$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a7556d4b-6a27-405c-a2ca-2d0616440033.roa File: a7556d4b-6a27-405c-a2ca-2d0616440033.roa (raw, json) Hash identifier: AfsYwPkUM0/M4SciLShi3ND1Cxt097CHgFG+41nz1vo= Subject key identifier: 06:C8:D3:E5:43:2A:16:91:F9:4B:7C:D0:B3:1C:A2:4A:64:0A:29:4B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 227F01BAC5465DB96101F82597EDB7A41DD38FAB Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a7556d4b-6a27-405c-a2ca-2d0616440033.roa Signing time: Sun 19 Oct 2025 13:12:44 +0000 ROA not before: Sun 19 Oct 2025 13:12:44 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.224.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:7f:01:ba:c5:46:5d:b9:61:01:f8:25:97:ed:b7:a4:1d:d3:8f:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 13:12:44 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=df7d854fd6a17eb6bea7131140e3fb4ca7e1e9476a973929d8353dfe3a3dda55, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b9:c5:23:06:a7:c7:de:85:6b:af:71:f7:8c: 41:3f:6f:2d:8d:2d:8d:5f:0a:ed:54:3b:8c:9e:12: a4:4f:2e:f7:9b:30:78:2b:7d:58:ac:e2:f4:02:b7: 8a:66:29:f8:fa:78:30:3f:4b:d4:6b:82:cd:82:90: 7f:b0:05:d9:7a:89:c0:3e:27:a9:ca:8b:de:ba:1e: 03:96:f3:55:b8:07:d6:a2:6e:45:23:de:5a:ac:9c: b2:89:23:aa:de:42:f7:8c:a9:48:26:8c:df:9b:16: 4f:e8:70:b0:2f:10:39:1d:a7:8b:fb:6e:60:cc:22: 04:66:13:49:d9:03:6a:2e:29:3d:97:c2:0b:ad:0c: d9:25:6f:30:1e:0d:01:6c:40:f0:79:13:64:e2:88: 60:7f:4d:1b:62:ba:3c:5e:e2:02:b9:73:04:7c:6e: e4:a9:f7:98:99:f8:e8:4a:77:04:10:95:4c:73:d5: da:4e:01:dd:08:7a:af:84:aa:06:8d:63:46:ef:10: b5:6f:c3:7d:d4:7f:74:b3:b4:21:da:5e:dc:75:01: 95:97:61:f1:08:bd:35:c5:06:6c:56:c1:24:2d:47: 4f:1f:64:8c:06:53:d2:7f:c5:11:30:45:c0:92:3c: 41:2a:01:8a:ee:e9:25:15:ac:54:b6:02:47:f9:91: ea:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:C8:D3:E5:43:2A:16:91:F9:4B:7C:D0:B3:1C:A2:4A:64:0A:29:4B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a7556d4b-6a27-405c-a2ca-2d0616440033.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.224.36.0/22 Signature Algorithm: sha256WithRSAEncryption 1d:9f:78:c0:78:d9:6a:86:21:a1:44:81:2f:f2:b5:b0:07:b2: 68:d4:cc:41:c4:78:64:b1:79:62:ae:a7:cd:45:e4:d7:09:64: b5:4d:b4:e2:ad:93:50:bd:65:08:36:ff:95:a9:38:fe:83:3b: e5:d2:44:55:b9:0c:29:b3:8b:76:7a:f9:10:62:b3:2b:af:2b: cb:6e:6b:19:d5:aa:14:5e:20:a9:03:13:3c:be:66:7f:2b:45: be:71:4d:9f:93:39:ca:00:41:ac:56:df:4d:69:f4:5d:45:46: 9d:b0:6b:f1:85:f5:38:07:79:86:e0:90:7a:ca:13:2d:e6:5f: 61:c0:d7:2a:59:07:af:d5:5e:58:07:e7:ad:1f:1a:ae:ed:04: 07:b2:ad:4a:9b:22:63:28:d2:64:39:e3:d5:a4:d5:a4:f8:9b: 84:6c:a3:2a:a8:31:4c:23:2e:f8:9c:c5:e6:2b:7f:79:4b:3b: db:a3:87:b9:23:a5:68:75:4b:e3:cc:eb:97:b6:bc:37:4d:47: 6e:68:db:c9:33:32:a2:fa:7d:36:72:31:7c:87:5a:e7:48:20: a3:3b:c5:09:0e:95:f0:d2:9d:7e:20:7b:af:64:bf:88:0c:af: ed:5a:52:30:17:f3:43:7c:fe:85:d7:00:cd:6d:bb:da:4d:59: 2d:c3:5a:f8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIn8BusVGXblhAfgll+23pB3Tj6swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTMxMjQ0WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BkZjdkODU0ZmQ2YTE3ZWI2YmVhNzEzMTE0MGUzZmI0Y2E3 ZTFlOTQ3NmE5NzM5MjlkODM1M2RmZTNhM2RkYTU1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHucUjBqfH3oVrr3H3jEE/by2NLY1fCu1UO4yeEqRPLveb MHgrfVis4vQCt4pmKfj6eDA/S9Rrgs2CkH+wBdl6icA+J6nKi966HgOW81W4B9ai bkUj3lqsnLKJI6reQveMqUgmjN+bFk/ocLAvEDkdp4v7bmDMIgRmE0nZA2ouKT2X wgutDNklbzAeDQFsQPB5E2TiiGB/TRtiujxe4gK5cwR8buSp95iZ+OhKdwQQlUxz 1dpOAd0Ieq+EqgaNY0bvELVvw33Uf3SztCHaXtx1AZWXYfEIvTXFBmxWwSQtR08f ZIwGU9J/xREwRcCSPEEqAYru6SUVrFS2Akf5keqTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUBsjT5UMqFpH5S3zQsxyiSmQKKUswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2E3NTU2ZDRiLTZhMjctNDA1Yy1hMmNhLTJkMDYxNjQ0MDAzMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIN4CQwDQYJKoZIhvcNAQELBQADggEBAB2feMB42WqGIaFEgS/ytbAHsmjU zEHEeGSxeWKup81F5NcJZLVNtOKtk1C9ZQg2/5WpOP6DO+XSRFW5DCmzi3Z6+RBi syuvK8tuaxnVqhReIKkDEzy+Zn8rRb5xTZ+TOcoAQaxW301p9F1FRp2wa/GF9TgH eYbgkHrKEy3mX2HA1ypZB6/VXlgH560fGq7tBAeyrUqbImMo0mQ549Wk1aT4m4Rs oyqoMUwjLvicxeYrf3lLO9ujh7kjpWh1S+PM65e2vDdNR25o28kzMqL6fTZyMXyH WudIIKM7xQkOlfDSnX4ge69kv4gMr+1aUjAX80N8/oXXAM1tu9pNWS3DWvg= -----END CERTIFICATE-----Generated at Mon Oct 20 05:17:29 2025 by rpki-client