$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a715c80e-5dad-4a96-9158-f29bd82b4ad0.roa File: a715c80e-5dad-4a96-9158-f29bd82b4ad0.roa (raw, json) Hash identifier: MG+ueIAlAE7blosrtOKqiB2L5M6Qhec1K5Am6DCf2Dk= Subject key identifier: AF:EA:8C:16:2D:9B:1E:A3:E4:A7:DA:54:62:51:D8:88:C7:31:CA:83 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1CD0921A984F7E027BD7C03C036D168342E2C81C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a715c80e-5dad-4a96-9158-f29bd82b4ad0.roa Signing time: Wed 24 Sep 2025 20:41:59 +0000 ROA not before: Wed 24 Sep 2025 20:41:59 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.225.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:d0:92:1a:98:4f:7e:02:7b:d7:c0:3c:03:6d:16:83:42:e2:c8:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 20:41:59 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=b6ce3972eb5678640ef7b76d05ad663ab34dbfd6e9782c04f72f2df25f490eda, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:34:7a:0d:a7:16:fe:64:e9:7b:83:7d:52:2f: f5:82:c3:5c:f0:32:29:b0:b0:74:c2:87:6f:f9:1f: 83:3d:25:87:96:8d:a7:30:58:58:d3:19:c7:8c:46: 27:02:aa:05:60:e1:b4:c9:dc:93:25:1e:bd:1e:db: 03:c8:90:4f:37:3a:8d:b9:09:9f:17:e2:a6:25:77: f8:bc:02:db:47:32:90:5d:7a:72:eb:11:3a:ac:26: 6c:9d:74:08:c4:25:97:42:d6:82:97:03:ce:08:67: 18:51:4c:d6:5e:99:66:1e:3e:1e:d2:33:cf:87:e7: 9f:46:6d:bf:a0:43:a9:5a:d6:1f:f4:fb:f2:32:fe: b9:a6:a0:56:6c:ef:e1:cf:7d:76:66:dd:6d:7b:55: e9:0b:ef:b0:e6:77:36:e1:16:8d:17:0d:8a:b1:db: 28:85:27:46:4b:c4:22:61:b4:cd:44:d6:63:dd:92: 5e:23:b5:8b:4f:41:b6:5a:50:8a:ee:f8:fc:51:e8: 5a:d6:db:1b:f7:c0:6b:5e:e3:94:27:91:35:e0:33: fd:7c:b7:64:fe:0a:9a:db:ba:56:a0:69:71:1f:c4: 26:e2:1c:8a:47:6a:f7:da:d1:b5:a5:c1:89:40:32: f0:16:a0:c5:11:6a:06:16:d9:2e:a7:0c:1f:c8:00: 3e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:EA:8C:16:2D:9B:1E:A3:E4:A7:DA:54:62:51:D8:88:C7:31:CA:83 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a715c80e-5dad-4a96-9158-f29bd82b4ad0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.225.8.0/22 Signature Algorithm: sha256WithRSAEncryption 84:a1:a8:47:c8:85:93:54:fe:56:5d:58:2d:6e:72:9c:3b:26: 1d:cd:9a:d3:cb:8f:58:81:cd:6d:fa:f0:f3:de:41:c7:31:7b: e4:7d:a8:a5:5b:91:c3:02:8c:6f:d6:98:17:95:72:b7:45:96: 2a:21:ea:0e:c1:3a:5e:bd:29:89:7f:8f:73:a8:85:40:74:a4: d0:93:6d:25:59:6c:5c:ab:c4:c7:35:ae:8f:78:25:2d:30:e5: 3b:72:65:9b:4c:16:ad:d7:64:f9:cf:ba:a6:86:5d:56:59:e7: dc:42:87:dc:fe:e7:16:72:b4:ac:39:3a:d8:30:e0:08:de:fb: 22:96:cc:54:a0:9f:5c:27:f8:fe:4e:fd:7c:e1:b1:e4:c7:80: 02:c8:f1:6e:4f:93:c9:86:89:70:59:e9:2f:4d:eb:be:86:14: de:38:29:c3:06:01:46:69:04:2a:f8:f4:d7:10:a8:b6:82:6e: 5e:69:62:fe:0a:aa:f0:71:ca:aa:d7:4e:61:4b:bd:33:cc:ae: c2:24:74:1d:c5:1c:1b:ed:05:1a:5d:e8:86:cb:ed:31:38:0e: b4:fe:d5:40:8c:14:af:59:b6:0e:07:41:3f:7e:67:96:00:27: c8:9a:eb:c2:59:d8:1e:92:33:4f:f1:71:c8:e5:91:0a:df:83: ca:16:3f:cb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHNCSGphPfgJ718A8A20Wg0LiyBwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MjA0MTU5WhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BiNmNlMzk3MmViNTY3ODY0MGVmN2I3NmQwNWFkNjYzYWIz NGRiZmQ2ZTk3ODJjMDRmNzJmMmRmMjVmNDkwZWRhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6NHoNpxb+ZOl7g31SL/WCw1zwMimwsHTCh2/5H4M9JYeW jacwWFjTGceMRicCqgVg4bTJ3JMlHr0e2wPIkE83Oo25CZ8X4qYld/i8AttHMpBd enLrETqsJmyddAjEJZdC1oKXA84IZxhRTNZemWYePh7SM8+H559Gbb+gQ6la1h/0 +/Iy/rmmoFZs7+HPfXZm3W17VekL77DmdzbhFo0XDYqx2yiFJ0ZLxCJhtM1E1mPd kl4jtYtPQbZaUIru+PxR6FrW2xv3wGte45QnkTXgM/18t2T+CprbulagaXEfxCbi HIpHavfa0bWlwYlAMvAWoMURagYW2S6nDB/IAD5HAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUr+qMFi2bHqPkp9pUYlHYiMcxyoMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2E3MTVjODBlLTVkYWQtNGE5Ni05MTU4LWYyOWJkODJiNGFkMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIN4QgwDQYJKoZIhvcNAQELBQADggEBAIShqEfIhZNU/lZdWC1ucpw7Jh3N mtPLj1iBzW368PPeQccxe+R9qKVbkcMCjG/WmBeVcrdFlioh6g7BOl69KYl/j3Oo hUB0pNCTbSVZbFyrxMc1ro94JS0w5TtyZZtMFq3XZPnPuqaGXVZZ59xCh9z+5xZy tKw5Otgw4Aje+yKWzFSgn1wn+P5O/XzhseTHgALI8W5Pk8mGiXBZ6S9N676GFN44 KcMGAUZpBCr49NcQqLaCbl5pYv4KqvBxyqrXTmFLvTPMrsIkdB3FHBvtBRpd6IbL 7TE4DrT+1UCMFK9Ztg4HQT9+Z5YAJ8ia68JZ2B6SM0/xccjlkQrfg8oWP8s= -----END CERTIFICATE-----Generated at Sat Oct 18 04:21:47 2025 by rpki-client