$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/27819b1c-adf8-45d7-9c31-e6af7b843adb.roa File: 27819b1c-adf8-45d7-9c31-e6af7b843adb.roa (raw, json) Hash identifier: CcYZpD4VUcU3e79PVbh9TTrgDbo9kgPmRR2ufdece2Y= Subject key identifier: 2F:01:64:94:23:A8:A6:30:82:2C:CA:B8:07:83:81:29:D9:29:29:C6 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 132D4F7D073E687D3163F55DE172CB81929AA463 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/27819b1c-adf8-45d7-9c31-e6af7b843adb.roa Signing time: Sun 19 Oct 2025 11:43:45 +0000 ROA not before: Sun 19 Oct 2025 11:43:45 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.225.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:2d:4f:7d:07:3e:68:7d:31:63:f5:5d:e1:72:cb:81:92:9a:a4:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 11:43:45 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=dfb1b5e1acd3e7b435de4155187350841fc60fa8947f780930cf6f7a089aab08, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b8:84:3b:b6:77:4e:04:0b:e1:42:27:09:1a: 34:e4:80:65:af:19:28:b2:50:b2:8d:41:09:df:67: b1:fb:d0:05:24:93:44:c3:49:a5:91:a6:f5:ef:8e: 46:8a:67:c5:f4:34:3a:d5:5c:31:be:03:96:bd:6f: 28:15:5f:78:d5:5f:c5:98:f7:b3:64:9b:a3:25:20: e9:d2:9e:72:4f:54:79:df:07:e5:53:92:ff:10:fe: be:69:e1:ea:bc:53:fd:bc:1e:1d:ee:6a:e8:ce:ba: 88:8d:62:43:c2:6a:1f:d7:a6:70:cc:10:d0:a0:22: bb:0d:43:0c:e8:78:f8:11:e6:a4:be:c8:4b:a8:8d: d2:cb:98:f2:21:5f:3e:7f:85:53:15:80:92:1f:cc: 67:0e:1e:8d:7a:36:3d:80:13:e3:84:4a:9d:5c:7a: cf:20:87:84:0a:a8:08:ef:8c:95:f0:b0:dd:4e:d5: a1:5e:90:a2:2e:53:8f:ac:f1:c2:49:8c:1b:bf:4d: 35:36:da:b3:9d:d0:5a:f0:36:f6:83:71:8d:92:09: 7c:4c:39:e0:87:ef:e7:4c:9f:06:fa:e1:32:ff:f5: 54:3f:29:01:2c:0e:15:79:b9:f8:44:d4:6c:fd:8e: 82:6b:70:e2:37:1a:27:7d:ae:55:c4:fb:43:e6:7a: 86:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:01:64:94:23:A8:A6:30:82:2C:CA:B8:07:83:81:29:D9:29:29:C6 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/27819b1c-adf8-45d7-9c31-e6af7b843adb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.225.197.0/24 Signature Algorithm: sha256WithRSAEncryption 38:c2:fb:70:47:4b:c0:a8:7d:87:2c:b8:bc:79:b1:a1:44:28: 1b:f6:e3:61:ce:7e:40:69:01:1f:5c:82:0e:99:04:a7:6b:80: 6a:2c:5f:7b:7e:7b:3e:43:7b:e4:86:40:48:a7:2a:84:fd:88: 68:29:34:56:d9:0e:b3:6d:27:1e:db:f3:76:cf:09:23:62:be: 3a:07:47:af:57:b0:15:f2:5a:c9:7f:2a:85:f6:71:a8:e2:a1: ed:a6:a2:3f:f1:d3:f2:3c:7f:6c:89:bf:63:e8:bf:3d:47:a9: 00:26:83:18:d5:c7:d6:77:a4:52:df:6c:d7:3c:27:c6:ad:8d: f3:fa:3c:37:05:03:5a:c6:47:f4:bf:df:5f:bc:fc:98:12:c7: 9f:07:26:ee:0e:d4:ad:5c:6a:6c:8a:0e:a2:44:0f:8b:84:6f: 35:06:c6:d9:e2:73:62:7d:65:28:5e:37:67:8e:a7:f7:53:93: 55:ca:af:77:f3:b0:01:7c:16:38:3c:3e:18:26:c9:f9:7d:e2: d0:20:db:6a:32:5d:d8:c5:70:cd:8f:52:cc:33:34:ef:3c:56: 93:7d:63:ba:ec:54:92:36:7d:cb:ff:d5:e3:12:89:46:bb:58: 15:12:70:32:97:03:aa:cd:95:ec:2b:d6:da:29:97:d4:e7:f8: bf:9e:76:4e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEy1PfQc+aH0xY/Vd4XLLgZKapGMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTE0MzQ1WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BkZmIxYjVlMWFjZDNlN2I0MzVkZTQxNTUxODczNTA4NDFm YzYwZmE4OTQ3Zjc4MDkzMGNmNmY3YTA4OWFhYjA4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZuIQ7tndOBAvhQicJGjTkgGWvGSiyULKNQQnfZ7H70AUk k0TDSaWRpvXvjkaKZ8X0NDrVXDG+A5a9bygVX3jVX8WY97Nkm6MlIOnSnnJPVHnf B+VTkv8Q/r5p4eq8U/28Hh3uaujOuoiNYkPCah/XpnDMENCgIrsNQwzoePgR5qS+ yEuojdLLmPIhXz5/hVMVgJIfzGcOHo16Nj2AE+OESp1ces8gh4QKqAjvjJXwsN1O 1aFekKIuU4+s8cJJjBu/TTU22rOd0FrwNvaDcY2SCXxMOeCH7+dMnwb64TL/9VQ/ KQEsDhV5ufhE1Gz9joJrcOI3Gid9rlXE+0PmeobfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQULwFklCOopjCCLMq4B4OBKdkpKcYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzI3ODE5YjFjLWFkZjgtNDVkNy05YzMxLWU2YWY3Yjg0M2FkYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAN4cUwDQYJKoZIhvcNAQELBQADggEBADjC+3BHS8CofYcsuLx5saFEKBv2 42HOfkBpAR9cgg6ZBKdrgGosX3t+ez5De+SGQEinKoT9iGgpNFbZDrNtJx7b83bP CSNivjoHR69XsBXyWsl/KoX2cajioe2moj/x0/I8f2yJv2Povz1HqQAmgxjVx9Z3 pFLfbNc8J8atjfP6PDcFA1rGR/S/31+8/JgSx58HJu4O1K1camyKDqJED4uEbzUG xtnic2J9ZSheN2eOp/dTk1XKr3fzsAF8Fjg8Phgmyfl94tAg22oyXdjFcM2PUswz NO88VpN9Y7rsVJI2fcv/1eMSiUa7WBUScDKXA6rNlewr1topl9Tn+L+edk4= -----END CERTIFICATE-----Generated at Mon Oct 20 12:20:56 2025 by rpki-client