$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fc8632bf-ccce-48d4-b18a-01b8f1ef5454.roa File: fc8632bf-ccce-48d4-b18a-01b8f1ef5454.roa (raw, json) Hash identifier: BIRgDA5OTnt1SkYe52GoAbtsGNjJe0Nhrk8NVnUalsM= Subject key identifier: 33:9B:23:D1:3B:F9:30:EF:1C:8F:72:28:75:10:28:E0:85:C6:38:03 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 33A3328B800569572687CC474152AB80BB5246F4 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fc8632bf-ccce-48d4-b18a-01b8f1ef5454.roa Signing time: Sun 19 Oct 2025 18:55:41 +0000 ROA not before: Sun 19 Oct 2025 18:55:41 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.227.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:a3:32:8b:80:05:69:57:26:87:cc:47:41:52:ab:80:bb:52:46:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 18:55:41 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=fceef7a31236466e722459e94d726b00b8f93d039c5438845227da3f4d8b7ee0, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:91:73:e6:2d:31:29:b8:d4:9f:9b:3e:d5:a2: e5:89:01:8a:d3:89:98:11:a3:99:66:a1:56:ed:43: c3:0d:00:4c:1f:f1:f1:b4:2c:3e:c5:a4:e3:56:8d: d0:b7:02:33:a4:b1:ad:10:1a:60:ff:a0:95:33:e3: 85:a2:22:de:ea:c5:67:ed:fd:36:05:31:32:c3:93: b2:65:37:8b:e2:43:db:ed:9a:c0:48:46:ba:d7:cb: 59:87:21:da:b0:8e:cb:4a:20:9f:8a:85:5f:d5:44: 32:f0:62:f7:8a:01:e0:75:0c:63:46:a0:e8:1e:5e: 5a:2c:a6:20:56:2e:7a:c2:db:8a:2d:c7:e7:36:15: c4:41:8d:79:b4:44:73:d6:7d:0e:10:fb:a2:0d:a8: 83:8b:b9:7e:5b:73:83:8f:a0:b3:c1:83:c5:f6:1e: 5a:f2:de:0e:fe:82:30:0b:f7:29:f4:ec:49:8b:d8: b5:be:ad:9a:84:ff:65:5d:72:17:2d:c6:a9:9b:0e: aa:08:84:37:e3:e2:2e:2b:4f:a4:12:68:63:6d:87: 01:7e:bc:dd:a0:c1:67:ff:26:c5:d8:d8:d5:3d:ab: 07:69:15:eb:b5:75:1c:18:60:02:9a:8f:94:17:16: 55:db:80:d4:c7:7d:3d:ff:30:10:5d:fe:2c:54:8f: 4f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:9B:23:D1:3B:F9:30:EF:1C:8F:72:28:75:10:28:E0:85:C6:38:03 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fc8632bf-ccce-48d4-b18a-01b8f1ef5454.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.227.14.0/23 Signature Algorithm: sha256WithRSAEncryption 5f:d3:c7:69:e4:e3:0a:42:ef:36:41:5b:c0:b6:2f:57:89:9a: 74:89:68:d4:96:2f:64:8d:2a:02:c9:5b:ca:b2:16:ca:60:73: 50:b1:73:2c:f8:d9:ae:c6:99:a8:c0:c0:7d:56:7e:92:85:b6: c1:aa:af:d0:d1:ba:88:84:71:34:c9:f1:aa:4a:82:a7:6b:52: 8e:b7:46:68:da:67:31:e2:2b:d1:3e:eb:ca:0f:49:db:9f:5f: 2e:c2:40:04:a9:9c:bc:09:35:7a:33:5d:1a:2d:2a:f7:84:4b: 39:ef:f6:af:17:23:8a:9f:d8:f0:ab:f0:46:2b:23:70:5d:77: df:31:c4:29:f1:1c:f9:b2:65:2c:0c:f5:b8:bf:81:87:f7:1c: 23:03:aa:c2:0c:74:92:e7:ec:30:84:3f:68:78:85:1f:f6:33: ea:ee:24:b7:6e:ad:45:24:13:c6:6d:4c:62:74:24:80:85:eb: 62:42:7c:85:fb:cf:1f:21:78:c3:8e:fb:a9:46:9c:33:ba:a6: 5a:3d:cd:e3:8a:f8:7e:90:5f:97:c5:36:fc:2b:e8:6d:52:3b: c2:fe:aa:b4:99:8b:28:a1:cd:16:c8:6f:38:60:ad:41:48:a2: bb:c7:33:f8:7b:b0:b5:ab:4b:87:e9:56:23:ad:69:74:be:8d: c1:db:11:8e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUM6Myi4AFaVcmh8xHQVKrgLtSRvQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTg1NTQxWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BmY2VlZjdhMzEyMzY0NjZlNzIyNDU5ZTk0ZDcyNmIwMGI4 ZjkzZDAzOWM1NDM4ODQ1MjI3ZGEzZjRkOGI3ZWUwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDskXPmLTEpuNSfmz7VouWJAYrTiZgRo5lmoVbtQ8MNAEwf 8fG0LD7FpONWjdC3AjOksa0QGmD/oJUz44WiIt7qxWft/TYFMTLDk7JlN4viQ9vt msBIRrrXy1mHIdqwjstKIJ+KhV/VRDLwYveKAeB1DGNGoOgeXlospiBWLnrC24ot x+c2FcRBjXm0RHPWfQ4Q+6INqIOLuX5bc4OPoLPBg8X2Hlry3g7+gjAL9yn07EmL 2LW+rZqE/2VdchctxqmbDqoIhDfj4i4rT6QSaGNthwF+vN2gwWf/JsXY2NU9qwdp Feu1dRwYYAKaj5QXFlXbgNTHfT3/MBBd/ixUj0/nAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUM5sj0Tv5MO8cj3IodRAo4IXGOAMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2ZjODYzMmJmLWNjY2UtNDhkNC1iMThhLTAxYjhmMWVmNTQ1NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEN4w4wDQYJKoZIhvcNAQELBQADggEBAF/Tx2nk4wpC7zZBW8C2L1eJmnSJ aNSWL2SNKgLJW8qyFspgc1Cxcyz42a7GmajAwH1WfpKFtsGqr9DRuoiEcTTJ8apK gqdrUo63RmjaZzHiK9E+68oPSdufXy7CQASpnLwJNXozXRotKveESznv9q8XI4qf 2PCr8EYrI3Bdd98xxCnxHPmyZSwM9bi/gYf3HCMDqsIMdJLn7DCEP2h4hR/2M+ru JLdurUUkE8ZtTGJ0JICF62JCfIX7zx8heMOO+6lGnDO6plo9zeOK+H6QX5fFNvwr 6G1SO8L+qrSZiyihzRbIbzhgrUFIorvHM/h7sLWrS4fpViOtaXS+jcHbEY4= -----END CERTIFICATE-----Generated at Mon Oct 20 08:29:47 2025 by rpki-client