$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/58552b09-1192-482b-9e0e-cee6ba9a4ec8.roa File: 58552b09-1192-482b-9e0e-cee6ba9a4ec8.roa (raw, json) Hash identifier: M3D+inKzW/dZ4VpzvZD90c++DKZmT7E2Anx7evHAgDo= Subject key identifier: 27:31:AF:8D:F7:08:80:9D:E6:8E:C4:58:B7:44:08:6E:BB:5E:AF:D6 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 769FE20992AA3A38EE832DBD601112ADCE90014D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/58552b09-1192-482b-9e0e-cee6ba9a4ec8.roa Signing time: Mon 22 Sep 2025 17:02:03 +0000 ROA not before: Mon 22 Sep 2025 17:02:03 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.249.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:9f:e2:09:92:aa:3a:38:ee:83:2d:bd:60:11:12:ad:ce:90:01:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 17:02:03 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=3113eb9884043890ab5feecea58a5985150543883df6ae236e7630cd0fe60e4f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e6:00:ca:60:a3:f2:e9:db:8f:12:42:3c:b6: 41:6d:91:13:92:45:4f:00:23:74:f8:1c:0b:86:40: 11:fb:cf:5f:3b:31:fb:52:b3:a2:de:67:70:53:dc: b1:5c:de:ea:1c:6e:70:96:67:62:ad:23:b8:69:12: f9:24:9a:35:31:52:4e:34:af:d3:89:91:af:75:5f: 97:85:30:9d:e1:8a:a8:d6:ec:6c:c3:fa:24:46:40: 6b:06:35:f7:91:1a:f4:34:d9:a8:56:be:a4:ce:a3: 96:b8:15:02:ff:27:02:c0:0f:52:07:dc:a2:0d:0a: a3:6e:50:14:cb:94:1e:e1:21:24:41:df:5d:8a:30: c8:44:19:44:eb:0c:ae:8a:7e:4b:b5:76:09:13:3b: b9:6b:2a:fd:d8:0c:a2:c6:be:85:9f:30:84:ae:50: 8b:b0:c7:da:26:83:fd:f0:0c:24:14:3a:e2:70:f5: df:27:1c:ae:2b:33:71:0c:d9:80:d3:05:ec:e9:70: da:f7:59:ad:ca:9d:a8:01:c0:58:d0:d6:d2:14:cc: 5d:c3:1a:cd:74:72:62:bd:75:81:1f:4b:5e:e2:e6: 20:57:8c:18:40:79:3c:9e:3c:97:0b:2f:44:3a:84: b2:7e:1c:9b:c1:08:0c:06:6e:46:65:7d:16:68:dd: 7d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:31:AF:8D:F7:08:80:9D:E6:8E:C4:58:B7:44:08:6E:BB:5E:AF:D6 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/58552b09-1192-482b-9e0e-cee6ba9a4ec8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.249.48.0/21 Signature Algorithm: sha256WithRSAEncryption 68:ae:30:c8:8e:73:8d:36:ec:39:15:24:82:07:94:d6:38:20: fd:2f:14:66:48:05:69:74:3f:cd:6e:38:43:45:92:3c:58:61: 24:1f:5d:86:67:bc:45:5c:7f:05:cf:31:ba:6e:eb:d2:41:72: 31:7b:36:7c:d3:f5:82:a0:41:8e:de:f6:b4:ad:5c:64:8a:2b: 92:d0:1e:fd:e9:2f:23:dc:c1:6b:21:0f:b5:38:49:24:12:0e: d5:96:b3:6d:5b:82:6b:c3:93:41:d3:d5:e9:e9:0b:44:c7:2e: c6:89:99:01:a2:78:50:98:3d:18:89:ab:af:99:9e:eb:d7:83: 3a:43:76:a6:28:de:cf:bb:9c:d3:ab:60:6d:11:a0:7c:63:ef: d0:a3:4c:b6:71:d3:2b:18:9d:4f:42:9a:19:70:0b:76:ea:ba: db:44:4b:2a:33:d4:fa:4c:68:3b:33:70:c7:0b:94:5f:ac:a6: e7:e2:fc:3f:75:77:c6:3b:27:bf:cd:a9:37:38:2b:13:20:c2: 4d:f9:2f:ab:c2:92:a8:28:6b:fb:b7:10:eb:f2:37:4b:55:bf: d6:97:82:30:33:99:ca:38:5a:64:a3:af:20:33:cc:6c:ed:46: f0:38:97:be:fa:71:89:7c:93:2d:50:70:bb:41:69:6f:13:80: 1a:13:ee:54 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdp/iCZKqOjjugy29YBESrc6QAU0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTcwMjAzWhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AzMTEzZWI5ODg0MDQzODkwYWI1ZmVlY2VhNThhNTk4NTE1 MDU0Mzg4M2RmNmFlMjM2ZTc2MzBjZDBmZTYwZTRmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDA5gDKYKPy6duPEkI8tkFtkROSRU8AI3T4HAuGQBH7z187 MftSs6LeZ3BT3LFc3uocbnCWZ2KtI7hpEvkkmjUxUk40r9OJka91X5eFMJ3hiqjW 7GzD+iRGQGsGNfeRGvQ02ahWvqTOo5a4FQL/JwLAD1IH3KINCqNuUBTLlB7hISRB 312KMMhEGUTrDK6Kfku1dgkTO7lrKv3YDKLGvoWfMISuUIuwx9omg/3wDCQUOuJw 9d8nHK4rM3EM2YDTBezpcNr3Wa3KnagBwFjQ1tIUzF3DGs10cmK9dYEfS17i5iBX jBhAeTyePJcLL0Q6hLJ+HJvBCAwGbkZlfRZo3X0VAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJzGvjfcIgJ3mjsRYt0QIbrter9YwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzU4NTUyYjA5LTExOTItNDgyYi05ZTBlLWNlZTZiYTlhNGVjOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMN+TAwDQYJKoZIhvcNAQELBQADggEBAGiuMMiOc4027DkVJIIHlNY4IP0v FGZIBWl0P81uOENFkjxYYSQfXYZnvEVcfwXPMbpu69JBcjF7NnzT9YKgQY7e9rSt XGSKK5LQHv3pLyPcwWshD7U4SSQSDtWWs21bgmvDk0HT1enpC0THLsaJmQGieFCY PRiJq6+ZnuvXgzpDdqYo3s+7nNOrYG0RoHxj79CjTLZx0ysYnU9CmhlwC3bquttE Syoz1PpMaDszcMcLlF+spufi/D91d8Y7J7/NqTc4KxMgwk35L6vCkqgoa/u3EOvy N0tVv9aXgjAzmco4WmSjryAzzGztRvA4l776cYl8ky1QcLtBaW8TgBoT7lQ= -----END CERTIFICATE-----Generated at Fri Oct 17 22:04:40 2025 by rpki-client