$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ac1a6be0-3edd-4d1f-93e4-ae83f0e70e5b.roa File: ac1a6be0-3edd-4d1f-93e4-ae83f0e70e5b.roa (raw, json) Hash identifier: EnOcRDWdTRZdbR+hhbWsi6SzTvQB1DBn/jSTcGzKzZ8= Subject key identifier: D9:88:5B:C2:5C:CA:63:3B:3C:FE:79:76:85:F0:CD:1C:1B:C9:29:26 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 72BE68CD071D894B1F130FCFFCF1420985125877 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ac1a6be0-3edd-4d1f-93e4-ae83f0e70e5b.roa Signing time: Sun 19 Oct 2025 21:30:18 +0000 ROA not before: Sun 19 Oct 2025 21:30:18 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.227.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:be:68:cd:07:1d:89:4b:1f:13:0f:cf:fc:f1:42:09:85:12:58:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 21:30:18 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=8721087befb65c4289dce2333349908793acb473ec7a498efd6074bec6600c09, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:ed:5b:16:61:52:8a:8d:d2:f0:20:46:9b:d7: 22:86:93:77:2d:0e:a5:a2:f6:02:35:93:85:14:c7: 27:7a:f6:97:03:a8:f6:db:ed:d8:73:06:9d:83:c1: e5:86:52:2a:52:5e:d8:f3:c3:7c:d2:58:47:9f:34: 51:c2:86:3b:91:ab:15:47:c6:67:bb:aa:9e:f2:de: 66:ca:06:bf:cd:88:09:ec:ef:6a:8e:1e:36:ee:18: b6:eb:35:d0:a6:3f:98:17:cd:84:ad:9f:ba:d3:ba: e1:17:1f:9b:39:97:cc:68:17:5a:c0:e4:23:50:a8: e4:83:ae:1c:9a:60:72:2c:cf:31:11:9c:52:3b:75: e7:c8:d7:c3:04:ab:bf:8e:39:72:b8:14:9b:42:68: 76:ff:d5:6b:94:18:91:5a:8a:b8:f4:31:2b:55:f7: d3:a9:9b:04:31:6b:98:a1:f9:c9:d5:c9:19:c0:f2: 34:59:7f:26:27:55:5f:72:42:04:03:63:a2:52:99: d1:d4:56:dd:f6:24:c1:fd:35:a3:62:a0:48:4c:b8: 7d:fb:dd:90:b8:72:00:56:7c:35:13:8d:7c:67:a3: 85:c2:ed:6e:d5:19:be:8b:d8:31:f7:0e:ff:ed:9c: 9a:4f:c1:1c:8d:f0:7b:5a:de:57:34:45:88:d2:69: 95:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:88:5B:C2:5C:CA:63:3B:3C:FE:79:76:85:F0:CD:1C:1B:C9:29:26 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ac1a6be0-3edd-4d1f-93e4-ae83f0e70e5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.227.237.0/24 Signature Algorithm: sha256WithRSAEncryption 41:f4:ed:75:66:0f:07:97:a1:3d:14:e5:c3:06:62:6f:33:e1: 18:3c:a1:54:4b:d5:73:f1:fa:5a:ff:87:f2:2e:82:5b:57:3f: d4:e4:f0:86:12:3e:a3:ff:d6:53:4c:e1:04:8e:fa:8b:76:3d: db:12:5e:d0:3c:71:a4:10:5e:e0:6f:45:20:12:f3:8b:43:36: 07:87:b7:97:22:90:ed:3d:c4:50:78:cb:53:e0:0f:11:75:54: 34:8e:e8:d5:23:fb:55:08:ef:9c:e2:37:7c:fe:04:2f:f8:56: 3e:62:f6:09:c2:a9:2a:ed:41:91:f9:f0:de:45:63:d0:14:01: 05:06:75:6f:7e:52:68:52:ea:aa:50:a1:ad:11:a4:90:e8:74: 7d:5c:28:80:bd:af:8f:7a:88:6f:31:17:4e:26:2c:9d:b1:8f: cd:6a:43:99:4f:f2:93:38:00:12:88:f9:c5:8d:ba:56:62:57: 33:3a:96:29:26:69:0c:7b:94:bf:2c:5d:07:41:a7:de:f9:ea: 78:d2:ba:c9:19:89:05:fb:a9:a7:f7:07:39:45:43:18:a9:32: 98:4f:18:8d:e3:b2:79:42:e2:75:96:fb:ce:9c:3f:a8:4c:f7: 76:8a:77:44:6e:e8:4f:79:4d:21:0d:76:45:9b:93:e4:06:33: ee:8e:55:b7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcr5ozQcdiUsfEw/P/PFCCYUSWHcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MjEzMDE4WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4NzIxMDg3YmVmYjY1YzQyODlkY2UyMzMzMzQ5OTA4Nzkz YWNiNDczZWM3YTQ5OGVmZDYwNzRiZWM2NjAwYzA5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD27VsWYVKKjdLwIEab1yKGk3ctDqWi9gI1k4UUxyd69pcD qPbb7dhzBp2DweWGUipSXtjzw3zSWEefNFHChjuRqxVHxme7qp7y3mbKBr/NiAns 72qOHjbuGLbrNdCmP5gXzYStn7rTuuEXH5s5l8xoF1rA5CNQqOSDrhyaYHIszzER nFI7defI18MEq7+OOXK4FJtCaHb/1WuUGJFairj0MStV99OpmwQxa5ih+cnVyRnA 8jRZfyYnVV9yQgQDY6JSmdHUVt32JMH9NaNioEhMuH373ZC4cgBWfDUTjXxno4XC 7W7VGb6L2DH3Dv/tnJpPwRyN8Hta3lc0RYjSaZU/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU2YhbwlzKYzs8/nl2hfDNHBvJKSYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2FjMWE2YmUwLTNlZGQtNGQxZi05M2U0LWFlODNmMGU3MGU1Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAN4+0wDQYJKoZIhvcNAQELBQADggEBAEH07XVmDweXoT0U5cMGYm8z4Rg8 oVRL1XPx+lr/h/IugltXP9Tk8IYSPqP/1lNM4QSO+ot2PdsSXtA8caQQXuBvRSAS 84tDNgeHt5cikO09xFB4y1PgDxF1VDSO6NUj+1UI75ziN3z+BC/4Vj5i9gnCqSrt QZH58N5FY9AUAQUGdW9+UmhS6qpQoa0RpJDodH1cKIC9r496iG8xF04mLJ2xj81q Q5lP8pM4ABKI+cWNulZiVzM6likmaQx7lL8sXQdBp9756njSuskZiQX7qaf3BzlF QxipMphPGI3jsnlC4nWW+86cP6hM93aKd0Ru6E95TSENdkWbk+QGM+6OVbc= -----END CERTIFICATE-----Generated at Mon Oct 20 09:49:20 2025 by rpki-client