$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ca96a85f-02d8-4d04-928e-fdbf4f8d0184.roa File: ca96a85f-02d8-4d04-928e-fdbf4f8d0184.roa (raw, json) Hash identifier: CiKM6ml+5aL28K+t2WAkC6oPoeD3BzHMtMOj0yzstVQ= Subject key identifier: 86:F5:82:AA:CD:8B:F2:12:17:A7:64:4D:B2:6D:A6:3F:3B:0D:02:B5 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6D25A00262FCAC425F67F106CF5F6E29DFED07BE Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ca96a85f-02d8-4d04-928e-fdbf4f8d0184.roa Signing time: Sun 19 Oct 2025 13:23:43 +0000 ROA not before: Sun 19 Oct 2025 13:23:43 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.227.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:25:a0:02:62:fc:ac:42:5f:67:f1:06:cf:5f:6e:29:df:ed:07:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 13:23:43 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=d1522d89e7179114fa9bc54e935e5302e55b8ffd07a3b3b46737c9307d5d932a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b6:81:b5:bc:1b:7a:4e:09:d8:8c:c7:6f:91: 7e:cb:c3:7e:71:dd:2c:66:5d:54:f8:c2:af:84:98: 6f:73:2d:1e:af:4c:a9:86:d9:e5:ce:a2:f5:7b:cd: 86:98:dc:2c:4b:c5:b1:70:87:81:95:d7:e8:dc:f9: bb:b8:a5:54:51:ae:08:fb:d2:89:e5:a8:a2:54:01: c2:51:e9:20:29:51:53:df:7c:bf:92:27:ca:ce:34: 39:b5:4f:74:c4:78:e9:88:4e:65:d0:d7:33:2e:3c: 85:fc:bb:ff:32:98:e5:58:c0:64:38:d8:3a:b1:ad: b9:2a:76:91:ac:ac:c5:3f:17:ea:6e:cd:ea:9c:02: 8f:5a:63:74:86:cd:7b:d0:2b:76:58:39:ca:c3:d1: b6:72:6f:8a:67:85:e7:f3:2f:0d:bc:97:d2:19:b5: fe:46:72:49:d6:71:90:cf:fe:4b:d7:85:ab:99:cb: 9b:32:c1:40:13:fe:7f:3d:2b:b2:de:f8:7d:a8:c9: 44:12:cb:56:c4:66:11:b9:57:14:e5:6b:f5:9b:9c: 0e:37:62:e6:62:48:56:00:fe:97:c1:9a:7f:50:29: 39:39:fb:79:85:ef:9e:ba:a1:08:f5:38:d8:14:65: ec:3e:76:a2:a1:7a:3f:49:01:25:52:aa:52:82:f6: 03:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:F5:82:AA:CD:8B:F2:12:17:A7:64:4D:B2:6D:A6:3F:3B:0D:02:B5 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ca96a85f-02d8-4d04-928e-fdbf4f8d0184.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.227.58.0/24 Signature Algorithm: sha256WithRSAEncryption 03:b6:1e:c4:a5:ac:8a:5e:bd:e1:90:8f:0d:5c:af:ee:4a:42: fa:3e:e3:f7:d0:9b:e9:17:99:3b:fc:a7:20:e1:1e:7d:bc:ba: 54:f6:a8:a9:04:c5:df:9f:7b:2a:34:5d:df:60:6b:7d:38:73: 9f:89:b0:e2:44:f9:0f:b8:c2:6f:ec:7c:ea:f5:60:75:74:18: b0:d8:ab:ba:19:aa:7d:af:b6:17:b1:dd:34:4f:24:3c:a9:43: 6e:70:d0:b0:9f:6f:0b:4e:c9:2f:01:4e:6d:10:40:98:ff:84: 5e:27:e5:a2:8a:d8:ed:07:99:5d:35:29:aa:93:50:10:c7:43: 62:9a:b4:7a:ba:a5:5a:82:7f:e0:fb:82:28:bc:ef:9c:a2:ec: 42:a0:10:48:98:87:08:75:a7:82:05:1f:e3:82:af:66:18:d1: fd:8e:ab:fc:ce:b7:98:a7:24:49:c1:50:3b:6b:6e:93:a5:3f: f6:10:3e:99:2b:8a:c8:42:97:b9:32:06:80:ff:f6:66:26:af: dc:32:38:59:ec:7f:b9:87:30:ac:bf:a9:d6:59:10:5e:c7:b6: f8:9a:23:80:35:6f:bf:9f:64:dc:0a:5c:6f:c7:65:a0:ed:57: 14:14:49:a2:a1:aa:98:c0:c9:75:44:f0:a6:55:f1:90:0b:70: 1d:93:6c:91 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbSWgAmL8rEJfZ/EGz19uKd/tB74wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTMyMzQzWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BkMTUyMmQ4OWU3MTc5MTE0ZmE5YmM1NGU5MzVlNTMwMmU1 NWI4ZmZkMDdhM2IzYjQ2NzM3YzkzMDdkNWQ5MzJhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCmtoG1vBt6TgnYjMdvkX7Lw35x3SxmXVT4wq+EmG9zLR6v TKmG2eXOovV7zYaY3CxLxbFwh4GV1+jc+bu4pVRRrgj70onlqKJUAcJR6SApUVPf fL+SJ8rONDm1T3TEeOmITmXQ1zMuPIX8u/8ymOVYwGQ42DqxrbkqdpGsrMU/F+pu zeqcAo9aY3SGzXvQK3ZYOcrD0bZyb4pnhefzLw28l9IZtf5GcknWcZDP/kvXhauZ y5sywUAT/n89K7Le+H2oyUQSy1bEZhG5VxTla/WbnA43YuZiSFYA/pfBmn9QKTk5 +3mF7566oQj1ONgUZew+dqKhej9JASVSqlKC9gMxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhvWCqs2L8hIXp2RNsm2mPzsNArUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2NhOTZhODVmLTAyZDgtNGQwNC05MjhlLWZkYmY0ZjhkMDE4NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAN4zowDQYJKoZIhvcNAQELBQADggEBAAO2HsSlrIpeveGQjw1cr+5KQvo+ 4/fQm+kXmTv8pyDhHn28ulT2qKkExd+feyo0Xd9ga304c5+JsOJE+Q+4wm/sfOr1 YHV0GLDYq7oZqn2vthex3TRPJDypQ25w0LCfbwtOyS8BTm0QQJj/hF4n5aKK2O0H mV01KaqTUBDHQ2KatHq6pVqCf+D7gii875yi7EKgEEiYhwh1p4IFH+OCr2YY0f2O q/zOt5inJEnBUDtrbpOlP/YQPpkrishCl7kyBoD/9mYmr9wyOFnsf7mHMKy/qdZZ EF7HtviaI4A1b7+fZNwKXG/HZaDtVxQUSaKhqpjAyXVE8KZV8ZALcB2TbJE= -----END CERTIFICATE-----Generated at Mon Oct 20 02:55:35 2025 by rpki-client