$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/adca2b61-a74e-45c8-80c7-184018fe6ba2.roa File: adca2b61-a74e-45c8-80c7-184018fe6ba2.roa (raw, json) Hash identifier: ZZFYWZWhY3NLb40OYstr3RUKfuNHDx9SB9BJYVSWcJg= Subject key identifier: 93:AA:3D:2F:FF:FE:E4:64:B7:D8:DA:48:33:B6:39:E7:62:A7:3A:9E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1466A4673F6352A9094374DFE2EA3F170BE2B76C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/adca2b61-a74e-45c8-80c7-184018fe6ba2.roa Signing time: Wed 24 Sep 2025 19:30:39 +0000 ROA not before: Wed 24 Sep 2025 19:30:39 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.226.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:66:a4:67:3f:63:52:a9:09:43:74:df:e2:ea:3f:17:0b:e2:b7:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 19:30:39 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=79a4b23d175b732f40146e7895f9adb1deca79b02098154de43f7f419ffdac40, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:09:6b:56:52:20:15:8c:b3:46:3b:85:4d:50: 80:4c:dd:0f:c5:1b:96:c2:e2:07:6f:5e:3d:bb:5e: db:c1:a5:14:ef:9e:45:3f:3d:42:9a:ce:05:dd:21: 3c:5f:f5:31:bc:80:31:e9:85:ed:57:5d:33:fd:74: b6:44:4f:b0:4d:4d:ac:df:85:d8:53:c0:28:64:56: 6f:d9:b1:d5:15:27:c4:98:5c:23:c1:12:3d:67:16: da:dc:77:9b:d5:2a:1e:63:6a:43:0d:db:40:5a:35: 0d:78:64:13:53:71:69:79:56:ed:ec:40:85:cd:51: be:a2:53:6c:63:ab:38:7e:40:1e:4e:23:f1:e2:fe: c3:33:c3:be:5e:98:57:2f:d7:40:77:6b:94:26:0f: d0:20:e8:bd:d6:63:7e:33:81:11:fb:06:c7:e3:ea: 52:ef:f9:82:4f:f7:64:25:f5:a3:c8:91:cf:b3:62: 3e:37:2b:15:58:c0:26:1c:c6:97:c3:26:a0:dc:f3: bd:e3:0f:c8:f8:c3:70:0c:18:bd:ef:fc:62:b0:14: 74:fa:c0:0a:29:7c:77:4f:82:87:fa:33:b2:3c:46: 4a:0a:dc:c7:07:8e:b6:db:49:28:9c:4b:d6:0d:50: 99:01:61:d4:97:a4:2d:f0:fd:e4:88:5b:a3:7c:5c: 37:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:AA:3D:2F:FF:FE:E4:64:B7:D8:DA:48:33:B6:39:E7:62:A7:3A:9E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/adca2b61-a74e-45c8-80c7-184018fe6ba2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.226.123.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:1b:4d:81:d7:1e:d7:4f:37:4b:b7:65:06:1c:ab:aa:63:7e: 76:a9:3f:bc:3e:bc:89:62:90:58:72:aa:5e:19:00:4b:c8:cd: ae:b5:55:3f:45:9f:c8:4f:5b:e6:c2:e9:b3:07:88:ba:63:63: 27:d2:9c:f2:51:0a:ee:3a:7a:ff:1a:91:69:1f:c5:b9:22:b0: fa:57:64:20:88:9c:f1:ec:14:cd:17:63:51:2d:20:46:39:8a: 9d:b2:35:f0:66:d3:c1:2c:65:4c:0f:37:2f:1c:9c:a6:82:8f: ec:69:88:ea:36:6b:73:ef:f2:5f:94:cd:d9:1f:b9:5e:83:09: fa:7f:5c:11:9d:af:a2:8b:83:84:04:75:a6:08:3c:50:27:d4: a3:62:f1:2f:9e:e5:02:f8:9a:4e:7b:bb:43:91:a7:35:15:93: 03:02:e5:97:25:e6:ab:54:5e:e3:5f:2e:15:76:d3:33:86:b5: cc:62:6f:5b:b6:a6:cf:4e:8c:3b:20:99:98:7e:2b:87:c4:eb: 17:3d:b4:76:8c:d1:5b:c3:4b:e9:a9:45:d6:56:2c:e9:cd:05: 93:98:ce:57:26:11:a7:c3:1d:1f:e3:86:02:28:40:b5:6b:68: 03:ae:dc:cd:32:7b:9a:b8:6b:8a:d3:75:8f:2d:c6:b4:ae:e8: bb:9a:a7:6e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFGakZz9jUqkJQ3Tf4uo/Fwvit2wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MTkzMDM5WhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A3OWE0YjIzZDE3NWI3MzJmNDAxNDZlNzg5NWY5YWRiMWRl Y2E3OWIwMjA5ODE1NGRlNDNmN2Y0MTlmZmRhYzQwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDSCWtWUiAVjLNGO4VNUIBM3Q/FG5bC4gdvXj27XtvBpRTv nkU/PUKazgXdITxf9TG8gDHphe1XXTP9dLZET7BNTazfhdhTwChkVm/ZsdUVJ8SY XCPBEj1nFtrcd5vVKh5jakMN20BaNQ14ZBNTcWl5Vu3sQIXNUb6iU2xjqzh+QB5O I/Hi/sMzw75emFcv10B3a5QmD9Ag6L3WY34zgRH7Bsfj6lLv+YJP92Ql9aPIkc+z Yj43KxVYwCYcxpfDJqDc873jD8j4w3AMGL3v/GKwFHT6wAopfHdPgof6M7I8RkoK 3McHjrbbSSicS9YNUJkBYdSXpC3w/eSIW6N8XDe7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUk6o9L//+5GS32NpIM7Y552KnOp4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2FkY2EyYjYxLWE3NGUtNDVjOC04MGM3LTE4NDAxOGZlNmJhMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAN4nswDQYJKoZIhvcNAQELBQADggEBAA8bTYHXHtdPN0u3ZQYcq6pjfnap P7w+vIlikFhyql4ZAEvIza61VT9Fn8hPW+bC6bMHiLpjYyfSnPJRCu46ev8akWkf xbkisPpXZCCInPHsFM0XY1EtIEY5ip2yNfBm08EsZUwPNy8cnKaCj+xpiOo2a3Pv 8l+UzdkfuV6DCfp/XBGdr6KLg4QEdaYIPFAn1KNi8S+e5QL4mk57u0ORpzUVkwMC 5Zcl5qtUXuNfLhV20zOGtcxib1u2ps9OjDsgmZh+K4fE6xc9tHaM0VvDS+mpRdZW LOnNBZOYzlcmEafDHR/jhgIoQLVraAOu3M0ye5q4a4rTdY8txrSu6Luap24= -----END CERTIFICATE-----Generated at Fri Oct 17 23:48:14 2025 by rpki-client