$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e11403c1-3750-4fe6-974e-39f808085073.roa File: e11403c1-3750-4fe6-974e-39f808085073.roa (raw, json) Hash identifier: 87BsABll8hzvRx+cKzMjDDF7k4ADR+VDTwap0xfGVfw= Subject key identifier: BC:C1:68:F7:53:EF:72:A3:3F:AC:BE:4B:ED:95:2A:10:A9:A4:49:80 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2B66240E3702E5EA086B6CF9D31931B08B6D3AEF Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e11403c1-3750-4fe6-974e-39f808085073.roa Signing time: Sun 19 Oct 2025 13:12:45 +0000 ROA not before: Sun 19 Oct 2025 13:12:45 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.225.190.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:66:24:0e:37:02:e5:ea:08:6b:6c:f9:d3:19:31:b0:8b:6d:3a:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 13:12:45 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=768f0f5377e38294513673d859255f429333dc82ce4b817616dff284b0e079a7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:78:5d:50:bb:c6:86:7f:b7:bc:23:8c:13:3a: 0a:a2:3d:7a:93:5b:0e:59:99:d1:f4:cf:6c:53:0e: 8f:78:0e:06:fc:59:27:c1:88:04:73:9d:3e:92:f0: 0a:a7:2f:86:62:5b:1a:05:27:ad:b0:91:52:a9:22: 55:12:f0:e4:07:75:b1:ed:a6:0f:3b:82:4b:f4:f2: 88:8c:0b:ec:51:3f:10:6f:62:df:cb:45:66:8a:1a: 96:b5:88:5c:08:0f:e3:78:4f:fb:7d:0e:38:90:32: ef:9d:a9:ca:a2:05:27:cd:9a:94:34:a7:9d:9c:5f: cc:4f:9c:fc:c4:08:35:c0:51:c8:83:5d:37:94:9d: 5e:c1:2b:2b:74:87:9d:9b:f3:0b:4f:e4:11:5e:47: 47:d2:3b:17:3e:27:25:1f:15:18:33:f1:2c:c5:93: 75:ea:f8:6b:11:35:c6:ec:bf:b6:fb:a4:89:a0:da: a0:d0:a8:76:3d:63:b8:38:5c:93:f2:44:a1:7a:70: 09:f3:82:dc:78:30:47:8c:d2:6e:e5:6c:8a:44:98: 8e:da:fc:8a:1d:c8:c6:6c:2d:0f:46:b3:45:65:fd: 69:5f:3e:fe:ab:22:91:b3:74:1a:06:aa:4f:6c:65: 65:b0:7e:f8:c3:91:aa:28:ea:e0:66:d7:fc:cf:55: a5:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:C1:68:F7:53:EF:72:A3:3F:AC:BE:4B:ED:95:2A:10:A9:A4:49:80 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e11403c1-3750-4fe6-974e-39f808085073.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.225.190.0/23 Signature Algorithm: sha256WithRSAEncryption 41:a0:19:fb:78:7f:5f:df:46:a1:e4:b5:e6:11:3d:73:25:e9: 83:bc:c0:df:e1:a2:2a:f1:14:24:2b:d6:b4:f9:d3:5c:67:7d: 35:49:0d:87:76:52:8a:d8:eb:92:09:79:a9:78:6c:90:95:04: bd:2a:98:b0:dd:8d:17:7a:19:e8:bd:50:97:c7:20:33:4d:52: 27:78:03:dc:aa:57:be:05:82:24:7f:24:6a:09:6b:93:39:91: 4f:76:5f:fc:8a:1f:33:a7:15:0e:f8:dd:ea:c8:ea:a7:cf:1c: da:c3:2f:08:a0:5e:34:22:e0:ba:ae:e7:26:73:46:6b:3c:30: 3d:dd:2d:9a:15:d9:a2:f3:cc:39:e1:25:33:ba:63:3a:bc:f2: 03:0c:86:fe:b0:d7:bb:c9:bb:69:10:0c:ab:b1:f3:dd:9f:7d: 0d:28:31:aa:22:eb:00:a8:0b:25:f5:6c:6c:43:cd:df:76:20: 7c:5b:bb:c0:5a:60:78:08:1e:dd:0a:84:b9:fe:5e:b2:9c:69: 85:c9:ad:38:43:10:0d:71:c1:e6:73:8d:f9:94:bc:8d:96:a4: 09:c4:5f:96:b0:d1:27:2a:20:89:a9:46:b0:e2:8e:8d:f7:e6: a1:4c:c9:8d:ea:99:72:39:24:f5:0b:3d:86:39:9a:c3:64:8f: 5c:6d:eb:71 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUK2YkDjcC5eoIa2z50xkxsIttOu8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTMxMjQ1WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A3NjhmMGY1Mzc3ZTM4Mjk0NTEzNjczZDg1OTI1NWY0Mjkz MzNkYzgyY2U0YjgxNzYxNmRmZjI4NGIwZTA3OWE3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCceF1Qu8aGf7e8I4wTOgqiPXqTWw5ZmdH0z2xTDo94Dgb8 WSfBiARznT6S8AqnL4ZiWxoFJ62wkVKpIlUS8OQHdbHtpg87gkv08oiMC+xRPxBv Yt/LRWaKGpa1iFwID+N4T/t9DjiQMu+dqcqiBSfNmpQ0p52cX8xPnPzECDXAUciD XTeUnV7BKyt0h52b8wtP5BFeR0fSOxc+JyUfFRgz8SzFk3Xq+GsRNcbsv7b7pImg 2qDQqHY9Y7g4XJPyRKF6cAnzgtx4MEeM0m7lbIpEmI7a/IodyMZsLQ9Gs0Vl/Wlf Pv6rIpGzdBoGqk9sZWWwfvjDkaoo6uBm1/zPVaUzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUvMFo91PvcqM/rL5L7ZUqEKmkSYAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2UxMTQwM2MxLTM3NTAtNGZlNi05NzRlLTM5ZjgwODA4NTA3My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEN4b4wDQYJKoZIhvcNAQELBQADggEBAEGgGft4f1/fRqHkteYRPXMl6YO8 wN/hoirxFCQr1rT501xnfTVJDYd2UorY65IJeal4bJCVBL0qmLDdjRd6Gei9UJfH IDNNUid4A9yqV74FgiR/JGoJa5M5kU92X/yKHzOnFQ743erI6qfPHNrDLwigXjQi 4Lqu5yZzRms8MD3dLZoV2aLzzDnhJTO6Yzq88gMMhv6w17vJu2kQDKux892ffQ0o Maoi6wCoCyX1bGxDzd92IHxbu8BaYHgIHt0KhLn+XrKcaYXJrThDEA1xweZzjfmU vI2WpAnEX5aw0ScqIImpRrDijo335qFMyY3qmXI5JPULPYY5msNkj1xt63E= -----END CERTIFICATE-----Generated at Mon Oct 20 03:08:21 2025 by rpki-client