$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a7b7357a-56d5-441f-a4d4-ccb28197d724.roa File: a7b7357a-56d5-441f-a4d4-ccb28197d724.roa (raw, json) Hash identifier: jEaSP5Ty/ngkQQ6pTnRjVknKEO8cmV0xpTqF0SldwxU= Subject key identifier: 7E:29:7A:99:7B:64:3A:FC:2F:53:2D:FF:C3:7C:79:1B:F6:9E:7B:4E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 19623FD6C9A9D55F7E4565DEF32B83BE2245EF0E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a7b7357a-56d5-441f-a4d4-ccb28197d724.roa Signing time: Sun 19 Oct 2025 22:53:34 +0000 ROA not before: Sun 19 Oct 2025 22:53:34 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.225.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:62:3f:d6:c9:a9:d5:5f:7e:45:65:de:f3:2b:83:be:22:45:ef:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 22:53:34 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=d9f5009208d761e4279e7bc11ecc1c5c627f7631d035bc68ef27073868825824, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:66:42:83:f0:ce:3d:64:41:61:10:d8:77:ac: 37:2b:05:b4:8f:1f:bf:bb:f5:e9:e7:46:11:d6:fd: fb:be:40:46:0e:dd:d3:53:b5:4b:e2:54:cb:1f:15: b0:ad:92:0d:73:cb:49:8d:57:9b:ca:84:1c:28:af: e4:7e:fb:a8:e4:a3:6c:60:5e:7b:cb:17:3d:c6:bb: 63:ec:c5:fc:92:05:27:90:37:79:cf:b6:be:18:17: fe:bd:f7:79:9d:c2:3c:86:81:a0:0c:3b:26:87:85: a8:12:a3:2b:74:f5:26:2e:d5:cc:26:7e:9b:f2:1b: 9a:5c:1b:93:70:3b:18:ae:47:fa:4d:eb:f3:39:ea: a6:bd:4d:89:78:5e:90:bf:cf:cc:b9:a3:3f:73:bb: 80:1a:eb:d2:b3:24:26:7c:97:c5:6a:20:76:1f:7d: 26:89:e7:92:26:43:7f:2a:23:dc:05:32:f5:77:ab: 40:10:9d:db:5f:a5:41:9b:4b:5f:ce:73:ae:b6:08: 96:b6:ff:1c:c3:96:be:4e:79:ad:c7:70:e6:e6:5a: be:89:ac:11:0d:12:0d:34:ad:a6:cb:c9:f7:35:ab: da:32:f5:61:4e:86:3b:71:63:ec:09:68:7f:b7:28: 42:42:c6:f7:ea:aa:38:23:4a:04:b1:0d:f4:ee:c6: e8:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:29:7A:99:7B:64:3A:FC:2F:53:2D:FF:C3:7C:79:1B:F6:9E:7B:4E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a7b7357a-56d5-441f-a4d4-ccb28197d724.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.225.127.0/24 Signature Algorithm: sha256WithRSAEncryption 58:8d:0a:04:5d:46:a8:26:57:a7:86:b8:53:35:39:24:71:5d: 0b:38:1e:dc:be:58:28:85:a6:7f:f4:3f:63:dc:2a:db:ef:f9: 86:30:5b:0f:2f:59:c1:e5:63:80:5e:77:79:ce:05:5c:2a:43: 81:99:19:99:e6:86:4f:7a:cb:dd:27:24:0c:32:0a:56:72:0f: 80:66:a4:91:44:58:18:da:fb:09:06:d4:5a:b6:82:eb:46:d1: 98:19:cf:a5:7c:95:e9:be:e2:09:f9:86:3f:f1:ff:b5:5e:ae: c4:87:10:40:04:c2:d0:a8:77:b5:01:2e:46:e4:60:d7:fb:3a: d4:89:89:51:73:8a:aa:95:7f:4c:23:db:82:4d:0c:f5:55:7a: c0:f4:48:ae:fc:ca:35:62:18:b7:3b:d7:39:a2:04:ff:ed:9e: 09:09:f3:1d:66:70:5e:2f:10:53:13:1e:f7:f3:6a:93:60:9d: be:25:30:22:08:2a:71:c6:51:ed:c2:e8:b1:4b:d8:36:cb:52: dc:5f:e0:da:d0:d8:19:8b:3d:cd:87:1c:f3:b1:2c:e6:37:f7: 7b:83:68:37:2e:8d:e1:e5:f9:28:12:22:da:26:34:f4:30:48: 75:78:c6:06:2d:7a:1d:71:82:7e:62:d5:f4:85:dd:09:9e:57: 02:a8:5f:16 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGWI/1smp1V9+RWXe8yuDviJF7w4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MjI1MzM0WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BkOWY1MDA5MjA4ZDc2MWU0Mjc5ZTdiYzExZWNjMWM1YzYy N2Y3NjMxZDAzNWJjNjhlZjI3MDczODY4ODI1ODI0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDOZkKD8M49ZEFhENh3rDcrBbSPH7+79ennRhHW/fu+QEYO 3dNTtUviVMsfFbCtkg1zy0mNV5vKhBwor+R++6jko2xgXnvLFz3Gu2PsxfySBSeQ N3nPtr4YF/6993mdwjyGgaAMOyaHhagSoyt09SYu1cwmfpvyG5pcG5NwOxiuR/pN 6/M56qa9TYl4XpC/z8y5oz9zu4Aa69KzJCZ8l8VqIHYffSaJ55ImQ38qI9wFMvV3 q0AQndtfpUGbS1/Oc662CJa2/xzDlr5Oea3HcObmWr6JrBENEg00rabLyfc1q9oy 9WFOhjtxY+wJaH+3KEJCxvfqqjgjSgSxDfTuxuhBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUfil6mXtkOvwvUy3/w3x5G/aee04wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2E3YjczNTdhLTU2ZDUtNDQxZi1hNGQ0LWNjYjI4MTk3ZDcyNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAN4X8wDQYJKoZIhvcNAQELBQADggEBAFiNCgRdRqgmV6eGuFM1OSRxXQs4 Hty+WCiFpn/0P2PcKtvv+YYwWw8vWcHlY4Bed3nOBVwqQ4GZGZnmhk96y90nJAwy ClZyD4BmpJFEWBja+wkG1Fq2gutG0ZgZz6V8lem+4gn5hj/x/7VersSHEEAEwtCo d7UBLkbkYNf7OtSJiVFziqqVf0wj24JNDPVVesD0SK78yjViGLc71zmiBP/tngkJ 8x1mcF4vEFMTHvfzapNgnb4lMCIIKnHGUe3C6LFL2DbLUtxf4NrQ2BmLPc2HHPOx LOY393uDaDcujeHl+SgSItomNPQwSHV4xgYteh1xgn5i1fSF3QmeVwKoXxY= -----END CERTIFICATE-----Generated at Mon Oct 20 02:59:50 2025 by rpki-client