$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/32dcdd2e-5aa8-43bb-8275-a8c8dd550249.roa File: 32dcdd2e-5aa8-43bb-8275-a8c8dd550249.roa (raw, json) Hash identifier: TAsmd18KjVPTjQ6P1YjCgEEwtZ+uAcMoOOmRrVBlFJM= Subject key identifier: AB:E8:49:FB:88:73:A5:49:FC:18:B3:00:AF:69:8E:0F:A2:07:F3:64 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 44397899FF5BD92D59717680E76D015A11CF3E3D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/32dcdd2e-5aa8-43bb-8275-a8c8dd550249.roa Signing time: Sun 19 Oct 2025 10:02:31 +0000 ROA not before: Sun 19 Oct 2025 10:02:31 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.227.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:39:78:99:ff:5b:d9:2d:59:71:76:80:e7:6d:01:5a:11:cf:3e:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 10:02:31 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=24dea454a66609bd497dd89db0a1a9bc8929ba7dd7027f3e118d0cc71f120c82, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c7:47:97:29:c2:9c:a9:48:85:f3:b7:44:05: cd:7c:ac:03:7d:72:14:4c:c3:ec:ba:57:ab:45:33: 0f:85:cc:b8:cd:3c:ac:4e:7a:05:60:f1:c1:a3:e6: fa:37:74:dc:d0:7c:16:cc:ed:70:5d:00:14:e4:a5: 69:2e:f2:b9:ae:ac:ad:9d:6b:bb:52:43:1d:21:ad: d6:84:db:f1:ad:91:60:86:95:63:03:65:1a:7e:e9: b3:6f:c2:bc:14:06:61:03:1a:ae:6f:34:50:f9:9f: 19:c4:ac:69:49:ed:8a:23:01:f0:64:65:84:0b:96: 3a:0c:bc:e2:23:62:37:5e:ad:48:57:ee:b5:92:03: b7:d1:e8:18:4f:0c:ab:27:a6:57:00:00:9d:38:e9: d2:4e:d0:74:e3:32:8c:b9:b5:cc:03:06:73:4a:02: ec:7f:0b:6e:6a:46:4b:8d:44:49:c9:ba:ee:ff:64: 44:c7:91:ed:ce:dc:8a:39:78:17:06:63:17:00:e9: 15:97:2e:00:37:fa:21:c4:50:97:15:b5:a6:68:70: c5:6b:24:47:26:2b:b4:c4:5d:27:9e:f7:cd:c7:a4: ea:1e:ee:8a:db:4a:35:fe:1d:45:66:14:c5:04:a9: c4:28:96:10:65:ce:8c:c9:20:8d:71:00:59:df:38: 7a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:E8:49:FB:88:73:A5:49:FC:18:B3:00:AF:69:8E:0F:A2:07:F3:64 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/32dcdd2e-5aa8-43bb-8275-a8c8dd550249.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.227.236.0/24 Signature Algorithm: sha256WithRSAEncryption 46:eb:1c:2f:6c:d7:b3:7d:08:09:08:68:0b:96:8b:12:6d:24: e3:4d:85:44:d0:2f:84:7c:1e:a5:3c:df:b5:0e:d8:a5:f6:97: 05:e3:56:a7:7d:6d:b0:71:ef:f0:e9:2b:34:90:e4:16:50:66: 94:39:21:b4:5b:db:b8:31:a9:c4:b7:0e:1f:92:21:8b:73:da: 7e:32:51:60:7f:3e:63:24:98:8f:60:9d:ef:4c:eb:e8:0e:ad: 62:c5:35:07:63:d1:f1:0e:63:74:ee:8e:d4:74:5d:19:29:7d: bc:ac:e0:1a:00:4a:73:7b:86:f1:be:7e:7c:39:84:a8:7e:95: e3:1c:2b:a2:d5:08:91:b7:76:40:25:a8:4d:7b:ad:5c:66:c5: f5:39:f0:a1:f6:82:47:77:00:22:a0:29:5c:47:3a:c0:55:97: 96:37:fa:7b:f5:8a:21:9f:82:e1:f9:aa:b0:c2:10:59:22:69: 3a:32:68:64:63:18:16:25:fc:53:77:39:9a:f7:5c:ae:49:75: 65:52:95:46:7e:ff:85:9d:cb:e8:ae:89:4f:27:81:d8:fc:e3: 7a:0a:11:c2:df:31:5a:f7:fc:66:65:0e:b7:85:c6:1f:16:80: 5a:92:5f:89:48:d6:53:f5:b6:ac:0f:37:df:fd:b3:02:31:d9: f1:78:36:28 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURDl4mf9b2S1ZcXaA520BWhHPPj0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTAwMjMxWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AyNGRlYTQ1NGE2NjYwOWJkNDk3ZGQ4OWRiMGExYTliYzg5 MjliYTdkZDcwMjdmM2UxMThkMGNjNzFmMTIwYzgyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCex0eXKcKcqUiF87dEBc18rAN9chRMw+y6V6tFMw+FzLjN PKxOegVg8cGj5vo3dNzQfBbM7XBdABTkpWku8rmurK2da7tSQx0hrdaE2/GtkWCG lWMDZRp+6bNvwrwUBmEDGq5vNFD5nxnErGlJ7YojAfBkZYQLljoMvOIjYjderUhX 7rWSA7fR6BhPDKsnplcAAJ046dJO0HTjMoy5tcwDBnNKAux/C25qRkuNREnJuu7/ ZETHke3O3Io5eBcGYxcA6RWXLgA3+iHEUJcVtaZocMVrJEcmK7TEXSee983HpOoe 7orbSjX+HUVmFMUEqcQolhBlzozJII1xAFnfOHrVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUq+hJ+4hzpUn8GLMAr2mOD6IH82QwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzMyZGNkZDJlLTVhYTgtNDNiYi04Mjc1LWE4YzhkZDU1MDI0OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAN4+wwDQYJKoZIhvcNAQELBQADggEBAEbrHC9s17N9CAkIaAuWixJtJONN hUTQL4R8HqU837UO2KX2lwXjVqd9bbBx7/DpKzSQ5BZQZpQ5IbRb27gxqcS3Dh+S IYtz2n4yUWB/PmMkmI9gne9M6+gOrWLFNQdj0fEOY3TujtR0XRkpfbys4BoASnN7 hvG+fnw5hKh+leMcK6LVCJG3dkAlqE17rVxmxfU58KH2gkd3ACKgKVxHOsBVl5Y3 +nv1iiGfguH5qrDCEFkiaToyaGRjGBYl/FN3OZr3XK5JdWVSlUZ+/4Wdy+iuiU8n gdj843oKEcLfMVr3/GZlDreFxh8WgFqSX4lI1lP1tqwPN9/9swIx2fF4Nig= -----END CERTIFICATE-----Generated at Mon Oct 20 03:07:43 2025 by rpki-client