$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3f2fe142-2455-492f-9a68-60ae89d1e28a.roa File: 3f2fe142-2455-492f-9a68-60ae89d1e28a.roa (raw, json) Hash identifier: iZXnBbtu9sjoSrCbwiP7U3SAI0e+rJ3fRECzp/AjdYI= Subject key identifier: 8B:66:F0:CA:B6:A7:D2:F7:0B:76:FC:D0:F6:29:3A:57:B8:2D:77:AB Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 67B0FFB89857925EA8FA652B846827590A7ABA9E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3f2fe142-2455-492f-9a68-60ae89d1e28a.roa Signing time: Wed 24 Sep 2025 20:00:28 +0000 ROA not before: Wed 24 Sep 2025 20:00:28 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.224.12.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:b0:ff:b8:98:57:92:5e:a8:fa:65:2b:84:68:27:59:0a:7a:ba:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 20:00:28 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=d71c5f2bec89242bcf0247a972d6f1e101eb0cf3f81970b78eb54d515766dd7e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7a:51:ef:c7:e3:4e:1c:df:74:cf:8c:b2:d7: e6:66:d2:ff:5e:99:04:6c:1d:cb:42:61:45:f5:d6: c7:a7:0d:fd:9b:f4:ca:ef:45:2b:f4:bc:a9:d7:9a: 7e:17:dc:8a:d3:81:21:75:da:b8:19:ca:e6:8b:a0: e5:c1:94:5a:62:20:2e:a3:07:34:5d:92:da:f7:da: 19:5d:85:a7:1c:7a:28:5e:20:13:b1:42:95:3d:36: 55:1f:c7:5f:02:ce:82:84:c8:4c:94:76:c6:8a:e1: c0:dd:02:81:0f:67:41:34:40:4b:47:de:92:a3:06: 1a:35:27:98:79:37:bc:ce:3c:59:ab:01:7d:bc:7c: 32:a6:95:7c:a8:47:33:cb:42:27:a9:db:3c:b1:89: 5a:ad:ef:d4:e7:ff:48:59:96:a4:55:ab:09:ac:49: 42:07:41:97:40:84:3f:dc:e2:94:78:ad:9c:94:3e: f6:fc:56:81:8f:38:16:0d:1f:9c:1b:38:ec:03:6c: 22:dc:b5:7b:19:90:43:40:43:89:5a:d1:27:39:d1: d2:d4:bf:01:e9:7a:a1:c0:53:82:60:2f:a2:36:30: 22:9f:aa:77:ec:10:62:93:76:3a:26:91:2c:e7:91: ae:71:61:72:ad:6c:93:fb:aa:88:fa:cd:0a:7c:27: 48:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:66:F0:CA:B6:A7:D2:F7:0B:76:FC:D0:F6:29:3A:57:B8:2D:77:AB X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3f2fe142-2455-492f-9a68-60ae89d1e28a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.224.12.0/23 Signature Algorithm: sha256WithRSAEncryption 24:50:8e:f7:e1:b8:8d:ac:11:b6:b5:63:3b:dc:5b:39:7e:39: b8:36:fb:76:b4:a3:b2:a0:35:f1:a9:fe:92:87:0d:af:71:9f: a2:25:03:86:cc:b0:03:4e:0a:c1:a4:71:b8:c5:00:81:8a:93: f6:25:c2:4a:99:34:5c:bc:6a:bf:c6:ba:8c:49:5a:e9:dc:7a: 7d:14:99:22:74:af:40:7e:f9:48:35:78:a1:3a:8d:b8:b3:a6: 88:67:f7:ef:f4:27:85:38:32:31:67:21:83:5e:1a:9f:0c:ab: 2e:91:40:4a:f1:68:11:4e:5f:4e:e3:a4:d7:2f:03:f3:07:f2: 1f:7f:25:5d:f1:f9:af:6a:8e:21:24:a4:8b:d0:09:2e:a4:17: d2:ad:48:ee:a4:4b:42:21:f9:8c:3b:d0:df:b6:70:cb:4d:b6: c2:53:b9:32:ce:0e:a9:6f:83:0e:a7:13:27:a2:ae:46:83:fa: de:cc:ab:24:ed:79:e4:86:f2:8a:32:40:ec:a9:e8:3a:f3:c2: f0:0b:0d:5e:b4:9d:16:5a:9f:d0:9b:38:56:b4:27:fe:fb:ce: c8:4d:a6:d5:f1:59:d7:c9:3e:dc:b3:0d:17:63:c4:28:84:c2: a7:54:eb:91:cc:f5:bc:20:04:66:d5:9e:e2:a1:c1:2c:11:54: a7:a8:a1:4b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZ7D/uJhXkl6o+mUrhGgnWQp6up4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MjAwMDI4WhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNzFjNWYyYmVjODkyNDJiY2YwMjQ3YTk3MmQ2ZjFlMTAx ZWIwY2YzZjgxOTcwYjc4ZWI1NGQ1MTU3NjZkZDdlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDAelHvx+NOHN90z4yy1+Zm0v9emQRsHctCYUX11senDf2b 9MrvRSv0vKnXmn4X3IrTgSF12rgZyuaLoOXBlFpiIC6jBzRdktr32hldhacceihe IBOxQpU9NlUfx18CzoKEyEyUdsaK4cDdAoEPZ0E0QEtH3pKjBho1J5h5N7zOPFmr AX28fDKmlXyoRzPLQiep2zyxiVqt79Tn/0hZlqRVqwmsSUIHQZdAhD/c4pR4rZyU Pvb8VoGPOBYNH5wbOOwDbCLctXsZkENAQ4la0Sc50dLUvwHpeqHAU4JgL6I2MCKf qnfsEGKTdjomkSznka5xYXKtbJP7qoj6zQp8J0j7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUi2bwyran0vcLdvzQ9ik6V7gtd6swHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzNmMmZlMTQyLTI0NTUtNDkyZi05YTY4LTYwYWU4OWQxZTI4YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEN4AwwDQYJKoZIhvcNAQELBQADggEBACRQjvfhuI2sEba1YzvcWzl+Obg2 +3a0o7KgNfGp/pKHDa9xn6IlA4bMsANOCsGkcbjFAIGKk/YlwkqZNFy8ar/GuoxJ Wuncen0UmSJ0r0B++Ug1eKE6jbizpohn9+/0J4U4MjFnIYNeGp8Mqy6RQErxaBFO X07jpNcvA/MH8h9/JV3x+a9qjiEkpIvQCS6kF9KtSO6kS0Ih+Yw70N+2cMtNtsJT uTLODqlvgw6nEyeirkaD+t7MqyTteeSG8ooyQOyp6DrzwvALDV60nRZan9CbOFa0 J/77zshNptXxWdfJPtyzDRdjxCiEwqdU65HM9bwgBGbVnuKhwSwRVKeooUs= -----END CERTIFICATE-----Generated at Fri Oct 17 22:19:15 2025 by rpki-client