$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/13197866-f5d4-4ed0-b920-81310b11d76f.roa File: 13197866-f5d4-4ed0-b920-81310b11d76f.roa (raw, json) Hash identifier: VldwgRiDdZ1RucwrRvYKATRsASLQWtvxla/K/MX88RY= Subject key identifier: DF:B6:25:BA:2B:ED:02:F6:70:9A:E4:73:02:CE:81:69:CD:60:63:C0 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 174A21E972F2FE6198C9468134F30D7424849102 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/13197866-f5d4-4ed0-b920-81310b11d76f.roa Signing time: Mon 18 Aug 2025 15:50:20 +0000 ROA not before: Mon 18 Aug 2025 15:50:20 +0000 ROA not after: Mon 22 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.125.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:4a:21:e9:72:f2:fe:61:98:c9:46:81:34:f3:0d:74:24:84:91:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 18 15:50:20 2025 GMT Not After : Sep 22 23:59:59 2025 GMT Subject: serialNumber=b828c0597c4f31210f230b742e80f549c704840e731bfb9d3206632fc5ec6dce, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7b:79:70:36:c2:36:a1:9f:88:97:ca:36:de: 58:15:a0:a9:43:2e:d2:69:cc:61:e4:6f:2c:3f:52: 39:79:af:0b:e2:78:17:30:f0:40:f5:0e:f7:31:69: 3b:bc:29:26:e0:ec:9b:6c:e1:c3:6a:38:b4:75:c4: 39:77:d1:46:73:85:51:bc:50:c1:d2:e4:4f:9c:29: 32:b6:c7:11:c1:a5:dc:95:b4:d1:10:dc:66:e6:09: b3:42:d7:78:ac:cb:5a:fb:55:8b:36:af:69:44:a6: 13:45:ee:ae:d7:43:b7:a6:6e:f5:24:1e:f3:ad:96: fa:d3:07:55:2b:55:c1:8d:2b:84:26:7f:0a:90:0c: 29:3a:23:61:5b:13:d8:9e:93:0e:30:e1:a5:4e:50: df:1e:3c:4b:9a:2d:20:22:ad:b0:b4:5c:b0:60:5f: 31:aa:64:bc:83:ae:c2:77:49:33:8e:6d:0a:da:55: c0:50:cc:35:44:18:29:8a:c7:52:bc:15:ab:f3:9a: 41:48:38:63:51:e7:42:91:d9:ba:24:b8:75:61:58: 1d:5a:02:c5:a2:e6:d8:59:02:52:77:3c:16:ba:42: ad:82:84:78:90:31:02:6a:d3:ee:e2:ba:72:d1:03: 93:25:86:b3:9b:12:c8:87:f1:84:17:84:db:64:be: ca:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:B6:25:BA:2B:ED:02:F6:70:9A:E4:73:02:CE:81:69:CD:60:63:C0 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/13197866-f5d4-4ed0-b920-81310b11d76f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.125.0.0/16 Signature Algorithm: sha256WithRSAEncryption 9b:f3:81:b3:d9:df:f0:2d:4b:05:a3:d2:8a:25:51:19:93:aa: 5b:2c:0d:22:ad:df:fa:34:15:bc:c4:3c:ad:2a:0f:c0:fd:88: 65:32:dd:e3:a6:10:07:c9:50:37:79:5a:dd:0b:dc:13:0d:85: 60:fa:7b:60:a3:65:a2:10:c5:a6:b7:1d:44:9d:53:2c:b7:35: 0b:36:0e:c1:40:d4:44:f9:b8:c4:d1:ad:90:95:58:75:32:29: ac:b0:30:d3:86:12:0b:30:87:4a:57:97:ce:a9:a3:66:39:4e: ad:4b:43:be:7c:58:78:70:1a:16:e6:30:37:dd:06:63:2f:8d: 7a:f2:e2:d3:2f:8b:ff:cd:c9:3f:b1:bd:38:a8:b1:d3:d1:48: a6:2a:07:eb:40:c5:15:94:b4:c6:42:19:0a:05:bc:65:91:97: 9b:c4:cd:59:f9:fd:37:fd:a4:96:90:00:90:f4:da:7d:51:51: 92:cd:c4:3b:a3:67:0a:35:6c:3e:e1:81:99:8f:3c:79:0c:91: b7:6f:72:19:dc:7b:d0:07:a4:c9:0b:d6:e5:40:e2:dd:7f:7d: d9:3e:ff:ac:7f:18:2f:07:ff:80:c4:a9:29:07:2c:65:7d:ad: 63:1b:f4:12:4f:47:ef:b3:97:06:65:2e:be:93:41:76:03:97: 58:70:66:25 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUF0oh6XLy/mGYyUaBNPMNdCSEkQIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODE4MTU1MDIwWhcNMjUwOTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BiODI4YzA1OTdjNGYzMTIxMGYyMzBiNzQyZTgwZjU0OWM3 MDQ4NDBlNzMxYmZiOWQzMjA2NjMyZmM1ZWM2ZGNlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCre3lwNsI2oZ+Il8o23lgVoKlDLtJpzGHkbyw/Ujl5rwvi eBcw8ED1DvcxaTu8KSbg7Jts4cNqOLR1xDl30UZzhVG8UMHS5E+cKTK2xxHBpdyV tNEQ3GbmCbNC13isy1r7VYs2r2lEphNF7q7XQ7embvUkHvOtlvrTB1UrVcGNK4Qm fwqQDCk6I2FbE9iekw4w4aVOUN8ePEuaLSAirbC0XLBgXzGqZLyDrsJ3STOObQra VcBQzDVEGCmKx1K8FavzmkFIOGNR50KR2bokuHVhWB1aAsWi5thZAlJ3PBa6Qq2C hHiQMQJq0+7iunLRA5MlhrObEsiH8YQXhNtkvso3AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU37YluivtAvZwmuRzAs6Bac1gY8AwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzEzMTk3ODY2LWY1ZDQtNGVkMC1iOTIwLTgxMzEwYjExZDc2Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwANfTANBgkqhkiG9w0BAQsFAAOCAQEAm/OBs9nf8C1LBaPSiiVRGZOqWywN Iq3f+jQVvMQ8rSoPwP2IZTLd46YQB8lQN3la3QvcEw2FYPp7YKNlohDFprcdRJ1T LLc1CzYOwUDURPm4xNGtkJVYdTIprLAw04YSCzCHSleXzqmjZjlOrUtDvnxYeHAa FuYwN90GYy+NevLi0y+L/83JP7G9OKix09FIpioH60DFFZS0xkIZCgW8ZZGXm8TN Wfn9N/2klpAAkPTafVFRks3EO6NnCjVsPuGBmY88eQyRt29yGdx70AekyQvW5UDi 3X992T7/rH8YLwf/gMSpKQcsZX2tYxv0Ek9H77OXBmUuvpNBdgOXWHBmJQ== -----END CERTIFICATE-----Generated at Wed Aug 20 10:39:59 2025 by rpki-client