$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/674b5c05-f591-404d-a501-e4a692a8dd45.roa File: 674b5c05-f591-404d-a501-e4a692a8dd45.roa (raw, json) Hash identifier: PUOEyVEV5LaOurFWwFBMq9y9L2p/TZwq+zoN9uoIfCo= Subject key identifier: 86:FA:FB:F8:57:67:16:21:4D:BB:EE:B8:B5:59:4E:D7:CD:62:20:38 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 70BCF138A230458772B6485C2CE9F6017A1B52C6 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/674b5c05-f591-404d-a501-e4a692a8dd45.roa Signing time: Wed 24 Sep 2025 20:37:02 +0000 ROA not before: Wed 24 Sep 2025 20:37:02 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.224.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:bc:f1:38:a2:30:45:87:72:b6:48:5c:2c:e9:f6:01:7a:1b:52:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 20:37:02 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=641e6bd8e1fe120c4c30ea962daa25add8cf2724bb0ab718e987aeafb7a41f47, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:04:9c:22:b8:ba:47:3c:cf:eb:36:c7:c4:c0: 42:92:6d:54:dc:3b:45:8a:b6:c8:1e:b8:44:6b:20: 1e:bb:54:a7:d7:ea:a5:ec:b9:52:91:3d:5f:54:a4: 4c:71:f3:fc:4b:a7:0d:28:4f:0e:96:a8:4c:1b:97: f7:de:7e:60:00:82:8b:b2:58:bd:8c:65:36:14:f7: 6c:f8:49:0c:bd:07:94:ce:ca:33:4c:39:03:b8:18: cb:9c:7e:b4:f1:51:56:bd:fe:f6:67:c9:d4:aa:db: 68:09:ef:b3:0f:42:2a:46:13:ce:b0:89:ba:92:3f: 29:8d:4b:23:68:55:8c:8e:b1:7f:7c:10:37:0b:64: db:ca:72:d6:c2:27:7d:9f:f6:12:39:7d:a9:7b:c3: c7:12:f2:35:5a:9f:a4:39:16:46:c3:9b:ec:d7:70: ca:96:a9:59:87:a5:4d:c1:b4:36:16:0f:dd:f5:a5: d1:91:3e:66:d8:3f:77:e1:68:60:42:9d:a3:ca:17: be:f2:e0:5f:82:20:62:fa:25:48:dc:e7:78:c2:56: 42:34:82:d1:71:b8:77:21:4d:62:68:e2:7a:67:a1: bc:ed:b1:7e:64:05:49:31:35:f8:52:70:9c:69:7b: b7:74:82:ac:ed:21:49:c0:b0:91:7c:8f:74:a1:eb: af:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:FA:FB:F8:57:67:16:21:4D:BB:EE:B8:B5:59:4E:D7:CD:62:20:38 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/674b5c05-f591-404d-a501-e4a692a8dd45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.224.68.0/22 Signature Algorithm: sha256WithRSAEncryption 8c:cf:15:3f:52:69:61:27:2d:d5:91:93:19:ef:63:6c:43:bb: 93:ee:8b:f6:b9:da:45:51:c7:7a:cc:3f:c9:05:2d:4b:48:1e: 50:a8:92:9a:2b:45:93:1b:9a:eb:ac:6f:e6:00:4b:45:c5:c0: d5:57:06:7e:dd:18:9d:d0:72:9d:f6:71:ce:55:e5:98:e8:cb: cc:b1:3e:4b:91:88:58:c0:96:a9:ba:d5:23:48:ab:54:08:c3: 4d:7d:56:5d:af:5a:f2:0c:03:7a:b5:b5:05:29:a2:92:ff:0f: cf:bb:45:41:9a:44:78:ae:e6:95:41:22:90:be:26:d6:7c:41: b3:3d:f3:b6:51:70:cd:bb:56:af:1a:fa:fc:1e:73:8c:c4:21: f6:f4:46:2c:84:85:02:6f:a4:16:24:65:43:06:cd:0b:7a:27: 9c:5c:fd:5f:40:d6:ce:49:05:85:14:37:0a:b2:62:7f:bf:b2: 75:ea:9c:c6:40:6b:2c:7a:5d:9a:78:b5:da:06:d2:53:52:2a: e1:4c:c2:2d:3a:44:de:12:67:6f:34:b3:87:c8:ce:9a:99:ea: b9:7d:43:9d:1e:77:bd:9a:e8:24:59:a9:c6:dd:46:c8:6c:8e: 0a:fc:88:5a:91:ef:fe:9a:43:44:88:0f:5a:a1:b6:b8:f1:03: d6:41:a7:f1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcLzxOKIwRYdytkhcLOn2AXobUsYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MjAzNzAyWhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A2NDFlNmJkOGUxZmUxMjBjNGMzMGVhOTYyZGFhMjVhZGQ4 Y2YyNzI0YmIwYWI3MThlOTg3YWVhZmI3YTQxZjQ3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDtBJwiuLpHPM/rNsfEwEKSbVTcO0WKtsgeuERrIB67VKfX 6qXsuVKRPV9UpExx8/xLpw0oTw6WqEwbl/fefmAAgouyWL2MZTYU92z4SQy9B5TO yjNMOQO4GMucfrTxUVa9/vZnydSq22gJ77MPQipGE86wibqSPymNSyNoVYyOsX98 EDcLZNvKctbCJ32f9hI5fal7w8cS8jVan6Q5FkbDm+zXcMqWqVmHpU3BtDYWD931 pdGRPmbYP3fhaGBCnaPKF77y4F+CIGL6JUjc53jCVkI0gtFxuHchTWJo4npnobzt sX5kBUkxNfhScJxpe7d0gqztIUnAsJF8j3Sh668PAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhvr7+FdnFiFNu+64tVlO181iIDgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzY3NGI1YzA1LWY1OTEtNDA0ZC1hNTAxLWU0YTY5MmE4ZGQ0NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIN4EQwDQYJKoZIhvcNAQELBQADggEBAIzPFT9SaWEnLdWRkxnvY2xDu5Pu i/a52kVRx3rMP8kFLUtIHlCokporRZMbmuusb+YAS0XFwNVXBn7dGJ3Qcp32cc5V 5Zjoy8yxPkuRiFjAlqm61SNIq1QIw019Vl2vWvIMA3q1tQUpopL/D8+7RUGaRHiu 5pVBIpC+JtZ8QbM987ZRcM27Vq8a+vwec4zEIfb0RiyEhQJvpBYkZUMGzQt6J5xc /V9A1s5JBYUUNwqyYn+/snXqnMZAayx6XZp4tdoG0lNSKuFMwi06RN4SZ280s4fI zpqZ6rl9Q50ed72a6CRZqcbdRshsjgr8iFqR7/6aQ0SID1qhtrjxA9ZBp/E= -----END CERTIFICATE-----Generated at Sat Oct 18 04:52:44 2025 by rpki-client