$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/10524bce-f067-4f89-8c21-061714f95a02.roa File: 10524bce-f067-4f89-8c21-061714f95a02.roa (raw, json) Hash identifier: P1CTc2a3BVMxY7cFEaVhY5vOi/bN/S1WkvDvyCd+tYY= Subject key identifier: 1E:5B:05:DB:6C:B2:BD:F4:0E:AA:F7:23:3B:59:93:D7:51:52:D8:70 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1209C10DF9F8389A38630D2C0529C18DB5261695 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/10524bce-f067-4f89-8c21-061714f95a02.roa Signing time: Sun 19 Oct 2025 20:43:58 +0000 ROA not before: Sun 19 Oct 2025 20:43:58 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.227.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:09:c1:0d:f9:f8:38:9a:38:63:0d:2c:05:29:c1:8d:b5:26:16:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 20:43:58 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=aefca1dffd78747a3d13514f2c31517dbfc042e540cc9c3dba00078c40cbc40c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:36:4b:97:21:57:aa:d1:9a:90:18:7f:85:0d: 83:0f:3a:28:3f:be:2e:3b:e2:0c:51:bd:e4:7b:30: 7b:8c:de:02:a9:55:76:88:00:14:7a:61:b5:e8:3d: 69:9f:17:53:e9:f7:42:f4:84:15:50:5c:67:54:f7: de:a4:4a:59:ed:a6:ae:8f:a3:5c:da:d2:ed:53:73: 7a:f3:05:df:34:51:09:9e:bc:45:23:5d:69:17:58: 1a:d4:43:df:ed:f4:52:0e:b8:98:dc:3f:6b:cd:66: 32:b2:7e:37:7d:2a:4f:f9:67:db:83:ee:bb:bf:f4: 3c:ce:cc:40:75:3f:f6:d4:11:f2:ba:83:01:23:bf: 8e:d3:a5:40:63:3e:f7:69:64:56:83:25:ea:e4:f9: 00:db:29:0a:02:62:48:69:79:51:04:62:fb:7b:dd: 17:9f:73:70:ce:86:3d:3f:2f:4f:b6:97:e4:d8:8b: be:e9:89:bb:7c:af:8c:1e:cd:a5:73:fd:f4:67:69: fe:5b:b8:6f:0d:97:e8:5c:84:7a:57:6c:e5:76:9f: e8:cc:08:e7:93:59:35:cb:1f:1e:4b:e4:45:5c:5e: ee:8a:93:a3:80:c4:ea:1a:69:20:07:3f:32:b9:32: be:c8:db:ca:56:7d:7b:05:aa:c6:77:86:4a:44:9e: 36:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:5B:05:DB:6C:B2:BD:F4:0E:AA:F7:23:3B:59:93:D7:51:52:D8:70 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/10524bce-f067-4f89-8c21-061714f95a02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.227.36.0/22 Signature Algorithm: sha256WithRSAEncryption 7d:82:df:b3:d3:08:e7:7d:34:a0:6b:85:e9:c7:1b:59:53:0d: 82:18:5b:14:17:ab:de:36:59:b3:e6:fa:eb:dc:a8:f4:0a:d2: 2d:16:d7:6d:db:c7:44:6f:a1:4c:03:3c:a9:aa:bf:9f:ce:49: 5f:94:91:36:3c:5b:fd:e5:ba:d8:85:0b:3e:64:62:09:f8:c4: ff:3e:f9:a3:18:6a:0b:64:b4:d0:8d:a3:2f:40:a0:21:ad:e8: 11:70:5f:95:47:34:2d:86:d5:79:89:9f:60:ea:80:5b:ab:a7: f8:2f:83:e9:89:f7:1d:40:cc:c7:8e:c0:2a:cc:e6:f9:a2:97: 7e:6c:bb:14:25:4a:88:2b:60:05:ab:6d:a4:78:a4:8d:f7:64: 95:fb:88:9d:43:47:f6:76:1d:2f:fb:94:42:63:65:6a:f2:7e: b7:07:0b:2a:04:47:a6:69:72:ea:0c:c3:ed:94:13:9b:63:b2: 68:bb:6e:fd:e2:ad:3d:69:13:12:51:74:f5:b9:c9:66:24:0f: a7:5f:e0:6c:b7:bb:aa:b3:68:a9:c1:b8:4c:43:2e:e9:76:fb: e8:a1:b1:c8:4e:23:e3:2e:b9:52:9d:6d:de:61:22:9e:1f:8d: da:8a:9e:cb:86:a9:3e:2c:8e:4b:09:f6:4f:1c:4a:65:c0:49: 39:c7:52:2c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEgnBDfn4OJo4Yw0sBSnBjbUmFpUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MjA0MzU4WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BhZWZjYTFkZmZkNzg3NDdhM2QxMzUxNGYyYzMxNTE3ZGJm YzA0MmU1NDBjYzljM2RiYTAwMDc4YzQwY2JjNDBjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDhNkuXIVeq0ZqQGH+FDYMPOig/vi474gxRveR7MHuM3gKp VXaIABR6YbXoPWmfF1Pp90L0hBVQXGdU996kSlntpq6Po1za0u1Tc3rzBd80UQme vEUjXWkXWBrUQ9/t9FIOuJjcP2vNZjKyfjd9Kk/5Z9uD7ru/9DzOzEB1P/bUEfK6 gwEjv47TpUBjPvdpZFaDJerk+QDbKQoCYkhpeVEEYvt73Refc3DOhj0/L0+2l+TY i77pibt8r4wezaVz/fRnaf5buG8Nl+hchHpXbOV2n+jMCOeTWTXLHx5L5EVcXu6K k6OAxOoaaSAHPzK5Mr7I28pWfXsFqsZ3hkpEnjavAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUHlsF22yyvfQOqvcjO1mT11FS2HAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzEwNTI0YmNlLWYwNjctNGY4OS04YzIxLTA2MTcxNGY5NWEwMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIN4yQwDQYJKoZIhvcNAQELBQADggEBAH2C37PTCOd9NKBrhenHG1lTDYIY WxQXq942WbPm+uvcqPQK0i0W123bx0RvoUwDPKmqv5/OSV+UkTY8W/3lutiFCz5k Ygn4xP8++aMYagtktNCNoy9AoCGt6BFwX5VHNC2G1XmJn2DqgFurp/gvg+mJ9x1A zMeOwCrM5vmil35suxQlSogrYAWrbaR4pI33ZJX7iJ1DR/Z2HS/7lEJjZWryfrcH CyoER6ZpcuoMw+2UE5tjsmi7bv3irT1pExJRdPW5yWYkD6df4Gy3u6qzaKnBuExD Lul2++ihschOI+MuuVKdbd5hIp4fjdqKnsuGqT4sjksJ9k8cSmXASTnHUiw= -----END CERTIFICATE-----Generated at Mon Oct 20 03:07:04 2025 by rpki-client