$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1072d1a6-c0a6-4f35-9e7b-1947c9ee8aae.roa File: 1072d1a6-c0a6-4f35-9e7b-1947c9ee8aae.roa (raw, json) Hash identifier: 80UVDg81e4PFP0rYw3eHXHVzoJ1naRooVJkttWt6DOQ= Subject key identifier: 9D:49:64:9A:6A:CE:DF:DD:D3:83:8E:94:B2:12:BE:58:3C:13:64:5F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7838D3429F7568735741B760B87664F13C767C57 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1072d1a6-c0a6-4f35-9e7b-1947c9ee8aae.roa Signing time: Wed 24 Sep 2025 20:46:44 +0000 ROA not before: Wed 24 Sep 2025 20:46:44 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.227.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:38:d3:42:9f:75:68:73:57:41:b7:60:b8:76:64:f1:3c:76:7c:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 20:46:44 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=4b1a16228a522acbe59cad640ea5f72109e022c766d73513f415875039786fa8, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ab:97:71:a6:a5:fd:1e:f8:c0:9c:23:f8:e5: 38:78:2d:e7:6c:d4:65:1b:a6:ec:eb:10:08:36:c8: e6:fb:89:ec:81:48:48:bb:cc:83:1f:2a:23:b7:1c: 7b:16:74:36:06:fa:d8:0c:88:a7:21:eb:28:8f:34: 77:de:f2:81:52:fe:d3:c5:c5:e2:69:af:e0:09:eb: 3a:b3:1a:d8:3f:66:dd:cd:de:56:60:b1:bd:f1:c6: a8:db:21:e3:19:8a:ad:6c:89:e8:62:01:d4:f6:34: ad:0c:60:f4:1a:75:56:a6:46:b3:d0:c5:45:e3:10: 70:de:77:47:23:0c:8b:16:0a:20:65:18:42:f7:aa: 03:00:fb:e5:c8:52:4f:0a:88:d6:15:1e:8e:9d:f6: 2b:bf:c8:87:90:50:ac:79:cb:8d:6b:8c:9c:5b:5a: e8:4c:b4:54:f4:3d:3b:70:fc:0f:c5:97:d8:a9:7b: 61:01:86:25:a8:74:0f:fc:94:e1:74:00:4a:27:86: 1c:06:88:96:6c:92:13:7e:a9:62:3b:bc:15:78:f0: ef:48:75:b7:b9:f6:4c:c4:d0:a5:fe:42:c5:a9:15: 76:1d:1b:62:6f:b9:27:d7:60:d3:8e:e0:3b:dd:75: b0:92:af:88:fb:18:d1:98:cf:b0:8f:9f:d8:88:bd: 59:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:49:64:9A:6A:CE:DF:DD:D3:83:8E:94:B2:12:BE:58:3C:13:64:5F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1072d1a6-c0a6-4f35-9e7b-1947c9ee8aae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.227.172.0/22 Signature Algorithm: sha256WithRSAEncryption b1:95:5b:30:21:19:66:7c:cd:cc:a8:61:15:69:65:f1:a0:7f: e5:ae:5f:9b:77:fc:d5:d8:13:c3:7e:d7:d5:dc:c2:77:f1:90: a0:62:51:00:17:7c:12:f9:cb:17:4d:ad:21:2a:45:29:72:05: 5a:9f:69:ba:8d:6b:16:85:19:e2:a9:91:7b:ab:33:3b:93:2e: db:e3:fa:78:84:43:0b:a4:e0:23:8b:46:21:52:17:7a:ef:bc: ed:23:6e:bd:9e:b3:fa:da:4c:97:a2:d2:9c:1b:e5:91:8b:20: 22:e7:4d:d3:07:9a:f3:6c:09:67:bf:90:6a:9f:ec:af:2d:e4: 99:ed:31:c6:24:45:6a:93:b3:16:b5:9f:14:36:5c:b7:ae:41: 3d:8c:10:b7:36:5c:d6:db:cc:18:25:bd:39:d5:9a:d8:a2:fb: 8b:e2:5e:7a:2a:f5:0b:80:b0:20:dd:75:af:12:ec:fc:98:33: ed:ee:12:fd:d7:bd:bd:d2:49:2c:7e:ef:85:1c:47:2e:46:01: 04:6a:e6:57:52:3d:17:5c:52:50:95:21:a4:9d:c4:98:0f:df: 11:2a:b4:65:63:e1:e5:35:3b:fe:45:cf:2d:d6:e1:c9:ad:fe: fe:b2:c7:c7:82:3f:8a:47:17:3b:dd:93:14:e5:02:e5:92:7c: ca:bb:44:bf -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUeDjTQp91aHNXQbdguHZk8Tx2fFcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MjA0NjQ0WhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A0YjFhMTYyMjhhNTIyYWNiZTU5Y2FkNjQwZWE1ZjcyMTA5 ZTAyMmM3NjZkNzM1MTNmNDE1ODc1MDM5Nzg2ZmE4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCRq5dxpqX9HvjAnCP45Th4Leds1GUbpuzrEAg2yOb7ieyB SEi7zIMfKiO3HHsWdDYG+tgMiKch6yiPNHfe8oFS/tPFxeJpr+AJ6zqzGtg/Zt3N 3lZgsb3xxqjbIeMZiq1siehiAdT2NK0MYPQadVamRrPQxUXjEHDed0cjDIsWCiBl GEL3qgMA++XIUk8KiNYVHo6d9iu/yIeQUKx5y41rjJxbWuhMtFT0PTtw/A/Fl9ip e2EBhiWodA/8lOF0AEonhhwGiJZskhN+qWI7vBV48O9Idbe59kzE0KX+QsWpFXYd G2JvuSfXYNOO4DvddbCSr4j7GNGYz7CPn9iIvVmvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUnUlkmmrO393Tg46UshK+WDwTZF8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzEwNzJkMWE2LWMwYTYtNGYzNS05ZTdiLTE5NDdjOWVlOGFhZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIN46wwDQYJKoZIhvcNAQELBQADggEBALGVWzAhGWZ8zcyoYRVpZfGgf+Wu X5t3/NXYE8N+19XcwnfxkKBiUQAXfBL5yxdNrSEqRSlyBVqfabqNaxaFGeKpkXur MzuTLtvj+niEQwuk4COLRiFSF3rvvO0jbr2es/raTJei0pwb5ZGLICLnTdMHmvNs CWe/kGqf7K8t5JntMcYkRWqTsxa1nxQ2XLeuQT2MELc2XNbbzBglvTnVmtii+4vi Xnoq9QuAsCDdda8S7PyYM+3uEv3Xvb3SSSx+74UcRy5GAQRq5ldSPRdcUlCVIaSd xJgP3xEqtGVj4eU1O/5Fzy3W4cmt/v6yx8eCP4pHFzvdkxTlAuWSfMq7RL8= -----END CERTIFICATE-----Generated at Sat Oct 18 05:11:43 2025 by rpki-client