$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/41d381a8-1ae8-4d23-ab14-b3f5c6ee9342.roa File: 41d381a8-1ae8-4d23-ab14-b3f5c6ee9342.roa (raw, json) Hash identifier: H2kaqBzQrcUtSQlvrd2hu++oXObp7ZtJSZaWxCV3S2Q= Subject key identifier: 24:9A:D8:2B:AE:FE:0B:42:12:81:E7:01:90:3D:E4:30:8A:DA:F1:65 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 05C94B3F8A051C295E5D387356CA67C6116A46DC Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/41d381a8-1ae8-4d23-ab14-b3f5c6ee9342.roa Signing time: Sun 19 Oct 2025 16:52:25 +0000 ROA not before: Sun 19 Oct 2025 16:52:25 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.227.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:c9:4b:3f:8a:05:1c:29:5e:5d:38:73:56:ca:67:c6:11:6a:46:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 16:52:25 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=a1b345cc7c01c8df31736779ac7519f9f1456d7e9dfb8605d3bc52a25e5ac8cf, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f8:1f:53:a7:71:7f:85:81:77:bf:e0:a6:f9: 09:f5:d4:20:d0:75:ab:a8:46:f5:42:b8:3b:f9:5b: b6:7d:83:e5:2d:47:98:71:64:5c:dc:cd:cc:94:76: 1a:a0:09:bc:1c:af:52:90:37:0f:b9:e0:5e:91:2c: d4:49:b0:24:f3:ea:5f:09:ef:d1:7d:6e:01:d7:22: 45:cf:37:53:3c:fd:e9:84:c3:13:0a:45:ee:64:5d: c1:19:3d:29:a1:80:a5:cd:6c:9e:17:48:92:f2:57: e3:98:69:78:04:66:57:a6:48:57:ea:52:e1:f9:64: 95:45:50:0f:c3:32:ce:97:33:2f:f2:d3:81:23:3b: c2:32:1c:4c:4a:5d:c3:d6:37:26:91:9b:b9:7b:06: 37:b2:c2:e9:be:d9:00:ab:54:4a:25:87:66:61:1f: 2e:37:75:52:13:08:62:22:f7:9c:c4:40:34:9a:68: 03:fd:4f:67:eb:30:7e:ef:e4:e2:a4:c5:e2:9a:73: f2:9a:4c:27:6a:51:15:ca:c8:3e:78:4c:5b:e8:2b: 2b:33:61:0b:e4:de:e8:de:c9:6a:f6:e9:09:7e:e0: 0b:1f:ef:93:08:e9:29:0d:ff:94:81:05:4c:53:47: d4:31:ef:34:b9:c8:37:bb:9f:b0:83:12:24:ae:1d: 38:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:9A:D8:2B:AE:FE:0B:42:12:81:E7:01:90:3D:E4:30:8A:DA:F1:65 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/41d381a8-1ae8-4d23-ab14-b3f5c6ee9342.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.227.40.0/21 Signature Algorithm: sha256WithRSAEncryption 22:d1:90:c4:94:27:ee:07:b5:9c:bd:b2:dd:20:16:00:3c:0a: 01:80:e2:7b:aa:4f:8c:34:18:50:8e:38:56:1d:b0:3d:7d:32: f3:46:01:b6:7b:5a:bf:6f:d7:6f:63:99:ea:ee:7b:73:f0:80: d8:0c:62:f3:8f:43:fb:95:26:27:21:76:91:f7:1b:08:92:57: b3:c5:e9:76:58:24:a4:69:1c:94:ec:87:e3:a2:c5:ad:6a:f0: 8f:b1:dd:ab:d0:ad:ab:63:c5:f1:43:10:70:b1:28:32:88:05: 4f:48:eb:2a:8b:90:66:11:f6:f8:ba:eb:29:0b:89:ff:35:14: 86:b4:91:a4:0c:fe:ff:ed:2c:ad:8e:da:b4:e2:26:94:e2:fa: 02:35:29:85:45:44:37:22:e6:c1:10:1b:98:87:ea:dd:01:96: a8:c0:98:52:95:f1:7f:81:60:cd:27:b8:4e:84:ce:96:a7:a0: f2:db:1f:a8:07:79:3e:3b:2b:c6:12:c5:d3:e3:05:36:36:df: 6d:45:7d:b6:2a:15:24:e3:ef:be:6f:22:59:af:b7:ac:2a:a5: 0d:2f:db:5d:fe:2a:aa:14:13:9c:da:dc:4e:bd:cf:87:5b:59: ad:5f:de:ba:ea:68:88:1b:21:db:9b:96:b1:d0:8a:c4:db:ba: 25:55:7c:83 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBclLP4oFHCleXThzVspnxhFqRtwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTY1MjI1WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BhMWIzNDVjYzdjMDFjOGRmMzE3MzY3NzlhYzc1MTlmOWYx NDU2ZDdlOWRmYjg2MDVkM2JjNTJhMjVlNWFjOGNmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2+B9Tp3F/hYF3v+Cm+Qn11CDQdauoRvVCuDv5W7Z9g+Ut R5hxZFzczcyUdhqgCbwcr1KQNw+54F6RLNRJsCTz6l8J79F9bgHXIkXPN1M8/emE wxMKRe5kXcEZPSmhgKXNbJ4XSJLyV+OYaXgEZlemSFfqUuH5ZJVFUA/DMs6XMy/y 04EjO8IyHExKXcPWNyaRm7l7Bjeywum+2QCrVEolh2ZhHy43dVITCGIi95zEQDSa aAP9T2frMH7v5OKkxeKac/KaTCdqURXKyD54TFvoKyszYQvk3ujeyWr26Ql+4Asf 75MI6SkN/5SBBUxTR9Qx7zS5yDe7n7CDEiSuHTi7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJJrYK67+C0ISgecBkD3kMIra8WUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQxZDM4MWE4LTFhZTgtNGQyMy1hYjE0LWIzZjVjNmVlOTM0Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMN4ygwDQYJKoZIhvcNAQELBQADggEBACLRkMSUJ+4HtZy9st0gFgA8CgGA 4nuqT4w0GFCOOFYdsD19MvNGAbZ7Wr9v129jmerue3PwgNgMYvOPQ/uVJichdpH3 GwiSV7PF6XZYJKRpHJTsh+Oixa1q8I+x3avQratjxfFDEHCxKDKIBU9I6yqLkGYR 9vi66ykLif81FIa0kaQM/v/tLK2O2rTiJpTi+gI1KYVFRDci5sEQG5iH6t0BlqjA mFKV8X+BYM0nuE6EzpanoPLbH6gHeT47K8YSxdPjBTY2321FfbYqFSTj775vIlmv t6wqpQ0v213+KqoUE5za3E69z4dbWa1f3rrqaIgbIdublrHQisTbuiVVfIM= -----END CERTIFICATE-----Generated at Mon Oct 20 02:56:16 2025 by rpki-client