$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e319a7eb-c1de-4ee2-96d2-5c28e6c7166e.roa File: e319a7eb-c1de-4ee2-96d2-5c28e6c7166e.roa (raw, json) Hash identifier: 0tzSo52kzV96fXZmmJGcY9wQguKL+BOBhV2F3DYhSDs= Subject key identifier: 4F:2A:90:2B:D4:63:84:4E:5E:42:32:1E:E4:32:90:7F:7F:BA:D9:66 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 40FCFDCBD2E38343F7E0E6A0FB3320051E85DA25 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e319a7eb-c1de-4ee2-96d2-5c28e6c7166e.roa Signing time: Sun 19 Oct 2025 11:40:10 +0000 ROA not before: Sun 19 Oct 2025 11:40:10 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.227.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:fc:fd:cb:d2:e3:83:43:f7:e0:e6:a0:fb:33:20:05:1e:85:da:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 11:40:10 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=bb7bd566e693cd2f1b8ac4692c503aba1b25b6fd73fb481ebf2d7dc91080ebb6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:91:67:eb:1f:16:f6:27:e8:55:4b:1a:64:9f: f2:ce:d7:30:4c:73:6e:66:02:ff:29:96:67:7e:2b: 7c:c0:dd:e1:29:26:bd:b4:43:2c:d7:f1:bd:34:d4: f7:ba:39:fb:a6:22:f3:60:73:3d:b7:eb:e2:3c:14: 7a:ba:20:7c:e7:f6:ad:6e:b7:d0:d9:58:25:2b:8d: 16:b7:96:c3:a1:5a:5b:06:0e:b4:45:4d:bb:f6:29: 42:8b:b4:95:ee:43:5b:ba:36:d6:8e:46:f2:b5:dc: 13:bb:ab:1a:58:14:df:9b:f9:61:db:d3:3d:1a:ad: 30:56:4e:4a:2c:cd:6f:10:6e:2b:a4:a7:6f:6b:6d: 71:96:ce:1b:8e:25:7e:00:c5:9b:f6:df:57:42:71: 4c:23:0c:99:d8:f7:11:0f:ec:13:45:82:d4:b4:e5: 1a:a0:77:83:33:1b:b2:e7:1d:99:1a:e1:f8:41:74: 48:7f:6e:60:91:33:96:ce:f5:12:ad:da:1b:3f:89: 48:34:e9:d3:e7:b6:93:f6:60:b8:4a:c7:7d:da:66: 9b:20:77:51:7c:a1:ac:1a:db:5b:82:f7:fb:40:0e: 0b:f6:a3:71:5f:ab:ef:57:fd:a7:8b:a7:f4:0c:df: dc:b8:a4:f7:e2:30:73:62:eb:2c:bc:50:7f:f3:4d: 2f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:2A:90:2B:D4:63:84:4E:5E:42:32:1E:E4:32:90:7F:7F:BA:D9:66 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e319a7eb-c1de-4ee2-96d2-5c28e6c7166e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.227.92.0/22 Signature Algorithm: sha256WithRSAEncryption 95:9c:71:63:6e:94:77:bf:20:72:ae:b3:f3:ea:62:fb:55:9b: db:57:1f:36:26:fc:39:c7:4f:e2:ae:2e:35:d6:5a:ef:f1:cc: df:d1:6e:6e:84:12:67:a7:f9:8d:3c:ee:5d:2f:79:19:62:1b: 35:a5:65:73:25:d1:f0:df:11:63:60:5d:18:36:23:88:f6:ac: e2:78:36:c2:1e:bc:94:01:bb:92:5d:1c:c0:3d:61:4b:39:bf: 16:83:f7:69:af:7e:7b:dc:e2:68:7c:6f:a3:15:a4:95:7b:49: fc:5d:d9:80:7e:67:8b:14:a1:01:9a:73:70:88:72:b9:40:ab: 15:36:41:03:af:c0:ee:c2:9e:12:3a:d9:40:d4:98:05:c7:53: 9c:71:39:d8:31:ad:da:89:f8:58:6f:6e:ca:1b:96:35:35:67: 88:71:f5:57:09:b6:84:0e:8d:ae:80:03:55:72:b9:c2:cd:3b: d2:f3:48:db:e1:7f:9e:02:59:1d:54:a5:12:ac:9e:2b:36:40: de:2f:3c:a8:d7:f7:6e:43:02:66:91:0d:0d:65:f8:37:f7:82: 15:88:58:38:b7:6d:e1:82:91:81:16:f0:40:d4:74:aa:50:94: b0:b0:54:62:20:81:fe:04:ab:92:3a:58:ce:2d:54:df:0e:96: f8:f0:bb:73 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQPz9y9Ljg0P34Oag+zMgBR6F2iUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTE0MDEwWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BiYjdiZDU2NmU2OTNjZDJmMWI4YWM0NjkyYzUwM2FiYTFi MjViNmZkNzNmYjQ4MWViZjJkN2RjOTEwODBlYmI2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHkWfrHxb2J+hVSxpkn/LO1zBMc25mAv8plmd+K3zA3eEp Jr20QyzX8b001Pe6OfumIvNgcz236+I8FHq6IHzn9q1ut9DZWCUrjRa3lsOhWlsG DrRFTbv2KUKLtJXuQ1u6NtaORvK13BO7qxpYFN+b+WHb0z0arTBWTkoszW8Qbiuk p29rbXGWzhuOJX4AxZv231dCcUwjDJnY9xEP7BNFgtS05Rqgd4MzG7LnHZka4fhB dEh/bmCRM5bO9RKt2hs/iUg06dPntpP2YLhKx33aZpsgd1F8oawa21uC9/tADgv2 o3Ffq+9X/aeLp/QM39y4pPfiMHNi6yy8UH/zTS+HAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUTyqQK9RjhE5eQjIe5DKQf3+62WYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2UzMTlhN2ViLWMxZGUtNGVlMi05NmQyLTVjMjhlNmM3MTY2ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIN41wwDQYJKoZIhvcNAQELBQADggEBAJWccWNulHe/IHKus/PqYvtVm9tX HzYm/DnHT+KuLjXWWu/xzN/Rbm6EEmen+Y087l0veRliGzWlZXMl0fDfEWNgXRg2 I4j2rOJ4NsIevJQBu5JdHMA9YUs5vxaD92mvfnvc4mh8b6MVpJV7Sfxd2YB+Z4sU oQGac3CIcrlAqxU2QQOvwO7CnhI62UDUmAXHU5xxOdgxrdqJ+FhvbsobljU1Z4hx 9VcJtoQOja6AA1VyucLNO9LzSNvhf54CWR1UpRKsnis2QN4vPKjX925DAmaRDQ1l +Df3ghWIWDi3beGCkYEW8EDUdKpQlLCwVGIggf4Eq5I6WM4tVN8Olvjwu3M= -----END CERTIFICATE-----Generated at Mon Oct 20 15:45:01 2025 by rpki-client