$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dd557738-0950-426d-ba73-ff330f0c01f0.roa File: dd557738-0950-426d-ba73-ff330f0c01f0.roa (raw, json) Hash identifier: 5E5LXPYmtFO9qO9rstpad3lagxOkOYRKnM9nljjllDk= Subject key identifier: 29:BB:1C:5A:C8:9B:D1:B1:4C:35:D2:E2:EC:DD:46:1B:28:BB:B1:D6 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1B7C7E8E7A8A3CAA572040765115E5BBFDCD79BB Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dd557738-0950-426d-ba73-ff330f0c01f0.roa Signing time: Sun 19 Oct 2025 15:31:33 +0000 ROA not before: Sun 19 Oct 2025 15:31:33 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.227.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:7c:7e:8e:7a:8a:3c:aa:57:20:40:76:51:15:e5:bb:fd:cd:79:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 15:31:33 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=790c7d9c717a31791fe839a0def1050bc2013713d93b171f83ce50b1241ce84f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:40:f6:1a:fa:a6:8c:c9:d5:c4:e5:39:c5:2f: fc:4e:5f:a0:c9:b3:0a:32:0a:57:f6:0c:5a:30:fd: 94:0c:b1:ef:da:22:c4:8b:90:4b:b6:6d:63:a1:25: c6:8d:dc:c4:b3:bc:94:19:71:ae:d7:00:ac:85:fb: 23:29:c3:8b:f4:c6:b5:0d:29:0b:ba:3c:e5:20:c3: 5c:70:f1:55:84:d2:85:21:76:8d:34:7a:a5:cc:00: bc:87:af:91:22:6d:6d:b7:27:c4:07:82:2a:9e:b1: 07:d3:a9:71:6a:3a:b9:b8:ed:62:b3:3c:53:a0:af: 01:d6:67:14:c2:f5:3d:2e:37:b4:25:7e:8e:57:f7: b4:3c:0f:ce:2e:ec:47:af:28:2a:c1:f0:40:32:4b: 8a:5a:7a:e7:05:df:7b:16:b6:f5:7c:ee:7e:e2:19: 80:4a:40:4c:fa:07:ec:be:f1:81:18:9c:d1:cc:41: 95:1e:ad:f3:bc:6b:2a:3d:2a:58:84:61:2e:d1:e7: 30:fa:fe:39:ca:b5:a9:61:6c:fc:6d:d7:7d:1d:07: 17:39:be:23:ce:4b:d8:a3:a6:ee:a8:48:5c:85:6f: 50:6f:3b:ba:a0:70:e8:0e:91:04:58:85:aa:79:a8: cd:f1:ca:7c:6f:bd:9b:d2:92:bd:14:15:c9:df:cd: 2e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:BB:1C:5A:C8:9B:D1:B1:4C:35:D2:E2:EC:DD:46:1B:28:BB:B1:D6 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dd557738-0950-426d-ba73-ff330f0c01f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.227.124.0/22 Signature Algorithm: sha256WithRSAEncryption a4:22:00:2d:a8:52:90:6c:77:4c:8e:e7:3e:f1:d7:96:92:81: fd:d3:a5:63:51:d1:00:4c:bf:5d:57:3a:fd:0d:40:d2:e7:9d: 6c:76:57:bb:e2:9d:4f:75:3b:90:63:c1:9d:e1:b5:ec:4f:0b: 29:e3:b3:65:aa:cc:7a:4d:78:30:5d:96:c2:df:7d:27:64:09: d4:4a:df:ac:28:6c:69:6b:03:7a:eb:2a:12:f4:52:31:7b:6d: a0:5d:d2:7c:ab:92:82:9c:10:d1:60:50:9e:68:e8:59:8d:78: 1d:68:59:ad:55:ae:ff:03:30:e8:7b:2d:5b:27:da:1a:7a:47: 99:69:bd:41:b3:86:98:ab:e6:08:a0:2f:a6:08:ed:4c:dc:78: 06:6f:9e:18:d5:41:96:0b:9a:c9:92:11:2f:6a:fe:f8:10:71: 6c:48:25:3e:2e:e8:71:f0:8d:c7:5e:9a:5d:07:29:6b:2b:b7: 88:bb:7a:31:59:39:91:a5:bc:8e:cd:54:bf:a3:ca:3d:62:b9: f4:85:46:41:c4:5b:b0:3e:3c:3f:35:87:3f:16:92:d5:e1:c6: cd:3e:16:82:7f:e5:5e:88:61:de:e7:55:02:83:cb:ad:33:44: 83:b9:8a:a6:a6:02:cc:6f:e5:5b:a4:4f:5b:a9:2d:ab:ac:88: f1:96:79:3a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUG3x+jnqKPKpXIEB2URXlu/3NebswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTUzMTMzWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A3OTBjN2Q5YzcxN2EzMTc5MWZlODM5YTBkZWYxMDUwYmMy MDEzNzEzZDkzYjE3MWY4M2NlNTBiMTI0MWNlODRmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+QPYa+qaMydXE5TnFL/xOX6DJswoyClf2DFow/ZQMse/a IsSLkEu2bWOhJcaN3MSzvJQZca7XAKyF+yMpw4v0xrUNKQu6POUgw1xw8VWE0oUh do00eqXMALyHr5EibW23J8QHgiqesQfTqXFqOrm47WKzPFOgrwHWZxTC9T0uN7Ql fo5X97Q8D84u7EevKCrB8EAyS4paeucF33sWtvV87n7iGYBKQEz6B+y+8YEYnNHM QZUerfO8ayo9KliEYS7R5zD6/jnKtalhbPxt130dBxc5viPOS9ijpu6oSFyFb1Bv O7qgcOgOkQRYhap5qM3xynxvvZvSkr0UFcnfzS7zAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKbscWsib0bFMNdLi7N1GGyi7sdYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2RkNTU3NzM4LTA5NTAtNDI2ZC1iYTczLWZmMzMwZjBjMDFmMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIN43wwDQYJKoZIhvcNAQELBQADggEBAKQiAC2oUpBsd0yO5z7x15aSgf3T pWNR0QBMv11XOv0NQNLnnWx2V7vinU91O5BjwZ3htexPCynjs2WqzHpNeDBdlsLf fSdkCdRK36wobGlrA3rrKhL0UjF7baBd0nyrkoKcENFgUJ5o6FmNeB1oWa1Vrv8D MOh7LVsn2hp6R5lpvUGzhpir5gigL6YI7UzceAZvnhjVQZYLmsmSES9q/vgQcWxI JT4u6HHwjcdeml0HKWsrt4i7ejFZOZGlvI7NVL+jyj1iufSFRkHEW7A+PD81hz8W ktXhxs0+FoJ/5V6IYd7nVQKDy60zRIO5iqamAsxv5VukT1upLausiPGWeTo= -----END CERTIFICATE-----Generated at Mon Oct 20 21:11:53 2025 by rpki-client