$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2da767af-e718-457d-965c-f46913d82512.roa File: 2da767af-e718-457d-965c-f46913d82512.roa (raw, json) Hash identifier: DFN29WazRyAD4697ls0qkd2dPp6Cr0Z+PEg1kqt0Oc0= Subject key identifier: 3B:A1:90:66:CE:6A:98:AC:B2:E2:54:FD:A8:5D:54:CB:D2:97:C0:5D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 07589378F329B78134D00DBC956A97D54CD6BF15 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2da767af-e718-457d-965c-f46913d82512.roa Signing time: Mon 22 Sep 2025 16:53:50 +0000 ROA not before: Mon 22 Sep 2025 16:53:50 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.249.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:58:93:78:f3:29:b7:81:34:d0:0d:bc:95:6a:97:d5:4c:d6:bf:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 16:53:50 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=b12fd650e6dae8d125f5395c032a065dcbef149567a63d73c5b2f2404cfc6e46, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:60:52:cc:8a:35:9f:a8:22:8e:7e:40:23:d6: e5:50:7d:f0:1e:7e:a1:9e:52:8f:2b:79:b0:c6:7d: ff:82:20:79:78:22:1b:c0:37:e5:8b:d8:f4:e0:8e: a7:5b:ce:9f:d3:cb:cb:25:35:0d:6f:cc:f3:0c:a1: dc:e1:12:67:a7:18:0a:a0:b9:73:69:a6:3d:d2:24: f8:95:8f:5b:03:05:55:02:94:0b:0f:c1:97:70:de: 90:ca:7f:3c:f3:ae:9c:68:e0:92:e8:aa:da:31:96: 07:79:f0:5d:e0:7e:c5:7b:29:fc:5f:dd:b1:32:2c: 8d:90:6a:f0:80:e5:03:32:22:ea:5b:c6:4d:16:b1: 10:5a:fa:02:63:6a:a1:7b:63:b8:da:12:bc:cc:1c: b0:e9:ab:cc:9f:5a:6a:09:fe:95:1d:f7:9f:55:84: 1b:25:47:2a:f8:2f:4d:17:cd:49:5f:78:71:e3:c7: 57:30:61:2c:45:26:9c:b2:87:3c:45:1c:88:51:37: 23:a3:9f:a7:b6:4d:b2:22:6d:f4:74:a5:bc:c5:b0: d8:34:82:cd:3c:82:3e:86:da:35:d2:8b:75:1e:74: 66:48:dd:e7:bd:eb:96:40:e1:04:f4:b1:02:3b:d5: 28:bf:6d:01:28:7f:b2:ad:e5:0e:74:3e:a6:a4:c4: 31:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:A1:90:66:CE:6A:98:AC:B2:E2:54:FD:A8:5D:54:CB:D2:97:C0:5D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2da767af-e718-457d-965c-f46913d82512.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.249.194.0/23 Signature Algorithm: sha256WithRSAEncryption 30:09:65:91:e1:b4:bc:dc:ea:33:ff:d7:51:f8:33:43:42:2e: 57:dc:c2:74:22:9e:f0:9d:4b:03:97:9f:1d:ff:71:66:2d:cf: d3:be:14:71:a6:53:4b:e2:54:56:3b:be:f3:7e:a6:24:87:7a: 3f:30:84:04:e0:7b:98:2f:d7:40:42:45:44:f6:55:3a:da:b3: 13:fb:64:ac:60:2d:bc:fa:74:9b:cc:35:7b:eb:bf:53:9b:e4: 42:c7:b3:72:bd:07:72:9d:3c:c5:d2:67:71:a9:3d:ec:44:e6: 80:49:ba:33:32:c5:75:3e:4c:59:85:5f:f2:fc:01:d8:cc:2e: 88:0b:f3:57:40:ff:90:b3:67:11:8b:1f:2c:ff:ab:97:d9:5b: f5:ff:38:45:62:28:34:5d:b5:32:14:5a:3d:2e:13:ad:54:b1: cf:c1:42:a7:3e:22:1a:35:d2:6a:4c:84:fb:43:12:ac:18:c9: 31:6c:b2:43:b3:6a:5a:e5:cd:03:14:d1:19:91:56:33:7b:c6: 0d:f1:06:71:a7:7f:d5:01:5e:ae:11:a9:e0:a0:31:83:ec:f2: 8e:3b:96:ba:75:7e:2d:cb:f1:ee:7f:6e:f1:67:14:c5:a5:b5: 7f:20:4b:7b:6b:59:d1:cd:63:67:1d:71:c3:c1:9f:cc:fa:ae: 70:88:df:d6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUB1iTePMpt4E00A28lWqX1UzWvxUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTY1MzUwWhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMTJmZDY1MGU2ZGFlOGQxMjVmNTM5NWMwMzJhMDY1ZGNi ZWYxNDk1NjdhNjNkNzNjNWIyZjI0MDRjZmM2ZTQ2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8YFLMijWfqCKOfkAj1uVQffAefqGeUo8rebDGff+CIHl4 IhvAN+WL2PTgjqdbzp/Ty8slNQ1vzPMModzhEmenGAqguXNppj3SJPiVj1sDBVUC lAsPwZdw3pDKfzzzrpxo4JLoqtoxlgd58F3gfsV7Kfxf3bEyLI2QavCA5QMyIupb xk0WsRBa+gJjaqF7Y7jaErzMHLDpq8yfWmoJ/pUd959VhBslRyr4L00XzUlfeHHj x1cwYSxFJpyyhzxFHIhRNyOjn6e2TbIibfR0pbzFsNg0gs08gj6G2jXSi3UedGZI 3ee965ZA4QT0sQI71Si/bQEof7Kt5Q50PqakxDHBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUO6GQZs5qmKyy4lT9qF1Uy9KXwF0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzJkYTc2N2FmLWU3MTgtNDU3ZC05NjVjLWY0NjkxM2Q4MjUxMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEN+cIwDQYJKoZIhvcNAQELBQADggEBADAJZZHhtLzc6jP/11H4M0NCLlfc wnQinvCdSwOXnx3/cWYtz9O+FHGmU0viVFY7vvN+piSHej8whATge5gv10BCRUT2 VTrasxP7ZKxgLbz6dJvMNXvrv1Ob5ELHs3K9B3KdPMXSZ3GpPexE5oBJujMyxXU+ TFmFX/L8AdjMLogL81dA/5CzZxGLHyz/q5fZW/X/OEViKDRdtTIUWj0uE61Usc/B Qqc+Iho10mpMhPtDEqwYyTFsskOzalrlzQMU0RmRVjN7xg3xBnGnf9UBXq4RqeCg MYPs8o47lrp1fi3L8e5/bvFnFMWltX8gS3trWdHNY2cdccPBn8z6rnCI39Y= -----END CERTIFICATE-----Generated at Fri Oct 17 22:18:58 2025 by rpki-client