$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9d625806-b4c4-4c98-b864-17506d28974e.roa File: 9d625806-b4c4-4c98-b864-17506d28974e.roa (raw, json) Hash identifier: fpVwen4Uz+RWua0zm/HCYb///9eobnnIkr2za43VmPE= Subject key identifier: 55:55:E0:5C:60:B6:C4:FB:B6:24:87:EE:3C:46:6B:F4:47:A6:46:AA Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 61240C71E665085D4B035F44A80CA83FA0BD84F6 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9d625806-b4c4-4c98-b864-17506d28974e.roa Signing time: Wed 24 Sep 2025 20:58:05 +0000 ROA not before: Wed 24 Sep 2025 20:58:05 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.226.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:24:0c:71:e6:65:08:5d:4b:03:5f:44:a8:0c:a8:3f:a0:bd:84:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 20:58:05 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=aa79174483c3442a84bff9d68e32de14c08ff207d75267d4c621fc2f70890df9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:37:a0:95:df:2c:fc:d2:da:64:9d:b3:9e:32: 0a:9a:ea:d1:7a:28:31:91:17:77:a9:9d:c6:f1:c6: 80:cc:a6:e9:59:80:a0:c4:1b:4b:c5:97:26:2f:cf: 6d:f6:ee:6c:de:16:9b:9f:af:d7:15:ee:f2:32:0e: b5:af:ce:74:6c:a2:11:58:09:d8:27:e5:aa:7c:e1: 23:29:80:43:dd:15:f3:0f:b6:00:c5:60:a3:da:f8: d4:13:3a:fa:da:27:cd:ac:84:0d:b1:ac:af:57:2d: 89:02:5c:5b:1a:89:87:96:ef:c3:39:6c:9d:1e:87: 5c:0b:e5:9c:f3:43:18:9c:75:5f:fe:23:f4:4d:1e: 56:80:66:29:5b:59:c1:fd:59:52:9d:9c:6a:4f:11: a8:e1:83:c7:ac:84:38:23:1d:ae:7f:ca:87:ef:60: 0f:52:96:34:ff:52:2e:b3:46:76:01:cb:c6:60:e9: 01:b3:d0:6c:36:8a:de:e6:db:0a:e4:62:cf:0a:97: f2:df:e5:ec:b8:eb:0a:ec:52:ea:af:7f:0f:1a:23: 68:bc:63:04:8e:50:1c:79:b3:2f:a6:7e:2f:16:f7: b5:6d:34:66:8a:08:43:05:23:0d:53:0c:92:c3:fd: e7:a4:8c:02:27:20:d2:52:43:20:b7:a8:2e:c2:53: c2:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:55:E0:5C:60:B6:C4:FB:B6:24:87:EE:3C:46:6B:F4:47:A6:46:AA X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9d625806-b4c4-4c98-b864-17506d28974e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.226.0.0/20 Signature Algorithm: sha256WithRSAEncryption 73:1e:34:24:21:ca:dd:b7:9b:d2:1f:5d:f6:5a:b2:41:b8:9e: 5c:a0:cd:3d:b9:c2:e0:4e:ab:92:a2:af:ca:ee:1e:ab:23:f4: 26:b1:4b:8b:6f:ab:6a:1c:01:dd:b8:95:ce:53:68:1e:58:9a: 9f:b8:bf:50:b3:35:87:15:84:1e:5e:e0:f3:bd:65:fb:71:f5: 35:5b:42:5e:0b:e0:2c:6d:92:34:3a:dc:0b:a8:5e:b6:77:b4: 8f:39:ac:08:8e:b2:97:4b:a9:56:bc:0a:7d:eb:f6:e0:6d:ce: 59:4f:a8:d6:d4:26:e6:7c:20:eb:0b:10:7d:61:ab:77:5e:53: 4b:b9:c2:0d:9e:14:97:d0:c1:19:95:c5:59:7f:0e:1f:80:d5: 2c:5c:0e:d4:02:b3:bc:3e:1a:32:2a:0e:b5:1c:2d:64:3d:eb: c0:e3:b8:3b:97:59:94:b7:c2:3a:fd:f8:0f:af:b2:73:0c:8b: 0c:6d:f5:40:dc:95:b5:b4:3d:5f:7a:c9:58:a4:4b:62:25:40: e3:85:02:fa:0b:27:76:43:c5:0d:43:34:ea:25:eb:c0:82:58: 17:4a:4f:da:23:8b:8a:b5:14:02:9a:7c:8d:a1:95:18:12:58: e9:b7:19:7b:fe:c0:0b:ee:6a:35:8d:9d:36:e2:43:23:1a:8c: a1:dd:be:86 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYSQMceZlCF1LA19EqAyoP6C9hPYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MjA1ODA1WhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BhYTc5MTc0NDgzYzM0NDJhODRiZmY5ZDY4ZTMyZGUxNGMw OGZmMjA3ZDc1MjY3ZDRjNjIxZmMyZjcwODkwZGY5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpN6CV3yz80tpknbOeMgqa6tF6KDGRF3epncbxxoDMpulZ gKDEG0vFlyYvz2327mzeFpufr9cV7vIyDrWvznRsohFYCdgn5ap84SMpgEPdFfMP tgDFYKPa+NQTOvraJ82shA2xrK9XLYkCXFsaiYeW78M5bJ0eh1wL5ZzzQxicdV/+ I/RNHlaAZilbWcH9WVKdnGpPEajhg8eshDgjHa5/yofvYA9SljT/Ui6zRnYBy8Zg 6QGz0Gw2it7m2wrkYs8Kl/Lf5ey46wrsUuqvfw8aI2i8YwSOUBx5sy+mfi8W97Vt NGaKCEMFIw1TDJLD/eekjAInINJSQyC3qC7CU8JPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUVVXgXGC2xPu2JIfuPEZr9EemRqowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzlkNjI1ODA2LWI0YzQtNGM5OC1iODY0LTE3NTA2ZDI4OTc0ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQN4gAwDQYJKoZIhvcNAQELBQADggEBAHMeNCQhyt23m9IfXfZaskG4nlyg zT25wuBOq5Kir8ruHqsj9CaxS4tvq2ocAd24lc5TaB5Ymp+4v1CzNYcVhB5e4PO9 Zftx9TVbQl4L4CxtkjQ63AuoXrZ3tI85rAiOspdLqVa8Cn3r9uBtzllPqNbUJuZ8 IOsLEH1hq3deU0u5wg2eFJfQwRmVxVl/Dh+A1SxcDtQCs7w+GjIqDrUcLWQ968Dj uDuXWZS3wjr9+A+vsnMMiwxt9UDclbW0PV96yVikS2IlQOOFAvoLJ3ZDxQ1DNOol 68CCWBdKT9oji4q1FAKafI2hlRgSWOm3GXv+wAvuajWNnTbiQyMajKHdvoY= -----END CERTIFICATE-----Generated at Fri Oct 17 22:00:13 2025 by rpki-client