$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9338290e-d78c-47e2-8bbe-50e5cfa57d21.roa File: 9338290e-d78c-47e2-8bbe-50e5cfa57d21.roa (raw, json) Hash identifier: axQZkZDCG8PW7MAwGEasBRPv23lR7DIKq+MYGjI1JaA= Subject key identifier: D3:3C:41:D0:8E:D2:45:A0:A2:F7:28:13:A9:02:86:3D:B2:09:3D:DF Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0836336EFA68E0847F3B9DBBA65F189DE1AFE5C7 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9338290e-d78c-47e2-8bbe-50e5cfa57d21.roa Signing time: Wed 24 Sep 2025 20:59:49 +0000 ROA not before: Wed 24 Sep 2025 20:59:49 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.226.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:36:33:6e:fa:68:e0:84:7f:3b:9d:bb:a6:5f:18:9d:e1:af:e5:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 20:59:49 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=fef57fff67d265a192920adb926d93add22b871ba9ee8db75c64c9c2a442f38b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f5:be:61:57:a9:88:49:02:b1:61:f9:b9:49: 0d:c2:a5:d1:c8:88:a4:02:5d:a0:e6:8f:c4:cf:12: 2b:b1:a2:9f:d1:71:11:13:99:cc:ec:43:9a:5e:41: e3:82:96:0d:c6:c1:f2:a2:91:d3:32:e4:0a:dc:e7: 09:ae:78:5a:52:8e:fd:18:d0:24:24:4b:95:fe:d1: 9b:08:be:49:48:2c:41:31:24:93:68:64:ae:8e:64: b6:ea:80:e2:69:5a:79:4a:5a:40:04:b9:b6:a7:ea: d7:1b:af:58:8e:f2:6f:43:19:11:ca:ec:e1:cf:39: ac:e7:12:9c:91:c4:98:f6:80:b6:0e:05:a8:16:82: 76:2a:7d:5e:92:a4:1a:67:f6:65:33:80:ef:42:72: d6:15:db:c9:1d:76:36:4e:73:9c:af:7a:0c:8f:e4: 99:31:b0:1d:73:26:87:df:4d:03:b6:6c:87:2e:f2: 2d:45:36:78:77:fb:8c:c8:19:86:f9:46:a9:ae:2e: 76:12:71:c2:11:14:cd:b0:a6:e3:42:11:d3:56:49: cc:06:99:ff:ea:26:e7:12:93:95:80:c2:68:26:0e: 8d:11:8b:b8:80:84:c3:ab:35:1e:4e:84:6c:a6:73: b7:92:a6:0b:d2:3f:b4:67:43:65:56:7b:33:e8:62: 3b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:3C:41:D0:8E:D2:45:A0:A2:F7:28:13:A9:02:86:3D:B2:09:3D:DF X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9338290e-d78c-47e2-8bbe-50e5cfa57d21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.226.32.0/20 Signature Algorithm: sha256WithRSAEncryption a8:b6:d9:ea:91:97:e2:0d:61:75:3a:65:ba:6f:df:70:85:0b: 2c:77:59:4c:61:6e:17:69:29:f7:32:0f:48:f2:c8:69:8f:b2: 29:04:33:91:5a:29:c9:ef:31:53:47:44:af:ff:6a:87:16:24: 70:0a:d6:00:29:f8:83:71:fe:80:d8:87:ac:63:4b:b6:27:2d: 1a:24:c1:14:31:9f:7f:ff:12:49:32:bf:53:fa:8d:92:23:2f: 5f:88:7c:43:a2:04:de:a6:c8:71:93:d8:7a:e2:21:00:42:07: a5:c8:21:e3:68:99:b4:ff:a7:f4:7c:0e:04:8f:98:8c:45:d7: 15:fa:7b:4a:42:f4:49:4b:cc:de:c9:2e:fd:f7:f9:53:cf:67: c9:e8:0c:6b:b5:45:b9:0b:7b:7c:5d:17:41:40:13:5e:57:e2: 4d:bd:32:4b:35:46:6d:87:52:24:a8:14:75:48:ca:4e:c8:02: ef:d9:da:aa:89:e6:d5:dc:cb:6c:bd:7f:cf:f3:95:61:91:1a: 58:08:c7:c6:ed:85:a6:c0:47:6f:08:c2:29:db:05:23:ab:39: bb:47:77:63:22:a2:a6:30:3e:51:44:ee:57:da:8c:75:0c:fe: c2:69:3b:fe:71:62:0a:37:08:80:d3:63:74:f1:d9:84:53:93: c7:9f:ac:83 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCDYzbvpo4IR/O527pl8YneGv5ccwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MjA1OTQ5WhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BmZWY1N2ZmZjY3ZDI2NWExOTI5MjBhZGI5MjZkOTNhZGQy MmI4NzFiYTllZThkYjc1YzY0YzljMmE0NDJmMzhiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCU9b5hV6mISQKxYfm5SQ3CpdHIiKQCXaDmj8TPEiuxop/R cRETmczsQ5peQeOClg3GwfKikdMy5Arc5wmueFpSjv0Y0CQkS5X+0ZsIvklILEEx JJNoZK6OZLbqgOJpWnlKWkAEuban6tcbr1iO8m9DGRHK7OHPOaznEpyRxJj2gLYO BagWgnYqfV6SpBpn9mUzgO9CctYV28kddjZOc5yvegyP5JkxsB1zJoffTQO2bIcu 8i1FNnh3+4zIGYb5RqmuLnYSccIRFM2wpuNCEdNWScwGmf/qJucSk5WAwmgmDo0R i7iAhMOrNR5OhGymc7eSpgvSP7RnQ2VWezPoYjvLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU0zxB0I7SRaCi9ygTqQKGPbIJPd8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzkzMzgyOTBlLWQ3OGMtNDdlMi04YmJlLTUwZTVjZmE1N2QyMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQN4iAwDQYJKoZIhvcNAQELBQADggEBAKi22eqRl+INYXU6Zbpv33CFCyx3 WUxhbhdpKfcyD0jyyGmPsikEM5FaKcnvMVNHRK//aocWJHAK1gAp+INx/oDYh6xj S7YnLRokwRQxn3//Ekkyv1P6jZIjL1+IfEOiBN6myHGT2HriIQBCB6XIIeNombT/ p/R8DgSPmIxF1xX6e0pC9ElLzN7JLv33+VPPZ8noDGu1RbkLe3xdF0FAE15X4k29 Mks1Rm2HUiSoFHVIyk7IAu/Z2qqJ5tXcy2y9f8/zlWGRGlgIx8bthabAR28Iwinb BSOrObtHd2MioqYwPlFE7lfajHUM/sJpO/5xYgo3CIDTY3Tx2YRTk8efrIM= -----END CERTIFICATE-----Generated at Sat Oct 18 02:16:29 2025 by rpki-client