$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1f850f9c-5db5-411c-9b7d-4769fa55a7d0.roa File: 1f850f9c-5db5-411c-9b7d-4769fa55a7d0.roa (raw, json) Hash identifier: SQPLtzqJKBwRUwOtTdb4wv3CFt1hZSZuPAdDHZO5BRE= Subject key identifier: 69:BD:26:53:70:56:E8:AD:E7:FF:BF:24:EB:64:00:A1:1F:EF:23:14 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2940E8D9F7DF3F7DF244970ACF5A032C5B2B4D0C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1f850f9c-5db5-411c-9b7d-4769fa55a7d0.roa Signing time: Sun 19 Oct 2025 19:01:36 +0000 ROA not before: Sun 19 Oct 2025 19:01:36 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.35.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:40:e8:d9:f7:df:3f:7d:f2:44:97:0a:cf:5a:03:2c:5b:2b:4d:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 19:01:36 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=0f981f77921c9aa2080d66ef854222d4b5004ffb955f36df4668559550f60ace, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:6f:56:37:60:af:0f:0c:db:9b:fe:c5:94:c9: c2:1c:97:ba:a6:64:5d:10:78:b2:a8:99:90:d2:87: b5:ee:58:03:71:6a:72:e7:7a:b9:fb:ca:ed:f8:89: d6:c9:8c:e9:66:ec:15:20:51:37:26:fb:35:3b:6b: a7:6d:11:51:47:9a:53:7c:60:a8:96:5b:fc:c9:7a: 11:4c:b7:95:c0:6b:e6:10:0c:d5:f9:24:2d:e9:5f: 89:11:aa:ad:da:e4:22:e1:e5:2d:02:c4:57:2c:76: 66:c0:2c:1b:47:3a:a8:7f:fe:6b:d8:e0:ee:38:3a: ff:79:9e:c4:29:a0:a1:ae:24:77:cc:b7:f1:87:02: 3d:c5:46:9f:82:fe:25:e1:da:7b:49:96:ae:a1:b7: 2c:6a:42:13:66:9d:f7:e3:90:ae:03:b5:ef:e8:69: 70:97:65:35:26:98:6f:ad:85:3d:d3:0a:a1:50:80: 49:74:d6:1f:72:19:99:75:17:32:7e:b6:2d:37:0b: 97:b6:08:24:e1:2c:d3:d6:dd:de:bd:a1:d7:4a:53: 3e:6d:d9:37:eb:9a:b1:5b:34:3b:b2:db:cc:5a:cc: 97:7a:03:c5:7d:84:bc:ec:83:03:ca:a6:95:cb:b6: d6:21:86:a3:68:e5:bc:f0:52:05:4f:e2:5d:43:1a: f7:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:BD:26:53:70:56:E8:AD:E7:FF:BF:24:EB:64:00:A1:1F:EF:23:14 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1f850f9c-5db5-411c-9b7d-4769fa55a7d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.35.112.0/20 Signature Algorithm: sha256WithRSAEncryption 56:4b:36:1d:97:d4:bd:0e:d9:8b:a7:4c:7e:ed:6a:29:78:71: c9:ba:16:05:3f:63:93:4f:67:d3:54:4d:55:8c:a0:19:7d:fb: 6d:8a:ef:33:6a:cd:2a:5d:29:c2:7c:74:82:53:b8:52:c7:0d: 29:fc:a0:5a:27:88:b5:3f:43:f1:09:f5:df:fa:6c:e3:b8:e4: db:f6:db:35:09:fb:f4:b2:d3:c1:4a:e6:a4:90:26:e7:af:df: 81:42:86:e9:57:eb:4e:b6:f0:26:f6:6c:95:aa:49:36:74:bd: 7a:fb:98:cf:27:4f:e5:9e:36:6b:70:4c:8f:38:44:b4:d7:1f: 8f:0b:8d:39:09:75:13:b1:68:97:06:75:69:81:e6:d8:9f:47: 9c:03:ed:02:15:06:1c:b6:45:7d:bb:e7:66:23:6b:ff:43:f2: dd:22:25:27:7c:9c:59:cb:07:4a:5a:4f:72:61:34:c0:a2:82: cc:c4:af:4e:7c:74:75:79:2d:a6:5a:03:a4:86:ea:e8:83:0b: 8a:5e:cb:e0:3a:b4:88:7d:db:3b:63:f8:ec:2a:09:d5:04:ee: 92:42:9f:26:00:6a:fb:52:75:46:06:dd:a2:de:f8:0d:43:f9: 4e:7a:c1:3a:ea:f8:66:ee:cd:44:18:4f:43:9a:5b:fe:8f:2e: 9d:12:7b:a6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKUDo2fffP33yRJcKz1oDLFsrTQwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTkwMTM2WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AwZjk4MWY3NzkyMWM5YWEyMDgwZDY2ZWY4NTQyMjJkNGI1 MDA0ZmZiOTU1ZjM2ZGY0NjY4NTU5NTUwZjYwYWNlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDnb1Y3YK8PDNub/sWUycIcl7qmZF0QeLKomZDSh7XuWANx anLnern7yu34idbJjOlm7BUgUTcm+zU7a6dtEVFHmlN8YKiWW/zJehFMt5XAa+YQ DNX5JC3pX4kRqq3a5CLh5S0CxFcsdmbALBtHOqh//mvY4O44Ov95nsQpoKGuJHfM t/GHAj3FRp+C/iXh2ntJlq6htyxqQhNmnffjkK4Dte/oaXCXZTUmmG+thT3TCqFQ gEl01h9yGZl1FzJ+ti03C5e2CCThLNPW3d69oddKUz5t2TfrmrFbNDuy28xazJd6 A8V9hLzsgwPKppXLttYhhqNo5bzwUgVP4l1DGvfjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUab0mU3BW6K3n/78k62QAoR/vIxQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzFmODUwZjljLTVkYjUtNDExYy05YjdkLTQ3NjlmYTU1YTdkMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQNI3AwDQYJKoZIhvcNAQELBQADggEBAFZLNh2X1L0O2YunTH7tail4ccm6 FgU/Y5NPZ9NUTVWMoBl9+22K7zNqzSpdKcJ8dIJTuFLHDSn8oFoniLU/Q/EJ9d/6 bOO45Nv22zUJ+/Sy08FK5qSQJuev34FChulX60628Cb2bJWqSTZ0vXr7mM8nT+We NmtwTI84RLTXH48LjTkJdROxaJcGdWmB5tifR5wD7QIVBhy2RX2752Yja/9D8t0i JSd8nFnLB0paT3JhNMCigszEr058dHV5LaZaA6SG6uiDC4pey+A6tIh92ztj+Owq CdUE7pJCnyYAavtSdUYG3aLe+A1D+U56wTrq+GbuzUQYT0OaW/6PLp0Se6Y= -----END CERTIFICATE-----Generated at Mon Oct 20 12:20:49 2025 by rpki-client