$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9023bd89-bc79-4558-9c7c-89eb3d8cbb9c.roa File: 9023bd89-bc79-4558-9c7c-89eb3d8cbb9c.roa (raw, json) Hash identifier: sMUYpmbJRNOd1Fj6+F3urAP5QinzHYFkQzNS08zcmVM= Subject key identifier: BE:DD:C0:04:D5:08:3E:FD:18:9A:24:64:B0:8E:81:78:28:39:65:15 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 60414352EA73AA1D84A5348D4D8F434FE45253E0 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9023bd89-bc79-4558-9c7c-89eb3d8cbb9c.roa Signing time: Sun 19 Oct 2025 21:23:54 +0000 ROA not before: Sun 19 Oct 2025 21:23:54 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.224.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:41:43:52:ea:73:aa:1d:84:a5:34:8d:4d:8f:43:4f:e4:52:53:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 21:23:54 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=ef808f138c67caa70fbec02997d13071c8d229ace477ac620cb0aab431f8762f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ea:0d:fa:4a:b8:e9:ab:85:f7:26:4d:38:c2: 6b:80:41:98:01:d7:90:21:07:1c:7a:04:79:c9:81: fd:0b:91:a7:82:fe:cc:84:d0:84:9f:23:8c:a4:28: 8b:83:2f:77:d8:55:2c:ed:2e:dd:89:b3:ea:de:a9: 0f:70:c9:b0:e3:97:ac:36:a3:3e:87:95:40:6a:d4: ff:de:b7:54:94:20:b4:e1:2f:6c:bb:7a:9f:95:6f: aa:4b:49:2a:b4:29:4a:bb:dd:bc:53:b1:25:f9:ec: ff:3d:2a:d6:46:06:f2:5d:68:94:c8:34:37:f8:35: f5:ec:a9:95:83:7a:b7:2f:cb:d3:9d:3c:c1:03:bd: 61:fe:e1:e6:c5:40:6f:6d:8d:0c:80:8c:43:d2:64: 6a:e1:01:b8:0e:e0:42:c5:d3:a7:30:2d:22:e3:75: 5b:de:3d:d1:06:14:29:ae:54:54:7a:ab:f7:20:85: bd:fd:70:e1:44:e1:06:d9:6b:8b:38:f1:c6:a5:8f: e1:47:de:56:26:bd:70:a0:2f:fe:4e:cd:76:b6:d8: 1d:db:97:92:59:c9:55:c8:f1:c8:ee:e8:64:50:95: ec:c6:89:08:f8:81:a0:6f:0c:81:c3:fe:a0:03:8c: b7:a8:bc:82:16:71:6b:8d:13:0b:bd:ab:68:03:3b: 10:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:DD:C0:04:D5:08:3E:FD:18:9A:24:64:B0:8E:81:78:28:39:65:15 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9023bd89-bc79-4558-9c7c-89eb3d8cbb9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.224.21.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:f7:96:e7:1f:38:47:e0:ea:03:9a:f6:cb:19:de:7c:2d:0f: 1f:4d:72:76:45:d2:bd:c3:f2:ff:73:95:73:3a:58:d3:40:b7: ed:b6:55:fd:4e:d5:1a:45:2c:a8:df:cb:ff:d1:86:02:e2:d0: f8:01:7f:1e:e6:fd:6c:eb:88:cf:c5:65:15:d1:63:b9:2c:97: 48:30:74:5e:4f:1c:1b:0c:48:b4:97:78:f5:df:a1:41:1c:a7: 48:50:fa:0d:05:70:92:1b:ef:48:b8:cb:74:d0:40:72:ef:1e: 92:98:25:61:ca:7e:39:db:44:c2:ce:36:b8:f5:b2:64:16:82: 55:6d:86:41:98:76:32:71:37:e6:cd:5f:06:5a:52:3d:38:eb: 77:22:2f:52:ec:36:b4:50:ca:e2:fe:df:13:81:bc:b7:02:31: ad:85:1d:71:1b:e5:9e:9f:35:cc:4c:7d:d7:b4:0d:38:ad:7c: 9f:0b:65:dd:af:b2:bf:8d:14:fa:3e:a6:cb:f2:f5:d7:cf:86: 62:40:a9:d2:e4:fb:6e:81:6a:cd:6f:08:6a:77:e4:7f:aa:7d: 09:3d:87:53:b3:77:5e:99:21:51:49:10:20:5b:9c:cb:b1:48: 87:43:37:18:08:fe:8c:5b:fd:48:5e:96:89:b8:b9:47:d4:15: 0e:e8:24:f2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYEFDUupzqh2EpTSNTY9DT+RSU+AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MjEyMzU0WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BlZjgwOGYxMzhjNjdjYWE3MGZiZWMwMjk5N2QxMzA3MWM4 ZDIyOWFjZTQ3N2FjNjIwY2IwYWFiNDMxZjg3NjJmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDG6g36Srjpq4X3Jk04wmuAQZgB15AhBxx6BHnJgf0LkaeC /syE0ISfI4ykKIuDL3fYVSztLt2Js+reqQ9wybDjl6w2oz6HlUBq1P/et1SUILTh L2y7ep+Vb6pLSSq0KUq73bxTsSX57P89KtZGBvJdaJTINDf4NfXsqZWDercvy9Od PMEDvWH+4ebFQG9tjQyAjEPSZGrhAbgO4ELF06cwLSLjdVvePdEGFCmuVFR6q/cg hb39cOFE4QbZa4s48calj+FH3lYmvXCgL/5OzXa22B3bl5JZyVXI8cju6GRQlezG iQj4gaBvDIHD/qADjLeovIIWcWuNEwu9q2gDOxAXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUvt3ABNUIPv0YmiRksI6BeCg5ZRUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzkwMjNiZDg5LWJjNzktNDU1OC05YzdjLTg5ZWIzZDhjYmI5Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAN4BUwDQYJKoZIhvcNAQELBQADggEBAE/3lucfOEfg6gOa9ssZ3nwtDx9N cnZF0r3D8v9zlXM6WNNAt+22Vf1O1RpFLKjfy//RhgLi0PgBfx7m/WzriM/FZRXR Y7ksl0gwdF5PHBsMSLSXePXfoUEcp0hQ+g0FcJIb70i4y3TQQHLvHpKYJWHKfjnb RMLONrj1smQWglVthkGYdjJxN+bNXwZaUj0463ciL1LsNrRQyuL+3xOBvLcCMa2F HXEb5Z6fNcxMfde0DTitfJ8LZd2vsr+NFPo+psvy9dfPhmJAqdLk+26Bas1vCGp3 5H+qfQk9h1Ozd16ZIVFJECBbnMuxSIdDNxgI/oxb/Uhelom4uUfUFQ7oJPI= -----END CERTIFICATE-----Generated at Mon Oct 20 11:01:38 2025 by rpki-client