$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/44a853d4-303d-4dd5-b59d-7fd59ac0273d.roa File: 44a853d4-303d-4dd5-b59d-7fd59ac0273d.roa (raw, json) Hash identifier: +7WcQVqoc+oQYitFZzmkRkiaxC4OskSi3x0ll8AsZp8= Subject key identifier: E5:BA:37:F2:BF:AA:19:FB:2B:7A:A6:CB:12:14:26:84:E2:57:BE:BC Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3E8D7A7467EBF7FBBBD2C613140A0F230A484839 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/44a853d4-303d-4dd5-b59d-7fd59ac0273d.roa Signing time: Sun 19 Oct 2025 15:31:33 +0000 ROA not before: Sun 19 Oct 2025 15:31:33 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.227.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:8d:7a:74:67:eb:f7:fb:bb:d2:c6:13:14:0a:0f:23:0a:48:48:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 15:31:33 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=10e100f020436053bc7cd974d452d93baa81be7ce8ff92f92820dadda2e9b575, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:25:66:21:8b:67:59:fd:47:17:3a:62:33:2c: ca:28:99:18:57:3e:9e:b2:d3:8f:b7:77:e5:6a:b5: 6a:b5:a6:40:12:1e:ca:5f:89:28:b8:b0:ea:2a:c9: a2:a9:30:56:2a:06:93:79:b5:69:c8:0f:b5:41:8a: 41:5c:b8:8d:d6:de:51:42:84:03:a1:51:ff:7f:3c: 9f:3b:de:ab:0e:03:c3:ed:6d:80:43:02:ca:a2:2f: 89:76:11:e8:c6:39:f9:1f:87:95:e8:5f:e2:a8:49: 97:93:6f:8c:6c:62:6f:41:26:5e:c3:35:49:4f:8c: 6b:b4:8a:47:b3:27:03:e4:68:72:41:5a:91:15:8c: 93:a4:7c:94:50:ac:28:1d:ca:6a:10:14:fa:a7:da: d6:41:da:7b:e9:cd:3e:f4:1e:37:2d:9e:a5:1e:93: b3:81:31:a0:de:60:ad:41:8a:5d:78:40:15:bb:3a: 37:9a:81:0d:bb:bd:ab:ce:93:20:f9:54:2b:57:f8: 97:59:81:ad:91:7c:dd:1e:c2:b5:91:fa:7b:48:8f: 7a:fa:c6:25:1a:fd:db:3e:22:b4:d8:c0:14:e5:bd: fd:3a:86:fb:d9:b6:0f:42:68:43:ac:df:f8:ea:36: b3:a4:10:a7:ac:a7:e8:35:f1:22:af:84:43:bb:34: ba:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:BA:37:F2:BF:AA:19:FB:2B:7A:A6:CB:12:14:26:84:E2:57:BE:BC X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/44a853d4-303d-4dd5-b59d-7fd59ac0273d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.227.148.0/22 Signature Algorithm: sha256WithRSAEncryption 8a:4f:73:64:a5:f0:bb:c7:a4:52:06:05:06:4e:0b:56:64:06: 21:5d:b6:f9:0c:24:0a:11:85:a0:eb:e2:f8:43:08:cb:c3:11: 85:7c:d6:2b:1f:fe:d0:e6:41:86:17:ca:44:3e:e9:c6:20:1d: fa:50:d8:e3:4c:24:67:62:2f:55:79:98:53:5c:d4:3a:dd:ed: ba:5c:48:30:22:20:9d:fc:a4:c2:62:67:65:ef:87:3c:a2:c4: e6:fd:42:ec:6f:b0:e0:40:9d:bd:50:6b:76:e6:9f:df:15:f0: e2:e4:16:f2:e1:87:b5:fd:6a:03:a4:4a:22:92:a7:83:d5:84: 56:64:6a:e4:c2:4d:d0:dd:0d:5f:8b:0a:91:8d:a8:a4:cc:99: 96:15:b9:dd:bf:bc:b4:02:91:59:72:ad:f8:94:fc:2a:7c:73: f8:bd:21:ce:27:8f:de:0a:4a:6f:1f:71:1c:a6:d0:e7:66:79: 66:02:50:34:83:e8:65:30:ad:49:96:c0:fb:cc:fa:8c:c9:d1: 26:10:50:49:fe:db:2e:6d:2d:a6:fa:6a:8f:72:62:64:53:c4: f6:3d:47:55:a5:92:9b:ed:26:88:1f:0e:da:95:e2:e3:94:8d: 66:e9:fd:b5:a2:90:f7:27:45:37:50:16:19:e1:31:56:71:40: b7:a3:29:16 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPo16dGfr9/u70sYTFAoPIwpISDkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTUzMTMzWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AxMGUxMDBmMDIwNDM2MDUzYmM3Y2Q5NzRkNDUyZDkzYmFh ODFiZTdjZThmZjkyZjkyODIwZGFkZGEyZTliNTc1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQClJWYhi2dZ/UcXOmIzLMoomRhXPp6y04+3d+VqtWq1pkAS HspfiSi4sOoqyaKpMFYqBpN5tWnID7VBikFcuI3W3lFChAOhUf9/PJ873qsOA8Pt bYBDAsqiL4l2EejGOfkfh5XoX+KoSZeTb4xsYm9BJl7DNUlPjGu0ikezJwPkaHJB WpEVjJOkfJRQrCgdymoQFPqn2tZB2nvpzT70HjctnqUek7OBMaDeYK1Bil14QBW7 OjeagQ27vavOkyD5VCtX+JdZga2RfN0ewrWR+ntIj3r6xiUa/ds+IrTYwBTlvf06 hvvZtg9CaEOs3/jqNrOkEKesp+g18SKvhEO7NLpvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5bo38r+qGfsreqbLEhQmhOJXvrwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQ0YTg1M2Q0LTMwM2QtNGRkNS1iNTlkLTdmZDU5YWMwMjczZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIN45QwDQYJKoZIhvcNAQELBQADggEBAIpPc2Sl8LvHpFIGBQZOC1ZkBiFd tvkMJAoRhaDr4vhDCMvDEYV81isf/tDmQYYXykQ+6cYgHfpQ2ONMJGdiL1V5mFNc 1Drd7bpcSDAiIJ38pMJiZ2XvhzyixOb9QuxvsOBAnb1Qa3bmn98V8OLkFvLhh7X9 agOkSiKSp4PVhFZkauTCTdDdDV+LCpGNqKTMmZYVud2/vLQCkVlyrfiU/Cp8c/i9 Ic4nj94KSm8fcRym0OdmeWYCUDSD6GUwrUmWwPvM+ozJ0SYQUEn+2y5tLab6ao9y YmRTxPY9R1WlkpvtJogfDtqV4uOUjWbp/bWikPcnRTdQFhnhMVZxQLejKRY= -----END CERTIFICATE-----Generated at Mon Oct 20 11:10:59 2025 by rpki-client