$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8d1dd825-2abb-4701-a13e-9d3042cac01c.roa File: 8d1dd825-2abb-4701-a13e-9d3042cac01c.roa (raw, json) Hash identifier: 5Ls3MaP6nxhgvUOAj43zP+jYNMHEMmcwIf1F6KPzh/M= Subject key identifier: 4B:AB:B4:82:35:F1:74:3E:6B:A5:60:98:D0:5F:AF:B6:93:2B:7F:A3 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 040C9DF995F4C5AED08C4BE43CC8028318F9920A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8d1dd825-2abb-4701-a13e-9d3042cac01c.roa Signing time: Sat 01 Nov 2025 01:11:01 +0000 ROA not before: Sat 01 Nov 2025 01:11:01 +0000 ROA not after: Sat 06 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.208.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:0c:9d:f9:95:f4:c5:ae:d0:8c:4b:e4:3c:c8:02:83:18:f9:92:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Nov 1 01:11:01 2025 GMT Not After : Dec 6 23:59:59 2025 GMT Subject: serialNumber=b54393222290da6ccdcf2d502ff233acc10829760138806733c3872baada8b26, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a7:20:ec:81:94:43:0a:16:ca:5a:28:5e:d8: 33:2a:88:67:a1:30:9a:cf:eb:9a:1b:77:40:9c:96: 7f:09:85:d3:6e:30:25:06:74:ac:73:cd:e0:b0:74: a0:4a:b0:1a:1b:b2:52:93:45:fc:6c:18:95:bb:b6: 45:b9:c5:82:44:14:34:8f:9f:5d:9a:96:59:bd:86: 59:4f:19:c4:e4:9a:68:4b:8b:36:ea:3b:a6:2a:d0: 9b:39:68:59:fe:bd:29:59:ba:f0:79:ff:2a:50:55: 65:85:5e:de:7f:e8:6a:fd:4e:e3:37:1e:45:27:15: 32:18:fb:12:e9:56:c5:ee:9e:74:b3:da:14:65:e1: c6:f7:65:a2:0f:78:0d:d4:83:3a:b7:58:40:cb:bf: 35:4a:73:90:29:c7:83:ae:fc:20:b2:55:20:05:a8: fb:79:27:13:19:1f:af:4f:2f:f9:88:24:cf:1f:b2: b8:63:bc:9d:b2:99:9a:e3:fa:c2:00:d4:ec:17:92: df:51:94:48:37:9a:6b:cb:7b:7c:b7:63:4b:92:9b: 9a:ea:43:0b:f3:85:68:ff:67:61:36:60:7f:a1:f5: 19:05:f9:3b:ed:1a:2a:0f:da:aa:7c:5c:ba:88:c3: 0d:01:98:42:f7:7b:17:f4:68:11:d0:f3:4e:35:d1: b8:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:AB:B4:82:35:F1:74:3E:6B:A5:60:98:D0:5F:AF:B6:93:2B:7F:A3 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8d1dd825-2abb-4701-a13e-9d3042cac01c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.208.64.0/18 Signature Algorithm: sha256WithRSAEncryption 05:63:c5:72:0d:ae:8f:23:ab:40:04:b6:7f:fa:e6:82:e5:9b: 42:32:1b:90:27:4c:d6:2a:37:a8:5c:51:32:07:5d:e4:ae:17: 65:14:5b:16:9f:29:ad:ae:d9:5b:39:99:0a:75:15:2a:17:f8: 6d:4c:29:cf:47:36:f4:14:e2:4e:e3:a3:ab:c0:ff:37:dd:fc: 0e:fc:25:4b:08:a4:21:64:e0:56:cb:d5:78:b2:1e:2c:b5:dc: ee:52:9e:a2:92:62:cd:58:0c:14:dd:86:0a:aa:76:76:f0:f2: 54:9b:fd:6b:0b:10:d0:87:4e:47:97:15:d7:82:95:9a:d6:12: 67:8d:5c:d1:25:b3:41:5e:90:28:88:60:cd:73:05:58:7e:8f: ad:53:64:7c:91:c3:1a:61:30:45:48:06:79:a2:38:27:49:01: 14:b4:ae:d3:0a:3c:5f:9b:48:0e:e8:03:ef:3c:16:4c:b8:7f: f4:05:23:0d:3e:f6:9d:7b:57:4a:55:df:15:3b:35:48:35:28: 2a:c8:ff:72:db:ec:db:2d:de:d4:44:5a:fe:22:ad:b3:ce:95: ca:18:ad:de:d7:d7:cc:24:98:6a:fa:44:e6:e7:61:d5:8a:2a: ae:30:88:21:64:a1:77:42:b4:1c:5f:4e:7e:e2:cd:43:d1:b3: 9a:2c:2d:df -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBAyd+ZX0xa7QjEvkPMgCgxj5kgowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMTAxMDExMTAxWhcNMjUxMjA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BiNTQzOTMyMjIyOTBkYTZjY2RjZjJkNTAyZmYyMzNhY2Mx MDgyOTc2MDEzODgwNjczM2MzODcyYmFhZGE4YjI2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDdpyDsgZRDChbKWihe2DMqiGehMJrP65obd0Ccln8JhdNu MCUGdKxzzeCwdKBKsBobslKTRfxsGJW7tkW5xYJEFDSPn12allm9hllPGcTkmmhL izbqO6Yq0Js5aFn+vSlZuvB5/ypQVWWFXt5/6Gr9TuM3HkUnFTIY+xLpVsXunnSz 2hRl4cb3ZaIPeA3Ugzq3WEDLvzVKc5Apx4Ou/CCyVSAFqPt5JxMZH69PL/mIJM8f srhjvJ2ymZrj+sIA1OwXkt9RlEg3mmvLe3y3Y0uSm5rqQwvzhWj/Z2E2YH+h9RkF +TvtGioP2qp8XLqIww0BmEL3exf0aBHQ80410bh3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUS6u0gjXxdD5rpWCY0F+vtpMrf6MwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzhkMWRkODI1LTJhYmItNDcwMS1hMTNlLTlkMzA0MmNhYzAxYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYN0EAwDQYJKoZIhvcNAQELBQADggEBAAVjxXINro8jq0AEtn/65oLlm0Iy G5AnTNYqN6hcUTIHXeSuF2UUWxafKa2u2Vs5mQp1FSoX+G1MKc9HNvQU4k7jo6vA /zfd/A78JUsIpCFk4FbL1XiyHiy13O5SnqKSYs1YDBTdhgqqdnbw8lSb/WsLENCH TkeXFdeClZrWEmeNXNEls0FekCiIYM1zBVh+j61TZHyRwxphMEVIBnmiOCdJARS0 rtMKPF+bSA7oA+88Fky4f/QFIw0+9p17V0pV3xU7NUg1KCrI/3Lb7Nst3tREWv4i rbPOlcoYrd7X18wkmGr6RObnYdWKKq4wiCFkoXdCtBxfTn7izUPRs5osLd8= -----END CERTIFICATE-----Generated at Wed Nov 5 07:25:30 2025 by rpki-client