$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4feadb97-a412-4df9-8fe5-f914a83d108a.roa File: 4feadb97-a412-4df9-8fe5-f914a83d108a.roa (raw, json) Hash identifier: xVwA5uZCkQKlopzAbLAyD3J9DPPRGnvgeNrNG1aynsw= Subject key identifier: E2:5A:75:8F:7C:8E:57:7F:BC:36:DE:65:1D:5A:91:DB:ED:A7:66:7F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2F5BE880C6175B89B088EB9A10F19A92BB7529C5 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4feadb97-a412-4df9-8fe5-f914a83d108a.roa Signing time: Sun 19 Oct 2025 18:01:17 +0000 ROA not before: Sun 19 Oct 2025 18:01:17 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.225.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:5b:e8:80:c6:17:5b:89:b0:88:eb:9a:10:f1:9a:92:bb:75:29:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 18:01:17 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=68697c07dae16bf9e80417b587a4a8b81e4cdff61cc72e4a1b0b5b86d7c6b911, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6e:d7:8d:1e:3f:ca:2f:17:a0:cb:da:25:39: 94:5b:ec:76:1d:db:8f:f1:c5:a1:da:56:fc:3a:92: 20:01:73:66:72:79:73:e5:5b:96:35:9d:84:24:3b: f2:18:c0:6e:fa:66:6e:3f:73:d9:dd:0c:4e:f4:ea: 6b:2c:c1:90:2a:2c:75:3c:6e:21:e0:95:b0:03:85: f1:9e:9f:5e:73:bf:1c:0b:a6:4e:72:fe:01:b5:6f: f8:0f:d7:df:6a:46:b1:8d:22:16:a9:69:59:ab:2e: 63:1a:2d:62:34:91:91:a1:28:d9:d3:6c:e4:f7:27: 4d:42:57:cb:a3:8d:d3:58:71:34:31:b8:ac:9b:10: 23:9c:52:ae:66:23:5d:e9:e4:89:00:da:2d:31:b0: 8c:ad:d4:c8:42:45:96:72:b8:cc:53:19:63:7d:f9: e3:23:4c:e9:32:0d:1e:dc:3a:15:e0:23:c1:9c:49: be:3b:d0:30:02:a8:99:b8:a2:e0:04:a7:6d:ef:20: 92:8d:5d:10:00:96:07:cd:fb:ca:50:35:cd:b6:fd: 6a:9d:bf:7c:db:ab:6a:a8:ae:83:51:c5:bb:10:92: a3:30:8a:76:82:61:37:e8:7d:33:94:40:8a:73:75: 45:22:14:52:39:1b:45:74:25:71:9e:d9:ec:f4:73: 8e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:5A:75:8F:7C:8E:57:7F:BC:36:DE:65:1D:5A:91:DB:ED:A7:66:7F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4feadb97-a412-4df9-8fe5-f914a83d108a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.225.6.0/24 Signature Algorithm: sha256WithRSAEncryption 48:ea:64:d1:a8:79:81:14:e0:41:4f:68:d8:27:23:47:91:44: f7:1d:06:49:6c:a1:fa:f5:08:76:3d:9e:d3:75:b3:bb:11:21: d5:28:56:ee:7f:6e:04:f7:d5:f7:62:65:78:2e:5f:13:da:0f: 4c:ca:91:22:41:b1:8a:fb:11:78:51:f5:14:5e:d7:5c:f4:a9: aa:d6:13:df:0c:65:2f:6f:ef:4d:74:5e:0c:b6:23:1e:66:b3: 84:8c:a7:49:3a:11:5c:d2:01:56:88:5f:22:6f:ee:2e:fb:3a: 6c:55:fb:1d:72:19:1c:61:1b:67:d0:9f:91:ae:12:2d:d2:0b: c2:9e:ae:c1:30:f9:55:8b:94:1d:4f:9a:36:86:16:2a:b3:2b: 17:87:86:20:5e:51:59:a6:09:89:ae:58:79:07:b3:95:a5:81: 0b:72:d7:c9:9f:a8:b8:c0:a0:19:bc:7d:f7:ad:0c:c6:f0:3f: b6:51:53:d5:d6:b5:04:47:5e:d8:9a:6b:23:40:88:a9:f0:f1: 04:9a:94:c3:4c:24:d4:99:a7:6f:0f:fb:79:03:f3:69:e9:59: 4d:f7:38:31:b2:d1:d6:33:b1:da:1f:ef:f1:03:27:18:8a:d5: de:47:a5:c1:9b:f7:39:71:c0:43:5b:53:cf:53:e7:15:7d:ca: f4:09:b0:93 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUL1vogMYXW4mwiOuaEPGakrt1KcUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTgwMTE3WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A2ODY5N2MwN2RhZTE2YmY5ZTgwNDE3YjU4N2E0YThiODFl NGNkZmY2MWNjNzJlNGExYjBiNWI4NmQ3YzZiOTExMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/bteNHj/KLxegy9olOZRb7HYd24/xxaHaVvw6kiABc2Zy eXPlW5Y1nYQkO/IYwG76Zm4/c9ndDE706msswZAqLHU8biHglbADhfGen15zvxwL pk5y/gG1b/gP199qRrGNIhapaVmrLmMaLWI0kZGhKNnTbOT3J01CV8ujjdNYcTQx uKybECOcUq5mI13p5IkA2i0xsIyt1MhCRZZyuMxTGWN9+eMjTOkyDR7cOhXgI8Gc Sb470DACqJm4ouAEp23vIJKNXRAAlgfN+8pQNc22/Wqdv3zbq2qoroNRxbsQkqMw inaCYTfofTOUQIpzdUUiFFI5G0V0JXGe2ez0c44FAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU4lp1j3yOV3+8Nt5lHVqR2+2nZn8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzRmZWFkYjk3LWE0MTItNGRmOS04ZmU1LWY5MTRhODNkMTA4YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAN4QYwDQYJKoZIhvcNAQELBQADggEBAEjqZNGoeYEU4EFPaNgnI0eRRPcd Bklsofr1CHY9ntN1s7sRIdUoVu5/bgT31fdiZXguXxPaD0zKkSJBsYr7EXhR9RRe 11z0qarWE98MZS9v7010Xgy2Ix5ms4SMp0k6EVzSAVaIXyJv7i77OmxV+x1yGRxh G2fQn5GuEi3SC8KersEw+VWLlB1PmjaGFiqzKxeHhiBeUVmmCYmuWHkHs5WlgQty 18mfqLjAoBm8ffetDMbwP7ZRU9XWtQRHXtiaayNAiKnw8QSalMNMJNSZp28P+3kD 82npWU33ODGy0dYzsdof7/EDJxiK1d5HpcGb9zlxwENbU89T5xV9yvQJsJM= -----END CERTIFICATE-----Generated at Mon Oct 20 05:16:51 2025 by rpki-client