$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/da9bd70f-433a-41ce-b63c-3b817aa0cb78.roa File: da9bd70f-433a-41ce-b63c-3b817aa0cb78.roa (raw, json) Hash identifier: 1wLslSZKrZBt4rYzzy7/7FPPPI/otRmMYNXBmKoWgG4= Subject key identifier: FC:37:1E:3C:3B:C5:27:69:94:DE:94:89:AB:85:D4:5F:56:0A:54:9A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 67C6DE08112839EA3A13173EA0EE6583BCBDF4FE Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/da9bd70f-433a-41ce-b63c-3b817aa0cb78.roa Signing time: Sun 19 Oct 2025 19:41:24 +0000 ROA not before: Sun 19 Oct 2025 19:41:24 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.227.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:c6:de:08:11:28:39:ea:3a:13:17:3e:a0:ee:65:83:bc:bd:f4:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 19:41:24 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=1386f8c45af68cab635409e5fab3e5d321333e9f99f6bf71e0c90fafc8c1db20, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:78:8f:a0:39:80:0f:18:0b:1b:f9:a8:65:36: 43:b8:ce:21:9e:4d:b6:1b:f7:d5:15:67:cf:fb:27: d7:81:75:77:c7:31:26:7a:8b:16:48:ab:66:9f:64: d2:51:91:de:42:a9:42:75:b8:50:6f:60:f9:4b:a1: fc:d5:fd:1a:e8:df:2c:33:80:11:4c:19:6b:5d:b0: d9:c7:8a:be:1c:66:4a:52:30:6e:13:cb:e9:4b:7c: 0f:0b:23:cb:67:b8:b1:e6:fe:35:d1:ac:04:30:48: 25:3e:b6:8e:21:0f:cc:bd:07:17:60:82:e7:5d:f6: 66:ff:02:f0:2e:68:f7:da:ca:1b:d3:8d:9c:8c:60: b1:a3:de:7b:eb:aa:4e:5c:96:e2:de:f3:8d:17:d9: ea:6e:a9:96:b9:d5:ab:e6:a1:ea:9f:da:e6:ff:f7: 72:2c:0f:17:13:b9:89:85:c1:52:70:09:5d:a1:66: 6c:c4:ef:10:e4:c9:85:21:ee:43:f9:d5:60:15:35: 05:68:aa:8a:0b:83:12:98:5f:e6:ab:d9:3a:50:10: eb:50:38:4f:65:6e:2d:30:7f:61:fa:c5:31:be:79: 5f:aa:87:74:d5:e9:87:ee:1a:b9:17:6c:74:75:aa: b2:12:d2:7e:1e:11:ca:d7:46:be:31:ab:dc:2a:47: 3e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:37:1E:3C:3B:C5:27:69:94:DE:94:89:AB:85:D4:5F:56:0A:54:9A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/da9bd70f-433a-41ce-b63c-3b817aa0cb78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.227.179.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:33:2e:98:ce:b2:68:01:67:90:3b:cc:a9:64:6f:5f:5c:02: 63:32:2b:ba:e0:f3:46:64:a1:1c:6f:55:78:36:a0:a0:05:19: d2:3a:35:bf:64:74:7b:a8:35:f2:42:01:eb:65:1c:c8:3d:2a: 00:95:33:08:23:22:e9:cc:d5:8b:8d:50:fd:22:dd:08:7a:c5: a5:2f:2c:52:c3:9c:ea:37:1b:44:2b:92:d8:8e:b9:be:e0:87: 53:07:17:73:43:aa:5c:66:4e:df:76:f0:50:ef:73:60:20:fa: 9d:98:77:9f:10:3c:1b:d3:52:66:3c:3d:80:75:5c:f1:b8:44: 86:a7:14:67:aa:4d:4f:64:94:13:5f:9c:ca:8e:24:6a:e3:49: 0d:a1:09:b7:b4:09:86:12:4f:39:7b:1f:ef:3c:39:a6:52:a2: 8e:30:1d:87:90:42:9d:7d:ec:38:90:53:8f:ce:a7:83:6d:e8: 79:7a:29:82:c5:2a:77:76:b5:15:1d:b3:e7:88:f9:70:3c:dd: 0d:70:49:f9:88:8b:e2:d6:54:cc:fb:ea:75:a4:05:98:0c:38: 29:b6:ec:a8:bb:e3:40:dd:ec:6f:f4:42:79:ad:e3:ec:a2:1e: b8:14:67:b2:3a:46:76:ef:ad:2f:87:99:f6:d4:ea:c9:78:68: f9:40:cd:84 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZ8beCBEoOeo6Exc+oO5lg7y99P4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTk0MTI0WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AxMzg2ZjhjNDVhZjY4Y2FiNjM1NDA5ZTVmYWIzZTVkMzIx MzMzZTlmOTlmNmJmNzFlMGM5MGZhZmM4YzFkYjIwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDVeI+gOYAPGAsb+ahlNkO4ziGeTbYb99UVZ8/7J9eBdXfH MSZ6ixZIq2afZNJRkd5CqUJ1uFBvYPlLofzV/Rro3ywzgBFMGWtdsNnHir4cZkpS MG4Ty+lLfA8LI8tnuLHm/jXRrAQwSCU+to4hD8y9Bxdggudd9mb/AvAuaPfayhvT jZyMYLGj3nvrqk5cluLe840X2epuqZa51avmoeqf2ub/93IsDxcTuYmFwVJwCV2h ZmzE7xDkyYUh7kP51WAVNQVoqooLgxKYX+ar2TpQEOtQOE9lbi0wf2H6xTG+eV+q h3TV6YfuGrkXbHR1qrIS0n4eEcrXRr4xq9wqRz5RAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU/DcePDvFJ2mU3pSJq4XUX1YKVJowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2RhOWJkNzBmLTQzM2EtNDFjZS1iNjNjLTNiODE3YWEwY2I3OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAN47MwDQYJKoZIhvcNAQELBQADggEBAA8zLpjOsmgBZ5A7zKlkb19cAmMy K7rg80ZkoRxvVXg2oKAFGdI6Nb9kdHuoNfJCAetlHMg9KgCVMwgjIunM1YuNUP0i 3Qh6xaUvLFLDnOo3G0QrktiOub7gh1MHF3NDqlxmTt928FDvc2Ag+p2Yd58QPBvT UmY8PYB1XPG4RIanFGeqTU9klBNfnMqOJGrjSQ2hCbe0CYYSTzl7H+88OaZSoo4w HYeQQp197DiQU4/Op4Nt6Hl6KYLFKnd2tRUds+eI+XA83Q1wSfmIi+LWVMz76nWk BZgMOCm27Ki740Dd7G/0Qnmt4+yiHrgUZ7I6RnbvrS+HmfbU6sl4aPlAzYQ= -----END CERTIFICATE-----Generated at Mon Oct 20 15:46:08 2025 by rpki-client