$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2c342feb-c3cb-43d8-9dd8-2ee07c157bbe.roa File: 2c342feb-c3cb-43d8-9dd8-2ee07c157bbe.roa (raw, json) Hash identifier: D0Ws5aNSWc2Q1ywvlqQWpxDiFJXoTCslMzO3qqP0b4g= Subject key identifier: C8:20:D0:82:27:EB:64:61:C0:3A:CF:60:E5:7C:B2:78:7C:DD:12:06 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 74F3C13642263947D2ABF080A16D43BFE3EC0234 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2c342feb-c3cb-43d8-9dd8-2ee07c157bbe.roa Signing time: Sun 19 Oct 2025 17:52:27 +0000 ROA not before: Sun 19 Oct 2025 17:52:27 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.32.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:f3:c1:36:42:26:39:47:d2:ab:f0:80:a1:6d:43:bf:e3:ec:02:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 17:52:27 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=8351cad51cb9dc3737113329da52fba2a8cdefad14067a563380fffb778a4eaa, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:65:c7:a0:59:23:0e:c2:b5:6a:94:c8:9e:59: 3a:4d:6a:1f:6a:26:6d:f9:0e:da:ee:5a:0e:52:84: e3:4b:1c:0a:41:24:5e:61:ae:9b:be:97:92:2f:d8: 17:98:48:6a:2c:4f:f2:04:39:f4:2c:35:5e:d0:29: ab:8e:48:41:84:de:06:a2:2f:94:7f:4f:b7:d1:f6: e4:2c:28:e7:8d:6c:b4:cc:2a:aa:c0:4b:ba:a1:78: 58:15:9f:76:0d:57:8f:d2:bd:96:7f:20:b6:67:85: d0:fe:06:47:91:b0:04:8c:e1:0b:71:36:91:48:1c: e1:f4:bc:91:64:f4:81:b8:41:90:89:9a:09:d6:f5: d6:9a:bd:b8:3f:ef:dd:54:d3:4f:78:af:ba:9a:f9: a1:e4:fc:ba:e0:05:2e:84:56:2b:41:93:13:74:75: c0:c3:fb:a2:0c:c6:c6:7b:ee:82:5f:e9:12:e9:09: c6:f0:4e:cc:af:8f:b1:cd:32:0d:ae:e4:16:e5:1f: 69:51:ce:6f:1e:51:32:41:94:d7:35:6a:18:ec:52: 61:e6:6c:d5:d7:f7:61:cb:6a:91:5a:bc:3a:9a:fa: aa:49:c2:2c:7e:c6:ae:66:07:58:55:ab:3f:f8:81: 79:66:f0:e3:cb:12:6e:77:0a:1a:31:66:70:53:e4: 2e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:20:D0:82:27:EB:64:61:C0:3A:CF:60:E5:7C:B2:78:7C:DD:12:06 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2c342feb-c3cb-43d8-9dd8-2ee07c157bbe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.32.168.0/21 Signature Algorithm: sha256WithRSAEncryption 7d:bd:50:33:36:bd:00:e0:91:0a:f2:6a:7c:0e:30:61:32:f5: d7:ce:dc:46:70:12:16:48:3b:8d:ed:9c:68:ac:b9:e8:0a:07: a2:b5:17:ff:e7:90:75:a5:74:d9:de:b5:fa:66:c5:41:73:fd: d1:5b:29:48:39:31:ff:19:f2:78:da:4d:07:c9:c4:f3:b2:36: 06:cb:02:0f:dc:d2:87:52:be:7c:f2:0f:26:d5:6a:c7:6f:0a: 1f:22:93:3a:49:f5:02:f9:c8:be:b5:ca:bd:22:16:45:b4:03: 27:c4:4b:c3:bb:fa:64:60:bd:15:72:d9:32:d4:70:c3:55:ff: 43:b0:ff:ac:61:95:df:86:89:ec:4c:e8:b0:c2:c9:4d:78:4d: b7:6d:af:17:4b:55:03:1a:91:9c:c7:38:64:98:cd:6c:73:b3: 53:d0:95:da:60:e1:e9:18:e2:35:22:76:b9:1a:df:27:de:57: c0:42:29:1a:6d:35:db:10:23:8e:6e:c4:ab:e5:dc:38:19:03: ec:5f:f8:22:59:b7:43:db:73:65:fd:9d:66:f2:2f:f2:43:eb: e6:bf:e8:cf:ea:8d:f9:db:d1:2d:3f:c2:09:a3:95:27:b8:f5: 37:8f:78:13:b3:6e:fe:ce:63:f3:44:fe:ad:bd:e4:21:9e:46: 25:42:16:c9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdPPBNkImOUfSq/CAoW1Dv+PsAjQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTc1MjI3WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4MzUxY2FkNTFjYjlkYzM3MzcxMTMzMjlkYTUyZmJhMmE4 Y2RlZmFkMTQwNjdhNTYzMzgwZmZmYjc3OGE0ZWFhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFZcegWSMOwrVqlMieWTpNah9qJm35DtruWg5ShONLHApB JF5hrpu+l5Iv2BeYSGosT/IEOfQsNV7QKauOSEGE3gaiL5R/T7fR9uQsKOeNbLTM KqrAS7qheFgVn3YNV4/SvZZ/ILZnhdD+BkeRsASM4QtxNpFIHOH0vJFk9IG4QZCJ mgnW9daavbg/791U0094r7qa+aHk/LrgBS6EVitBkxN0dcDD+6IMxsZ77oJf6RLp CcbwTsyvj7HNMg2u5BblH2lRzm8eUTJBlNc1ahjsUmHmbNXX92HLapFavDqa+qpJ wix+xq5mB1hVqz/4gXlm8OPLEm53ChoxZnBT5C5rAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUyCDQgifrZGHAOs9g5XyyeHzdEgYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzJjMzQyZmViLWMzY2ItNDNkOC05ZGQ4LTJlZTA3YzE1N2JiZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMNIKgwDQYJKoZIhvcNAQELBQADggEBAH29UDM2vQDgkQryanwOMGEy9dfO 3EZwEhZIO43tnGisuegKB6K1F//nkHWldNnetfpmxUFz/dFbKUg5Mf8Z8njaTQfJ xPOyNgbLAg/c0odSvnzyDybVasdvCh8ikzpJ9QL5yL61yr0iFkW0AyfES8O7+mRg vRVy2TLUcMNV/0Ow/6xhld+GiexM6LDCyU14TbdtrxdLVQMakZzHOGSYzWxzs1PQ ldpg4ekY4jUidrka3yfeV8BCKRptNdsQI45uxKvl3DgZA+xf+CJZt0Pbc2X9nWby L/JD6+a/6M/qjfnb0S0/wgmjlSe49TePeBOzbv7OY/NE/q295CGeRiVCFsk= -----END CERTIFICATE-----Generated at Mon Oct 20 10:58:50 2025 by rpki-client