$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8855d790-c2ce-4310-a051-4cffe58150bb.roa File: 8855d790-c2ce-4310-a051-4cffe58150bb.roa (raw, json) Hash identifier: fgnxy3MviT7qnt8OjzoWGnr++zYszwI1nQLp4Imke1E= Subject key identifier: 56:CD:D3:9A:80:4F:28:AB:ED:D5:A2:A5:D7:97:C9:34:A7:E0:A9:1D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 65205014CEFB505E3A854522C18AE4618B5A2224 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8855d790-c2ce-4310-a051-4cffe58150bb.roa Signing time: Wed 24 Sep 2025 19:32:48 +0000 ROA not before: Wed 24 Sep 2025 19:32:48 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.226.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:20:50:14:ce:fb:50:5e:3a:85:45:22:c1:8a:e4:61:8b:5a:22:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 19:32:48 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=55e7c8c6ac0048e6a142b3bab85bebe0b044ab455e75ddbb4c21638f103c3857, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ed:35:c3:e3:22:32:ff:32:46:b1:e7:b8:f5: e2:2d:ca:ea:3c:c5:e1:6c:88:c0:e9:e2:22:87:15: 7c:5a:83:04:e8:c8:c3:a3:6f:ac:0c:64:68:18:58: 71:c8:39:f7:10:b4:28:83:8a:a0:e6:39:19:95:73: c6:d2:a5:bb:20:95:94:0c:d0:9a:a1:5a:6d:b2:96: 3d:49:93:63:b5:36:40:97:e4:36:bc:3d:73:81:99: 5a:90:72:ac:84:43:70:05:96:7c:76:e1:30:14:9d: dc:cb:57:2e:75:e3:62:f8:2a:c4:e9:cf:6e:1a:0a: 2b:e0:0e:a2:1b:0a:52:b5:f3:1c:a7:b0:c0:e2:c8: 5e:e1:e2:80:03:c2:95:ad:e0:df:7e:99:63:2a:e7: 4e:83:52:ed:87:89:eb:2b:95:7c:b2:93:e6:59:bd: 35:a6:d5:6f:1f:d9:df:c3:36:7a:0d:1b:46:09:1c: 98:0e:c3:fd:1f:5a:0e:bf:2b:d1:7e:24:01:10:5f: eb:4b:bb:41:f8:34:88:9c:df:4b:5c:23:80:f6:54: 9f:e6:9f:5d:94:98:55:d0:d2:f0:6b:81:49:a5:7c: 89:2e:77:43:f1:5d:01:64:9d:67:e1:9e:59:dd:00: 87:79:86:33:62:ae:a6:31:3d:42:e0:7f:55:fb:cc: 90:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:CD:D3:9A:80:4F:28:AB:ED:D5:A2:A5:D7:97:C9:34:A7:E0:A9:1D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8855d790-c2ce-4310-a051-4cffe58150bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.226.162.0/24 Signature Algorithm: sha256WithRSAEncryption 88:7c:1c:32:44:b2:2c:16:38:2e:52:62:e8:d3:61:a4:10:66: f4:95:d3:cc:db:33:8f:42:e9:b6:fc:f1:6c:2e:01:93:33:3f: 61:71:b7:09:52:5a:f2:67:9c:4d:a9:51:8e:76:d7:8f:f5:1e: 5c:9a:cd:e1:ed:16:18:c2:9e:0e:5a:c2:70:8d:7f:f2:3f:ba: a5:fb:54:11:ee:35:e6:ad:79:96:88:49:8e:2e:4c:e1:2c:9f: 23:46:8d:09:1f:fa:36:a4:a8:f3:61:03:94:97:0d:68:2c:09: b0:eb:9a:a6:08:41:1c:42:e5:07:91:5a:ee:4d:8a:22:54:65: 5b:7d:33:7e:15:52:d0:fa:9a:fc:ee:4f:64:da:1d:f3:f0:93: 6c:06:33:6a:02:03:64:32:25:b1:ae:67:b8:c4:3d:e6:ac:af: 8a:5d:85:2f:db:a3:33:11:60:55:ae:92:86:38:dd:61:8f:f3: 46:02:63:68:38:45:54:8a:e8:1f:e2:6e:3f:5a:d1:43:29:46: 6c:56:44:e6:ea:03:c0:6d:00:ac:90:3c:83:fa:5c:38:cd:c8: 72:c5:12:45:20:49:84:55:d4:e0:b2:17:32:98:cd:6e:14:68: 86:69:a5:c1:f5:a1:e5:c0:74:c8:d1:94:7f:91:1c:87:8d:d8: 18:34:a4:69 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZSBQFM77UF46hUUiwYrkYYtaIiQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MTkzMjQ4WhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A1NWU3YzhjNmFjMDA0OGU2YTE0MmIzYmFiODViZWJlMGIw NDRhYjQ1NWU3NWRkYmI0YzIxNjM4ZjEwM2MzODU3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCe7TXD4yIy/zJGsee49eItyuo8xeFsiMDp4iKHFXxagwTo yMOjb6wMZGgYWHHIOfcQtCiDiqDmORmVc8bSpbsglZQM0JqhWm2ylj1Jk2O1NkCX 5Da8PXOBmVqQcqyEQ3AFlnx24TAUndzLVy5142L4KsTpz24aCivgDqIbClK18xyn sMDiyF7h4oADwpWt4N9+mWMq506DUu2HiesrlXyyk+ZZvTWm1W8f2d/DNnoNG0YJ HJgOw/0fWg6/K9F+JAEQX+tLu0H4NIic30tcI4D2VJ/mn12UmFXQ0vBrgUmlfIku d0PxXQFknWfhnlndAId5hjNirqYxPULgf1X7zJDTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUVs3TmoBPKKvt1aKl15fJNKfgqR0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg4NTVkNzkwLWMyY2UtNDMxMC1hMDUxLTRjZmZlNTgxNTBiYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAN4qIwDQYJKoZIhvcNAQELBQADggEBAIh8HDJEsiwWOC5SYujTYaQQZvSV 08zbM49C6bb88WwuAZMzP2FxtwlSWvJnnE2pUY5214/1HlyazeHtFhjCng5awnCN f/I/uqX7VBHuNeateZaISY4uTOEsnyNGjQkf+jakqPNhA5SXDWgsCbDrmqYIQRxC 5QeRWu5NiiJUZVt9M34VUtD6mvzuT2TaHfPwk2wGM2oCA2QyJbGuZ7jEPeasr4pd hS/bozMRYFWukoY43WGP80YCY2g4RVSK6B/ibj9a0UMpRmxWRObqA8BtAKyQPIP6 XDjNyHLFEkUgSYRV1OCyFzKYzW4UaIZppcH1oeXAdMjRlH+RHIeN2Bg0pGk= -----END CERTIFICATE-----Generated at Fri Oct 17 21:59:42 2025 by rpki-client