$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/70d5e7c9-d222-41f5-ab47-425ce7913904.roa File: 70d5e7c9-d222-41f5-ab47-425ce7913904.roa (raw, json) Hash identifier: znzzout9axV4AlIxphGxu4FTMjVJijv8Lbxgo1knN/0= Subject key identifier: AE:26:1C:19:5E:56:6C:F8:06:61:98:6E:5D:CA:FD:46:CF:2D:E2:11 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6DE2B89460B74B8D784537E25A7A93EC044CEF5A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/70d5e7c9-d222-41f5-ab47-425ce7913904.roa Signing time: Sun 19 Oct 2025 10:22:33 +0000 ROA not before: Sun 19 Oct 2025 10:22:33 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.224.26.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:e2:b8:94:60:b7:4b:8d:78:45:37:e2:5a:7a:93:ec:04:4c:ef:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 10:22:33 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=c0105732ab8e12dd6e6121958a37e8420b279aba625258f505895d4ef719c52a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ee:3d:3c:1a:b3:62:18:90:cc:13:04:b5:95: 6c:75:27:b0:2e:a7:aa:85:ed:4c:df:fa:78:56:38: f8:fe:85:50:09:a2:eb:22:42:2f:19:32:36:e6:ee: 48:ef:f8:44:fc:43:3b:58:a5:05:2c:26:f8:65:b6: 05:63:6e:77:99:10:32:26:5e:9e:80:cd:af:d2:e1: c0:84:b0:7f:2c:3f:70:7b:64:a7:3f:8e:6b:e8:f1: 61:b8:91:05:09:79:4d:55:12:f1:c5:56:87:5b:f4: 94:28:17:bf:81:d3:be:fc:0f:da:16:68:a0:20:0d: 04:4e:12:48:91:a1:df:60:ac:4e:e7:07:a5:e8:9f: 1d:c5:20:c3:d2:80:e6:ed:59:a7:f6:2c:31:76:08: ff:7c:c5:2c:71:f0:db:52:dc:03:9a:70:32:3c:92: f6:50:86:37:bc:4b:4a:09:8b:ac:fa:5c:fc:29:ca: cf:34:33:11:6e:3e:e1:2d:37:73:c8:71:cd:65:c1: f0:d8:f2:c3:79:2b:a7:66:ee:2f:c9:1b:ae:3c:3a: a7:b0:9f:a3:ee:0b:18:6f:73:9b:43:53:d3:47:b7: b4:b8:d8:aa:75:b1:35:12:33:c1:06:be:a8:da:23: 27:2f:bf:23:c9:54:0c:73:2e:9d:68:13:1e:db:8c: 57:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:26:1C:19:5E:56:6C:F8:06:61:98:6E:5D:CA:FD:46:CF:2D:E2:11 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/70d5e7c9-d222-41f5-ab47-425ce7913904.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.224.26.0/23 Signature Algorithm: sha256WithRSAEncryption 1d:de:16:10:b8:18:bf:18:9e:29:df:18:b6:d1:15:5e:c1:05: 65:af:b2:b1:af:d8:d1:30:20:84:3b:13:51:5b:b1:2a:9e:41: 82:dd:8b:15:10:5f:a0:7b:d2:4e:4d:8d:9f:30:fa:af:4e:6c: 04:10:4e:2a:6e:4b:0d:aa:17:9b:45:f1:bb:d6:63:ad:4c:e4: 2e:0e:a5:1d:5f:5f:bb:56:1d:79:b6:b1:09:36:e9:ca:f6:ee: cd:bb:4a:04:8c:1b:8c:34:84:f9:81:94:66:b7:bd:5e:c7:94: d1:11:a3:17:fb:17:94:9f:34:2d:f5:22:c4:84:c0:6d:72:f1: d2:00:fe:48:e3:18:3f:08:9c:a4:11:72:70:f1:ee:6d:2c:d9: 97:35:06:5f:78:26:01:28:5b:b4:72:d6:89:93:30:1f:1c:12: f1:b6:ae:c7:11:02:b1:b9:aa:81:6e:8e:5c:78:89:49:81:95: 69:66:c3:ff:9e:78:b5:9e:ec:29:fc:fa:dd:11:4f:89:7a:65: 64:02:a2:dc:94:c2:e0:a9:be:f2:db:91:28:07:6c:09:f9:e7: 0b:f3:2b:b5:cd:c2:7c:a3:80:94:3f:0a:00:7e:1b:a6:06:eb: 44:62:fc:74:42:26:02:a5:22:29:41:1b:83:bb:b2:97:f3:33: 50:23:f1:ba -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbeK4lGC3S414RTfiWnqT7ARM71owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTAyMjMzWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BjMDEwNTczMmFiOGUxMmRkNmU2MTIxOTU4YTM3ZTg0MjBi Mjc5YWJhNjI1MjU4ZjUwNTg5NWQ0ZWY3MTljNTJhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCk7j08GrNiGJDMEwS1lWx1J7Aup6qF7Uzf+nhWOPj+hVAJ ousiQi8ZMjbm7kjv+ET8QztYpQUsJvhltgVjbneZEDImXp6Aza/S4cCEsH8sP3B7 ZKc/jmvo8WG4kQUJeU1VEvHFVodb9JQoF7+B0778D9oWaKAgDQROEkiRod9grE7n B6Xonx3FIMPSgObtWaf2LDF2CP98xSxx8NtS3AOacDI8kvZQhje8S0oJi6z6XPwp ys80MxFuPuEtN3PIcc1lwfDY8sN5K6dm7i/JG648Oqewn6PuCxhvc5tDU9NHt7S4 2Kp1sTUSM8EGvqjaIycvvyPJVAxzLp1oEx7bjFcjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUriYcGV5WbPgGYZhuXcr9Rs8t4hEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzcwZDVlN2M5LWQyMjItNDFmNS1hYjQ3LTQyNWNlNzkxMzkwNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEN4BowDQYJKoZIhvcNAQELBQADggEBAB3eFhC4GL8YninfGLbRFV7BBWWv srGv2NEwIIQ7E1FbsSqeQYLdixUQX6B70k5NjZ8w+q9ObAQQTipuSw2qF5tF8bvW Y61M5C4OpR1fX7tWHXm2sQk26cr27s27SgSMG4w0hPmBlGa3vV7HlNERoxf7F5Sf NC31IsSEwG1y8dIA/kjjGD8InKQRcnDx7m0s2Zc1Bl94JgEoW7Ry1omTMB8cEvG2 rscRArG5qoFujlx4iUmBlWlmw/+eeLWe7Cn8+t0RT4l6ZWQCotyUwuCpvvLbkSgH bAn55wvzK7XNwnyjgJQ/CgB+G6YG60Ri/HRCJgKlIilBG4O7spfzM1Aj8bo= -----END CERTIFICATE-----Generated at Mon Oct 20 03:00:57 2025 by rpki-client