$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4af5749c-0036-4a53-8651-793cac7322c0.roa File: 4af5749c-0036-4a53-8651-793cac7322c0.roa (raw, json) Hash identifier: VHg0qFgyep5aqfSY9nDCfecUTpD3ZUQHVa7nbpEzySQ= Subject key identifier: 0B:E8:4B:56:23:72:D7:BB:A5:ED:63:8E:3E:2C:27:E3:B3:62:A2:93 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 261422BB81300441198D6FE34F9CF56402452EDA Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4af5749c-0036-4a53-8651-793cac7322c0.roa Signing time: Sun 19 Oct 2025 11:13:40 +0000 ROA not before: Sun 19 Oct 2025 11:13:40 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.35.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:14:22:bb:81:30:04:41:19:8d:6f:e3:4f:9c:f5:64:02:45:2e:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 11:13:40 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=417f0753b640b5c38893358d9b6f47642f8179bb5f2a9c6af4786788e6f7f5a3, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:93:65:77:ab:2b:13:44:3d:e2:5d:40:ae:6a: ea:a2:60:a2:de:2d:96:1f:d2:a4:df:d4:06:94:31: cf:38:38:90:cc:dd:17:34:38:84:a1:ad:6d:d7:1e: 79:6f:2d:f2:4a:a5:0c:94:bd:80:92:7a:7e:40:e4: 31:16:b4:71:cf:64:fd:6c:35:3e:c4:ac:54:e5:3a: 79:71:89:65:6c:17:98:ad:da:ae:36:a1:e7:99:09: 22:d6:e0:ce:01:03:dd:58:20:8f:6e:73:d5:f5:bf: b6:08:68:da:a3:e5:9b:9f:d7:c4:b7:b0:f5:c0:7d: 75:2f:af:a3:a4:2e:78:90:a1:65:96:68:9e:bb:b3: 87:57:c9:56:68:58:ee:dc:1b:c4:84:9b:80:f4:44: 4e:92:c9:18:fc:48:21:dd:0f:92:08:a7:47:0a:1b: a1:d2:bf:62:49:d2:fc:ef:6c:7a:e5:e4:76:7b:f3: 78:2e:f5:71:66:cd:0e:4c:cf:b2:da:8b:f9:3b:7a: 57:a7:3c:e8:bc:c1:32:d7:56:c3:d9:3d:a9:c2:04: c0:84:c0:c8:44:8b:8a:d4:b9:fc:5b:ab:d5:13:35: d7:6c:3a:50:70:3b:44:ad:89:55:f0:df:86:fe:80: 4f:b1:86:31:fc:9e:4c:ce:07:c6:08:60:c3:e7:af: 47:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:E8:4B:56:23:72:D7:BB:A5:ED:63:8E:3E:2C:27:E3:B3:62:A2:93 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4af5749c-0036-4a53-8651-793cac7322c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.35.87.0/24 Signature Algorithm: sha256WithRSAEncryption 08:91:08:b4:f2:eb:78:13:e9:59:c9:16:03:40:53:2b:e9:9e: 45:7e:01:32:d4:1d:74:a6:ae:8e:3a:41:9c:fe:67:99:87:05: 62:13:0d:9e:b4:bd:44:19:c2:a4:31:09:5f:d7:0e:fe:02:a7: ec:c6:df:fc:77:4e:1e:36:48:cd:49:19:a4:4e:2c:ef:71:7a: 20:86:23:d4:6d:ee:49:1d:c3:2e:32:68:22:f0:3d:d9:e2:34: 19:a5:6d:d2:4d:ef:ce:46:33:81:90:d3:d4:2c:9e:34:a8:88: ce:f5:7c:bb:88:f1:95:33:bc:67:fa:4b:c9:0c:56:03:c4:6b: 3c:2c:c6:fc:20:c3:74:ed:7e:97:2e:45:5a:9a:ac:ef:ed:7d: 8f:13:59:f4:d2:06:e1:8f:8a:f6:b7:4b:86:b4:1c:f9:26:f8: b1:e8:48:40:91:49:db:d0:b8:c7:d6:c1:16:05:cf:b8:c4:86: 93:2a:14:5d:48:2f:77:8f:67:fc:70:94:73:f1:13:26:a7:a3: 8f:94:a2:5f:2e:67:5d:d6:8e:ca:25:dd:4e:b8:d9:19:e6:21: 95:e2:c6:85:0e:45:8e:81:6c:c1:8c:4c:ee:c2:67:ba:fc:02: b3:f4:38:a4:69:a2:05:e7:6e:61:a4:b0:23:eb:97:6c:6e:c1: 40:39:7d:ef -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJhQiu4EwBEEZjW/jT5z1ZAJFLtowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTExMzQwWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A0MTdmMDc1M2I2NDBiNWMzODg5MzM1OGQ5YjZmNDc2NDJm ODE3OWJiNWYyYTljNmFmNDc4Njc4OGU2ZjdmNWEzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDdk2V3qysTRD3iXUCuauqiYKLeLZYf0qTf1AaUMc84OJDM 3Rc0OIShrW3XHnlvLfJKpQyUvYCSen5A5DEWtHHPZP1sNT7ErFTlOnlxiWVsF5it 2q42oeeZCSLW4M4BA91YII9uc9X1v7YIaNqj5Zuf18S3sPXAfXUvr6OkLniQoWWW aJ67s4dXyVZoWO7cG8SEm4D0RE6SyRj8SCHdD5IIp0cKG6HSv2JJ0vzvbHrl5HZ7 83gu9XFmzQ5Mz7Lai/k7elenPOi8wTLXVsPZPanCBMCEwMhEi4rUufxbq9UTNdds OlBwO0StiVXw34b+gE+xhjH8nkzOB8YIYMPnr0cLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUC+hLViNy17ul7WOOPiwn47NiopMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzRhZjU3NDljLTAwMzYtNGE1My04NjUxLTc5M2NhYzczMjJjMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAANI1cwDQYJKoZIhvcNAQELBQADggEBAAiRCLTy63gT6VnJFgNAUyvpnkV+ ATLUHXSmro46QZz+Z5mHBWITDZ60vUQZwqQxCV/XDv4Cp+zG3/x3Th42SM1JGaRO LO9xeiCGI9Rt7kkdwy4yaCLwPdniNBmlbdJN785GM4GQ09QsnjSoiM71fLuI8ZUz vGf6S8kMVgPEazwsxvwgw3TtfpcuRVqarO/tfY8TWfTSBuGPiva3S4a0HPkm+LHo SECRSdvQuMfWwRYFz7jEhpMqFF1IL3ePZ/xwlHPxEyano4+Uol8uZ13Wjsol3U64 2RnmIZXixoUORY6BbMGMTO7CZ7r8ArP0OKRpogXnbmGksCPrl2xuwUA5fe8= -----END CERTIFICATE-----Generated at Mon Oct 20 03:11:07 2025 by rpki-client