$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0b8c280b-de31-44f7-bd53-7e38b1520306.roa File: 0b8c280b-de31-44f7-bd53-7e38b1520306.roa (raw, json) Hash identifier: XLk3i1zxeAIX6L3EUo/RyqkiZC1DoopMIql9Xs6Vmag= Subject key identifier: FD:C0:90:33:E4:E8:CD:65:10:30:A1:C2:F0:AC:DB:F7:47:80:35:59 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 16289F408820AE0B67389564D87DAE5823859119 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0b8c280b-de31-44f7-bd53-7e38b1520306.roa Signing time: Sun 19 Oct 2025 17:32:37 +0000 ROA not before: Sun 19 Oct 2025 17:32:37 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.227.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:28:9f:40:88:20:ae:0b:67:38:95:64:d8:7d:ae:58:23:85:91:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 17:32:37 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=1396cf825782a7fd2f428152f79b14e32628360b289c8f7effedfddca7874671, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:24:1f:c8:45:55:a9:41:18:32:7e:ba:ab:3c: 1d:ec:15:66:9c:bc:60:70:36:13:d8:a6:db:a7:67: ea:51:c6:18:6c:de:ab:70:0f:4a:81:c2:95:95:06: a3:6d:2a:cb:08:c4:ae:2a:40:f4:82:82:ce:2f:57: 0e:0d:9d:8e:b4:13:45:83:27:af:86:c9:c9:fa:c0: 08:c6:ae:c5:7a:2c:f4:c6:a5:1d:1d:cf:39:f1:96: a9:b2:e3:24:ac:57:d9:e0:2b:5b:ae:8a:a3:14:f0: 6b:10:14:c7:6e:a7:35:90:9c:ac:e3:ed:f8:14:81: ae:4a:d7:76:5f:fe:6d:5e:25:97:64:83:e2:66:86: 48:66:51:cc:67:f8:7a:df:d3:a6:3a:fb:03:66:1e: a0:82:69:ea:d4:b2:11:ba:d7:e2:9d:80:40:26:14: 8d:2d:fc:a2:29:e9:00:95:ad:05:3a:8b:11:e8:67: 7f:9e:9b:3a:c7:de:43:49:ae:de:72:b5:ff:89:c0: 38:79:6e:eb:16:8a:93:43:2d:91:03:25:eb:30:ff: 61:5c:10:d8:bf:35:ee:82:fb:09:60:ec:f0:5e:ca: 09:47:31:50:84:3e:45:05:8f:2d:6a:62:89:41:ff: 31:b2:ad:53:4c:bc:ef:d4:6d:f1:db:e3:99:60:b2: 20:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:C0:90:33:E4:E8:CD:65:10:30:A1:C2:F0:AC:DB:F7:47:80:35:59 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0b8c280b-de31-44f7-bd53-7e38b1520306.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.227.117.0/24 Signature Algorithm: sha256WithRSAEncryption ac:bd:7b:e5:05:f5:72:7e:a1:90:ad:72:6b:42:4c:50:c1:47: 76:87:9e:fb:0b:2c:f6:87:0a:8f:2c:71:2c:c6:24:cc:f4:b1: 9c:54:f2:51:67:70:40:ac:1a:15:cd:26:45:fe:5c:02:01:02: 48:e5:d8:35:50:63:e2:ba:06:86:c5:0c:86:ac:3b:cc:8a:10: 5e:ea:b4:1d:fb:b6:9f:d2:63:1a:9e:a9:b3:77:95:09:2d:4b: ac:5b:4b:cc:68:ea:e1:b2:4d:53:08:05:c5:9d:7c:c9:2a:a0: 13:e3:a8:ee:e7:d5:be:30:9b:91:40:39:c7:bd:ee:1b:05:a6: 6a:29:0c:ae:8e:6b:5f:a3:67:4c:f5:98:55:75:2c:cc:16:ad: 0c:d4:9d:53:e4:34:80:08:e3:f9:6f:bb:37:5e:c9:ee:47:dd: 64:c1:42:b4:27:b6:f7:5d:4e:ba:34:d3:95:a8:0e:cb:6b:2d: 00:ec:b1:ad:1d:00:6f:55:c0:84:82:68:e8:06:37:00:2a:de: e0:17:44:43:21:7a:7a:81:c4:50:6a:83:c1:b9:7b:a7:2d:29: 17:59:28:21:73:94:2f:da:ac:7a:31:ee:1b:6a:78:58:c1:6a: 6f:a4:2c:4b:d4:b3:2a:83:d9:65:17:92:53:c1:ad:96:76:12: 52:c6:eb:d6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFiifQIggrgtnOJVk2H2uWCOFkRkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTczMjM3WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AxMzk2Y2Y4MjU3ODJhN2ZkMmY0MjgxNTJmNzliMTRlMzI2 MjgzNjBiMjg5YzhmN2VmZmVkZmRkY2E3ODc0NjcxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQClJB/IRVWpQRgyfrqrPB3sFWacvGBwNhPYptunZ+pRxhhs 3qtwD0qBwpWVBqNtKssIxK4qQPSCgs4vVw4NnY60E0WDJ6+Gycn6wAjGrsV6LPTG pR0dzznxlqmy4ySsV9ngK1uuiqMU8GsQFMdupzWQnKzj7fgUga5K13Zf/m1eJZdk g+JmhkhmUcxn+Hrf06Y6+wNmHqCCaerUshG61+KdgEAmFI0t/KIp6QCVrQU6ixHo Z3+emzrH3kNJrt5ytf+JwDh5busWipNDLZEDJesw/2FcENi/Ne6C+wlg7PBeyglH MVCEPkUFjy1qYolB/zGyrVNMvO/UbfHb45lgsiB7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU/cCQM+TozWUQMKHC8Kzb90eANVkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzBiOGMyODBiLWRlMzEtNDRmNy1iZDUzLTdlMzhiMTUyMDMwNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAN43UwDQYJKoZIhvcNAQELBQADggEBAKy9e+UF9XJ+oZCtcmtCTFDBR3aH nvsLLPaHCo8scSzGJMz0sZxU8lFncECsGhXNJkX+XAIBAkjl2DVQY+K6BobFDIas O8yKEF7qtB37tp/SYxqeqbN3lQktS6xbS8xo6uGyTVMIBcWdfMkqoBPjqO7n1b4w m5FAOce97hsFpmopDK6Oa1+jZ0z1mFV1LMwWrQzUnVPkNIAI4/lvuzdeye5H3WTB QrQntvddTro005WoDstrLQDssa0dAG9VwISCaOgGNwAq3uAXREMhenqBxFBqg8G5 e6ctKRdZKCFzlC/arHox7htqeFjBam+kLEvUsyqD2WUXklPBrZZ2ElLG69Y= -----END CERTIFICATE-----Generated at Mon Oct 20 05:17:33 2025 by rpki-client