$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/73d99045-ca3b-441f-953d-5b96c9c5f82b.roa File: 73d99045-ca3b-441f-953d-5b96c9c5f82b.roa (raw, json) Hash identifier: qilkQkt5Etp9hPdzBx2++WnM50mWfYzEtySCa5XTCjk= Subject key identifier: 14:31:1E:0F:C4:F2:96:D5:FD:CC:D3:56:72:52:60:09:C3:02:BC:87 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 65DB6A6B4039BD6E89C3BD89A9CC412DB95EEAC2 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/73d99045-ca3b-441f-953d-5b96c9c5f82b.roa Signing time: Wed 24 Sep 2025 20:00:11 +0000 ROA not before: Wed 24 Sep 2025 20:00:11 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.227.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:db:6a:6b:40:39:bd:6e:89:c3:bd:89:a9:cc:41:2d:b9:5e:ea:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 20:00:11 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=7a1baf1a22d887cffa091ba7e16fa7ff3ed6dbae22a3a2fd99fa8d9a0a3e0196, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:71:ed:9e:06:ee:80:b9:51:5b:a7:7e:85:a1: ad:06:25:7f:be:b6:b1:29:b0:3b:01:0f:6b:19:d5: 6f:77:19:ce:30:c6:44:61:e2:6e:19:86:b1:bb:73: c7:78:42:80:6d:04:c7:7b:7b:b4:5e:3e:c0:ad:21: a4:47:19:92:f5:4e:11:7a:53:ee:37:a0:27:35:b5: 29:a9:a4:a0:f4:92:69:54:e3:45:e5:2a:d3:33:e9: 99:ff:00:06:a1:07:8f:8e:3e:2f:91:26:e3:fc:4e: cb:5a:0f:aa:17:25:ba:14:d9:5f:f1:2d:08:34:d5: b6:0e:89:7b:5d:05:8d:96:ed:c2:71:ee:03:78:37: 8e:ef:4c:f1:bb:71:a2:5e:8d:b4:94:64:a0:02:e5: e3:aa:96:3e:1c:95:06:98:01:21:3f:cc:ae:b2:7f: 57:88:9d:02:2e:a6:2f:42:3f:8f:44:c3:9f:02:f5: 1c:ec:04:62:5d:58:e3:17:bd:0d:09:34:6f:67:ab: 49:9b:83:4b:ba:75:92:8e:46:00:6b:48:67:80:6c: 86:fc:3a:d0:d1:f8:7c:5e:72:17:4c:84:ee:60:86: 0d:4f:e8:3e:f4:08:98:0e:b9:44:b0:23:3a:81:51: eb:16:83:12:7a:06:56:92:a2:4c:90:c5:86:96:90: a8:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:31:1E:0F:C4:F2:96:D5:FD:CC:D3:56:72:52:60:09:C3:02:BC:87 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/73d99045-ca3b-441f-953d-5b96c9c5f82b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.227.94.0/24 Signature Algorithm: sha256WithRSAEncryption 72:7c:5c:23:6c:03:fa:9d:04:c9:5f:41:33:4e:3d:d1:7b:d7: 66:a5:ea:3f:87:f9:7d:07:b3:a6:b9:41:25:e1:c4:13:a2:bf: d0:89:19:f2:96:27:32:50:54:f5:7e:21:54:5f:70:9c:f1:ca: 88:72:7d:b6:41:38:57:d5:38:25:fb:de:d4:fc:19:10:0c:8c: 8e:30:d4:26:9f:7f:dd:62:dd:33:60:44:8e:84:41:67:f5:21: c8:5b:6e:ed:81:27:20:24:78:96:a7:36:ad:54:b7:e7:38:45: 32:88:0c:21:11:fa:b2:ef:be:f2:f5:e9:28:ac:de:e7:55:a5: ae:b8:1f:40:98:a5:40:9d:ec:bf:27:fd:a0:1b:d2:ff:b7:c6: a9:e3:42:55:c3:73:5f:dd:1a:6f:1b:87:1d:9a:25:a2:29:48: b8:a3:5b:85:93:1f:bd:af:e4:a4:3b:e8:3c:60:44:f3:68:fa: ab:a6:09:dd:7c:90:fb:a4:a8:4f:57:a0:40:fa:bb:86:98:9f: 07:4f:fb:0e:82:cb:7f:3f:32:67:06:8f:55:3f:33:bb:d0:a3: c1:28:5b:63:2c:02:f8:1d:2e:ba:4f:c9:2b:49:2c:47:93:b0: f2:89:ab:55:64:a2:b6:d2:a7:d6:a0:18:1c:74:2b:7e:a7:49: 72:92:b9:ad -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZdtqa0A5vW6Jw72JqcxBLble6sIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MjAwMDExWhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A3YTFiYWYxYTIyZDg4N2NmZmEwOTFiYTdlMTZmYTdmZjNl ZDZkYmFlMjJhM2EyZmQ5OWZhOGQ5YTBhM2UwMTk2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyce2eBu6AuVFbp36Foa0GJX++trEpsDsBD2sZ1W93Gc4w xkRh4m4ZhrG7c8d4QoBtBMd7e7RePsCtIaRHGZL1ThF6U+43oCc1tSmppKD0kmlU 40XlKtMz6Zn/AAahB4+OPi+RJuP8TstaD6oXJboU2V/xLQg01bYOiXtdBY2W7cJx 7gN4N47vTPG7caJejbSUZKAC5eOqlj4clQaYASE/zK6yf1eInQIupi9CP49Ew58C 9RzsBGJdWOMXvQ0JNG9nq0mbg0u6dZKORgBrSGeAbIb8OtDR+HxechdMhO5ghg1P 6D70CJgOuUSwIzqBUesWgxJ6BlaSokyQxYaWkKgXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUFDEeD8TyltX9zNNWclJgCcMCvIcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzczZDk5MDQ1LWNhM2ItNDQxZi05NTNkLTViOTZjOWM1ZjgyYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAN414wDQYJKoZIhvcNAQELBQADggEBAHJ8XCNsA/qdBMlfQTNOPdF712al 6j+H+X0Hs6a5QSXhxBOiv9CJGfKWJzJQVPV+IVRfcJzxyohyfbZBOFfVOCX73tT8 GRAMjI4w1Caff91i3TNgRI6EQWf1Ichbbu2BJyAkeJanNq1Ut+c4RTKIDCER+rLv vvL16Sis3udVpa64H0CYpUCd7L8n/aAb0v+3xqnjQlXDc1/dGm8bhx2aJaIpSLij W4WTH72v5KQ76DxgRPNo+qumCd18kPukqE9XoED6u4aYnwdP+w6Cy38/MmcGj1U/ M7vQo8EoW2MsAvgdLrpPyStJLEeTsPKJq1VkorbSp9agGBx0K36nSXKSua0= -----END CERTIFICATE-----Generated at Fri Oct 17 23:50:24 2025 by rpki-client