$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2e015d4a-25f4-417a-96ad-7b2bece971fd.roa File: 2e015d4a-25f4-417a-96ad-7b2bece971fd.roa (raw, json) Hash identifier: +KiS51QxGMBq7xq7E+mjUXLPOe+1vu2Db/6mcfpk/5c= Subject key identifier: 1D:1C:F3:42:AD:64:EB:1F:76:58:1E:E3:C1:3F:65:A9:23:3C:E4:FE Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 661DB97C9250FA7BD127578FABB38AB91B479025 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2e015d4a-25f4-417a-96ad-7b2bece971fd.roa Signing time: Tue 07 Oct 2025 15:12:41 +0000 ROA not before: Tue 07 Oct 2025 15:12:41 +0000 ROA not after: Tue 11 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.43.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:1d:b9:7c:92:50:fa:7b:d1:27:57:8f:ab:b3:8a:b9:1b:47:90:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 7 15:12:41 2025 GMT Not After : Nov 11 23:59:59 2025 GMT Subject: serialNumber=9fde793b2efbdd50921325ebde8b0103046875c88cb7238d02aa59cbc82ce236, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fc:52:a5:15:0f:80:61:9c:88:07:ee:2d:1a: 4f:ad:39:fa:b5:d1:07:d0:7f:3a:0e:02:91:78:bd: fa:50:46:94:60:49:f7:63:10:57:fe:ba:a3:69:3d: 14:e2:93:32:24:9c:00:fa:18:75:0c:0e:01:f1:67: cf:fc:8e:16:19:33:e5:1b:91:1e:fe:d2:59:8f:1c: 2b:96:e1:4f:83:6d:b9:1d:c4:b2:55:6e:70:5c:e6: 11:79:11:c4:5d:fa:4f:3a:d5:42:6e:68:66:a2:74: 74:b0:a6:95:4c:39:57:1c:12:8a:f9:a9:e6:62:4e: 58:71:ad:71:fa:8b:5d:6d:54:48:c3:b6:70:74:98: 37:9e:be:83:3f:17:48:4f:83:eb:03:22:c0:6b:64: 3f:90:7c:a6:38:86:58:f8:91:b2:b0:c5:5c:c4:fd: ef:1d:c3:e9:d8:d9:4d:9d:63:82:61:88:d0:3d:93: 4b:ff:c0:65:c8:8b:95:5c:83:0b:fb:0a:e3:49:c8: f8:fa:96:68:e7:c6:d9:7b:86:92:ad:f8:db:2d:16: 87:41:cb:aa:cf:15:6a:b3:12:54:f2:3b:bb:59:6c: 8c:21:28:f2:eb:5b:ca:cf:29:29:3f:a4:4a:cc:fc: f4:e3:60:de:e3:b6:89:c7:c1:ba:57:91:05:9f:ad: 1b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:1C:F3:42:AD:64:EB:1F:76:58:1E:E3:C1:3F:65:A9:23:3C:E4:FE X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2e015d4a-25f4-417a-96ad-7b2bece971fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.43.44.0/22 Signature Algorithm: sha256WithRSAEncryption 3f:fd:d9:b4:81:fa:b3:b9:bc:2a:fe:6c:6e:dc:94:06:41:68: ef:28:be:ab:f9:6b:81:df:31:48:b9:35:9a:cb:c4:c4:3c:98: 49:1d:b8:85:4f:5b:bc:64:c8:27:2f:73:0d:d9:75:2a:db:e4: e2:3f:46:d1:84:54:a3:12:5d:75:bb:ed:38:de:45:60:c1:ec: 48:2d:aa:41:14:5d:eb:42:9b:d2:3a:81:98:47:33:59:78:4a: 99:ca:78:6f:1d:27:3b:b6:f7:1c:49:fc:33:68:7b:53:ce:a2: 5e:a1:14:f4:ae:fd:65:cc:a6:e6:56:71:f6:e9:2b:a8:fa:a6: 03:18:1e:10:24:5e:6f:70:78:09:fa:16:6f:bd:94:62:a1:d1: ca:ad:c7:ab:ff:14:69:25:e0:d5:b8:e3:ae:9d:ed:85:ac:6a: 5b:c2:8f:54:19:65:2a:a0:2d:17:ae:8c:6d:44:f1:bf:60:5c: 64:74:de:a5:32:bf:e2:38:c9:ac:c6:30:5e:a3:bf:f2:b3:28: 56:02:1f:33:21:84:e7:81:9e:32:68:8c:f5:c8:f4:20:01:e9: f1:ee:49:85:09:94:cb:a8:43:14:fe:33:bf:63:68:ef:78:c0: fa:af:61:e5:cb:18:e4:4e:d2:cb:a6:a8:9f:d1:66:77:b7:7d: b7:cb:93:66 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZh25fJJQ+nvRJ1ePq7OKuRtHkCUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDA3MTUxMjQxWhcNMjUxMTExMjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZmRlNzkzYjJlZmJkZDUwOTIxMzI1ZWJkZThiMDEwMzA0 Njg3NWM4OGNiNzIzOGQwMmFhNTljYmM4MmNlMjM2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCq/FKlFQ+AYZyIB+4tGk+tOfq10QfQfzoOApF4vfpQRpRg SfdjEFf+uqNpPRTikzIknAD6GHUMDgHxZ8/8jhYZM+UbkR7+0lmPHCuW4U+Dbbkd xLJVbnBc5hF5EcRd+k861UJuaGaidHSwppVMOVccEor5qeZiTlhxrXH6i11tVEjD tnB0mDeevoM/F0hPg+sDIsBrZD+QfKY4hlj4kbKwxVzE/e8dw+nY2U2dY4JhiNA9 k0v/wGXIi5Vcgwv7CuNJyPj6lmjnxtl7hpKt+NstFodBy6rPFWqzElTyO7tZbIwh KPLrW8rPKSk/pErM/PTjYN7jtonHwbpXkQWfrRuFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUHRzzQq1k6x92WB7jwT9lqSM85P4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzJlMDE1ZDRhLTI1ZjQtNDE3YS05NmFkLTdiMmJlY2U5NzFmZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAINKywwDQYJKoZIhvcNAQELBQADggEBAD/92bSB+rO5vCr+bG7clAZBaO8o vqv5a4HfMUi5NZrLxMQ8mEkduIVPW7xkyCcvcw3ZdSrb5OI/RtGEVKMSXXW77Tje RWDB7EgtqkEUXetCm9I6gZhHM1l4SpnKeG8dJzu29xxJ/DNoe1POol6hFPSu/WXM puZWcfbpK6j6pgMYHhAkXm9weAn6Fm+9lGKh0cqtx6v/FGkl4NW4466d7YWsalvC j1QZZSqgLReujG1E8b9gXGR03qUyv+I4yazGMF6jv/KzKFYCHzMhhOeBnjJojPXI 9CAB6fHuSYUJlMuoQxT+M79jaO94wPqvYeXLGORO0sumqJ/RZne3fbfLk2Y= -----END CERTIFICATE-----Generated at Sat Oct 18 02:42:00 2025 by rpki-client