$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/68679346-d5b4-4b56-b00e-58df68c079cb.roa File: 68679346-d5b4-4b56-b00e-58df68c079cb.roa (raw, json) Hash identifier: jp9f82YQk+T2n8YZMzG9cn0gb8oAzu1/VxPaTi1wbzQ= Subject key identifier: B7:4C:96:C3:B4:16:EE:FA:C1:03:DC:A3:4F:4B:2E:05:C2:64:6A:C0 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 794527041D38B088E1D559EE5CF5950AD42A16F4 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/68679346-d5b4-4b56-b00e-58df68c079cb.roa Signing time: Sat 18 Oct 2025 22:10:10 +0000 ROA not before: Sat 18 Oct 2025 22:10:10 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.249.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:45:27:04:1d:38:b0:88:e1:d5:59:ee:5c:f5:95:0a:d4:2a:16:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 22:10:10 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=5b6b0b2cac1eee86fed0d13596bea6b997e83af1ffb37241a49624ae8a7a50b1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b1:9e:87:f3:ec:23:75:ba:df:b5:2d:db:c8: 7d:77:fe:f5:bb:47:bf:50:85:de:25:a0:4f:14:87: f6:54:3a:a9:61:42:0b:d2:c5:73:40:b3:08:88:6c: 79:fa:e1:e7:68:cf:83:ef:33:ec:7e:86:60:59:c8: ff:a7:c0:88:f4:dc:8f:10:24:b0:82:b2:fe:98:7c: 2d:86:a2:9c:a0:e1:dc:e3:7d:57:d2:8e:a0:d6:b0: 9f:da:ca:d4:e5:6d:30:c9:f2:1a:d0:e4:90:5a:c9: dd:07:16:bf:f8:0f:85:a7:3d:00:46:09:dd:a9:bf: 26:80:6e:86:8f:fa:ff:10:54:ad:26:4c:a4:39:48: 68:b0:d0:f4:54:1f:3d:43:ea:4f:36:29:7e:9e:4a: 70:4b:42:8a:8d:ed:7b:47:14:f2:ec:e7:0c:8d:86: 87:39:0f:ce:e8:bd:fa:6b:87:66:d7:b1:14:ef:df: 7e:a0:87:73:2f:c8:19:dc:1b:0c:50:32:7f:09:65: f4:04:3b:9a:7f:bd:d3:f1:53:b1:7e:31:64:dc:38: 1a:6f:3b:ac:fb:bc:c9:30:f0:53:cb:b2:d0:3f:85: 9b:f9:b2:96:84:3b:9c:ab:3d:57:7b:5a:0c:ab:21: 63:8c:69:a3:5a:e6:f9:b6:01:e0:c5:b9:c6:24:de: f8:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:4C:96:C3:B4:16:EE:FA:C1:03:DC:A3:4F:4B:2E:05:C2:64:6A:C0 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/68679346-d5b4-4b56-b00e-58df68c079cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.249.53.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:98:a4:97:5b:0c:d9:d4:73:9c:22:e6:f2:e7:c2:cb:92:75: a0:51:c3:cd:68:5c:58:10:12:1f:cb:ba:79:55:e9:4f:86:be: 50:ac:d0:cd:b1:8d:fe:8c:90:6c:d6:f7:3c:06:b3:96:72:36: 89:ba:43:93:1a:a8:e0:34:09:ce:0c:36:7e:97:b0:a7:02:e5: bb:f1:e7:dc:c5:0e:4b:12:6f:cf:c9:0b:d0:da:65:fa:f3:74: 86:4e:f3:f2:9f:29:0e:43:6b:e2:1a:f6:64:4c:e6:6f:06:c5: 0a:75:50:16:2f:75:31:30:03:ee:94:c4:e4:a5:55:b4:21:76: e9:d1:a2:96:09:ab:f1:73:ad:df:b3:24:32:1e:4f:70:3c:2a: a5:45:ee:09:24:52:27:7e:86:30:34:c3:d8:c1:4c:e2:db:58: 40:98:af:eb:ed:69:9e:15:ec:c6:69:dc:83:62:96:0a:79:60: a0:29:e7:83:35:77:97:af:a7:cd:7a:86:36:de:2b:68:64:d3: 31:80:12:dc:23:0b:b5:d4:10:52:e6:ea:21:b8:da:34:b0:44: f5:86:38:df:23:b0:c3:e1:57:ee:5b:a7:1b:4b:32:61:03:0c: 2a:e3:8c:c0:aa:ea:19:8e:86:3a:c8:cf:ca:b1:3e:1f:85:9b: c1:68:f1:1e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUeUUnBB04sIjh1VnuXPWVCtQqFvQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MjIxMDEwWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A1YjZiMGIyY2FjMWVlZTg2ZmVkMGQxMzU5NmJlYTZiOTk3 ZTgzYWYxZmZiMzcyNDFhNDk2MjRhZThhN2E1MGIxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCcsZ6H8+wjdbrftS3byH13/vW7R79Qhd4loE8Uh/ZUOqlh QgvSxXNAswiIbHn64edoz4PvM+x+hmBZyP+nwIj03I8QJLCCsv6YfC2Gopyg4dzj fVfSjqDWsJ/aytTlbTDJ8hrQ5JBayd0HFr/4D4WnPQBGCd2pvyaAboaP+v8QVK0m TKQ5SGiw0PRUHz1D6k82KX6eSnBLQoqN7XtHFPLs5wyNhoc5D87ovfprh2bXsRTv 336gh3MvyBncGwxQMn8JZfQEO5p/vdPxU7F+MWTcOBpvO6z7vMkw8FPLstA/hZv5 spaEO5yrPVd7WgyrIWOMaaNa5vm2AeDFucYk3vhTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUt0yWw7QW7vrBA9yjT0suBcJkasAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzY4Njc5MzQ2LWQ1YjQtNGI1Ni1iMDBlLTU4ZGY2OGMwNzljYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAN+TUwDQYJKoZIhvcNAQELBQADggEBAD6YpJdbDNnUc5wi5vLnwsuSdaBR w81oXFgQEh/LunlV6U+GvlCs0M2xjf6MkGzW9zwGs5ZyNom6Q5MaqOA0Cc4MNn6X sKcC5bvx59zFDksSb8/JC9DaZfrzdIZO8/KfKQ5Da+Ia9mRM5m8GxQp1UBYvdTEw A+6UxOSlVbQhdunRopYJq/Fzrd+zJDIeT3A8KqVF7gkkUid+hjA0w9jBTOLbWECY r+vtaZ4V7MZp3INilgp5YKAp54M1d5evp816hjbeK2hk0zGAEtwjC7XUEFLm6iG4 2jSwRPWGON8jsMPhV+5bpxtLMmEDDCrjjMCq6hmOhjrIz8qxPh+Fm8Fo8R4= -----END CERTIFICATE-----Generated at Mon Oct 20 08:44:04 2025 by rpki-client