$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a12a9f8f-aa97-4825-813a-d52c39216013.roa File: a12a9f8f-aa97-4825-813a-d52c39216013.roa (raw, json) Hash identifier: i2ufBFzQ67dabRFRSuAKI6QN7Su2eqi56RSjnyQli4U= Subject key identifier: 1D:66:15:0E:9A:7B:EB:3D:52:30:32:EC:7F:0B:EE:25:9D:B1:BB:1E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7D076FE07790174B5507A14BCFC3A03552913FD1 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a12a9f8f-aa97-4825-813a-d52c39216013.roa Signing time: Wed 24 Sep 2025 20:26:19 +0000 ROA not before: Wed 24 Sep 2025 20:26:19 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.227.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:07:6f:e0:77:90:17:4b:55:07:a1:4b:cf:c3:a0:35:52:91:3f:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 20:26:19 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=e7ef787c0215289b7cb3f40d471fd0fed49da33e043b3ff20756ffe2eb66ce30, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a5:f2:3e:35:23:11:67:b0:56:23:e3:fb:f7: 60:87:98:17:7c:05:1b:c6:eb:96:25:ad:94:ce:51: 78:02:2e:c2:0e:6c:c1:71:5e:6f:99:3d:00:b3:a9: 2e:e0:3c:74:6e:40:ac:71:17:a2:96:83:be:a6:88: 7b:31:1a:8d:dd:d3:1b:a1:31:fa:3c:82:b0:71:f3: 56:94:a2:37:0e:80:bc:b5:4e:18:bd:c9:95:4f:5d: 2e:33:12:8f:73:de:a2:3c:b7:ba:36:ee:e7:62:ad: 57:4a:b7:1d:76:8a:6f:38:75:50:32:f6:15:bf:81: 0a:88:29:ab:fc:2e:6c:0d:55:72:ba:94:a2:55:42: ee:3e:06:4d:55:7a:df:52:f9:3b:98:b8:3b:36:05: ba:f1:cc:cf:e2:fb:6f:11:52:f2:67:25:d9:76:18: ab:ce:70:ff:3a:19:ff:58:2d:a0:ca:7d:b0:b3:a0: c8:84:91:9c:15:0e:ce:76:17:ec:69:2f:13:55:5d: c4:4f:0d:77:1a:44:f6:0e:65:88:25:37:ac:5d:e3: 8e:e4:25:e5:2f:c1:a7:e9:58:74:d5:13:15:b8:a2: 43:9f:13:e9:ee:8a:58:9f:2a:88:4e:4e:76:6f:61: 30:01:09:a0:38:b3:31:8e:ac:44:00:61:f9:0b:ac: e8:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:66:15:0E:9A:7B:EB:3D:52:30:32:EC:7F:0B:EE:25:9D:B1:BB:1E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a12a9f8f-aa97-4825-813a-d52c39216013.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.227.132.0/23 Signature Algorithm: sha256WithRSAEncryption 5a:b4:cc:bc:e0:dc:d5:36:47:53:a4:a1:dc:e2:92:84:23:c0: 34:36:00:0a:4a:dd:12:ae:2f:b8:73:b8:56:f5:78:f4:10:57: e7:31:69:4a:d4:82:fd:c4:af:36:d4:29:63:02:14:6c:ee:ec: 8d:cf:2e:ae:9e:9a:38:e8:cc:fa:b5:3b:8b:75:97:ac:f5:ed: b4:3d:0b:36:13:1d:f5:5c:67:64:ce:e1:aa:6f:37:55:03:85: 33:c2:65:0e:87:be:08:4a:69:19:ba:1a:d0:c1:de:00:87:19: 30:3b:4f:12:8d:eb:86:11:e2:26:44:20:24:4a:8a:3a:c9:6d: f5:a7:3d:0d:ff:3b:9c:b4:eb:33:05:85:04:73:77:2e:d1:ab: b5:04:1e:6a:82:13:f9:9d:69:03:d6:c0:d7:a8:26:10:70:d4: 30:0f:97:76:c4:5c:5f:92:be:aa:77:b0:10:f5:0a:0f:6e:5e: f1:8b:c6:65:a6:64:8a:af:e7:59:e7:50:f7:db:f5:0b:68:3c: dd:05:cf:0e:4b:2e:16:e3:7c:65:75:6f:fa:03:30:42:6f:0f: b4:83:7c:fb:42:b6:01:9a:db:88:b3:c0:4e:4b:a6:23:c4:bd: bb:2e:ab:9d:4e:0f:b1:78:9e:4a:da:d5:19:c6:fd:1f:02:a3: 94:b0:92:2e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfQdv4HeQF0tVB6FLz8OgNVKRP9EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MjAyNjE5WhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BlN2VmNzg3YzAyMTUyODliN2NiM2Y0MGQ0NzFmZDBmZWQ0 OWRhMzNlMDQzYjNmZjIwNzU2ZmZlMmViNjZjZTMwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCpfI+NSMRZ7BWI+P792CHmBd8BRvG65YlrZTOUXgCLsIO bMFxXm+ZPQCzqS7gPHRuQKxxF6KWg76miHsxGo3d0xuhMfo8grBx81aUojcOgLy1 Thi9yZVPXS4zEo9z3qI8t7o27udirVdKtx12im84dVAy9hW/gQqIKav8LmwNVXK6 lKJVQu4+Bk1Vet9S+TuYuDs2BbrxzM/i+28RUvJnJdl2GKvOcP86Gf9YLaDKfbCz oMiEkZwVDs52F+xpLxNVXcRPDXcaRPYOZYglN6xd447kJeUvwafpWHTVExW4okOf E+nuilifKohOTnZvYTABCaA4szGOrEQAYfkLrOhLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUHWYVDpp76z1SMDLsfwvuJZ2xux4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2ExMmE5ZjhmLWFhOTctNDgyNS04MTNhLWQ1MmMzOTIxNjAxMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEN44QwDQYJKoZIhvcNAQELBQADggEBAFq0zLzg3NU2R1OkodzikoQjwDQ2 AApK3RKuL7hzuFb1ePQQV+cxaUrUgv3ErzbUKWMCFGzu7I3PLq6emjjozPq1O4t1 l6z17bQ9CzYTHfVcZ2TO4apvN1UDhTPCZQ6HvghKaRm6GtDB3gCHGTA7TxKN64YR 4iZEICRKijrJbfWnPQ3/O5y06zMFhQRzdy7Rq7UEHmqCE/mdaQPWwNeoJhBw1DAP l3bEXF+Svqp3sBD1Cg9uXvGLxmWmZIqv51nnUPfb9QtoPN0Fzw5LLhbjfGV1b/oD MEJvD7SDfPtCtgGa24izwE5LpiPEvbsuq51OD7F4nkra1RnG/R8Co5Swki4= -----END CERTIFICATE-----Generated at Fri Oct 17 22:05:13 2025 by rpki-client