$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/92a122f1-df98-405c-a4f0-2895227596e0.roa File: 92a122f1-df98-405c-a4f0-2895227596e0.roa (raw, json) Hash identifier: HV2Hjq2iEtmwHajobM5t8PdvG9fUkh3PNvDmYLhRzVI= Subject key identifier: 97:37:E4:24:7A:BE:01:74:30:8D:58:94:DC:5F:C4:99:A0:42:06:BD Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2C68A2D66FA482A33DDF442C7EEBF33A7341976E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/92a122f1-df98-405c-a4f0-2895227596e0.roa Signing time: Wed 24 Sep 2025 20:42:20 +0000 ROA not before: Wed 24 Sep 2025 20:42:20 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.226.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:68:a2:d6:6f:a4:82:a3:3d:df:44:2c:7e:eb:f3:3a:73:41:97:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 20:42:20 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=79b77b4c0c9839a16409aa1d21b51283076d74a4f21735064ccd1d96164a419d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:07:73:89:2d:a4:30:7b:8b:70:a0:cc:5e:fd: 06:ab:2f:67:2d:9f:b5:53:4a:0c:4e:0d:67:fa:8d: da:2d:82:84:04:54:46:cf:13:87:5e:ce:79:4e:39: fc:09:88:34:08:bc:99:c1:51:6f:36:e2:54:79:9a: 87:7a:74:4f:9e:96:5f:a3:5d:ec:5b:9d:e5:96:57: 6f:3a:83:df:fe:d1:c5:cd:e9:d5:ac:64:a3:96:ad: ff:c2:8a:dc:5d:99:22:e8:dd:24:85:31:64:9c:7f: 49:30:46:33:09:31:98:a3:ea:89:38:fb:d5:ff:53: 52:2f:c6:e1:3a:f2:5b:28:37:0b:cc:27:ff:ca:a5: df:23:97:b1:8f:c2:14:8b:9e:73:5a:5b:9d:e9:72: 29:99:93:3e:23:b4:10:a3:b6:62:33:6e:cd:1a:20: 76:9b:e9:4a:64:78:4e:f2:46:48:c4:06:f6:4d:06: 36:41:7b:04:6d:a7:16:4d:73:7d:44:c6:0d:25:b2: 83:f5:10:cf:6d:ed:c6:e3:a2:91:d0:73:da:82:3d: b7:0c:db:5d:80:cf:56:9b:57:a2:1d:18:72:9c:ca: b3:c0:7c:2f:b3:25:ea:0e:46:d0:b0:e5:1a:cf:59: 90:23:8e:8b:e8:c8:ef:79:f4:57:c9:72:b2:db:31: 03:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:37:E4:24:7A:BE:01:74:30:8D:58:94:DC:5F:C4:99:A0:42:06:BD X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/92a122f1-df98-405c-a4f0-2895227596e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.226.140.0/22 Signature Algorithm: sha256WithRSAEncryption 2f:97:82:dc:06:9e:58:ff:27:b7:bf:c2:3b:3f:d9:9b:3d:ef: 4f:78:56:0d:d9:39:eb:dd:47:55:2b:14:06:e0:f9:1e:f2:3e: 3a:ee:7f:ba:ed:e4:07:e6:ed:66:8c:c2:d9:49:e3:40:b6:9b: fd:b8:90:7a:33:42:3c:08:54:1c:1c:cf:08:00:be:fc:f4:9f: e5:74:45:02:18:bd:88:db:de:0a:9b:39:09:8a:cf:eb:d4:66: c2:d7:19:51:ba:36:68:fc:fc:47:be:2a:77:a9:85:83:1f:c5: 11:bf:0a:6c:4d:22:0b:dc:10:b3:c6:c6:19:83:f3:ab:00:6c: b0:2f:ab:9f:2e:47:ed:4e:3c:ec:5c:45:6d:32:e5:8a:ef:b9: 05:ee:1b:f1:e2:ad:19:38:fe:d9:96:1d:d6:c9:7a:2d:c9:86: 98:1e:8c:3f:36:2f:c3:43:b9:79:71:ad:c1:a0:98:99:2b:25: a3:5a:15:c2:8a:3b:a8:f4:43:40:87:09:ee:d6:26:78:42:ff: ce:37:84:62:d8:20:3d:5d:a0:76:3e:1b:45:70:02:16:cc:07: 84:0d:18:5d:ae:07:6c:27:9f:31:f2:a9:e9:2e:8c:b6:c4:b0: 2d:12:27:ab:e0:25:39:76:6c:c1:5b:e9:5d:a4:66:64:d7:69: a5:13:b0:c5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULGii1m+kgqM930QsfuvzOnNBl24wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MjA0MjIwWhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A3OWI3N2I0YzBjOTgzOWExNjQwOWFhMWQyMWI1MTI4MzA3 NmQ3NGE0ZjIxNzM1MDY0Y2NkMWQ5NjE2NGE0MTlkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGB3OJLaQwe4twoMxe/QarL2ctn7VTSgxODWf6jdotgoQE VEbPE4deznlOOfwJiDQIvJnBUW824lR5mod6dE+ell+jXexbneWWV286g9/+0cXN 6dWsZKOWrf/CitxdmSLo3SSFMWScf0kwRjMJMZij6ok4+9X/U1IvxuE68lsoNwvM J//Kpd8jl7GPwhSLnnNaW53pcimZkz4jtBCjtmIzbs0aIHab6UpkeE7yRkjEBvZN BjZBewRtpxZNc31Exg0lsoP1EM9t7cbjopHQc9qCPbcM212Az1abV6IdGHKcyrPA fC+zJeoORtCw5RrPWZAjjovoyO959FfJcrLbMQN1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUlzfkJHq+AXQwjViU3F/EmaBCBr0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzkyYTEyMmYxLWRmOTgtNDA1Yy1hNGYwLTI4OTUyMjc1OTZlMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIN4owwDQYJKoZIhvcNAQELBQADggEBAC+XgtwGnlj/J7e/wjs/2Zs97094 Vg3ZOevdR1UrFAbg+R7yPjruf7rt5Afm7WaMwtlJ40C2m/24kHozQjwIVBwczwgA vvz0n+V0RQIYvYjb3gqbOQmKz+vUZsLXGVG6Nmj8/Ee+KnephYMfxRG/CmxNIgvc ELPGxhmD86sAbLAvq58uR+1OPOxcRW0y5YrvuQXuG/HirRk4/tmWHdbJei3Jhpge jD82L8NDuXlxrcGgmJkrJaNaFcKKO6j0Q0CHCe7WJnhC/843hGLYID1doHY+G0Vw AhbMB4QNGF2uB2wnnzHyqekujLbEsC0SJ6vgJTl2bMFb6V2kZmTXaaUTsMU= -----END CERTIFICATE-----Generated at Fri Oct 17 21:57:39 2025 by rpki-client