$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/34152864-8932-4491-9ac6-bc0e0c4e5fc2.roa File: 34152864-8932-4491-9ac6-bc0e0c4e5fc2.roa (raw, json) Hash identifier: 31jxFlWylQlvEWadS2Pw5Dg2c/tA3hTAtuE7hEem0iM= Subject key identifier: 65:E8:B6:AC:B2:92:C1:79:A8:1D:6B:77:1A:6E:90:88:A1:D2:CB:F2 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7BBD06EF20A76789B315E3BDA4F0FAE05F34D292 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/34152864-8932-4491-9ac6-bc0e0c4e5fc2.roa Signing time: Sun 19 Oct 2025 14:30:14 +0000 ROA not before: Sun 19 Oct 2025 14:30:14 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.227.124.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:bd:06:ef:20:a7:67:89:b3:15:e3:bd:a4:f0:fa:e0:5f:34:d2:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 14:30:14 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=befbb24c3c62ac88578a3a1a53c1e6d68b899c1c5c307416cd8997ce6ade0eee, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:11:ef:1c:4e:6d:8c:b5:a9:e3:9d:c9:62:ba: ba:a4:0c:9e:9e:6b:4e:a0:33:76:98:d9:1a:82:2d: 4f:25:47:60:16:c5:f5:38:b3:5a:5e:90:1b:11:8c: 35:3d:bc:b4:4c:24:74:45:72:0c:0f:79:76:b2:79: e7:1d:cc:1d:d5:70:d8:44:6c:dd:c4:ab:0b:c1:76: 2b:a4:22:1e:9e:52:f8:6a:7a:ad:e7:92:58:5e:45: 9a:25:33:0e:59:48:57:2c:7e:cc:6e:93:19:67:7a: 55:f1:68:03:a3:b3:75:1d:79:9a:17:64:29:b6:f7: 58:9e:7a:73:10:51:5e:ff:44:48:f9:b7:04:72:11: f0:71:e0:02:cf:37:0f:9d:26:0f:a6:7f:d4:c8:6f: e5:10:4d:53:96:a8:f3:c9:ef:3b:31:0a:e1:78:14: 12:b9:4e:cd:76:1b:64:db:42:ca:57:f6:25:41:cb: 39:7c:df:2d:7c:1f:3b:aa:82:30:94:91:53:22:b8: 25:82:9e:87:7e:0a:9c:56:ca:6f:d7:e5:07:03:15: d2:7f:61:2a:7a:76:c2:58:d9:ca:c6:ae:73:7a:71: 0d:2d:2a:d8:4d:ed:1a:29:2d:06:2a:10:7c:88:f9: eb:ae:84:2e:15:b8:1d:d0:c4:7c:d1:2d:05:e9:c3: bd:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:E8:B6:AC:B2:92:C1:79:A8:1D:6B:77:1A:6E:90:88:A1:D2:CB:F2 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/34152864-8932-4491-9ac6-bc0e0c4e5fc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.227.124.0/23 Signature Algorithm: sha256WithRSAEncryption 6f:1f:ae:f0:ce:2e:04:12:fe:9c:02:93:e3:9b:dd:14:77:6a: 95:f3:09:d6:bb:fc:e1:d5:75:a1:0b:60:d4:b3:c5:6a:54:70: 87:0a:52:aa:18:53:f0:ff:08:55:e0:95:71:b2:e7:5b:f6:94: bd:25:6d:29:0f:cc:38:e2:8e:3c:d2:0f:8a:52:71:e7:4b:e7: 4d:de:2a:37:d1:1a:88:6e:4f:e8:11:43:3d:4d:d0:3f:71:30: 7b:aa:c7:77:f7:ad:f7:e3:ab:ec:cd:f1:1e:09:57:28:ca:70: dd:79:5b:80:aa:d0:ff:4f:d1:c8:06:56:d8:97:cd:09:ae:b9: 43:f3:5c:26:70:48:e6:65:eb:9b:4b:d9:39:18:e8:05:49:8b: c2:b7:fc:72:17:da:d2:d9:d0:7c:b3:12:78:14:85:88:80:62: 5b:2d:08:f7:cc:d6:7e:c5:60:f4:6b:76:ca:fa:be:fc:ea:a2: 17:6c:5f:05:d9:57:a8:bf:b7:7d:6e:d2:21:f9:f5:c8:16:af: c2:72:2b:ee:09:39:fc:59:5d:8a:18:f1:86:f8:f2:37:26:67: ae:36:ce:8e:21:c6:77:71:be:16:b4:ea:6c:7f:11:3e:37:0e: 72:e6:cb:65:48:26:52:97:2f:c3:56:ca:45:cd:1e:f0:ca:6a: 75:76:2e:ce -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUe70G7yCnZ4mzFeO9pPD64F800pIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTQzMDE0WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BiZWZiYjI0YzNjNjJhYzg4NTc4YTNhMWE1M2MxZTZkNjhi ODk5YzFjNWMzMDc0MTZjZDg5OTdjZTZhZGUwZWVlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHEe8cTm2MtanjncliurqkDJ6ea06gM3aY2RqCLU8lR2AW xfU4s1pekBsRjDU9vLRMJHRFcgwPeXayeecdzB3VcNhEbN3EqwvBdiukIh6eUvhq eq3nklheRZolMw5ZSFcsfsxukxlnelXxaAOjs3UdeZoXZCm291ieenMQUV7/REj5 twRyEfBx4ALPNw+dJg+mf9TIb+UQTVOWqPPJ7zsxCuF4FBK5Ts12G2TbQspX9iVB yzl83y18HzuqgjCUkVMiuCWCnod+CpxWym/X5QcDFdJ/YSp6dsJY2crGrnN6cQ0t KthN7RopLQYqEHyI+euuhC4VuB3QxHzRLQXpw70PAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZei2rLKSwXmoHWt3Gm6QiKHSy/IwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzM0MTUyODY0LTg5MzItNDQ5MS05YWM2LWJjMGUwYzRlNWZjMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEN43wwDQYJKoZIhvcNAQELBQADggEBAG8frvDOLgQS/pwCk+Ob3RR3apXz Cda7/OHVdaELYNSzxWpUcIcKUqoYU/D/CFXglXGy51v2lL0lbSkPzDjijjzSD4pS cedL503eKjfRGohuT+gRQz1N0D9xMHuqx3f3rffjq+zN8R4JVyjKcN15W4Cq0P9P 0cgGVtiXzQmuuUPzXCZwSOZl65tL2TkY6AVJi8K3/HIX2tLZ0HyzEngUhYiAYlst CPfM1n7FYPRrdsr6vvzqohdsXwXZV6i/t31u0iH59cgWr8JyK+4JOfxZXYoY8Yb4 8jcmZ642zo4hxndxvha06mx/ET43DnLmy2VIJlKXL8NWykXNHvDKanV2Ls4= -----END CERTIFICATE-----Generated at Mon Oct 20 11:13:58 2025 by rpki-client