$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2666e8f5-27d3-4715-ac84-571519186d7c.roa File: 2666e8f5-27d3-4715-ac84-571519186d7c.roa (raw, json) Hash identifier: JYaY8xG6AhlQVqhakcQ0raMpSBm94qy3Yes1obqLIt8= Subject key identifier: 6E:29:5E:45:1F:28:28:9E:CF:30:9B:98:6D:3A:B9:8B:DB:56:27:6B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2420AACC98B214D83A272D4E24ECD0DABA9EEBA5 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2666e8f5-27d3-4715-ac84-571519186d7c.roa Signing time: Wed 24 Sep 2025 19:41:11 +0000 ROA not before: Wed 24 Sep 2025 19:41:11 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.226.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:20:aa:cc:98:b2:14:d8:3a:27:2d:4e:24:ec:d0:da:ba:9e:eb:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 19:41:11 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=7c1d409570d4b85e48c8cc921bdc9aa40579a5a5d76053d6cbfd1507eb8ffe66, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:62:96:e9:06:af:76:02:04:36:57:30:89:e6: f9:27:12:1b:4f:85:51:84:7f:6e:2f:f5:64:0f:e3: cb:79:2a:a4:65:b4:b4:b2:4a:51:e7:f4:f8:4b:91: 8d:9e:2e:4a:61:23:22:be:ca:01:59:2a:da:f7:8c: 32:24:f3:00:4a:31:a0:45:75:15:a2:1f:5b:45:c2: 35:28:f6:b6:34:cb:71:df:00:08:8e:56:bc:d2:08: 6c:7e:c3:10:fd:8d:82:60:30:01:73:0c:4c:93:7b: ba:ec:fa:d9:2c:36:ca:f1:ac:79:0c:8d:4a:6f:92: db:44:be:bc:ea:95:f9:d7:59:75:1b:0d:d0:81:74: da:55:d1:d7:9c:7f:29:1e:d3:5b:c2:10:59:6d:b6: d6:6f:e9:48:18:dc:9f:48:64:24:60:dd:7e:bd:e8: 95:46:6d:11:d0:e2:82:9c:44:ba:78:e7:57:96:7a: dd:2c:2c:79:94:5f:b6:e3:8a:28:9e:16:5d:7d:e2: 98:1e:88:e3:cf:a7:a1:4f:a5:9b:52:6d:f6:90:38: d5:92:8f:b8:a3:cb:5d:a5:59:3d:c5:cc:46:08:59: f7:e0:8f:5f:d6:17:db:ef:e6:fc:20:d0:a7:88:53: bd:f2:d4:e0:43:20:36:99:2e:69:ad:b1:7d:c2:15: c8:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:29:5E:45:1F:28:28:9E:CF:30:9B:98:6D:3A:B9:8B:DB:56:27:6B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2666e8f5-27d3-4715-ac84-571519186d7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.226.252.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:b4:05:46:33:45:07:bf:c5:60:0e:fc:c6:e5:3d:85:dd:94: 4c:76:13:af:d7:ee:49:c5:ec:8d:58:63:8a:b2:48:eb:83:a9: 4a:4f:e0:49:f2:1a:d8:3a:ab:ba:50:60:27:10:6e:39:5c:e2: 16:41:04:ce:6f:38:f9:6e:4c:b0:b9:ba:15:98:84:a9:42:0a: 3c:09:a1:79:8b:78:72:e3:34:70:c3:35:28:bd:8b:94:de:a9: b0:57:a3:1a:ce:a0:5e:7b:0b:4b:bd:87:66:2a:49:20:17:38: 4e:43:fb:da:16:96:2a:0a:2f:33:51:68:b4:7f:08:20:4f:ed: 61:7b:5f:59:53:7c:4b:0c:a3:51:49:22:3a:53:bb:54:68:c5: cf:88:43:10:a7:aa:33:f6:a7:64:d7:2e:3f:88:e4:1e:90:7f: 0f:cd:12:b1:61:f8:c8:78:e9:4d:62:f3:0f:61:2a:e3:a0:f2: ec:19:a2:a8:90:1e:04:81:bd:eb:3c:7b:1f:eb:9b:e9:59:fe: 99:a9:34:cd:2f:81:e6:40:1f:12:e5:2b:ce:9b:32:d4:c8:ad: d5:0f:8d:2c:35:53:a6:d1:12:aa:cd:a1:ea:b9:b4:d6:15:c9: d8:dd:3a:50:7b:6d:0c:49:66:9b:e8:01:99:9d:e8:3f:f3:41: 95:58:84:f7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJCCqzJiyFNg6Jy1OJOzQ2rqe66UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MTk0MTExWhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A3YzFkNDA5NTcwZDRiODVlNDhjOGNjOTIxYmRjOWFhNDA1 NzlhNWE1ZDc2MDUzZDZjYmZkMTUwN2ViOGZmZTY2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQChYpbpBq92AgQ2VzCJ5vknEhtPhVGEf24v9WQP48t5KqRl tLSySlHn9PhLkY2eLkphIyK+ygFZKtr3jDIk8wBKMaBFdRWiH1tFwjUo9rY0y3Hf AAiOVrzSCGx+wxD9jYJgMAFzDEyTe7rs+tksNsrxrHkMjUpvkttEvrzqlfnXWXUb DdCBdNpV0decfyke01vCEFltttZv6UgY3J9IZCRg3X696JVGbRHQ4oKcRLp451eW et0sLHmUX7bjiiieFl194pgeiOPPp6FPpZtSbfaQONWSj7ijy12lWT3FzEYIWffg j1/WF9vv5vwg0KeIU73y1OBDIDaZLmmtsX3CFchBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUbileRR8oKJ7PMJuYbTq5i9tWJ2swHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzI2NjZlOGY1LTI3ZDMtNDcxNS1hYzg0LTU3MTUxOTE4NmQ3Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAN4vwwDQYJKoZIhvcNAQELBQADggEBAJy0BUYzRQe/xWAO/MblPYXdlEx2 E6/X7knF7I1YY4qySOuDqUpP4EnyGtg6q7pQYCcQbjlc4hZBBM5vOPluTLC5uhWY hKlCCjwJoXmLeHLjNHDDNSi9i5TeqbBXoxrOoF57C0u9h2YqSSAXOE5D+9oWlioK LzNRaLR/CCBP7WF7X1lTfEsMo1FJIjpTu1Roxc+IQxCnqjP2p2TXLj+I5B6Qfw/N ErFh+Mh46U1i8w9hKuOg8uwZoqiQHgSBves8ex/rm+lZ/pmpNM0vgeZAHxLlK86b MtTIrdUPjSw1U6bREqrNoeq5tNYVydjdOlB7bQxJZpvoAZmd6D/zQZVYhPc= -----END CERTIFICATE-----Generated at Sat Oct 18 02:36:55 2025 by rpki-client