$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3bca5e25-620c-47e9-9365-3864ae966afa.roa File: 3bca5e25-620c-47e9-9365-3864ae966afa.roa (raw, json) Hash identifier: 66BZpukHhPmY7dLtDRaxbdakiOeOv09q//NElu6JnaY= Subject key identifier: EC:01:52:67:4B:C3:0D:4F:27:49:E6:63:C7:D2:67:9A:50:7F:80:C8 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 501243F93E0D01639B7DDEA838766B8BA3F3C98F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3bca5e25-620c-47e9-9365-3864ae966afa.roa Signing time: Sun 19 Oct 2025 11:12:29 +0000 ROA not before: Sun 19 Oct 2025 11:12:29 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.227.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:12:43:f9:3e:0d:01:63:9b:7d:de:a8:38:76:6b:8b:a3:f3:c9:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 11:12:29 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=8da02941cd1a3210886f796f59f6438a6fda4242926ac155e7e8fb0c81b31a56, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9e:d6:ba:8a:ea:22:6c:2a:20:08:66:3d:41: 43:9d:5e:48:d3:27:90:8b:76:44:92:15:33:19:a2: 8a:f0:82:ab:70:b1:cc:09:1a:1b:49:45:6f:2f:26: 4f:c7:1a:05:1d:42:9a:81:ad:e0:68:f2:76:94:29: 79:3a:44:78:58:97:a3:84:db:c5:35:fc:dd:3e:06: b2:f8:06:8c:ec:1b:92:c2:dc:38:cd:aa:97:39:87: 08:26:9b:f8:36:5a:c0:58:c6:62:5f:e9:90:ab:64: 2d:02:cc:1d:fe:a0:ae:4e:db:54:e3:0e:fd:93:92: 42:8c:67:8d:81:2f:6e:89:91:c2:01:ea:ae:11:eb: 12:37:c2:bf:d8:02:c4:1b:96:98:3f:c7:3f:cd:c5: e3:7a:6e:bd:fd:3e:5f:9c:57:fa:53:d5:8e:4f:44: 61:c4:49:e4:c3:f8:3d:a4:75:d7:10:63:55:4a:bb: 46:01:38:ba:c5:e4:b9:4e:8b:b9:c2:ea:a8:e0:fa: 27:2c:ee:91:aa:13:ee:fb:ed:18:ed:aa:10:32:8e: 35:ed:3d:7a:c7:6a:fb:3e:96:9b:52:d7:79:65:dc: 21:3e:84:0f:fa:b4:b6:41:4e:df:61:03:0f:7e:b1: 1b:ae:3d:86:6a:c0:48:ba:82:30:26:d4:0d:92:50: f8:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:01:52:67:4B:C3:0D:4F:27:49:E6:63:C7:D2:67:9A:50:7F:80:C8 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3bca5e25-620c-47e9-9365-3864ae966afa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.227.241.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:34:f3:b0:28:b3:18:96:d9:63:54:ea:21:cb:6f:fb:e2:2f: 5a:1c:87:af:9b:f1:e6:45:d0:55:06:9e:88:b7:bf:87:99:dd: 28:db:95:37:5b:f2:7b:1e:33:ee:8d:03:14:3f:74:95:b3:be: dd:07:57:1c:5a:7b:8d:c9:33:10:6d:8d:16:63:8d:fa:ed:30: be:7d:87:1f:11:b3:07:75:17:ee:d6:bb:b5:36:1f:26:3e:97: 4f:d9:a9:35:c5:bc:96:20:ce:35:a9:04:73:d9:65:84:b9:d9: 10:cb:b9:4f:98:5d:ce:78:1f:4b:69:b7:4b:51:d2:46:21:d6: 3e:66:71:7d:70:48:ec:54:cd:6a:df:90:bf:c0:37:1b:1f:03: b7:b4:c3:42:f0:a3:36:d2:0f:ca:d6:4d:49:68:fd:a0:a0:56: 7f:63:77:f6:b6:7f:32:50:94:13:ae:0a:79:f1:1e:69:ef:61: 66:78:78:4a:bb:4b:d7:83:44:41:84:d6:e9:0b:1c:aa:52:4a: 51:2f:61:8a:22:d3:ca:13:9c:0f:f1:43:b1:c7:6e:4e:33:5e: 77:50:d0:29:3e:73:ea:ee:7e:31:02:b7:03:36:8f:bb:fe:5b: cb:bb:7a:dc:b6:c6:cd:f3:c7:ec:28:c5:50:7c:0b:82:c6:15: 6c:2f:13:94 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUBJD+T4NAWObfd6oOHZri6PzyY8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTExMjI5WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZGEwMjk0MWNkMWEzMjEwODg2Zjc5NmY1OWY2NDM4YTZm ZGE0MjQyOTI2YWMxNTVlN2U4ZmIwYzgxYjMxYTU2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDSnta6iuoibCogCGY9QUOdXkjTJ5CLdkSSFTMZoorwgqtw scwJGhtJRW8vJk/HGgUdQpqBreBo8naUKXk6RHhYl6OE28U1/N0+BrL4BozsG5LC 3DjNqpc5hwgmm/g2WsBYxmJf6ZCrZC0CzB3+oK5O21TjDv2TkkKMZ42BL26JkcIB 6q4R6xI3wr/YAsQblpg/xz/NxeN6br39Pl+cV/pT1Y5PRGHESeTD+D2kddcQY1VK u0YBOLrF5LlOi7nC6qjg+ics7pGqE+777RjtqhAyjjXtPXrHavs+lptS13ll3CE+ hA/6tLZBTt9hAw9+sRuuPYZqwEi6gjAm1A2SUPh3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU7AFSZ0vDDU8nSeZjx9JnmlB/gMgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzNiY2E1ZTI1LTYyMGMtNDdlOS05MzY1LTM4NjRhZTk2NmFmYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAN4/EwDQYJKoZIhvcNAQELBQADggEBAE4087AosxiW2WNU6iHLb/viL1oc h6+b8eZF0FUGnoi3v4eZ3SjblTdb8nseM+6NAxQ/dJWzvt0HVxxae43JMxBtjRZj jfrtML59hx8Rswd1F+7Wu7U2HyY+l0/ZqTXFvJYgzjWpBHPZZYS52RDLuU+YXc54 H0tpt0tR0kYh1j5mcX1wSOxUzWrfkL/ANxsfA7e0w0LwozbSD8rWTUlo/aCgVn9j d/a2fzJQlBOuCnnxHmnvYWZ4eEq7S9eDREGE1ukLHKpSSlEvYYoi08oTnA/xQ7HH bk4zXndQ0Ck+c+rufjECtwM2j7v+W8u7ety2xs3zx+woxVB8C4LGFWwvE5Q= -----END CERTIFICATE-----Generated at Mon Oct 20 03:00:29 2025 by rpki-client