:14:52:dd:9f:06:a9:86:18: a5:6d:47:15:c1:75:91:46:ea:9f:f5:27:aa:88:3c: 10:d9:8c:c8:26:91:7a:3e:44:8b:24:c0:fb:8b:56: 46:ff:fe:3f:b9:b0:e9:2a:f0:20:e5:57:c1:10:10: 2d:ad:dd:a6:6b:c4:77:da:61:8c:ab:9c:7f:62:a5: e9:9c:41:86:e0:5f:76:fd:ed:7a:ef:ea:d2:79:55: 3b:b5:8b:eb:33:fb:a5:c5:99:3a:6e:5d:87:f0:d4: db:57:4a:73:29:bf:cb:94:ea:f3:46:83:60:e3:da: 9a:cf:82:e6:5c:d9:49:43:2e:ba:1a:0e:3a:5b:90: 72:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:58:FA:13:B9:B9:A1:76:28:65:CE:04:E2:26:16:F3:1E:20:57:78 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7bf7949d-a686-4f1e-954d-e717b2415c71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.226.29.0/24 Signature Algorithm: sha256WithRSAEncryption aa:57:d9:22:1d:0f:ad:c2:97:2b:f6:af:6d:f2:1b:f2:e3:61: ec:ed:f3:60:93:9f:56:10:22:8c:6a:3e:a3:db:87:9a:b0:33: 78:7d:e1:a8:c3:48:a0:3c:c2:62:3f:0c:4d:d8:79:c9:50:4e: de:f8:87:81:ad:cc:d1:26:2c:7d:83:76:50:da:3b:ef:27:88: 72:8c:68:93:d5:66:34:08:fb:d9:86:1c:da:4b:56:2d:b2:b5: 40:b7:71:fc:3f:1f:4f:5c:be:fa:f2:92:b5:b9:dd:f4:3e:62: 20:6f:1a:31:36:a3:74:bb:5a:bb:41:e2:ac:cf:2d:c9:8d:5a: 48:56:85:0f:8d:9f:c4:38:0c:0e:5c:0d:f8:a6:82:cf:59:d1: 36:af:eb:ab:ec:a4:9a:e8:c0:59:4a:b8:ec:41:f5:da:1a:da: c9:71:4b:35:a4:7a:03:5d:64:97:c0:79:60:bf:e4:c6:11:74: db:32:b8:15:0a:e9:73:a1:16:1b:d9:00:bf:25:2a:4c:aa:79: 2d:d8:aa:58:61:10:73:6f:fd:5d:c8:18:4c:b2:cd:94:00:de: 4f:6c:38:4f:36:5b:0c:aa:75:2d:0d:0b:42:2d:a3:e7:b5:64: 25:55:bf:24:7a:36:e7:ed:1d:c0:86:01:30:f9:08:7b:57:1d: 87:c8:87:53 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHnZzEdGpzfjP/e4IVY9ytZIpB9AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MTk0MTE4WhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A1YTk2MjE0YmJkMGIyOWM0ZTZjYTkxZjhlNDJmOTVhZjYy NGEzYzZiY2U4ZWYyMzY0ZTQyZDg5MjBiMjA3NDJiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtYjVAkP51x7t10gL0ZDooq/sf1FSv+238Ka7GTccLQRMt gWSdV8+wsAAladnAXjk+5qi3ERu0cA+xzecvqLmQIz3oVB6rj/+mX/LfDX9KllpX Px3b+k6rciCJuH4TP8p9NAGPvWULQkyDXNMfyuEw3d/C0fJVniSvOkVdfL4UUt2f BqmGGKVtRxXBdZFG6p/1J6qIPBDZjMgmkXo+RIskwPuLVkb//j+5sOkq8CDlV8EQ EC2t3aZrxHfaYYyrnH9ipemcQYbgX3b97Xrv6tJ5VTu1i+sz+6XFmTpuXYfw1NtX SnMpv8uU6vNGg2Dj2prPguZc2UlDLroaDjpbkHJfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU4Vj6E7m5oXYoZc4E4iYW8x4gV3gwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzdiZjc5NDlkLWE2ODYtNGYxZS05NTRkLWU3MTdiMjQxNWM3MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAN4h0wDQYJKoZIhvcNAQELBQADggEBAKpX2SIdD63Clyv2r23yG/LjYezt 82CTn1YQIoxqPqPbh5qwM3h94ajDSKA8wmI/DE3YeclQTt74h4GtzNEmLH2DdlDa O+8niHKMaJPVZjQI+9mGHNpLVi2ytUC3cfw/H09cvvrykrW53fQ+YiBvGjE2o3S7 WrtB4qzPLcmNWkhWhQ+Nn8Q4DA5cDfimgs9Z0Tav66vspJrowFlKuOxB9doa2slx SzWkegNdZJfAeWC/5MYRdNsyuBUK6XOhFhvZAL8lKkyqeS3YqlhhEHNv/V3IGEyy zZQA3k9sOE82WwyqdS0NC0Ito+e1ZCVVvyR6NuftHcCGATD5CHtXHYfIh1M= -----END CERTIFICATE-----Generated at Sat Oct 18 02:16:30 2025 by rpki-client