$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9ff7b1c4-d007-4507-a116-0719e3fa50a2.roa File: 9ff7b1c4-d007-4507-a116-0719e3fa50a2.roa (raw, json) Hash identifier: pQBVmoYmUMa0H+5LoBGJrM2A6Yv45cvG+L4TCk4J7uQ= Subject key identifier: 83:38:CB:19:01:C3:E2:DE:F5:28:31:D0:D7:EE:77:8F:9A:1D:C2:F8 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 28D7DCFFED5C899451C52BA78442438C5B2A16 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9ff7b1c4-d007-4507-a116-0719e3fa50a2.roa Signing time: Sun 19 Oct 2025 08:12:36 +0000 ROA not before: Sun 19 Oct 2025 08:12:36 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.227.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:d7:dc:ff:ed:5c:89:94:51:c5:2b:a7:84:42:43:8c:5b:2a:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 08:12:36 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=ad277c3fd0e9eb84f66c2772105fc02129da9a5fa4a881dab7ca0ecf5f9298d5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1a:c7:41:dc:c0:b8:f8:ef:4a:34:35:df:64: a0:6e:dd:7a:45:eb:3d:0f:1b:37:2e:67:61:67:9c: 84:05:61:eb:64:6a:4d:a9:aa:06:28:0d:7e:2b:33: c3:c4:2d:b5:3f:c1:fe:a5:c5:3e:59:a8:90:f6:4a: dc:c4:f2:9d:bb:c3:92:f9:bc:43:3c:7e:8e:c2:85: 1c:ca:0b:0c:04:8f:b9:8a:68:c1:72:6c:0a:be:bd: 4f:f7:70:39:76:6c:dd:1a:b0:8e:33:b8:d3:98:74: f0:a4:22:b3:60:2c:20:e5:2b:76:a4:2c:22:22:b0: 19:2b:91:79:be:d0:62:74:2f:25:73:c5:4a:13:90: fc:06:ec:00:c0:9a:a8:b9:cf:d8:ca:b8:0b:e5:6f: 4d:09:6d:12:5e:0a:2a:bb:85:c8:2d:25:8c:ed:f1: 81:fc:e0:31:83:96:ac:da:29:e6:c9:74:0a:eb:38: 4b:6e:b8:88:28:0f:34:96:08:1d:0c:3e:ae:5a:5a: 2d:8a:4d:d5:46:74:26:f1:89:8b:01:03:5e:aa:c0: 48:c7:90:a2:01:90:f5:ed:36:40:88:11:20:76:7e: b4:a0:45:b8:f0:ce:b1:d8:c1:46:60:ed:ab:c9:b6: 6f:af:47:6a:77:fd:29:a5:c9:4a:5b:da:ba:ae:41: 04:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:38:CB:19:01:C3:E2:DE:F5:28:31:D0:D7:EE:77:8F:9A:1D:C2:F8 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9ff7b1c4-d007-4507-a116-0719e3fa50a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.227.136.0/21 Signature Algorithm: sha256WithRSAEncryption 9f:fc:d7:24:0b:78:ea:68:4d:0e:b9:38:25:3a:2e:59:f1:d6: 26:80:9e:b8:f3:82:16:a7:78:0f:c0:cd:b8:79:11:bc:b1:4d: 00:8f:d6:ae:8f:32:2f:94:ed:ad:46:73:fb:d1:3d:35:8d:25: ff:90:63:f4:b9:40:d1:8f:dd:e1:19:10:1e:ab:03:87:75:41: 85:8b:33:ec:0f:07:7d:00:78:19:30:14:11:a0:f1:78:b6:39: 87:63:f5:28:f6:a8:9b:35:f5:0a:8f:02:f3:5d:0e:de:3c:c8: 33:2d:74:13:08:57:a1:c6:5b:55:bd:e6:93:bd:fb:83:39:df: 65:b3:f2:cf:9e:2d:f2:b2:75:52:b0:87:d8:bc:67:df:35:f3: 7e:8d:bd:34:a7:e5:7f:40:c3:9e:4b:0d:f2:df:5d:dc:11:23: 8a:fb:e5:6a:74:09:86:fb:c4:66:da:ed:ba:e4:01:13:e7:87: 0b:34:69:a5:14:b0:0f:bb:76:76:56:a6:78:f7:26:e1:18:8b: 82:95:88:a1:08:1b:09:30:60:39:98:3f:99:51:12:cf:ce:ac: 5d:6c:0f:09:e9:b8:bd:d9:20:1f:1d:a2:9c:96:7d:88:2d:0a: 5a:94:9e:ce:92:c2:3b:c0:29:81:e8:c8:0e:eb:1c:80:03:7e: 47:d2:4c:d8 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITKNfc/+1ciZRRxSunhEJDjFsqFjANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzJkZjZmM2IzYTM0YjYzODZkMWEzMmQ4ZjRmYTMxNzhlZjMx ODg3ZDhiNDI4ZGZhYTQ3NjAeFw0yNTEwMTkwODEyMzZaFw0yNTExMjMyMzU5NTla MHoxSTBHBgNVBAUTQGFkMjc3YzNmZDBlOWViODRmNjZjMjc3MjEwNWZjMDIxMjlk YTlhNWZhNGE4ODFkYWI3Y2EwZWNmNWY5Mjk4ZDUxLTArBgNVBAMTJDVmMjc2MDQ1 LTViOWYtNDVlZi05MjNkLWYzZmNlMjRhNjIyNTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAKkax0HcwLj470o0Nd9koG7dekXrPQ8bNy5nYWechAVh62Rq TamqBigNfiszw8QttT/B/qXFPlmokPZK3MTynbvDkvm8Qzx+jsKFHMoLDASPuYpo wXJsCr69T/dwOXZs3RqwjjO405h08KQis2AsIOUrdqQsIiKwGSuReb7QYnQvJXPF ShOQ/AbsAMCaqLnP2Mq4C+VvTQltEl4KKruFyC0ljO3xgfzgMYOWrNop5sl0Cus4 S264iCgPNJYIHQw+rlpaLYpN1UZ0JvGJiwEDXqrASMeQogGQ9e02QIgRIHZ+tKBF uPDOsdjBRmDtq8m2b69Hanf9KaXJSlvauq5BBNMCAwEAAaOCArEwggKtMB0GA1Ud DgQWBBSDOMsZAcPi3vUoMdDX7nePmh3C+DAfBgNVHSMEGDAWgBQlrdNCsB63pY6t GZAmiLVLP4H0uDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg1MWNlZjE3LTEz MmEtNDMzNy1iN2QxLWJmMTZhNTJmZmQwMy9kZjZmM2IzYTM0YjYzODZkMWEzMmQ4 ZjRmYTMxNzhlZjMxODg3ZDhiNDI4ZGZhYTQ3Ni5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9mNzAzNjk2ZS1lNDdiLTRjMjAtYmQ5My02Zjgw OTA0ZTQyZDIvOWZmN2IxYzQtZDAwNy00NTA3LWExMTYtMDcxOWUzZmE1MGEyLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMt NmY4MDkwNGU0MmQyL3RqaHRHakxZOVBveGVPOHhpSDJMUW8zNnBIWS5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAw3jiDANBgkqhkiG9w0BAQsFAAOCAQEAn/zXJAt46mhNDrk4JTouWfHWJoCe uPOCFqd4D8DNuHkRvLFNAI/Wro8yL5TtrUZz+9E9NY0l/5Bj9LlA0Y/d4RkQHqsD h3VBhYsz7A8HfQB4GTAUEaDxeLY5h2P1KPaomzX1Co8C810O3jzIMy10EwhXocZb Vb3mk737gznfZbPyz54t8rJ1UrCH2Lxn3zXzfo29NKflf0DDnksN8t9d3BEjivvl anQJhvvEZtrtuuQBE+eHCzRppRSwD7t2dlamePcm4RiLgpWIoQgbCTBgOZg/mVES z86sXWwPCem4vdkgHx2inJZ9iC0KWpSezpLCO8ApgejIDuscgAN+R9JM2A== -----END CERTIFICATE-----Generated at Mon Oct 20 05:17:44 2025 by rpki-client