$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a715c80e-5dad-4a96-9158-f29bd82b4ad0.roa File: a715c80e-5dad-4a96-9158-f29bd82b4ad0.roa (raw, json) Hash identifier: gYZaqaW8u8m2bPsXz6sxRQ7HAJc9NhIkK2SNsM/NiYg= Subject key identifier: EC:24:6F:AA:76:ED:41:AA:15:C7:7A:BF:41:64:2D:77:2F:48:28:12 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0293BED85666654363D7CF5F1C24CCA4D402E78F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a715c80e-5dad-4a96-9158-f29bd82b4ad0.roa Signing time: Sun 19 Oct 2025 08:12:35 +0000 ROA not before: Sun 19 Oct 2025 08:12:35 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.225.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:93:be:d8:56:66:65:43:63:d7:cf:5f:1c:24:cc:a4:d4:02:e7:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 08:12:35 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=c33aa7563c5c5e3e91d1b19f1b7f4a2b61e73a9792251a220abb3ea85d9b8e4d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0e:20:78:7c:ba:20:00:07:40:b5:f8:44:ef: 00:62:02:62:50:e6:87:d1:c1:bc:ee:3b:b6:68:12: 4d:86:d0:c0:c7:25:09:e6:2e:c8:3c:26:50:17:82: 32:a2:bf:3e:32:0d:5b:74:5e:fd:04:a3:3e:3c:15: 2d:85:f7:41:54:3b:61:77:42:7e:79:57:81:84:36: 48:35:84:e7:0c:2f:dc:52:45:22:f3:a4:21:ab:d6: 6b:da:44:00:b1:98:fc:ef:f0:76:ff:e2:62:a9:2e: 51:7c:8d:e1:c5:da:25:41:ef:c4:d7:f3:b2:b1:8e: 44:dd:e7:c4:ea:99:07:d0:3b:0a:42:16:99:6c:04: f0:d6:d2:ab:88:0a:c6:98:4d:c3:1a:49:81:cc:53: cb:69:13:29:19:e8:cc:6c:ed:1f:6a:dc:49:0c:f1: 04:86:08:f7:26:1e:97:62:31:45:ba:c1:ff:80:8c: 92:de:4e:e0:0f:39:89:8d:4b:96:30:0f:d3:2f:9b: cd:6c:f0:5d:60:b9:9e:8d:09:86:cc:e7:f6:da:4f: 27:14:5f:37:ba:d5:cd:32:88:3b:a5:77:15:a0:b3: 2f:96:71:bc:2c:0d:d8:0d:93:bc:55:05:ed:ff:ff: ed:cc:43:1b:5b:19:ef:79:9d:48:45:16:07:e7:96: 83:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:24:6F:AA:76:ED:41:AA:15:C7:7A:BF:41:64:2D:77:2F:48:28:12 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a715c80e-5dad-4a96-9158-f29bd82b4ad0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.225.8.0/22 Signature Algorithm: sha256WithRSAEncryption 34:20:a6:69:2e:36:a8:85:d7:2f:70:a5:79:62:83:63:fa:9c: 2d:fe:d5:2b:71:35:1b:df:72:cf:89:27:74:90:2b:c0:dd:0b: a5:06:d5:1f:d5:3f:93:57:9d:56:6d:cd:93:e9:10:5a:6a:9f: 86:55:aa:1e:e6:e1:37:0d:24:15:71:16:3f:74:1b:2b:52:10: be:81:53:b9:82:9a:3a:27:1b:59:f6:2a:84:43:1a:06:14:c2: cc:1a:cb:3e:a0:fe:b5:b2:77:a0:15:81:ff:42:9a:46:76:3d: 78:0d:ba:f4:7f:e2:a7:b7:88:12:13:7c:77:7b:75:b0:68:26: f9:46:3f:ac:4e:6d:92:46:6d:3b:38:68:28:c7:3d:8b:09:79: 9f:2a:f4:dc:6f:97:70:7e:36:c2:82:18:35:8d:bd:88:f3:ef: b2:4a:f2:4e:19:d1:52:f5:8d:19:0d:60:d8:c1:18:07:aa:28: bc:1f:1e:1d:fc:f9:21:2a:71:ad:9d:0f:ed:5f:37:1b:c5:ef: c9:20:3f:7d:9b:e1:d0:22:0f:2f:6d:fc:e1:c5:07:20:7a:3f: b5:2e:26:e8:1a:73:de:50:e6:59:86:fa:d0:c1:36:5a:cf:90: 64:40:2d:9a:e8:1f:3d:fc:dc:a0:f9:ed:db:cc:ce:24:22:a1: ea:f3:fc:a9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUApO+2FZmZUNj189fHCTMpNQC548wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MDgxMjM1WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BjMzNhYTc1NjNjNWM1ZTNlOTFkMWIxOWYxYjdmNGEyYjYx ZTczYTk3OTIyNTFhMjIwYWJiM2VhODVkOWI4ZTRkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCeDiB4fLogAAdAtfhE7wBiAmJQ5ofRwbzuO7ZoEk2G0MDH JQnmLsg8JlAXgjKivz4yDVt0Xv0Eoz48FS2F90FUO2F3Qn55V4GENkg1hOcML9xS RSLzpCGr1mvaRACxmPzv8Hb/4mKpLlF8jeHF2iVB78TX87KxjkTd58TqmQfQOwpC FplsBPDW0quICsaYTcMaSYHMU8tpEykZ6Mxs7R9q3EkM8QSGCPcmHpdiMUW6wf+A jJLeTuAPOYmNS5YwD9Mvm81s8F1guZ6NCYbM5/baTycUXze61c0yiDuldxWgsy+W cbwsDdgNk7xVBe3//+3MQxtbGe95nUhFFgfnloNVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU7CRvqnbtQaoVx3q/QWQtdy9IKBIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2E3MTVjODBlLTVkYWQtNGE5Ni05MTU4LWYyOWJkODJiNGFkMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIN4QgwDQYJKoZIhvcNAQELBQADggEBADQgpmkuNqiF1y9wpXlig2P6nC3+ 1StxNRvfcs+JJ3SQK8DdC6UG1R/VP5NXnVZtzZPpEFpqn4ZVqh7m4TcNJBVxFj90 GytSEL6BU7mCmjonG1n2KoRDGgYUwswayz6g/rWyd6AVgf9CmkZ2PXgNuvR/4qe3 iBITfHd7dbBoJvlGP6xObZJGbTs4aCjHPYsJeZ8q9Nxvl3B+NsKCGDWNvYjz77JK 8k4Z0VL1jRkNYNjBGAeqKLwfHh38+SEqca2dD+1fNxvF78kgP32b4dAiDy9t/OHF ByB6P7UuJugac95Q5lmG+tDBNlrPkGRALZroHz383KD57dvMziQioerz/Kk= -----END CERTIFICATE-----Generated at Mon Oct 20 10:58:58 2025 by rpki-client