$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6580a593-f8a0-4b48-a117-0f14e5e3479d.roa File: 6580a593-f8a0-4b48-a117-0f14e5e3479d.roa (raw, json) Hash identifier: g/udpHSLDW7sgmbfr1XFWRBlIdwBgix1wxdWXMbvVlI= Subject key identifier: BB:C9:4B:88:E8:3B:74:95:89:6C:B0:99:F7:76:CC:E7:EB:84:EF:56 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2FF37352DD091BD02E10DAD3993EE1C1D1C0D88F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6580a593-f8a0-4b48-a117-0f14e5e3479d.roa Signing time: Sun 19 Oct 2025 17:23:35 +0000 ROA not before: Sun 19 Oct 2025 17:23:35 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.226.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:f3:73:52:dd:09:1b:d0:2e:10:da:d3:99:3e:e1:c1:d1:c0:d8:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 17:23:35 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=c449b6263706b687ce77b1fff4a2101a4be5053fdae63bf7d70bd65ec7ff1268, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:39:c5:89:c2:9f:fe:f0:7c:53:60:f2:b8:9a: 64:c6:4c:9a:f9:68:f7:3f:40:a5:48:8a:f1:aa:5e: e0:c5:d3:80:35:40:76:c1:94:6f:ed:76:73:36:ad: cf:5a:ed:ad:99:3e:82:05:e8:dc:b3:6a:c5:fa:10: 34:89:ae:f1:2a:55:c6:7c:62:36:5e:99:4a:6c:e0: 3a:b3:f8:a5:e4:8f:ed:f7:d3:04:de:53:03:0a:d4: 6d:f0:7a:13:13:16:6b:02:07:df:43:2f:56:92:89: 3e:2c:30:0a:2b:6e:a0:74:93:fc:b6:9a:f9:5f:49: 6e:11:5f:c2:f6:a5:77:24:2c:f6:dd:8a:c8:d4:7f: 43:5b:25:f6:f5:a1:7a:ef:02:f4:d9:4c:f2:47:ff: 87:e9:8c:05:90:c8:3a:a2:13:e6:50:85:95:cc:89: 0e:7c:81:96:c7:fc:d2:35:05:c8:16:73:64:86:cc: 66:50:bb:b3:01:63:38:90:87:59:f4:ba:58:67:91: 2e:69:cd:51:78:0b:92:6d:75:3a:1a:64:da:c4:d4: e4:9e:eb:e4:33:f2:28:58:54:cf:2f:b7:13:cc:d9: 43:a1:6b:91:22:24:00:93:1f:30:a7:9f:5c:93:5c: 99:6b:f2:83:28:3f:38:fa:d2:84:90:98:99:ba:c8: 1a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:C9:4B:88:E8:3B:74:95:89:6C:B0:99:F7:76:CC:E7:EB:84:EF:56 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6580a593-f8a0-4b48-a117-0f14e5e3479d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.226.219.0/24 Signature Algorithm: sha256WithRSAEncryption 74:b8:ef:03:48:21:2f:a0:d4:cb:fb:fe:25:2d:85:3d:fc:3d: 97:8f:8f:4d:7c:94:2d:1b:ff:04:58:99:fd:b5:35:7a:69:02: dc:1d:5a:d1:0c:db:67:ee:52:b5:46:d8:ed:0f:47:23:26:79: d2:8c:6e:b4:a8:43:8d:b5:6c:3a:b6:3b:e4:f8:6b:f7:22:ce: 5c:a6:8f:5e:7a:90:af:68:79:3c:4e:39:89:4a:3d:91:a3:68: 5f:5e:2f:1b:68:3d:17:b5:93:84:ed:37:e5:85:18:c6:ac:87: ea:c7:55:66:b4:e5:0b:fa:c0:c1:8d:d8:8a:0d:40:8a:02:e8: a2:4b:4e:db:3e:a8:7a:08:ee:db:7c:3d:ca:97:03:26:4e:4c: 4b:f0:78:2f:01:e1:e5:95:a4:21:a5:f6:9b:e5:96:cf:47:1e: c3:ea:d5:39:33:58:52:df:16:86:12:2b:58:4b:1a:13:11:40: 71:93:ae:20:d6:3e:f3:9c:ad:37:f3:c4:fb:55:1d:79:a9:e8: dc:20:d3:b1:20:6c:90:6c:30:d5:ab:12:9e:ee:23:4a:9c:c2: 53:f1:c8:ee:f0:45:b5:7f:cb:8a:09:58:19:93:d0:33:aa:58: 16:f1:d3:15:3e:2b:df:d9:65:64:39:a1:b3:f7:71:10:27:34: f9:79:9a:18 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUL/NzUt0JG9AuENrTmT7hwdHA2I8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTcyMzM1WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BjNDQ5YjYyNjM3MDZiNjg3Y2U3N2IxZmZmNGEyMTAxYTRi ZTUwNTNmZGFlNjNiZjdkNzBiZDY1ZWM3ZmYxMjY4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyOcWJwp/+8HxTYPK4mmTGTJr5aPc/QKVIivGqXuDF04A1 QHbBlG/tdnM2rc9a7a2ZPoIF6NyzasX6EDSJrvEqVcZ8YjZemUps4Dqz+KXkj+33 0wTeUwMK1G3wehMTFmsCB99DL1aSiT4sMAorbqB0k/y2mvlfSW4RX8L2pXckLPbd isjUf0NbJfb1oXrvAvTZTPJH/4fpjAWQyDqiE+ZQhZXMiQ58gZbH/NI1BcgWc2SG zGZQu7MBYziQh1n0ulhnkS5pzVF4C5JtdToaZNrE1OSe6+Qz8ihYVM8vtxPM2UOh a5EiJACTHzCnn1yTXJlr8oMoPzj60oSQmJm6yBqvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUu8lLiOg7dJWJbLCZ93bM5+uE71YwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzY1ODBhNTkzLWY4YTAtNGI0OC1hMTE3LTBmMTRlNWUzNDc5ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAN4tswDQYJKoZIhvcNAQELBQADggEBAHS47wNIIS+g1Mv7/iUthT38PZeP j018lC0b/wRYmf21NXppAtwdWtEM22fuUrVG2O0PRyMmedKMbrSoQ421bDq2O+T4 a/cizlymj156kK9oeTxOOYlKPZGjaF9eLxtoPRe1k4TtN+WFGMash+rHVWa05Qv6 wMGN2IoNQIoC6KJLTts+qHoI7tt8PcqXAyZOTEvweC8B4eWVpCGl9pvlls9HHsPq 1TkzWFLfFoYSK1hLGhMRQHGTriDWPvOcrTfzxPtVHXmp6Nwg07EgbJBsMNWrEp7u I0qcwlPxyO7wRbV/y4oJWBmT0DOqWBbx0xU+K9/ZZWQ5obP3cRAnNPl5mhg= -----END CERTIFICATE-----Generated at Mon Oct 20 05:17:15 2025 by rpki-client