$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/25f9862c-4cea-450b-8384-c4741188eb18.roa File: 25f9862c-4cea-450b-8384-c4741188eb18.roa (raw, json) Hash identifier: 1eUurTnttSHLtEwBU0XOCizP+oLFWtRCu0PHTsK/TE4= Subject key identifier: 89:9F:5F:C6:F1:03:38:82:D5:ED:82:89:7D:58:24:87:B0:F9:1A:DF Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 757E412A26C97868EFCA0E6A364953CD5A71C4CE Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/25f9862c-4cea-450b-8384-c4741188eb18.roa Signing time: Wed 24 Sep 2025 19:26:28 +0000 ROA not before: Wed 24 Sep 2025 19:26:28 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.225.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:7e:41:2a:26:c9:78:68:ef:ca:0e:6a:36:49:53:cd:5a:71:c4:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 19:26:28 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=ed859119d9824d4a312fa5d6af5d97a86c6cb58830cab6a58ca78c7328c7f4f2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d2:77:be:ad:32:0b:b8:12:62:97:f6:79:11: 20:40:72:b3:d0:81:0e:94:04:a3:99:94:9d:68:d7: 00:0e:d5:84:c2:a0:cb:b0:11:2d:31:e5:7e:30:d0: 08:ed:18:6f:26:c3:63:ed:9c:47:bf:8e:ab:1e:47: 31:09:2a:06:f1:84:c5:72:0a:01:06:2e:89:6e:e7: 71:fb:cf:48:23:9f:c7:9c:58:fa:db:36:82:e0:43: 05:3b:1b:a8:b4:b9:d3:57:52:66:5d:f6:e8:46:6f: 83:22:0a:6b:2e:e5:4d:d1:01:72:2c:7d:f2:c1:cd: a7:99:14:5e:5b:30:84:68:4a:6b:d0:65:a0:34:39: bc:ab:b2:2b:e5:80:b4:33:28:89:96:ef:57:d1:c7: 71:e8:b4:82:6a:9f:2c:56:29:b4:6b:cb:e4:7f:0c: f3:ba:81:c4:0b:24:4e:ff:7a:10:3f:b1:0a:7f:ac: cf:42:42:ca:35:3e:f1:5c:80:b9:83:7d:e2:8d:1d: 98:2b:cd:bd:ea:b5:20:f5:75:c7:eb:be:d6:ea:d4: 0a:f9:78:55:8d:8e:aa:a1:63:fc:17:47:25:c4:01: 45:48:8b:e1:e5:60:38:a8:7b:43:8c:4e:6b:fd:56: 53:1d:5f:72:95:b1:5b:ff:ae:ab:9c:04:f9:1d:16: 74:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:9F:5F:C6:F1:03:38:82:D5:ED:82:89:7D:58:24:87:B0:F9:1A:DF X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/25f9862c-4cea-450b-8384-c4741188eb18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.225.48.0/24 Signature Algorithm: sha256WithRSAEncryption b1:4e:22:8d:02:e2:93:9c:cb:72:ce:41:c1:99:f9:de:be:a3: 04:4b:7d:60:98:21:89:35:4d:4b:1a:da:cd:10:aa:61:24:4b: 0e:2e:31:0b:b6:37:bf:bf:e9:a7:7b:3b:98:5f:b7:b7:2e:a1: 34:f8:0a:a1:bb:37:18:09:eb:09:1f:8b:71:ca:44:26:5a:88: 97:08:2d:50:32:82:46:b6:60:2e:63:75:26:8d:cc:e2:ab:e3: 69:d8:89:d6:b6:44:b1:1b:2e:ab:75:64:89:3a:b9:b4:5b:ad: 43:83:2e:97:df:1a:da:83:73:0c:a4:79:3e:18:fb:78:0b:9d: dd:d4:e5:90:bd:4e:ad:2e:24:a6:9d:aa:f5:23:88:2e:70:ea: 21:84:da:e4:e8:c5:e3:a5:a4:bb:1b:76:c9:af:d7:9b:3a:15: b0:bf:f3:9e:eb:13:0c:63:d8:84:91:b3:b4:1d:8f:ed:e5:f1: 73:f4:8f:5c:16:fb:8d:80:e9:4d:87:55:43:18:77:82:02:07: c6:3f:89:35:3f:65:82:83:01:2d:68:0d:1f:54:4a:2a:64:59: f6:34:0e:2b:78:7c:72:e0:e6:74:75:b2:5c:5e:8c:f0:42:d0: 21:55:e7:83:48:79:10:13:17:36:bb:52:d6:94:5d:3c:bc:8b: 3b:09:90:6a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdX5BKibJeGjvyg5qNklTzVpxxM4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MTkyNjI4WhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BlZDg1OTExOWQ5ODI0ZDRhMzEyZmE1ZDZhZjVkOTdhODZj NmNiNTg4MzBjYWI2YTU4Y2E3OGM3MzI4YzdmNGYyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCn0ne+rTILuBJil/Z5ESBAcrPQgQ6UBKOZlJ1o1wAO1YTC oMuwES0x5X4w0AjtGG8mw2PtnEe/jqseRzEJKgbxhMVyCgEGLolu53H7z0gjn8ec WPrbNoLgQwU7G6i0udNXUmZd9uhGb4MiCmsu5U3RAXIsffLBzaeZFF5bMIRoSmvQ ZaA0ObyrsivlgLQzKImW71fRx3HotIJqnyxWKbRry+R/DPO6gcQLJE7/ehA/sQp/ rM9CQso1PvFcgLmDfeKNHZgrzb3qtSD1dcfrvtbq1Ar5eFWNjqqhY/wXRyXEAUVI i+HlYDioe0OMTmv9VlMdX3KVsVv/rqucBPkdFnT/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUiZ9fxvEDOILV7YKJfVgkh7D5Gt8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzI1Zjk4NjJjLTRjZWEtNDUwYi04Mzg0LWM0NzQxMTg4ZWIxOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAN4TAwDQYJKoZIhvcNAQELBQADggEBALFOIo0C4pOcy3LOQcGZ+d6+owRL fWCYIYk1TUsa2s0QqmEkSw4uMQu2N7+/6ad7O5hft7cuoTT4CqG7NxgJ6wkfi3HK RCZaiJcILVAygka2YC5jdSaNzOKr42nYida2RLEbLqt1ZIk6ubRbrUODLpffGtqD cwykeT4Y+3gLnd3U5ZC9Tq0uJKadqvUjiC5w6iGE2uToxeOlpLsbdsmv15s6FbC/ 857rEwxj2ISRs7Qdj+3l8XP0j1wW+42A6U2HVUMYd4ICB8Y/iTU/ZYKDAS1oDR9U SipkWfY0Dit4fHLg5nR1slxejPBC0CFV54NIeRATFza7UtaUXTy8izsJkGo= -----END CERTIFICATE-----Generated at Fri Oct 17 22:18:25 2025 by rpki-client