$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2e64b402-0f07-40b5-89b4-0e6484606c49.roa File: 2e64b402-0f07-40b5-89b4-0e6484606c49.roa (raw, json) Hash identifier: gtJiDZIaMFOr5QB70JpqQm/AIxwBpwNEydrI6yfIkUI= Subject key identifier: 09:0D:50:AE:18:FB:3E:2D:CB:15:D8:6C:D4:BC:21:38:D0:F9:A3:41 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 709FAD7678170B749455117D944410966D5F33D6 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2e64b402-0f07-40b5-89b4-0e6484606c49.roa Signing time: Wed 24 Sep 2025 19:47:53 +0000 ROA not before: Wed 24 Sep 2025 19:47:53 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.227.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:9f:ad:76:78:17:0b:74:94:55:11:7d:94:44:10:96:6d:5f:33:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 19:47:53 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=02dc15e94624fb412a29fb59fd10b9c9656bf7bc458fc93f5d29d436df0b5111, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:4d:9b:48:26:cc:d5:a8:15:56:af:5a:07:ef: 05:19:eb:32:d4:2e:4b:c9:4d:29:cf:f1:70:32:40: 26:aa:a8:88:64:9e:99:66:9d:8a:40:55:14:8e:12: 0b:65:1d:c2:dd:26:80:2b:ab:24:da:c8:78:cf:8c: fe:27:aa:3b:6a:7c:12:da:3b:ff:31:5a:ee:18:9c: 5a:1f:75:ec:8c:07:df:3d:cd:08:7c:b8:32:d5:34: 82:a2:3e:40:f9:d9:2c:bd:91:fd:66:5b:3a:59:06: 48:63:7a:b2:3b:bc:e6:54:2b:1b:0c:13:2c:b9:9e: 96:66:37:f8:fc:2b:9d:97:80:d6:2c:0c:62:ee:e5: 51:f2:7a:58:0a:2f:3f:a4:75:00:bb:b4:24:35:d9: eb:6a:e0:4f:da:21:f7:30:55:62:0f:cd:4e:23:3c: 77:e5:6f:9a:c5:a9:57:35:b2:ca:84:a6:36:b7:a6: 14:39:fa:c6:c1:cf:d1:2d:0e:c2:50:d4:1f:e1:2b: 15:3f:4a:b4:1a:04:27:05:e0:8a:c1:4c:94:4d:1d: b7:bb:ac:07:ff:dd:07:4e:39:6d:96:43:ce:2e:6d: 2e:57:79:86:05:7f:08:8b:48:5a:11:fd:34:50:7a: 38:5d:6b:d1:d1:a2:10:82:7a:6f:63:56:29:ce:39: d1:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:0D:50:AE:18:FB:3E:2D:CB:15:D8:6C:D4:BC:21:38:D0:F9:A3:41 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2e64b402-0f07-40b5-89b4-0e6484606c49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.227.156.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:8a:a3:89:de:fe:88:ad:76:0e:3b:0b:bd:59:75:80:26:17: a1:df:ca:2c:54:fd:c6:aa:66:2f:2c:95:ff:f7:c5:40:8f:05: ff:5a:6f:8b:fc:7d:1f:87:30:6e:4e:78:5e:9b:91:d2:17:3e: 5f:33:c6:56:9d:b1:a2:d8:db:8f:7e:a8:15:e3:c7:bf:e7:a5: 4b:1c:de:78:71:0e:74:fa:fc:26:9e:e7:f0:d8:4a:bc:ef:ab: 9a:1b:f4:0a:ac:e6:93:c6:89:9e:bf:4c:59:dc:c0:8c:00:a4: 25:ae:53:ed:c3:95:49:66:64:9d:9f:1e:d4:64:e6:e1:a3:ae: 3d:fb:02:43:e8:d8:a9:8b:fd:81:9c:b5:e4:ad:2a:12:8d:c2: 51:9c:02:a7:01:be:22:76:2e:07:fa:99:19:7b:42:96:2d:5c: 5e:42:6d:e9:6d:38:77:48:b1:f2:d8:e3:b9:d0:31:ab:c7:2d: 23:0c:2c:0d:2b:50:c8:ea:94:42:2d:95:ae:11:9f:d1:53:cc: 4f:b0:b7:43:15:05:1e:e3:c4:7c:ce:60:ec:e5:57:31:72:a9: ce:3a:fe:56:bb:e9:38:56:02:b9:97:ee:fd:20:b0:5f:15:60: 63:3e:ce:6c:ef:22:57:1e:cd:05:db:19:f2:ed:1c:ff:23:be: ac:27:b3:97 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcJ+tdngXC3SUVRF9lEQQlm1fM9YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MTk0NzUzWhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0AwMmRjMTVlOTQ2MjRmYjQxMmEyOWZiNTlmZDEwYjljOTY1 NmJmN2JjNDU4ZmM5M2Y1ZDI5ZDQzNmRmMGI1MTExMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCKTZtIJszVqBVWr1oH7wUZ6zLULkvJTSnP8XAyQCaqqIhk nplmnYpAVRSOEgtlHcLdJoArqyTayHjPjP4nqjtqfBLaO/8xWu4YnFofdeyMB989 zQh8uDLVNIKiPkD52Sy9kf1mWzpZBkhjerI7vOZUKxsMEyy5npZmN/j8K52XgNYs DGLu5VHyelgKLz+kdQC7tCQ12etq4E/aIfcwVWIPzU4jPHflb5rFqVc1ssqEpja3 phQ5+sbBz9EtDsJQ1B/hKxU/SrQaBCcF4IrBTJRNHbe7rAf/3QdOOW2WQ84ubS5X eYYFfwiLSFoR/TRQejhda9HRohCCem9jVinOOdHpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUCQ1Qrhj7Pi3LFdhs1LwhOND5o0EwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzJlNjRiNDAyLTBmMDctNDBiNS04OWI0LTBlNjQ4NDYwNmM0OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAN45wwDQYJKoZIhvcNAQELBQADggEBADqKo4ne/oitdg47C71ZdYAmF6Hf yixU/caqZi8slf/3xUCPBf9ab4v8fR+HMG5OeF6bkdIXPl8zxladsaLY249+qBXj x7/npUsc3nhxDnT6/Cae5/DYSrzvq5ob9Aqs5pPGiZ6/TFncwIwApCWuU+3DlUlm ZJ2fHtRk5uGjrj37AkPo2KmL/YGcteStKhKNwlGcAqcBviJ2Lgf6mRl7QpYtXF5C beltOHdIsfLY47nQMavHLSMMLA0rUMjqlEItla4Rn9FTzE+wt0MVBR7jxHzOYOzl VzFyqc46/la76ThWArmX7v0gsF8VYGM+zmzvIlcezQXbGfLtHP8jvqwns5c= -----END CERTIFICATE-----Generated at Sat Oct 18 02:16:33 2025 by rpki-client