$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9e1e8253-d314-4ead-ac84-df69bf57783f.roa File: 9e1e8253-d314-4ead-ac84-df69bf57783f.roa (raw, json) Hash identifier: iCJWofJNgf+bmfe2R43C72p1xN4LrYOSuLaou8JkiW8= Subject key identifier: BB:4A:97:3C:6E:21:E4:A8:92:F1:59:48:0A:30:F1:E4:5F:2B:C5:5E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 045B1871CB331E89F1784547EBBD02D1E90AF2AA Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9e1e8253-d314-4ead-ac84-df69bf57783f.roa Signing time: Sun 19 Oct 2025 19:42:34 +0000 ROA not before: Sun 19 Oct 2025 19:42:34 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.224.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:5b:18:71:cb:33:1e:89:f1:78:45:47:eb:bd:02:d1:e9:0a:f2:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 19:42:34 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=5cd8327220145c5a7c5edd130dbddce56ca30012d9c55c2e5d4b02017b605b04, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c8:7b:4e:78:88:1b:1b:16:41:65:76:e4:d9: 3f:e9:e6:73:40:b0:b0:94:21:78:6b:c2:b0:24:ce: ef:b9:d2:fd:ce:16:f8:52:52:88:0b:77:39:4b:04: e1:c9:bc:32:7c:01:96:c2:18:42:57:df:0e:e4:e7: 3f:a2:40:91:cc:e5:ff:3b:4d:13:32:8b:4b:c8:29: 5d:29:a1:15:63:3c:bf:08:49:97:80:d1:3e:0b:de: e1:9d:d1:3c:b5:69:25:95:cb:8b:b7:39:cd:1a:f0: 56:d6:d8:7e:b9:c8:e4:63:3d:b9:1b:55:8d:59:7f: 10:21:b4:3d:bf:98:ad:3f:c7:17:e9:57:8f:d2:82: 3b:77:41:dd:5f:bc:2e:17:d9:07:79:7e:d4:e3:a6: a7:3f:0f:55:e0:39:8f:45:54:b9:f9:de:b2:cf:5a: ca:ad:c4:d8:19:9a:00:d2:d4:f6:bf:26:aa:d6:2c: 68:3f:6b:87:f2:6a:59:a0:02:08:ad:4c:90:6b:d5: 1e:69:87:5e:86:89:be:1e:fb:cc:58:1c:b0:08:c5: bb:a7:28:d4:24:81:f0:50:dc:68:0c:f8:e0:90:ea: 5a:3e:61:9c:97:81:b0:55:0e:0f:6f:02:79:0a:18: ff:51:1c:42:5a:05:bd:cb:46:e9:7a:bc:5b:ae:a7: 4f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:4A:97:3C:6E:21:E4:A8:92:F1:59:48:0A:30:F1:E4:5F:2B:C5:5E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9e1e8253-d314-4ead-ac84-df69bf57783f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.224.216.0/22 Signature Algorithm: sha256WithRSAEncryption b0:2d:f4:85:0b:5b:e5:e6:77:2e:50:23:cb:cf:e1:04:52:e9: 7b:c7:0a:13:04:6e:a8:3e:d3:08:62:60:b1:eb:8e:8b:a1:9c: 80:08:b7:c7:43:9c:39:df:52:e2:6f:1b:ed:c0:33:e6:87:88: b7:2d:06:55:1a:d8:8a:34:78:0d:48:68:2c:7d:25:28:4e:ce: 3b:8a:19:38:6f:2c:20:49:84:20:b8:34:9e:db:cd:48:45:f2: c5:1e:66:e7:ed:13:0b:33:08:88:ea:e6:76:cb:5d:4b:64:48: 6e:9b:83:d0:6f:b5:9f:79:3d:aa:31:9c:dc:3a:62:44:48:fa: 91:3a:71:c9:e4:27:57:02:60:b2:44:48:d9:4a:30:54:7b:73: a5:a5:57:5a:23:cb:97:d5:80:3f:72:9d:b1:16:2d:04:cc:71: f1:1d:d9:df:88:f4:0a:4a:86:da:cc:ce:7e:88:7b:5a:60:54: a0:73:d6:41:ab:4f:d2:34:6f:97:65:94:ea:20:fd:2f:4f:7d: 2e:ad:0b:f8:26:c2:5a:15:1a:4c:2b:b7:d8:51:ca:07:7d:24: 33:0c:f7:cf:51:72:ac:a3:e3:a7:d7:a2:12:0d:b0:9e:bd:1b: 09:a2:7a:3d:67:de:27:e3:b9:e9:7f:ab:a1:36:34:cb:7e:22: 90:e2:65:01 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBFsYccszHonxeEVH670C0ekK8qowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTk0MjM0WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A1Y2Q4MzI3MjIwMTQ1YzVhN2M1ZWRkMTMwZGJkZGNlNTZj YTMwMDEyZDljNTVjMmU1ZDRiMDIwMTdiNjA1YjA0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDeyHtOeIgbGxZBZXbk2T/p5nNAsLCUIXhrwrAkzu+50v3O FvhSUogLdzlLBOHJvDJ8AZbCGEJX3w7k5z+iQJHM5f87TRMyi0vIKV0poRVjPL8I SZeA0T4L3uGd0Ty1aSWVy4u3Oc0a8FbW2H65yORjPbkbVY1ZfxAhtD2/mK0/xxfp V4/Sgjt3Qd1fvC4X2Qd5ftTjpqc/D1XgOY9FVLn53rLPWsqtxNgZmgDS1Pa/JqrW LGg/a4fyalmgAgitTJBr1R5ph16Gib4e+8xYHLAIxbunKNQkgfBQ3GgM+OCQ6lo+ YZyXgbBVDg9vAnkKGP9RHEJaBb3LRul6vFuup0+rAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUu0qXPG4h5KiS8VlICjDx5F8rxV4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzllMWU4MjUzLWQzMTQtNGVhZC1hYzg0LWRmNjliZjU3NzgzZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIN4NgwDQYJKoZIhvcNAQELBQADggEBALAt9IULW+Xmdy5QI8vP4QRS6XvH ChMEbqg+0whiYLHrjouhnIAIt8dDnDnfUuJvG+3AM+aHiLctBlUa2Io0eA1IaCx9 JShOzjuKGThvLCBJhCC4NJ7bzUhF8sUeZuftEwszCIjq5nbLXUtkSG6bg9BvtZ95 PaoxnNw6YkRI+pE6ccnkJ1cCYLJESNlKMFR7c6WlV1ojy5fVgD9ynbEWLQTMcfEd 2d+I9ApKhtrMzn6Ie1pgVKBz1kGrT9I0b5dllOog/S9PfS6tC/gmwloVGkwrt9hR ygd9JDMM989Rcqyj46fXohINsJ69Gwmiej1n3ifjuel/q6E2NMt+IpDiZQE= -----END CERTIFICATE-----Generated at Mon Oct 20 11:10:51 2025 by rpki-client