$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/94a10d01-9dfb-4709-a5fc-d716a69a333d.roa File: 94a10d01-9dfb-4709-a5fc-d716a69a333d.roa (raw, json) Hash identifier: BaLgz5RhJB2y7oSaGmaY2w/WeoWtqVkraU+SYrlL1AU= Subject key identifier: A9:04:83:E7:E6:37:E2:14:05:91:7F:D3:D9:FA:70:70:64:23:63:F7 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 35CA56A3A8AEB0590CC7DCD573DFFF96A8A6EA5E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/94a10d01-9dfb-4709-a5fc-d716a69a333d.roa Signing time: Wed 24 Sep 2025 19:15:44 +0000 ROA not before: Wed 24 Sep 2025 19:15:44 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.225.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:ca:56:a3:a8:ae:b0:59:0c:c7:dc:d5:73:df:ff:96:a8:a6:ea:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 19:15:44 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=f7ceb2f1863a1160cf0486b0f456100adc79f527edff237f92c2837f340b20f6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9e:31:32:a6:ed:eb:6d:cf:2c:37:e0:2e:4a: f1:3d:0d:be:f0:75:f4:44:b2:1e:07:13:c6:9a:cf: 94:ae:c1:d1:32:b7:21:f6:1b:93:49:87:9c:81:61: 4b:97:99:06:1b:de:00:b7:22:6d:7c:c9:9c:09:d9: 1c:ae:e8:bc:cf:26:f9:86:de:c1:6a:04:6c:78:aa: 4d:2a:fb:fb:86:7d:9e:6f:01:d2:fa:46:43:e7:f7: 7a:7e:5b:f7:4a:6d:e1:e2:59:c4:cc:db:71:dc:e0: b0:81:a6:3f:d1:60:b8:d3:cd:83:92:45:5d:76:d7: 7f:f8:19:a1:8a:c5:7c:1e:c1:f0:77:9b:30:5d:7b: 45:6c:3c:a0:10:31:83:29:16:9e:13:1b:d8:36:e2: 55:01:d2:df:e3:98:2d:dc:4b:b6:89:a0:38:60:8d: 61:4f:94:0e:54:0a:77:4b:60:2e:65:11:43:58:4e: eb:b1:7c:40:23:8a:5c:e5:62:8c:4f:60:2e:aa:3a: 97:40:4a:69:a1:6c:a2:d9:57:4a:22:05:b3:4c:6c: 6a:18:69:f1:bf:30:f4:c6:d6:fe:40:18:a7:d3:20: c7:b0:9d:e7:17:69:80:df:65:27:b9:fc:a7:bc:e2: 1c:fb:34:ad:69:98:9a:56:ab:e4:6e:52:11:b9:64: 9e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:04:83:E7:E6:37:E2:14:05:91:7F:D3:D9:FA:70:70:64:23:63:F7 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/94a10d01-9dfb-4709-a5fc-d716a69a333d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.225.134.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:16:dd:dc:cd:86:41:fc:6e:ee:ea:25:98:cb:f3:ed:fb:dd: 7f:32:94:f7:7a:60:4a:f3:bd:0b:49:d2:f5:59:2a:2f:70:2f: 69:92:9b:3f:a4:2d:88:4b:70:2c:24:75:7d:d1:ff:bf:e6:6e: 2e:30:24:12:32:b0:9b:32:16:82:4e:27:02:07:15:19:d3:cf: b7:de:43:0c:04:6a:ca:86:b0:23:c6:8f:62:68:68:05:49:72: c4:03:99:41:66:02:11:73:24:fc:e6:e9:19:6c:94:82:68:04: 57:0d:8f:49:2e:5f:3c:fa:a9:63:a2:c8:34:4b:b0:54:e5:6f: 6c:d3:ae:a7:51:03:51:3b:fa:9e:4f:02:4d:6b:c7:61:d3:f9: 8b:ef:08:18:81:a8:2c:54:c9:86:de:08:0f:f5:82:98:bd:34: f3:28:a3:ab:cd:af:c2:f2:e1:6f:9f:e7:e9:13:bc:48:3b:0e: 1a:e2:56:7f:76:be:26:27:a1:2d:3c:8f:2e:61:aa:7e:08:e5: 3e:81:31:6d:1f:cb:c5:2d:2c:70:6b:13:72:34:cf:39:c5:7f: ee:3c:46:2e:b3:72:50:44:5e:aa:6e:19:8e:b4:e4:45:4d:8d: d3:b1:d3:92:0d:0c:7e:92:fb:44:99:8d:ee:2b:b3:30:37:b1: 37:24:65:85 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNcpWo6iusFkMx9zVc9//lqim6l4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MTkxNTQ0WhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BmN2NlYjJmMTg2M2ExMTYwY2YwNDg2YjBmNDU2MTAwYWRj NzlmNTI3ZWRmZjIzN2Y5MmMyODM3ZjM0MGIyMGY2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHnjEypu3rbc8sN+AuSvE9Db7wdfREsh4HE8aaz5SuwdEy tyH2G5NJh5yBYUuXmQYb3gC3Im18yZwJ2Ryu6LzPJvmG3sFqBGx4qk0q+/uGfZ5v AdL6RkPn93p+W/dKbeHiWcTM23Hc4LCBpj/RYLjTzYOSRV1213/4GaGKxXwewfB3 mzBde0VsPKAQMYMpFp4TG9g24lUB0t/jmC3cS7aJoDhgjWFPlA5UCndLYC5lEUNY TuuxfEAjilzlYoxPYC6qOpdASmmhbKLZV0oiBbNMbGoYafG/MPTG1v5AGKfTIMew necXaYDfZSe5/Ke84hz7NK1pmJpWq+RuUhG5ZJ7LAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUqQSD5+Y34hQFkX/T2fpwcGQjY/cwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzk0YTEwZDAxLTlkZmItNDcwOS1hNWZjLWQ3MTZhNjlhMzMzZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAN4YYwDQYJKoZIhvcNAQELBQADggEBAG4W3dzNhkH8bu7qJZjL8+373X8y lPd6YErzvQtJ0vVZKi9wL2mSmz+kLYhLcCwkdX3R/7/mbi4wJBIysJsyFoJOJwIH FRnTz7feQwwEasqGsCPGj2JoaAVJcsQDmUFmAhFzJPzm6RlslIJoBFcNj0kuXzz6 qWOiyDRLsFTlb2zTrqdRA1E7+p5PAk1rx2HT+YvvCBiBqCxUyYbeCA/1gpi9NPMo o6vNr8Ly4W+f5+kTvEg7DhriVn92viYnoS08jy5hqn4I5T6BMW0fy8UtLHBrE3I0 zznFf+48Ri6zclBEXqpuGY605EVNjdOx05INDH6S+0SZje4rszA3sTckZYU= -----END CERTIFICATE-----Generated at Fri Oct 17 23:48:40 2025 by rpki-client