$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ec50f2b1-0c98-4ce7-85be-5edd3b7d4792.roa File: ec50f2b1-0c98-4ce7-85be-5edd3b7d4792.roa (raw, json) Hash identifier: dOk4xAkzz+jqmVVfW5WGITytBRMrt6olPmHPupTcWwY= Subject key identifier: 90:14:41:46:AA:67:BE:C6:0C:6D:B3:93:99:01:D8:0A:8A:21:6B:D7 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7B7ED60DF74053266244CDE81EA9714E75C84D86 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ec50f2b1-0c98-4ce7-85be-5edd3b7d4792.roa Signing time: Tue 21 Oct 2025 02:42:17 +0000 ROA not before: Tue 21 Oct 2025 02:42:17 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.112.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:7e:d6:0d:f7:40:53:26:62:44:cd:e8:1e:a9:71:4e:75:c8:4d:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 21 02:42:17 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=16e2b29ad2f2b7413f7b7fb7196f0f9e1ed27ae7a3b6a8148aaf5a3f3caacf67, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3c:41:b2:83:ca:d5:ce:eb:28:23:06:13:66: 42:b8:12:ab:50:26:86:be:12:c6:7d:d2:9a:9f:2c: 95:04:2a:fc:ee:0f:ca:f3:d8:14:ac:8d:01:8a:b8: f2:5b:ba:30:51:0f:d1:34:c5:bb:44:0a:5f:ec:d3: 63:11:b6:2a:86:f2:f5:f3:94:ec:da:a7:e9:c6:9e: 78:8f:c5:2b:84:58:0d:fe:b3:11:c4:bc:14:42:24: 41:b3:6c:d8:17:d1:1d:be:43:3a:7b:5a:c1:a8:86: c3:00:d4:c3:79:69:08:fc:13:ce:f9:ab:c8:05:f4: f8:96:0b:6a:2d:98:bc:25:ad:47:68:5d:b7:ad:f1: be:cc:97:31:68:d6:96:b6:8d:6a:3f:1d:3e:51:0a: 99:87:2e:0d:bb:9b:2e:53:ba:c8:da:4a:a8:9f:23: f9:31:7b:42:d9:88:ac:86:bd:fd:c2:4a:72:b2:30: d0:aa:88:d4:1e:3a:2f:5c:7c:0d:6f:84:dd:1a:46: 47:87:0c:74:26:b6:23:16:c1:b5:c3:dd:1a:48:ee: 53:5d:67:b5:d8:80:8a:e5:1e:44:ef:6a:7e:50:b9: 9d:32:5e:2b:ea:ec:f8:5f:c5:96:e3:75:62:08:ea: 4a:97:b5:8d:84:9e:c6:2c:4b:84:75:0f:37:8b:75: 7c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:14:41:46:AA:67:BE:C6:0C:6D:B3:93:99:01:D8:0A:8A:21:6B:D7 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ec50f2b1-0c98-4ce7-85be-5edd3b7d4792.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.112.192.0/18 Signature Algorithm: sha256WithRSAEncryption 28:ed:7e:77:38:35:e8:12:dc:b0:cb:9f:8e:c5:0f:f0:f0:50: 2b:15:6d:a5:d9:c7:85:82:58:c4:67:27:80:01:e9:82:50:13: 3e:21:ec:72:56:ef:fe:46:5f:77:81:bc:19:44:76:39:b3:73: 6d:67:76:34:92:46:4d:0b:f5:07:47:7a:2a:bd:8e:99:5e:fc: bf:a6:58:3b:f6:31:03:93:d2:9e:44:24:3d:45:e6:59:c2:e9: 26:b7:79:81:87:03:a6:28:7a:14:69:a8:9d:bf:c8:0c:13:0e: 64:4e:fc:e9:a7:17:1f:09:cc:70:86:c4:30:ef:62:80:f0:75: 96:43:b2:4f:d2:96:bb:07:5a:84:54:3d:1d:d5:b8:b3:2f:d4: 3a:4a:63:01:d8:17:ac:f9:ea:58:d3:a6:54:92:f7:07:9a:ef: be:a5:28:81:b9:bd:79:61:50:db:82:7f:c8:46:ab:b9:ea:05: e6:0a:26:52:23:f0:e3:c7:0e:66:82:7f:63:2f:7a:db:19:70: 71:9d:18:6a:44:6b:68:dd:c8:80:1d:41:32:76:af:4b:d3:d2: c9:7c:aa:0e:0e:d1:cc:a9:91:3b:47:f8:11:25:0c:ca:6a:4b: 4b:f8:11:eb:15:a8:08:92:23:2b:95:71:e4:20:44:97:c8:ab: f1:2a:4e:78 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUe37WDfdAUyZiRM3oHqlxTnXITYYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDIxMDI0MjE3WhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AxNmUyYjI5YWQyZjJiNzQxM2Y3YjdmYjcxOTZmMGY5ZTFl ZDI3YWU3YTNiNmE4MTQ4YWFmNWEzZjNjYWFjZjY3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDOPEGyg8rVzusoIwYTZkK4EqtQJoa+EsZ90pqfLJUEKvzu D8rz2BSsjQGKuPJbujBRD9E0xbtECl/s02MRtiqG8vXzlOzap+nGnniPxSuEWA3+ sxHEvBRCJEGzbNgX0R2+Qzp7WsGohsMA1MN5aQj8E875q8gF9PiWC2otmLwlrUdo Xbet8b7MlzFo1pa2jWo/HT5RCpmHLg27my5TusjaSqifI/kxe0LZiKyGvf3CSnKy MNCqiNQeOi9cfA1vhN0aRkeHDHQmtiMWwbXD3RpI7lNdZ7XYgIrlHkTvan5QuZ0y Xivq7PhfxZbjdWII6kqXtY2EnsYsS4R1DzeLdXxLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUkBRBRqpnvsYMbbOTmQHYCooha9cwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2VjNTBmMmIxLTBjOTgtNGNlNy04NWJlLTVlZGQzYjdkNDc5Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYNcMAwDQYJKoZIhvcNAQELBQADggEBACjtfnc4NegS3LDLn47FD/DwUCsV baXZx4WCWMRnJ4AB6YJQEz4h7HJW7/5GX3eBvBlEdjmzc21ndjSSRk0L9QdHeiq9 jple/L+mWDv2MQOT0p5EJD1F5lnC6Sa3eYGHA6YoehRpqJ2/yAwTDmRO/OmnFx8J zHCGxDDvYoDwdZZDsk/SlrsHWoRUPR3VuLMv1DpKYwHYF6z56ljTplSS9wea776l KIG5vXlhUNuCf8hGq7nqBeYKJlIj8OPHDmaCf2MvetsZcHGdGGpEa2jdyIAdQTJ2 r0vT0sl8qg4O0cypkTtH+BElDMpqS0v4EesVqAiSIyuVceQgRJfIq/EqTng= -----END CERTIFICATE-----Generated at Wed Nov 5 01:54:19 2025 by rpki-client