$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a7c7ba24-ce04-4fdb-9fc7-3dd9dd767c2d.roa File: a7c7ba24-ce04-4fdb-9fc7-3dd9dd767c2d.roa (raw, json) Hash identifier: 76uI4ipr6s28feSU7nsg3l2LLRgjV/qSu2TY08yT0Q0= Subject key identifier: 86:5C:94:C1:94:58:8F:21:8E:4B:6E:43:C9:02:59:EF:CA:9F:83:4D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 33B915B10EB25DE8D954D70EF3D0ADCF4B58AAA5 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a7c7ba24-ce04-4fdb-9fc7-3dd9dd767c2d.roa Signing time: Wed 24 Sep 2025 18:58:16 +0000 ROA not before: Wed 24 Sep 2025 18:58:16 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.224.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:b9:15:b1:0e:b2:5d:e8:d9:54:d7:0e:f3:d0:ad:cf:4b:58:aa:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 18:58:16 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=c75fe35ccc86567c81e2ef9ac42772e5ab404e082f2688b44679f0cc0ac88271, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:db:74:96:83:33:da:30:da:73:a6:86:8c:dc: 7f:67:e3:cb:86:8b:7b:6a:8a:28:55:a0:31:7e:6b: 15:49:c8:0e:92:a9:49:3d:0b:fd:70:20:da:f1:d9: 7e:58:21:b9:3b:82:a5:59:95:e5:6c:01:e0:6e:a4: dd:02:2a:1d:90:08:8f:2c:d1:70:f5:c4:55:e8:5a: 36:5d:5b:0d:f8:d8:90:17:86:53:ef:b8:9b:7b:ed: 15:ad:60:9e:56:64:de:12:7c:0b:ad:6b:7c:2f:ea: c3:9e:1a:f8:4a:2b:44:be:e6:a8:6e:7a:d5:78:d5: e0:4c:b0:b4:38:c0:c6:42:1c:88:31:24:eb:e8:ab: 54:bc:f4:4f:fa:db:64:be:f9:d1:77:d1:b4:59:2f: c3:c8:b6:43:0a:41:70:d5:1d:32:ff:bd:1c:7b:8d: e8:52:5b:ae:bc:17:fd:81:0f:fa:54:65:be:ef:30: 76:de:31:eb:9c:ac:9e:ac:c4:ac:82:c0:9d:e8:09: 97:4c:25:ea:c2:cf:b8:bd:97:79:7a:14:6b:7c:d1: 33:36:d2:84:be:b3:52:8b:fe:f1:e9:de:93:04:2f: e9:2a:6c:e6:6e:5b:5d:38:ee:af:96:73:01:6b:b6: 15:b9:3c:8c:19:d3:8d:82:48:cb:f2:82:20:d3:29: 56:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:5C:94:C1:94:58:8F:21:8E:4B:6E:43:C9:02:59:EF:CA:9F:83:4D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a7c7ba24-ce04-4fdb-9fc7-3dd9dd767c2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.224.128.0/24 Signature Algorithm: sha256WithRSAEncryption 33:86:45:9a:42:77:24:4b:17:e5:bd:a8:fd:19:e5:9f:87:5c: 02:8b:20:e4:37:2b:51:bb:5a:ee:c2:37:f7:46:f7:f2:8b:67: 78:3c:7e:ff:ca:eb:ee:62:d2:3f:c6:a9:41:d3:86:87:58:34: c3:fc:5d:04:18:7d:08:77:e6:c0:4a:6b:14:2c:48:13:5c:7e: 72:80:74:f3:c0:85:8a:1c:2f:62:32:63:c0:bb:ec:11:7b:72: b3:f8:20:ff:ef:0a:90:c2:91:07:b1:89:aa:c1:3b:e6:dc:5e: 2b:d1:dc:0f:87:20:4a:4b:90:45:06:8e:9e:19:a6:04:2b:0c: c8:80:fc:a1:81:41:e9:46:5c:59:95:77:ad:23:84:b0:32:4e: cb:98:4b:be:a2:b8:56:fe:fc:78:a6:6f:80:de:39:4b:3e:4c: 1c:2e:67:d3:55:b7:b8:58:aa:f0:de:25:12:44:22:b9:f2:f0: 51:4c:c2:43:40:78:8d:b4:23:93:6d:a2:e2:d2:16:74:06:c7: aa:cf:1b:48:ae:ec:a2:7d:44:79:f6:4c:3d:cc:35:3a:3e:83: e5:44:5e:9d:5e:fa:8a:41:8c:9d:6c:d1:af:14:f2:10:18:bd: 01:6d:f3:a1:88:58:98:3b:ac:78:74:b0:f0:b2:a6:1c:8b:45: c9:63:a8:95 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUM7kVsQ6yXejZVNcO89Ctz0tYqqUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MTg1ODE2WhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BjNzVmZTM1Y2NjODY1NjdjODFlMmVmOWFjNDI3NzJlNWFi NDA0ZTA4MmYyNjg4YjQ0Njc5ZjBjYzBhYzg4MjcxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCW23SWgzPaMNpzpoaM3H9n48uGi3tqiihVoDF+axVJyA6S qUk9C/1wINrx2X5YIbk7gqVZleVsAeBupN0CKh2QCI8s0XD1xFXoWjZdWw342JAX hlPvuJt77RWtYJ5WZN4SfAuta3wv6sOeGvhKK0S+5qhuetV41eBMsLQ4wMZCHIgx JOvoq1S89E/622S++dF30bRZL8PItkMKQXDVHTL/vRx7jehSW668F/2BD/pUZb7v MHbeMeucrJ6sxKyCwJ3oCZdMJerCz7i9l3l6FGt80TM20oS+s1KL/vHp3pMEL+kq bOZuW1047q+WcwFrthW5PIwZ042CSMvygiDTKVbtAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhlyUwZRYjyGOS25DyQJZ78qfg00wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2E3YzdiYTI0LWNlMDQtNGZkYi05ZmM3LTNkZDlkZDc2N2MyZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAN4IAwDQYJKoZIhvcNAQELBQADggEBADOGRZpCdyRLF+W9qP0Z5Z+HXAKL IOQ3K1G7Wu7CN/dG9/KLZ3g8fv/K6+5i0j/GqUHThodYNMP8XQQYfQh35sBKaxQs SBNcfnKAdPPAhYocL2IyY8C77BF7crP4IP/vCpDCkQexiarBO+bcXivR3A+HIEpL kEUGjp4ZpgQrDMiA/KGBQelGXFmVd60jhLAyTsuYS76iuFb+/Himb4DeOUs+TBwu Z9NVt7hYqvDeJRJEIrny8FFMwkNAeI20I5NtouLSFnQGx6rPG0iu7KJ9RHn2TD3M NTo+g+VEXp1e+opBjJ1s0a8U8hAYvQFt86GIWJg7rHh0sPCyphyLRcljqJU= -----END CERTIFICATE-----Generated at Fri Oct 17 23:41:39 2025 by rpki-client