$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/07a2e991-88e4-44dc-ba0d-f0212a80a111.roa File: 07a2e991-88e4-44dc-ba0d-f0212a80a111.roa (raw, json) Hash identifier: Miz3339gIevqk+VAQi3YBq0aK3G1F2gdAN/x6pcPxaI= Subject key identifier: DF:B8:74:E1:C2:8A:BA:A4:78:6F:CE:08:6D:B2:0C:B0:7F:D9:72:11 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 32C6D066BC0D279A751B8DB6A8659B76601E76DD Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/07a2e991-88e4-44dc-ba0d-f0212a80a111.roa Signing time: Sat 01 Nov 2025 01:20:07 +0000 ROA not before: Sat 01 Nov 2025 01:20:07 +0000 ROA not after: Sat 06 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.236.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:c6:d0:66:bc:0d:27:9a:75:1b:8d:b6:a8:65:9b:76:60:1e:76:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Nov 1 01:20:07 2025 GMT Not After : Dec 6 23:59:59 2025 GMT Subject: serialNumber=256176da0ff248ae56b19e456aff6040ebd1932fd0d196bf1bb8a64917ce6bed, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:53:a9:08:fd:10:5a:1c:57:fc:89:7c:db:1f: fd:7a:13:72:bf:1a:14:65:37:2a:b8:5d:34:3b:5c: d0:87:af:3e:d4:3f:48:79:bb:9d:41:50:99:c2:af: a4:5f:b4:e8:cf:5d:9d:32:59:76:37:2f:a7:9d:b8: fd:6c:53:ba:49:77:c1:ea:0b:a8:e6:c5:21:44:05: 7d:d7:a1:e8:29:46:40:cd:cd:cf:99:9c:d2:7d:c9: 20:60:b7:b0:a2:2d:9c:e4:2f:24:1d:d3:e8:b4:83: 4c:80:02:b6:9f:5a:b2:2f:20:bf:35:1c:aa:bf:3c: 93:2d:27:cb:92:d6:56:2d:0b:3c:df:b5:4a:96:f2: 5c:f3:31:54:70:70:44:e1:56:a2:94:19:f7:3e:c2: ba:0c:87:ba:5d:f8:86:27:3e:96:5f:6e:21:c3:a6: 84:ed:c5:bf:e3:59:f2:f2:e3:6e:7a:ed:3e:f2:f1: 77:59:2e:39:1f:4f:fc:d0:b3:88:f1:bf:af:35:ab: 42:ca:b6:4b:75:f6:12:c2:7f:76:ed:18:a6:af:e0: 5e:89:62:75:54:4e:6d:a2:22:cb:c1:d9:e7:2e:ac: 9a:69:ce:88:a5:33:3d:07:86:c8:a9:73:fb:05:e9: c3:25:0a:69:fb:0e:66:01:d1:b5:72:06:e3:10:e2: 69:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:B8:74:E1:C2:8A:BA:A4:78:6F:CE:08:6D:B2:0C:B0:7F:D9:72:11 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/07a2e991-88e4-44dc-ba0d-f0212a80a111.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.236.0.0/14 Signature Algorithm: sha256WithRSAEncryption 03:a6:4e:c9:34:7c:ea:5c:e5:b5:df:ea:b0:d6:c9:b6:fe:16: 29:b5:93:06:02:a6:14:35:63:31:9b:f2:48:00:4c:4c:17:e5: 45:5d:bb:cd:64:e3:53:1c:00:89:a8:c4:ba:d4:f6:b8:00:08: cf:f8:12:28:45:1f:40:b0:fc:79:cc:74:64:12:a2:99:c1:2e: 7f:f1:13:fd:c5:a9:bc:85:0b:48:af:ff:f9:ef:ab:60:ea:4c: 19:98:81:be:cd:b6:27:20:41:8a:17:6b:ac:84:44:4e:05:18: 1e:c4:20:44:27:cf:0e:2a:a6:b7:ba:ba:db:10:95:6d:dd:de: 60:0e:2c:4e:15:bc:c9:f6:a4:b9:8f:44:b4:86:16:61:26:cd: 0c:92:17:9c:70:5c:78:16:a3:3c:49:06:41:58:cd:3b:a6:bf: bb:51:6c:c6:e6:14:e5:73:40:e2:22:3a:15:3d:df:6f:4e:c2: a1:cd:58:75:58:e8:c1:b8:81:6f:e1:98:a8:f1:6b:13:3f:a3: 76:0e:2f:20:9d:89:9e:95:8e:56:f8:69:42:72:86:a8:77:2d: 0d:16:b6:e3:79:b8:cd:26:6a:eb:eb:18:11:5f:18:95:91:04: 69:61:9f:d9:d8:11:e1:37:d3:59:c9:49:86:32:93:e9:5a:3b: c6:b9:70:ea -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUMsbQZrwNJ5p1G422qGWbdmAedt0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMTAxMDEyMDA3WhcNMjUxMjA2MjM1OTU5 WjB6MUkwRwYDVQQFE0AyNTYxNzZkYTBmZjI0OGFlNTZiMTllNDU2YWZmNjA0MGVi ZDE5MzJmZDBkMTk2YmYxYmI4YTY0OTE3Y2U2YmVkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1U6kI/RBaHFf8iXzbH/16E3K/GhRlNyq4XTQ7XNCHrz7U P0h5u51BUJnCr6RftOjPXZ0yWXY3L6eduP1sU7pJd8HqC6jmxSFEBX3XoegpRkDN zc+ZnNJ9ySBgt7CiLZzkLyQd0+i0g0yAArafWrIvIL81HKq/PJMtJ8uS1lYtCzzf tUqW8lzzMVRwcEThVqKUGfc+wroMh7pd+IYnPpZfbiHDpoTtxb/jWfLy42567T7y 8XdZLjkfT/zQs4jxv681q0LKtkt19hLCf3btGKav4F6JYnVUTm2iIsvB2ecurJpp zoilMz0Hhsipc/sF6cMlCmn7DmYB0bVyBuMQ4mm9AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU37h04cKKuqR4b84IbbIMsH/ZchEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzA3YTJlOTkxLTg4ZTQtNDRkYy1iYTBkLWYwMjEyYTgwYTExMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwIN7DANBgkqhkiG9w0BAQsFAAOCAQEAA6ZOyTR86lzltd/qsNbJtv4WKbWT BgKmFDVjMZvySABMTBflRV27zWTjUxwAiajEutT2uAAIz/gSKEUfQLD8ecx0ZBKi mcEuf/ET/cWpvIULSK//+e+rYOpMGZiBvs22JyBBihdrrIRETgUYHsQgRCfPDiqm t7q62xCVbd3eYA4sThW8yfakuY9EtIYWYSbNDJIXnHBceBajPEkGQVjNO6a/u1Fs xuYU5XNA4iI6FT3fb07Coc1YdVjowbiBb+GYqPFrEz+jdg4vIJ2JnpWOVvhpQnKG qHctDRa243m4zSZq6+sYEV8YlZEEaWGf2dgR4TfTWclJhjKT6Vo7xrlw6g== -----END CERTIFICATE-----Generated at Wed Nov 5 03:25:51 2025 by rpki-client