$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f30993f8-10f7-4e70-ba50-0802eb961d8e.roa File: f30993f8-10f7-4e70-ba50-0802eb961d8e.roa (raw, json) Hash identifier: NofnfBI7UCJQEN82TU5DLu4aogghHpAdPn7bQXS1cno= Subject key identifier: AB:A9:1A:9F:D5:21:65:87:19:27:AB:2D:A3:B8:A2:3D:D7:B8:42:3A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2006210D7C67F1D9E08146A7C718DBAED19360DA Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f30993f8-10f7-4e70-ba50-0802eb961d8e.roa Signing time: Sun 19 Oct 2025 11:05:35 +0000 ROA not before: Sun 19 Oct 2025 11:05:35 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.224.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:06:21:0d:7c:67:f1:d9:e0:81:46:a7:c7:18:db:ae:d1:93:60:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 11:05:35 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=373d7e53748e75930f849560fddf5b801cea8a372c4d916d62f743b38d20e649, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3a:8e:cb:af:c8:08:ea:7e:10:a8:4a:2b:b8: 94:26:81:ae:bb:95:b6:3a:2e:52:9c:02:b9:86:5a: a4:82:ac:b5:df:aa:e7:ea:6d:4c:e9:1d:cf:3f:9d: 84:a8:4b:71:85:49:8b:40:dc:67:c8:79:46:91:ab: 1f:e7:1b:5b:bf:4c:67:8a:26:27:1e:0b:c0:5a:bd: 1d:5e:2a:93:95:71:09:b1:5b:28:3b:b6:44:34:fc: 4a:74:6e:8d:63:69:f9:57:e0:20:81:b5:df:38:21: f7:43:30:f7:22:3e:78:a8:72:ec:2b:e2:d0:38:4c: 12:e0:cc:32:d4:bf:3b:39:c1:7e:39:4b:80:05:9a: ab:55:f0:70:69:d8:e9:21:a9:9d:1a:c9:53:d4:27: 7d:d4:d3:1d:09:e1:8b:b1:e6:e2:16:59:97:c1:de: 04:6a:2f:fb:d3:95:7b:32:ca:90:a1:d7:ca:2b:3a: 8b:35:18:30:5a:cb:a0:94:37:4d:98:be:e1:b9:65: f4:bc:fb:8b:bb:b9:de:69:73:fa:4e:22:0e:41:90: a6:39:0a:ac:64:80:29:a4:94:5b:b1:5b:68:26:18: 0d:40:06:e6:6f:8f:cd:f2:be:a5:92:2d:a5:f3:c1: 09:df:fe:5a:b0:53:e5:91:05:ae:3f:5c:92:13:f4: 8c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:A9:1A:9F:D5:21:65:87:19:27:AB:2D:A3:B8:A2:3D:D7:B8:42:3A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f30993f8-10f7-4e70-ba50-0802eb961d8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.224.219.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:d5:77:69:87:c6:fb:d8:9b:52:dc:06:7c:0c:82:03:cf:64: 95:35:9f:70:a6:a0:ac:7c:a2:91:a3:0d:54:02:c8:14:e1:42: a9:ec:20:21:1b:91:d7:ca:ef:53:35:28:30:9d:32:d3:93:30: 98:45:34:3e:de:76:cc:ea:2c:27:26:77:e8:1e:c3:21:d7:ce: ab:63:19:c0:ba:58:4d:13:3d:0d:f1:4f:c4:12:03:f5:57:83: 46:00:3c:5c:2a:d8:57:a6:80:69:3a:93:78:fa:2c:0c:78:a1: 79:83:e0:b6:3e:ca:56:e9:72:0f:01:04:93:81:31:8e:bf:f7: e2:87:68:88:7b:53:00:b0:24:60:c1:e4:8f:b3:eb:82:71:35: de:7c:51:15:53:07:7b:2d:76:6d:88:e3:5f:62:d1:94:81:5d: 7b:f0:e6:b4:4c:d3:a3:7c:10:42:c4:de:bf:2e:18:d8:90:86: 1d:ac:e1:d4:49:6e:e2:6b:86:64:86:3b:f4:d6:0c:ec:d1:1a: 8f:90:ad:6a:66:9a:c9:3a:79:7d:ea:b2:b6:62:86:fc:f6:ad: 9f:44:5e:93:1c:04:22:f6:32:c7:eb:00:7f:57:97:13:4a:41: 71:a6:75:dc:cc:26:ee:fc:4d:85:d7:e0:31:28:2e:13:77:e0: e6:29:a5:6f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIAYhDXxn8dnggUanxxjbrtGTYNowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTEwNTM1WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AzNzNkN2U1Mzc0OGU3NTkzMGY4NDk1NjBmZGRmNWI4MDFj ZWE4YTM3MmM0ZDkxNmQ2MmY3NDNiMzhkMjBlNjQ5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtOo7Lr8gI6n4QqEoruJQmga67lbY6LlKcArmGWqSCrLXf qufqbUzpHc8/nYSoS3GFSYtA3GfIeUaRqx/nG1u/TGeKJiceC8BavR1eKpOVcQmx Wyg7tkQ0/Ep0bo1jaflX4CCBtd84IfdDMPciPniocuwr4tA4TBLgzDLUvzs5wX45 S4AFmqtV8HBp2OkhqZ0ayVPUJ33U0x0J4Yux5uIWWZfB3gRqL/vTlXsyypCh18or Oos1GDBay6CUN02YvuG5ZfS8+4u7ud5pc/pOIg5BkKY5CqxkgCmklFuxW2gmGA1A BuZvj83yvqWSLaXzwQnf/lqwU+WRBa4/XJIT9IyPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUq6kan9UhZYcZJ6sto7iiPde4QjowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2YzMDk5M2Y4LTEwZjctNGU3MC1iYTUwLTA4MDJlYjk2MWQ4ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAN4NswDQYJKoZIhvcNAQELBQADggEBAF7Vd2mHxvvYm1LcBnwMggPPZJU1 n3CmoKx8opGjDVQCyBThQqnsICEbkdfK71M1KDCdMtOTMJhFND7edszqLCcmd+ge wyHXzqtjGcC6WE0TPQ3xT8QSA/VXg0YAPFwq2FemgGk6k3j6LAx4oXmD4LY+ylbp cg8BBJOBMY6/9+KHaIh7UwCwJGDB5I+z64JxNd58URVTB3stdm2I419i0ZSBXXvw 5rRM06N8EELE3r8uGNiQhh2s4dRJbuJrhmSGO/TWDOzRGo+QrWpmmsk6eX3qsrZi hvz2rZ9EXpMcBCL2MsfrAH9XlxNKQXGmddzMJu78TYXX4DEoLhN34OYppW8= -----END CERTIFICATE-----Generated at Mon Oct 20 02:59:08 2025 by rpki-client