$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/214fac67-8ec9-44e6-ab40-bb69b9e23b81.roa File: 214fac67-8ec9-44e6-ab40-bb69b9e23b81.roa (raw, json) Hash identifier: 2a2cRvLxcNmf0/9Wvt73Vxop3E/IbE5C9/vflT8gNis= Subject key identifier: BA:4F:96:71:DF:6D:DD:34:82:A9:B6:6B:D9:F6:F7:2A:6E:22:43:1D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 528FA47C089760AA2BCF7A520043ABDD07D5A2EA Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/214fac67-8ec9-44e6-ab40-bb69b9e23b81.roa Signing time: Sun 19 Oct 2025 15:10:15 +0000 ROA not before: Sun 19 Oct 2025 15:10:15 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.35.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:8f:a4:7c:08:97:60:aa:2b:cf:7a:52:00:43:ab:dd:07:d5:a2:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 15:10:15 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=0c016d46d69bb25cf13b5f1dbedae7124b0ee8514596383471ffda1841613b1d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6d:df:ac:f7:3e:6b:d5:26:c4:ba:c6:8a:04: 36:17:a4:0d:5d:87:cc:97:2b:db:b5:fc:2e:09:b9: 5d:e1:26:b9:68:10:0d:56:53:af:9e:90:20:c7:c3: 27:51:5f:f8:07:1b:98:93:6b:4d:1d:04:78:e5:3d: da:b2:08:0d:78:7b:2c:bf:5e:ae:e9:62:09:90:26: 3c:e2:19:1a:6e:cf:5c:65:57:7e:a6:1c:f5:f7:fa: ee:75:f7:79:81:c7:80:08:77:e0:2a:f7:5f:aa:5b: bb:06:51:ec:28:fa:bc:97:73:05:a1:62:f7:3e:6d: 93:fc:be:d1:2c:9d:0e:ae:98:82:27:3a:36:8d:01: b5:62:32:6d:5b:16:72:36:27:f9:ae:5e:c7:1e:e0: ee:29:f9:99:17:43:6d:9c:6c:6c:71:6c:92:20:a3: d4:10:f3:49:e9:b9:27:8e:38:11:74:be:69:52:88: 74:bc:46:e8:db:7e:cf:e8:31:be:19:8f:0c:0a:31: 26:25:21:28:29:d5:ba:31:09:c6:0d:6b:ab:ce:e6: 3e:0d:32:cc:3b:6a:67:7e:f1:7a:04:9a:f6:5c:f8: 98:9f:45:bc:18:c6:57:41:5c:f9:f4:bb:b7:a8:3d: e5:94:44:fa:e7:82:42:87:01:66:69:6d:c6:30:25: ed:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:4F:96:71:DF:6D:DD:34:82:A9:B6:6B:D9:F6:F7:2A:6E:22:43:1D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/214fac67-8ec9-44e6-ab40-bb69b9e23b81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.35.166.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:b6:9a:4c:33:bd:b9:4f:2e:9b:0e:c2:42:73:6c:17:a3:35: 67:ca:0e:12:18:47:54:e5:74:c5:8e:7c:13:6c:2e:3f:5d:91: de:ea:de:ef:ca:81:a5:f8:24:a8:e2:be:f0:79:51:1d:db:b8: b9:34:fe:22:39:aa:84:44:a4:0f:78:70:b5:d2:8a:eb:44:61: 47:26:dd:99:39:30:7d:69:1a:1c:af:bd:c8:72:49:3c:75:9d: 0f:e9:c5:4f:40:42:66:4b:54:c8:76:cf:2f:ba:5d:35:d5:0d: f2:4d:e2:63:e4:b7:55:4e:69:5b:9e:23:40:de:7e:27:42:91: df:42:e2:be:ff:20:7f:37:bf:5d:2b:cd:a1:ec:d1:88:dd:4e: e0:1a:91:64:78:3f:7a:24:3f:f8:8c:cb:a0:cd:b3:f7:52:b8: 64:72:51:e0:09:38:69:92:b3:55:5b:31:75:00:f9:c6:31:ad: 81:88:24:61:c3:2b:e2:ea:0e:d0:4a:ea:7a:8e:2f:0a:30:11: 7b:4e:13:33:35:38:54:26:c1:8e:64:d5:e9:fb:a7:04:79:28: 2e:81:1a:2b:0e:df:9b:ee:99:94:be:3d:a1:52:4a:4d:43:54: 5e:54:f9:e4:de:4c:ee:07:e1:36:51:8d:36:79:a5:7b:35:58: 57:a2:e4:26 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUo+kfAiXYKorz3pSAEOr3QfVouowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTUxMDE1WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AwYzAxNmQ0NmQ2OWJiMjVjZjEzYjVmMWRiZWRhZTcxMjRi MGVlODUxNDU5NjM4MzQ3MWZmZGExODQxNjEzYjFkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1bd+s9z5r1SbEusaKBDYXpA1dh8yXK9u1/C4JuV3hJrlo EA1WU6+ekCDHwydRX/gHG5iTa00dBHjlPdqyCA14eyy/Xq7pYgmQJjziGRpuz1xl V36mHPX3+u5193mBx4AId+Aq91+qW7sGUewo+ryXcwWhYvc+bZP8vtEsnQ6umIIn OjaNAbViMm1bFnI2J/muXsce4O4p+ZkXQ22cbGxxbJIgo9QQ80npuSeOOBF0vmlS iHS8Rujbfs/oMb4ZjwwKMSYlISgp1boxCcYNa6vO5j4NMsw7amd+8XoEmvZc+Jif RbwYxldBXPn0u7eoPeWURPrngkKHAWZpbcYwJe3FAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUuk+Wcd9t3TSCqbZr2fb3Km4iQx0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzIxNGZhYzY3LThlYzktNDRlNi1hYjQwLWJiNjliOWUyM2I4MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAANI6YwDQYJKoZIhvcNAQELBQADggEBAA22mkwzvblPLpsOwkJzbBejNWfK DhIYR1TldMWOfBNsLj9dkd7q3u/KgaX4JKjivvB5UR3buLk0/iI5qoREpA94cLXS iutEYUcm3Zk5MH1pGhyvvchySTx1nQ/pxU9AQmZLVMh2zy+6XTXVDfJN4mPkt1VO aVueI0DefidCkd9C4r7/IH83v10rzaHs0YjdTuAakWR4P3okP/iMy6DNs/dSuGRy UeAJOGmSs1VbMXUA+cYxrYGIJGHDK+LqDtBK6nqOLwowEXtOEzM1OFQmwY5k1en7 pwR5KC6BGisO35vumZS+PaFSSk1DVF5U+eTeTO4H4TZRjTZ5pXs1WFei5CY= -----END CERTIFICATE-----Generated at Mon Oct 20 18:11:48 2025 by rpki-client