$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/900f638d-c3e5-4218-a758-a476d2543bb4.roa File: 900f638d-c3e5-4218-a758-a476d2543bb4.roa (raw, json) Hash identifier: 8ouvsOf/HfE96VzgppEg4q1umBY7OBH7PhI4EBB1YgE= Subject key identifier: 46:A0:2F:72:BE:3B:6C:79:86:F7:22:A3:A3:9B:F7:00:F1:2F:1B:48 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 32F2362FDC8C13FBF6FAC53097CF65F8EBBFB58E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/900f638d-c3e5-4218-a758-a476d2543bb4.roa Signing time: Mon 22 Sep 2025 16:41:59 +0000 ROA not before: Mon 22 Sep 2025 16:41:59 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.249.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:f2:36:2f:dc:8c:13:fb:f6:fa:c5:30:97:cf:65:f8:eb:bf:b5:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 16:41:59 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=1df8f26f9fd1810dbf67ac8d7942f3e5286199fa9a03b1253052c067d0e6ff90, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:81:ca:69:81:fe:0a:2d:85:2e:6d:43:32:2e: 43:f1:9d:f3:e8:56:df:18:af:5c:da:19:ae:a4:ed: 7b:aa:cb:1a:de:dc:b3:40:91:3e:04:2b:13:3f:6b: 6b:fd:48:84:99:f2:27:c5:16:82:ce:05:21:5b:96: 50:05:9b:0b:c5:51:d5:f2:d5:e4:d0:d7:86:1b:c6: f7:52:f4:9c:9b:04:0e:34:e9:7e:43:bc:db:0d:c9: c4:e0:09:3a:dd:ea:17:23:85:5f:c4:a9:46:f3:d8: b6:7f:bf:f2:5c:83:83:12:80:f5:88:ca:dd:eb:15: d0:12:0d:58:bc:f0:67:a6:43:51:cd:88:f4:bc:ec: 04:2f:1d:8c:45:b2:b8:36:30:eb:9a:18:00:dc:d7: 76:9d:b7:c3:25:8c:6a:0d:dd:81:ae:50:79:53:89: 49:ba:77:2c:17:f4:32:98:a8:55:ac:83:e8:39:85: ab:b2:a1:83:9b:d5:ad:aa:d3:ed:29:2d:09:7a:ce: 76:6d:31:55:d9:fe:45:8b:ca:49:96:c9:f7:e9:a0: 0f:cd:cf:5e:cd:29:a1:03:1b:b3:d4:8b:27:de:fa: b7:e6:70:53:84:85:e3:5a:10:79:8b:0a:54:0a:52: 44:ee:10:5c:85:7d:72:db:1b:d1:a9:3d:2f:f7:aa: ad:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:A0:2F:72:BE:3B:6C:79:86:F7:22:A3:A3:9B:F7:00:F1:2F:1B:48 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/900f638d-c3e5-4218-a758-a476d2543bb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.249.214.0/24 Signature Algorithm: sha256WithRSAEncryption 65:d5:22:f4:16:2b:7b:43:f2:98:cb:4a:9c:0e:43:2d:ec:3d: e0:de:fd:bf:c8:29:0f:c2:0a:c0:79:2b:22:fa:f9:23:ff:dc: 43:85:af:c3:71:5e:ba:36:8d:e9:56:d5:d0:1d:e8:12:bd:1f: 8e:60:6a:b0:25:fd:1b:89:3f:e1:1c:c8:b4:9f:47:b1:30:41: d7:0a:67:77:74:a0:eb:6b:44:55:5b:81:bd:6f:62:34:8e:b5: dd:88:59:bd:78:be:36:48:61:66:ba:dc:cf:fd:df:02:5b:58: 00:af:92:4a:04:3d:43:19:1f:65:87:6e:1c:b6:76:9e:f2:9c: 68:1f:dc:b7:8f:aa:12:4e:be:5a:6a:ed:44:e0:03:8c:84:2a: c9:94:d2:46:33:c2:1f:a6:3b:1b:d6:0f:e1:3d:aa:83:b7:ed: 10:db:1a:46:fa:b2:60:5c:e7:31:4f:74:1d:73:7d:45:e5:84: 07:ae:5c:d0:d6:7d:4f:0c:fd:65:25:ae:ea:52:68:d0:9f:43: 62:9e:33:5b:b5:84:9c:b1:82:dc:60:6a:8b:98:e9:08:e5:60: 6e:1d:e6:d9:82:74:3e:4c:99:cf:51:2a:99:5f:7f:e8:02:e1: 77:90:1f:16:ec:08:48:49:eb:71:24:f7:1d:d0:bf:a9:be:f7: 97:bb:41:e0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMvI2L9yME/v2+sUwl89l+Ou/tY4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTY0MTU5WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AxZGY4ZjI2ZjlmZDE4MTBkYmY2N2FjOGQ3OTQyZjNlNTI4 NjE5OWZhOWEwM2IxMjUzMDUyYzA2N2QwZTZmZjkwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDUgcppgf4KLYUubUMyLkPxnfPoVt8Yr1zaGa6k7Xuqyxre 3LNAkT4EKxM/a2v9SISZ8ifFFoLOBSFbllAFmwvFUdXy1eTQ14YbxvdS9JybBA40 6X5DvNsNycTgCTrd6hcjhV/EqUbz2LZ/v/Jcg4MSgPWIyt3rFdASDVi88GemQ1HN iPS87AQvHYxFsrg2MOuaGADc13adt8MljGoN3YGuUHlTiUm6dywX9DKYqFWsg+g5 hauyoYOb1a2q0+0pLQl6znZtMVXZ/kWLykmWyffpoA/Nz17NKaEDG7PUiyfe+rfm cFOEheNaEHmLClQKUkTuEFyFfXLbG9GpPS/3qq0LAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQURqAvcr47bHmG9yKjo5v3APEvG0gwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzkwMGY2MzhkLWMzZTUtNDIxOC1hNzU4LWE0NzZkMjU0M2JiNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAN+dYwDQYJKoZIhvcNAQELBQADggEBAGXVIvQWK3tD8pjLSpwOQy3sPeDe /b/IKQ/CCsB5KyL6+SP/3EOFr8NxXro2jelW1dAd6BK9H45garAl/RuJP+EcyLSf R7EwQdcKZ3d0oOtrRFVbgb1vYjSOtd2IWb14vjZIYWa63M/93wJbWACvkkoEPUMZ H2WHbhy2dp7ynGgf3LePqhJOvlpq7UTgA4yEKsmU0kYzwh+mOxvWD+E9qoO37RDb Gkb6smBc5zFPdB1zfUXlhAeuXNDWfU8M/WUlrupSaNCfQ2KeM1u1hJyxgtxgaouY 6QjlYG4d5tmCdD5Mmc9RKplff+gC4XeQHxbsCEhJ63Ek9x3Qv6m+95e7QeA= -----END CERTIFICATE-----Generated at Fri Oct 17 23:48:41 2025 by rpki-client