$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/45125e67-710b-4973-b58f-eb0a0b8cd3b8.roa File: 45125e67-710b-4973-b58f-eb0a0b8cd3b8.roa (raw, json) Hash identifier: 39ZLAprCjCKUvSOdzTlpqhoPR/ZDzufLsvF6yUOuao0= Subject key identifier: A4:07:9F:CC:45:67:BB:F1:E1:CF:29:B3:F1:2C:72:03:A8:32:32:0D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 77463EA66FBE1ED223B04EB4130CACEDF3916C2A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/45125e67-710b-4973-b58f-eb0a0b8cd3b8.roa Signing time: Wed 24 Sep 2025 20:00:21 +0000 ROA not before: Wed 24 Sep 2025 20:00:21 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.224.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:46:3e:a6:6f:be:1e:d2:23:b0:4e:b4:13:0c:ac:ed:f3:91:6c:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 20:00:21 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=9e30f7da68fbd5678763fb80e58e3911285785d84832d95581ac9b9ef1baf492, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b1:0b:1d:46:55:b7:37:af:d8:d9:40:97:44: 93:2a:19:31:64:77:63:32:19:dc:ab:d8:aa:b0:d9: 64:46:15:2e:cf:69:97:02:d8:b4:5e:0e:72:ac:b2: 02:56:ab:56:53:a2:f2:ee:81:40:0e:6f:8a:0b:68: 75:05:dd:72:53:91:2e:77:1a:13:5a:0d:78:b8:b2: 05:3a:32:45:c5:06:e6:24:81:9d:a6:87:a0:d8:33: 06:8c:e1:db:f7:f2:96:44:13:58:01:9d:08:35:49: b8:e7:17:be:b1:f2:27:4b:d9:40:4f:5c:a6:56:87: fa:cf:78:5d:fe:ab:97:a3:b8:cf:02:35:39:a7:12: 24:4a:ed:d3:fa:5d:df:51:f4:b1:70:33:59:bd:7c: 86:ac:4b:81:9d:38:f0:94:7a:77:f1:28:66:dc:c4: 83:a2:cd:87:e8:37:cf:d1:76:31:b8:b6:13:cf:2e: 00:29:1c:e3:a8:41:c2:32:05:81:99:22:e1:ad:24: f3:b7:68:9d:c0:b5:f0:4c:1a:9d:12:29:47:d9:85: f7:6e:5f:a2:d6:bc:51:88:d6:76:c5:cf:59:f3:32: 71:e1:2e:21:d4:b5:af:81:27:ff:54:49:79:f0:d7: 8f:45:3d:cf:e9:ab:ea:b7:60:be:a3:1f:2d:0c:85: ac:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:07:9F:CC:45:67:BB:F1:E1:CF:29:B3:F1:2C:72:03:A8:32:32:0D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/45125e67-710b-4973-b58f-eb0a0b8cd3b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.224.108.0/23 Signature Algorithm: sha256WithRSAEncryption 6b:05:50:31:c6:25:d0:eb:8f:99:ef:4a:60:ec:d5:76:b2:39: b6:5e:b3:07:ae:81:75:37:0d:dc:d2:4b:80:70:5b:6c:2c:94: 2a:9e:65:1d:f2:3c:bd:1a:89:b3:bc:ae:ef:24:eb:dd:93:22: 3f:f4:b3:89:98:6c:17:49:13:65:dd:b4:b3:47:72:57:54:10: 86:2b:3c:82:95:a6:df:26:f6:a5:f4:84:69:7b:c3:c6:23:fa: 2c:46:c6:04:df:6f:33:fa:15:b3:22:5e:0c:13:6b:92:48:29: 3c:89:3f:45:1c:03:a0:41:a2:38:8f:58:9f:ca:4b:16:2e:d7: 64:a7:9e:2f:cd:5e:3e:33:ab:c7:54:3d:7c:0e:d8:f0:38:74: 47:9b:ad:c7:26:ae:63:4a:20:0a:37:32:c1:64:4f:ba:1c:fb: 2e:b7:f0:4f:0a:d1:3c:23:b4:1c:5d:de:0a:79:7b:38:e4:3b: 51:81:03:85:1d:40:09:91:81:1a:98:54:4c:28:4a:10:28:82: ed:a1:f2:4f:6b:19:1c:dd:bc:7f:45:9d:7c:d4:da:1f:d1:70: f2:66:14:57:45:0f:f0:cb:fe:bb:37:60:af:4f:41:c9:fa:66: fb:c6:2d:19:a6:78:dd:46:12:be:59:05:4b:9b:b9:59:14:5b: 5d:ec:b4:30 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUd0Y+pm++HtIjsE60Ewys7fORbCowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MjAwMDIxWhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZTMwZjdkYTY4ZmJkNTY3ODc2M2ZiODBlNThlMzkxMTI4 NTc4NWQ4NDgzMmQ5NTU4MWFjOWI5ZWYxYmFmNDkyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCLsQsdRlW3N6/Y2UCXRJMqGTFkd2MyGdyr2Kqw2WRGFS7P aZcC2LReDnKssgJWq1ZTovLugUAOb4oLaHUF3XJTkS53GhNaDXi4sgU6MkXFBuYk gZ2mh6DYMwaM4dv38pZEE1gBnQg1SbjnF76x8idL2UBPXKZWh/rPeF3+q5ejuM8C NTmnEiRK7dP6Xd9R9LFwM1m9fIasS4GdOPCUenfxKGbcxIOizYfoN8/RdjG4thPP LgApHOOoQcIyBYGZIuGtJPO3aJ3AtfBMGp0SKUfZhfduX6LWvFGI1nbFz1nzMnHh LiHUta+BJ/9USXnw149FPc/pq+q3YL6jHy0Mhaz3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUpAefzEVnu/Hhzymz8SxyA6gyMg0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQ1MTI1ZTY3LTcxMGItNDk3My1iNThmLWViMGEwYjhjZDNiOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEN4GwwDQYJKoZIhvcNAQELBQADggEBAGsFUDHGJdDrj5nvSmDs1XayObZe sweugXU3DdzSS4BwW2wslCqeZR3yPL0aibO8ru8k692TIj/0s4mYbBdJE2XdtLNH cldUEIYrPIKVpt8m9qX0hGl7w8Yj+ixGxgTfbzP6FbMiXgwTa5JIKTyJP0UcA6BB ojiPWJ/KSxYu12Snni/NXj4zq8dUPXwO2PA4dEebrccmrmNKIAo3MsFkT7oc+y63 8E8K0TwjtBxd3gp5ezjkO1GBA4UdQAmRgRqYVEwoShAogu2h8k9rGRzdvH9FnXzU 2h/RcPJmFFdFD/DL/rs3YK9PQcn6ZvvGLRmmeN1GEr5ZBUubuVkUW13stDA= -----END CERTIFICATE-----Generated at Sat Oct 18 05:11:53 2025 by rpki-client