$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/20da5bff-05eb-4e38-8577-dd720ec6c870.roa File: 20da5bff-05eb-4e38-8577-dd720ec6c870.roa (raw, json) Hash identifier: BRS4D7VxkqGtzWv4mofHALBi9htqDVhrYtB2vwdaVVg= Subject key identifier: 90:43:0F:68:BA:29:35:73:DA:17:B1:F7:D5:F8:E2:AF:27:E7:21:9A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 351DE103179A36879AA36A66DA08BD8084F25B94 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/20da5bff-05eb-4e38-8577-dd720ec6c870.roa Signing time: Wed 24 Sep 2025 20:39:25 +0000 ROA not before: Wed 24 Sep 2025 20:39:25 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.225.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:1d:e1:03:17:9a:36:87:9a:a3:6a:66:da:08:bd:80:84:f2:5b:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 20:39:25 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=ab427c44e515de4d637ac9522457294e08baf0518362b73b274230f49f3db505, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b9:8d:d9:57:6d:23:a3:61:95:67:2d:2f:88: 65:a9:42:b5:0a:59:3c:e3:f6:12:f5:c3:78:ea:62: 4e:d2:72:85:e3:14:cb:29:82:ae:fc:07:14:ff:84: 4c:4d:bb:11:29:e1:22:5a:14:d4:19:fb:fd:c5:0e: 66:b5:48:29:9b:dd:3b:95:5c:26:21:ff:47:cc:de: 92:cc:cf:50:6f:25:28:bb:ac:54:73:d1:8d:49:65: 88:57:15:68:dd:36:a5:d8:45:d6:6a:ec:de:c5:77: 83:5c:f6:fa:d9:6e:6c:41:29:e5:56:c6:86:cf:07: 11:9b:9a:1b:29:a2:a5:74:40:0c:e6:da:f3:47:73: 6b:a6:ae:8f:fc:07:e9:d7:8c:74:d4:a0:27:12:74: 69:25:6d:a1:50:45:84:0f:ca:ed:a3:1d:5d:c2:22: 37:21:18:36:d3:e7:0e:c0:0a:7f:56:fb:19:d9:1d: ba:31:c2:aa:a5:63:2b:ec:f4:5b:90:be:6a:d2:dc: 85:5a:cf:16:52:74:f4:3c:b2:64:c0:20:cf:fe:4e: 99:91:ed:a7:f3:2b:a7:d0:13:da:67:e8:8a:20:f5: 02:42:d2:49:b4:14:d6:1a:da:55:77:4d:5e:01:40: 17:70:66:4a:ea:12:d3:ea:af:7e:69:a2:ac:7d:ff: 0d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:43:0F:68:BA:29:35:73:DA:17:B1:F7:D5:F8:E2:AF:27:E7:21:9A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/20da5bff-05eb-4e38-8577-dd720ec6c870.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.225.20.0/22 Signature Algorithm: sha256WithRSAEncryption 41:2f:69:2f:00:86:9e:a4:3f:45:ab:8f:86:1a:01:68:dc:78: 0a:9e:84:ea:c5:01:07:c4:31:e5:1a:0b:4b:00:d0:e2:10:f1: 87:71:60:ac:ec:d5:52:65:66:42:f1:d1:e1:0b:a9:60:27:8a: 27:fe:7f:a2:59:a6:a7:e3:0c:f6:51:4a:7e:88:dc:33:3e:45: 4f:0f:90:e6:fd:fe:77:a6:2c:3a:f5:e3:b5:c9:5c:55:17:ab: 0d:09:5f:02:3b:b9:e4:2a:4a:1f:0d:f7:b4:e0:48:26:ba:87: 57:3b:e2:21:48:9b:9f:9f:47:d6:04:ea:28:da:41:99:95:0b: 16:4b:de:15:de:eb:f6:5a:79:38:dd:1e:4d:90:3c:7b:70:0b: 4f:bc:dc:16:23:c1:14:53:39:de:83:ff:21:b2:ec:83:ff:51: 2f:82:b1:08:67:cf:60:7e:64:3e:58:ed:dc:1a:99:b0:9c:9b: d0:a9:49:94:b7:c9:cd:26:bb:ad:fa:94:7e:cd:8b:38:51:62: 98:8d:82:da:07:15:8f:69:cc:4c:05:9d:43:99:7f:97:f9:7d: 0a:1a:77:de:9b:05:6e:2a:df:78:0f:0a:42:b6:e2:bc:2d:2f: 23:ca:c2:fd:38:bf:0d:05:41:12:9c:3a:c1:f3:f1:75:3d:5c: 07:cb:93:dc -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNR3hAxeaNoeao2pm2gi9gITyW5QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MjAzOTI1WhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BhYjQyN2M0NGU1MTVkZTRkNjM3YWM5NTIyNDU3Mjk0ZTA4 YmFmMDUxODM2MmI3M2IyNzQyMzBmNDlmM2RiNTA1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCduY3ZV20jo2GVZy0viGWpQrUKWTzj9hL1w3jqYk7ScoXj FMspgq78BxT/hExNuxEp4SJaFNQZ+/3FDma1SCmb3TuVXCYh/0fM3pLMz1BvJSi7 rFRz0Y1JZYhXFWjdNqXYRdZq7N7Fd4Nc9vrZbmxBKeVWxobPBxGbmhspoqV0QAzm 2vNHc2umro/8B+nXjHTUoCcSdGklbaFQRYQPyu2jHV3CIjchGDbT5w7ACn9W+xnZ HboxwqqlYyvs9FuQvmrS3IVazxZSdPQ8smTAIM/+TpmR7afzK6fQE9pn6Iog9QJC 0km0FNYa2lV3TV4BQBdwZkrqEtPqr35poqx9/w0PAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUkEMPaLopNXPaF7H31fjiryfnIZowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzIwZGE1YmZmLTA1ZWItNGUzOC04NTc3LWRkNzIwZWM2Yzg3MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIN4RQwDQYJKoZIhvcNAQELBQADggEBAEEvaS8Ahp6kP0Wrj4YaAWjceAqe hOrFAQfEMeUaC0sA0OIQ8YdxYKzs1VJlZkLx0eELqWAniif+f6JZpqfjDPZRSn6I 3DM+RU8PkOb9/nemLDr147XJXFUXqw0JXwI7ueQqSh8N97TgSCa6h1c74iFIm5+f R9YE6ijaQZmVCxZL3hXe6/ZaeTjdHk2QPHtwC0+83BYjwRRTOd6D/yGy7IP/US+C sQhnz2B+ZD5Y7dwambCcm9CpSZS3yc0mu636lH7NizhRYpiNgtoHFY9pzEwFnUOZ f5f5fQoad96bBW4q33gPCkK24rwtLyPKwv04vw0FQRKcOsHz8XU9XAfLk9w= -----END CERTIFICATE-----Generated at Fri Oct 17 22:18:04 2025 by rpki-client