$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/44eefcd8-a2e3-468b-9609-a39918f025fb.roa File: 44eefcd8-a2e3-468b-9609-a39918f025fb.roa (raw, json) Hash identifier: bzWBLUQMCl1sWvvFUPCgu+R6UrztgTpJy6Em9iEIbk4= Subject key identifier: FC:0F:06:12:1C:0F:C2:E3:11:E8:F6:48:A8:61:77:00:E5:B3:57:8F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 270ECE28132010B5989504398595146BDBE47CB8 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/44eefcd8-a2e3-468b-9609-a39918f025fb.roa Signing time: Sun 19 Oct 2025 12:20:24 +0000 ROA not before: Sun 19 Oct 2025 12:20:24 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.224.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:0e:ce:28:13:20:10:b5:98:95:04:39:85:95:14:6b:db:e4:7c:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 12:20:24 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=94d28ee5f8aec9a44a72b64a63e48b4f855605f992b179ac90856af4e45ae26e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:02:b6:4f:09:2b:78:38:14:b3:11:77:e7:1d: 17:56:c4:52:1c:0f:da:4a:80:f9:3b:e2:de:ef:c9: 5c:5a:5d:f8:cd:60:9a:c7:93:a2:96:98:3f:d0:ec: 71:ea:54:17:36:14:3d:5b:24:b0:b0:be:22:72:0d: 1e:71:d7:10:aa:d6:32:ce:20:c6:8f:0f:10:a6:41: 04:2e:a8:f5:42:24:18:c9:55:06:56:58:4d:87:51: cd:87:2b:7f:4e:a9:e4:53:f6:0a:42:ab:85:a3:37: ad:11:ef:64:56:cc:47:96:95:c4:6a:12:08:e5:c9: 68:bb:24:02:2a:64:f4:02:5e:ac:cc:26:16:c5:e1: 17:fd:8e:36:ac:96:95:37:69:ec:19:2c:e0:81:cf: 0d:94:8c:85:93:13:04:95:5f:9e:80:1a:8f:63:8d: 94:6a:b5:c1:b9:5a:95:40:da:ac:56:35:b6:1f:b2: 1d:29:b2:a7:06:3b:0f:af:3c:37:88:df:31:f8:2c: 76:0f:9d:13:34:07:e9:f7:0e:99:e2:cc:20:4d:de: db:b6:d7:ff:0e:26:50:ed:16:62:8f:66:c2:32:33: 24:ed:a6:79:85:3a:50:9e:9f:9f:4b:e8:02:83:31: 30:23:e0:00:58:48:7a:4a:0b:8b:2b:2d:f3:05:f7: 82:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:0F:06:12:1C:0F:C2:E3:11:E8:F6:48:A8:61:77:00:E5:B3:57:8F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/44eefcd8-a2e3-468b-9609-a39918f025fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.224.7.0/24 Signature Algorithm: sha256WithRSAEncryption 04:c7:30:5a:c7:61:36:7c:ee:a1:d1:70:66:6d:58:d0:41:c5: e4:71:f7:74:cf:dd:b1:7a:7f:99:dc:f0:59:56:67:b2:f3:ba: e5:a2:72:2f:7b:e6:39:55:f3:d4:66:36:99:f9:81:bb:d2:a8: f5:01:ee:a4:71:93:ff:36:d9:fd:46:d3:f4:55:a7:e0:f9:57: 86:b8:11:71:4f:54:47:e1:6b:a0:0a:22:32:65:a7:f2:ab:b1: 63:06:f9:79:a2:e8:7c:ad:9b:3e:8a:72:01:27:7f:af:8d:5f: 9b:f6:62:c0:2b:b6:d7:24:91:0a:65:bc:ed:61:78:62:6e:16: 8c:ae:7b:c0:05:5c:47:72:2f:2f:7f:f5:66:f9:ec:0c:91:6b: a6:35:a8:1c:f7:03:f4:34:6e:21:1b:54:c9:2d:8a:cf:84:2d: 63:88:ef:e1:71:3b:d7:b3:37:6b:d5:0a:99:b1:95:92:d7:a3: 78:8a:ce:91:26:e3:0d:30:43:6c:08:f5:0e:74:bf:ff:32:5b: 9a:05:d2:1e:bb:8c:82:6c:62:1e:8d:e5:d7:58:d1:9e:00:b1: ef:fc:b7:e1:54:ac:28:0f:e2:29:f4:65:c9:d0:19:55:c3:28: e8:88:33:4c:fc:c5:f1:79:27:65:6c:8e:0b:73:19:e5:a0:44: d4:ff:82:e1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJw7OKBMgELWYlQQ5hZUUa9vkfLgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTIyMDI0WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A5NGQyOGVlNWY4YWVjOWE0NGE3MmI2NGE2M2U0OGI0Zjg1 NTYwNWY5OTJiMTc5YWM5MDg1NmFmNGU0NWFlMjZlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCLArZPCSt4OBSzEXfnHRdWxFIcD9pKgPk74t7vyVxaXfjN YJrHk6KWmD/Q7HHqVBc2FD1bJLCwviJyDR5x1xCq1jLOIMaPDxCmQQQuqPVCJBjJ VQZWWE2HUc2HK39OqeRT9gpCq4WjN60R72RWzEeWlcRqEgjlyWi7JAIqZPQCXqzM JhbF4Rf9jjaslpU3aewZLOCBzw2UjIWTEwSVX56AGo9jjZRqtcG5WpVA2qxWNbYf sh0psqcGOw+vPDeI3zH4LHYPnRM0B+n3DpnizCBN3tu21/8OJlDtFmKPZsIyMyTt pnmFOlCen59L6AKDMTAj4ABYSHpKC4srLfMF94JvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU/A8GEhwPwuMR6PZIqGF3AOWzV48wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQ0ZWVmY2Q4LWEyZTMtNDY4Yi05NjA5LWEzOTkxOGYwMjVmYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAN4AcwDQYJKoZIhvcNAQELBQADggEBAATHMFrHYTZ87qHRcGZtWNBBxeRx 93TP3bF6f5nc8FlWZ7LzuuWici975jlV89RmNpn5gbvSqPUB7qRxk/822f1G0/RV p+D5V4a4EXFPVEfha6AKIjJlp/KrsWMG+Xmi6Hytmz6KcgEnf6+NX5v2YsArttck kQplvO1heGJuFoyue8AFXEdyLy9/9Wb57AyRa6Y1qBz3A/Q0biEbVMktis+ELWOI 7+FxO9ezN2vVCpmxlZLXo3iKzpEm4w0wQ2wI9Q50v/8yW5oF0h67jIJsYh6N5ddY 0Z4Ase/8t+FUrCgP4in0ZcnQGVXDKOiIM0z8xfF5J2VsjgtzGeWgRNT/guE= -----END CERTIFICATE-----Generated at Mon Oct 20 18:11:40 2025 by rpki-client