$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4f8921d5-1698-483f-9a18-c52cc17e0eca.roa File: 4f8921d5-1698-483f-9a18-c52cc17e0eca.roa (raw, json) Hash identifier: fAA9KWMUtwIGyGy6tJniSlHc+bvnEFUjLDmSiL44qAc= Subject key identifier: 71:09:9E:FC:8E:38:EA:F9:D1:4B:30:03:EE:72:91:7A:37:67:59:1A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 43D9681C253DB0CF355EDF7C53DF6FC1CEBB2C59 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4f8921d5-1698-483f-9a18-c52cc17e0eca.roa Signing time: Wed 24 Sep 2025 20:55:50 +0000 ROA not before: Wed 24 Sep 2025 20:55:50 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.227.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:d9:68:1c:25:3d:b0:cf:35:5e:df:7c:53:df:6f:c1:ce:bb:2c:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 20:55:50 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=dd97cfb672d07e6d2f9720c072f1e81176bd347c0b841368085098dea472b436, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d6:cd:fc:22:bf:93:02:6e:cc:6e:9e:05:e8: 3a:4c:cd:92:cd:d6:2f:6d:9d:cb:7f:3b:bd:93:5c: aa:68:5f:40:1b:64:9d:58:b6:e7:f6:bb:5b:b7:0e: 14:5e:80:95:e2:4b:1c:6f:6f:4d:1c:a9:a4:99:b2: 46:84:2d:8f:2f:ca:3b:ed:c6:8a:c7:b6:b8:db:17: b1:f7:82:06:7f:3f:d8:19:72:44:15:76:4a:f3:d9: f2:d1:20:ac:f2:aa:50:a2:87:63:a2:26:be:94:d3: ad:e7:b0:ff:dd:d7:79:be:d6:9d:57:7d:3c:63:df: 5d:80:36:99:44:b2:05:73:fd:d7:68:6e:d8:05:81: 66:c8:f3:51:31:17:08:6c:78:a9:be:99:49:e4:c9: b8:c1:7f:9e:e2:92:9e:83:08:25:dc:f5:90:e1:5e: e2:01:b1:bb:8e:4f:3f:8a:b0:a2:12:89:e2:5b:3e: 0d:4c:db:f6:9d:30:19:fe:6f:cb:99:16:71:8f:d5: 07:43:f0:d1:16:0f:7d:e8:20:c4:8e:b5:6d:73:a2: ed:ec:dd:03:3c:41:e1:14:07:fd:1f:51:38:12:e6: fa:9d:c5:cc:0c:c8:73:0c:20:01:7f:59:fa:90:6e: 01:3e:0d:9e:95:32:80:d2:13:71:f4:e2:a4:91:5e: 58:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:09:9E:FC:8E:38:EA:F9:D1:4B:30:03:EE:72:91:7A:37:67:59:1A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4f8921d5-1698-483f-9a18-c52cc17e0eca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.227.176.0/21 Signature Algorithm: sha256WithRSAEncryption 42:e7:b2:75:20:ed:09:bc:6c:2d:2d:76:41:62:9c:5b:43:b3: 40:a0:71:0c:03:04:d7:aa:19:c6:bf:70:2f:a3:4f:58:a9:cf: bd:99:f8:71:6d:10:4c:16:e9:ec:3d:0c:7d:ef:c5:84:d2:5a: 2f:eb:8f:f7:06:be:23:c1:fd:aa:4e:68:26:fc:63:ea:58:de: e3:b2:94:29:95:7b:0e:0c:4c:a3:c6:5f:a0:fe:35:fc:c5:1c: da:db:97:49:c2:75:7e:22:50:4b:e6:1e:89:21:3f:72:49:85: f8:3a:b1:9e:a7:02:79:a4:4a:3c:8e:b6:40:b9:e3:60:0c:e5: 2f:00:83:f7:36:f6:09:f6:cf:26:ee:1c:de:87:21:c2:99:ad: 94:ab:e1:81:36:91:93:e4:4e:08:64:3b:91:09:f5:03:5a:58: ec:31:8b:74:24:95:e9:be:1a:ae:2e:4a:29:5a:3e:5d:ad:1c: b0:68:c8:c1:e1:14:a9:fa:2a:8d:c0:f0:a4:60:c3:6d:4d:5f: c5:c8:89:47:fd:79:72:c8:ee:96:5a:f8:07:1a:0c:95:6b:03: a5:1a:46:09:43:63:e6:2f:5a:83:3e:e0:36:8e:6d:09:53:1b: 36:9f:af:7b:f5:8a:ee:52:5c:c5:21:e0:58:04:99:f8:9b:cd: 75:cc:6e:4c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQ9loHCU9sM81Xt98U99vwc67LFkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MjA1NTUwWhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BkZDk3Y2ZiNjcyZDA3ZTZkMmY5NzIwYzA3MmYxZTgxMTc2 YmQzNDdjMGI4NDEzNjgwODUwOThkZWE0NzJiNDM2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC01s38Ir+TAm7Mbp4F6DpMzZLN1i9tnct/O72TXKpoX0Ab ZJ1Ytuf2u1u3DhRegJXiSxxvb00cqaSZskaELY8vyjvtxorHtrjbF7H3ggZ/P9gZ ckQVdkrz2fLRIKzyqlCih2OiJr6U063nsP/d13m+1p1XfTxj312ANplEsgVz/ddo btgFgWbI81ExFwhseKm+mUnkybjBf57ikp6DCCXc9ZDhXuIBsbuOTz+KsKISieJb Pg1M2/adMBn+b8uZFnGP1QdD8NEWD33oIMSOtW1zou3s3QM8QeEUB/0fUTgS5vqd xcwMyHMMIAF/WfqQbgE+DZ6VMoDSE3H04qSRXlgzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUcQme/I446vnRSzAD7nKRejdnWRowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzRmODkyMWQ1LTE2OTgtNDgzZi05YTE4LWM1MmNjMTdlMGVjYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMN47AwDQYJKoZIhvcNAQELBQADggEBAELnsnUg7Qm8bC0tdkFinFtDs0Cg cQwDBNeqGca/cC+jT1ipz72Z+HFtEEwW6ew9DH3vxYTSWi/rj/cGviPB/apOaCb8 Y+pY3uOylCmVew4MTKPGX6D+NfzFHNrbl0nCdX4iUEvmHokhP3JJhfg6sZ6nAnmk SjyOtkC542AM5S8Ag/c29gn2zybuHN6HIcKZrZSr4YE2kZPkTghkO5EJ9QNaWOwx i3Qklem+Gq4uSilaPl2tHLBoyMHhFKn6Ko3A8KRgw21NX8XIiUf9eXLI7pZa+Aca DJVrA6UaRglDY+YvWoM+4DaObQlTGzafr3v1iu5SXMUh4FgEmfibzXXMbkw= -----END CERTIFICATE-----Generated at Sat Oct 18 00:13:08 2025 by rpki-client