$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d5bf28a9-ad82-4da4-b422-bcc48da19085.roa File: d5bf28a9-ad82-4da4-b422-bcc48da19085.roa (raw, json) Hash identifier: VIPQpyxMJ3iCS6madrJISp6GKg1qTY7Qi8/b8vNaeWM= Subject key identifier: 98:E9:04:22:DD:42:C4:69:10:BC:40:55:48:0A:79:39:13:F3:E5:7E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6A4611B174D1FA0177D276C1D902F9BD6E9A45BE Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d5bf28a9-ad82-4da4-b422-bcc48da19085.roa Signing time: Sun 19 Oct 2025 20:10:09 +0000 ROA not before: Sun 19 Oct 2025 20:10:09 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.225.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:46:11:b1:74:d1:fa:01:77:d2:76:c1:d9:02:f9:bd:6e:9a:45:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 20:10:09 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=8303a03c7e91fd4e769f79c0cc8be72118d27ef3c7c513545ad8b5537f75f7d4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:68:04:a5:15:a9:a3:ea:52:4c:6b:24:3f:03: ca:27:6d:62:fb:c4:40:ed:1d:c7:84:3f:44:e8:5a: 80:b3:d5:b5:bc:8e:54:ca:cf:6b:00:18:9c:d0:d0: af:e8:1d:e9:a9:62:9f:02:04:2b:67:3c:aa:64:7c: 0d:43:b8:35:87:bc:ba:ed:72:f0:1e:1b:91:15:06: f5:82:96:28:b7:18:ae:45:a5:1e:d0:a8:b5:03:d6: bc:69:18:f8:96:a2:18:82:67:50:e4:2d:11:68:9e: f2:86:3c:66:76:61:7e:33:19:27:b7:cf:a2:ba:0b: a2:e6:94:9f:02:5d:e2:0c:65:d8:dd:30:e1:0b:af: 56:1d:61:58:b2:a1:95:64:25:20:f6:ef:cd:2e:6c: 5e:bf:ef:13:33:bd:25:79:c0:79:62:17:8d:6d:ca: 59:24:55:f6:0f:1c:e0:58:f2:7c:1b:7b:d8:7b:fc: e1:14:b5:34:f5:f2:e6:b3:44:ed:2f:f4:74:a8:ea: 16:92:93:51:c2:9f:84:24:00:ff:28:ca:44:af:c0: ab:7a:7f:69:45:14:21:18:07:32:f0:a8:82:eb:28: 1a:69:4e:c2:89:49:d0:d6:b8:a7:a5:43:2b:04:a3: 4e:bf:43:0c:ec:a4:58:d4:9b:93:28:eb:9e:9c:af: 41:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:E9:04:22:DD:42:C4:69:10:BC:40:55:48:0A:79:39:13:F3:E5:7E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d5bf28a9-ad82-4da4-b422-bcc48da19085.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.225.200.0/23 Signature Algorithm: sha256WithRSAEncryption b2:d9:20:50:30:5d:0f:29:a7:e1:ca:ed:d1:fa:df:ab:eb:f1: 7e:bf:a1:bc:2b:c7:90:b0:b8:71:7b:bc:79:57:ff:79:fb:46: 2f:91:5d:f0:4d:d5:26:af:78:4b:68:4e:c6:4d:f2:1e:4d:f2: cd:4d:6c:ac:1e:19:df:5d:2d:39:91:ea:cb:cb:0a:cf:17:24: 54:b1:a6:e0:59:71:24:bb:1b:a0:ec:9d:cb:30:ae:af:d6:2c: e0:35:b9:bb:6c:ed:de:e3:d1:60:67:da:bd:e6:21:33:71:41: 1a:2d:29:8b:1e:ea:0f:a9:e4:d0:c3:e0:6b:b5:5c:92:95:99: 03:00:b3:da:0a:b6:a3:66:bc:d5:51:93:a5:6f:eb:4b:30:94: 79:b8:f2:05:ef:d6:35:2b:ee:af:12:5d:4a:83:a9:e3:28:15: 85:ca:82:c4:05:70:dc:04:e8:dd:79:f2:a3:c7:8f:82:12:63: 8e:4b:e7:0c:da:1a:0f:37:81:e0:77:22:4b:46:b4:8c:be:3b: 95:ff:e8:ff:0d:a7:e6:c7:cb:0f:41:ea:9d:e5:65:76:f2:7e: cf:2d:ab:0a:75:1f:d5:4e:c7:43:5d:99:17:30:5b:65:82:94: 88:cd:85:db:90:74:fe:69:d3:7a:a3:24:78:f6:03:f1:ce:23: f4:48:44:c1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUakYRsXTR+gF30nbB2QL5vW6aRb4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MjAxMDA5WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4MzAzYTAzYzdlOTFmZDRlNzY5Zjc5YzBjYzhiZTcyMTE4 ZDI3ZWYzYzdjNTEzNTQ1YWQ4YjU1MzdmNzVmN2Q0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHaASlFamj6lJMayQ/A8onbWL7xEDtHceEP0ToWoCz1bW8 jlTKz2sAGJzQ0K/oHempYp8CBCtnPKpkfA1DuDWHvLrtcvAeG5EVBvWClii3GK5F pR7QqLUD1rxpGPiWohiCZ1DkLRFonvKGPGZ2YX4zGSe3z6K6C6LmlJ8CXeIMZdjd MOELr1YdYViyoZVkJSD2780ubF6/7xMzvSV5wHliF41tylkkVfYPHOBY8nwbe9h7 /OEUtTT18uazRO0v9HSo6haSk1HCn4QkAP8oykSvwKt6f2lFFCEYBzLwqILrKBpp TsKJSdDWuKelQysEo06/QwzspFjUm5Mo656cr0GVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUmOkEIt1CxGkQvEBVSAp5ORPz5X4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Q1YmYyOGE5LWFkODItNGRhNC1iNDIyLWJjYzQ4ZGExOTA4NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEN4cgwDQYJKoZIhvcNAQELBQADggEBALLZIFAwXQ8pp+HK7dH636vr8X6/ obwrx5CwuHF7vHlX/3n7Ri+RXfBN1SaveEtoTsZN8h5N8s1NbKweGd9dLTmR6svL Cs8XJFSxpuBZcSS7G6Dsncswrq/WLOA1ubts7d7j0WBn2r3mITNxQRotKYse6g+p 5NDD4Gu1XJKVmQMAs9oKtqNmvNVRk6Vv60swlHm48gXv1jUr7q8SXUqDqeMoFYXK gsQFcNwE6N158qPHj4ISY45L5wzaGg83geB3IktGtIy+O5X/6P8Np+bHyw9B6p3l ZXbyfs8tqwp1H9VOx0NdmRcwW2WClIjNhduQdP5p03qjJHj2A/HOI/RIRME= -----END CERTIFICATE-----Generated at Mon Oct 20 15:46:40 2025 by rpki-client