$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ef19bf19-04c1-4df8-831f-4090629aed7e.roa File: ef19bf19-04c1-4df8-831f-4090629aed7e.roa (raw, json) Hash identifier: fg4hht4nk7VzHmwyEG56jj8cxNjx+TRS4+YDi2//3K0= Subject key identifier: 87:4F:34:B2:98:6C:09:35:FF:F8:72:19:9A:67:18:EE:E3:6F:D6:41 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1FD57A02EC89370659C97CDF08906B1E9E156C38 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ef19bf19-04c1-4df8-831f-4090629aed7e.roa Signing time: Sun 19 Oct 2025 12:01:18 +0000 ROA not before: Sun 19 Oct 2025 12:01:18 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.226.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:d5:7a:02:ec:89:37:06:59:c9:7c:df:08:90:6b:1e:9e:15:6c:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 12:01:18 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=738ff4515b8536e4bd21086746633ce7ff9e476417625cb64bf3abe11eaa580c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:74:98:cd:f6:a2:63:bc:3b:58:72:0b:36:b8: af:39:83:df:85:7b:c1:5b:5c:9a:f6:9b:b1:77:67: ff:e3:d3:da:fe:b4:47:c9:0c:69:b0:25:0e:c0:39: 98:39:48:b8:c4:7f:18:7e:de:c9:fd:08:07:ac:ff: d9:77:23:77:cd:2d:b4:6c:fc:3b:fc:cd:76:59:9b: 49:89:aa:54:41:c4:ed:43:de:9b:68:c5:17:15:8b: dc:06:97:53:07:9d:42:27:aa:37:91:84:17:70:24: a1:76:e2:a3:e1:d1:f0:c3:d8:36:8d:a6:0d:d1:d9: fe:95:4d:67:ab:0b:d2:90:e5:dc:e0:06:01:05:a0: de:de:fc:1c:b1:d8:c1:11:6a:98:69:cc:32:fe:e0: 49:3b:ad:ae:ef:f9:d2:38:67:be:fb:3f:1c:8a:11: dc:f5:76:b6:f5:b9:b5:5e:11:d4:01:55:49:0b:48: ef:e4:a0:d1:c2:87:83:62:11:03:ab:91:d2:4d:b2: 87:a0:73:c5:85:a7:36:81:5b:80:9c:a5:8a:33:79: 8b:be:06:2d:7e:a8:60:cb:2e:e2:1e:56:f1:36:4a: d5:c4:2b:c9:dc:0e:72:d8:66:c8:df:3d:b1:f4:e2: 27:a4:7a:3d:e5:d1:fd:8f:e0:4f:3d:b2:4e:dc:7b: ac:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:4F:34:B2:98:6C:09:35:FF:F8:72:19:9A:67:18:EE:E3:6F:D6:41 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ef19bf19-04c1-4df8-831f-4090629aed7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.226.63.0/24 Signature Algorithm: sha256WithRSAEncryption 42:e7:9a:74:00:12:25:66:73:70:13:00:31:a5:7f:14:af:5e: b0:8c:d2:4e:82:85:aa:19:93:75:24:01:91:4e:c3:ea:0a:29: 42:8c:07:74:b8:24:2b:77:3f:23:0c:67:ed:a7:ce:d8:aa:ab: 04:61:76:dc:c3:ef:43:e2:cf:63:e7:8a:a6:b2:ba:52:af:24: 48:79:e7:7b:f2:88:d4:b4:d6:2c:10:ed:1c:48:82:9c:ae:2e: e3:63:6c:97:c5:8b:b7:e6:57:d8:c9:21:89:3c:f4:35:dc:94: cc:cd:f7:99:a8:f0:a4:4d:8b:af:b7:b8:7b:d3:17:36:4c:b3: f8:88:95:e6:23:51:b0:25:53:f2:25:9d:9b:ef:37:11:d0:ff: 1c:e3:38:89:9b:c7:74:cc:a8:38:49:b0:af:79:7c:12:23:a3: ee:d3:e2:c9:b1:6f:0d:55:bd:3c:b5:8f:5b:58:bb:e1:41:8e: 05:18:f9:89:56:d5:a9:fe:c5:d2:92:75:c4:de:b9:c8:3c:57: b3:cb:f4:e9:c7:79:f3:d9:bb:dd:7a:3b:7e:64:e6:b6:7c:3a: 3c:1e:b3:4f:ad:27:a1:84:5a:e1:1c:d2:eb:99:7b:9e:4a:3e: 01:c1:c8:f0:e2:22:fc:c0:1f:e2:d8:21:a2:71:37:78:34:36: 74:52:94:c4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUH9V6AuyJNwZZyXzfCJBrHp4VbDgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTIwMTE4WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A3MzhmZjQ1MTViODUzNmU0YmQyMTA4Njc0NjYzM2NlN2Zm OWU0NzY0MTc2MjVjYjY0YmYzYWJlMTFlYWE1ODBjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDgdJjN9qJjvDtYcgs2uK85g9+Fe8FbXJr2m7F3Z//j09r+ tEfJDGmwJQ7AOZg5SLjEfxh+3sn9CAes/9l3I3fNLbRs/Dv8zXZZm0mJqlRBxO1D 3ptoxRcVi9wGl1MHnUInqjeRhBdwJKF24qPh0fDD2DaNpg3R2f6VTWerC9KQ5dzg BgEFoN7e/Byx2MERaphpzDL+4Ek7ra7v+dI4Z777PxyKEdz1drb1ubVeEdQBVUkL SO/koNHCh4NiEQOrkdJNsoegc8WFpzaBW4CcpYozeYu+Bi1+qGDLLuIeVvE2StXE K8ncDnLYZsjfPbH04iekej3l0f2P4E89sk7ce6xlAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUh080sphsCTX/+HIZmmcY7uNv1kEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2VmMTliZjE5LTA0YzEtNGRmOC04MzFmLTQwOTA2MjlhZWQ3ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAN4j8wDQYJKoZIhvcNAQELBQADggEBAELnmnQAEiVmc3ATADGlfxSvXrCM 0k6ChaoZk3UkAZFOw+oKKUKMB3S4JCt3PyMMZ+2nztiqqwRhdtzD70Piz2Pniqay ulKvJEh553vyiNS01iwQ7RxIgpyuLuNjbJfFi7fmV9jJIYk89DXclMzN95mo8KRN i6+3uHvTFzZMs/iIleYjUbAlU/IlnZvvNxHQ/xzjOImbx3TMqDhJsK95fBIjo+7T 4smxbw1VvTy1j1tYu+FBjgUY+YlW1an+xdKSdcTeucg8V7PL9OnHefPZu916O35k 5rZ8Ojwes0+tJ6GEWuEc0uuZe55KPgHByPDiIvzAH+LYIaJxN3g0NnRSlMQ= -----END CERTIFICATE-----Generated at Mon Oct 20 19:16:55 2025 by rpki-client