$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5872bb2e-07cb-4d50-bd55-238208f1ac08.roa File: 5872bb2e-07cb-4d50-bd55-238208f1ac08.roa (raw, json) Hash identifier: adQEM9YS93H+9G83XPX/DtcMmFINiftNyL/4bkZ4Vvk= Subject key identifier: 2B:F9:DF:77:24:B0:4B:9E:9C:A8:7A:80:5A:CC:03:A9:41:E1:31:63 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 276E489EB6E0D5C2F7B42A2338796D79CE5831AD Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5872bb2e-07cb-4d50-bd55-238208f1ac08.roa Signing time: Sun 19 Oct 2025 20:10:11 +0000 ROA not before: Sun 19 Oct 2025 20:10:11 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.35.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:6e:48:9e:b6:e0:d5:c2:f7:b4:2a:23:38:79:6d:79:ce:58:31:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 20:10:11 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=03cb08d1d554fbe4eff2810f45995925fe6be12c1d9d7f3ae18b23bf82aaa387, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:63:a3:22:f2:a7:4f:62:eb:57:f1:2f:47:8a: fd:40:28:2a:07:46:3c:21:09:e0:28:6b:57:bf:32: 44:86:97:ad:93:7f:49:c3:4a:5f:86:4d:9e:a1:94: 16:3e:ff:c9:11:78:00:2c:55:b0:2c:82:40:48:d0: d9:19:82:82:60:3e:ce:fc:fb:57:c9:60:d0:88:e7: 29:7f:ea:07:c4:19:fd:1b:69:58:7d:9e:01:10:b6: f0:35:a1:96:98:ae:0e:e5:0d:3c:08:e9:d8:90:a7: 14:de:a5:d8:8a:df:3e:e8:6c:c6:c1:54:6b:bb:d5: 05:f4:4d:85:58:9d:14:ad:90:32:a7:63:d6:78:bf: c4:6e:a7:51:5c:45:ce:15:2f:31:00:c4:d1:ac:45: 9c:e6:78:86:44:4d:a0:fa:df:09:1e:07:bc:35:6b: c8:ad:ef:68:0a:91:09:63:e5:55:44:bd:ed:de:7e: 71:3d:22:2b:e1:c8:48:4e:01:bf:c5:07:f3:f9:de: 74:00:b7:f2:44:25:62:55:5a:b2:f0:56:5d:bc:5a: 2d:0e:6f:79:9d:8a:f5:d5:58:7b:ea:59:3e:a0:c5: b7:71:8c:f5:6b:84:b2:89:30:9d:ff:6a:d0:d2:97: 45:03:01:06:e4:2f:5c:af:19:7d:cd:c0:34:e7:83: 4b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:F9:DF:77:24:B0:4B:9E:9C:A8:7A:80:5A:CC:03:A9:41:E1:31:63 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5872bb2e-07cb-4d50-bd55-238208f1ac08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.35.220.0/23 Signature Algorithm: sha256WithRSAEncryption 5c:66:c5:f7:47:98:a7:3b:1c:b2:85:cb:e6:6f:4c:52:47:d8: 05:6e:05:02:9d:02:34:74:d4:17:8b:f3:a3:5a:c7:54:3b:ef: ce:ff:08:77:e7:73:5e:bc:6b:8e:db:da:82:e2:31:2e:67:9c: 03:bd:38:da:ca:27:38:35:1c:79:37:c1:25:ac:66:e3:b5:ed: d3:67:49:11:12:a8:06:18:89:77:23:70:6a:6c:7f:c8:32:b6: d0:15:6e:37:2a:8b:32:18:ca:b0:35:e1:c6:e9:27:1a:b7:0e: 0f:ea:cd:a5:3c:e9:c3:dd:09:85:20:e4:1a:f0:70:48:04:10: ad:66:a9:ca:5a:90:ad:2a:58:5f:cd:4f:bf:86:25:35:a4:c5: c9:b9:d2:84:df:41:0e:fc:3a:04:46:00:9b:00:78:e9:00:69: c9:34:06:ba:38:cd:d7:05:8a:4f:81:ea:f1:94:95:2d:c3:10: 72:2b:fe:32:4a:52:b6:fb:d2:2b:ac:dc:74:11:5f:3f:f2:1c: 2b:93:b7:c6:9d:64:77:78:e4:7b:20:6f:2f:d3:1c:27:d8:e8: 3f:e3:30:67:21:9b:e6:8d:c0:6e:a2:eb:64:09:8a:e5:90:02: 22:09:d5:a2:32:ff:7a:f6:1c:61:e5:95:cd:df:1e:a4:cd:83: d5:36:db:5c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJ25Inrbg1cL3tCojOHltec5YMa0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MjAxMDExWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AwM2NiMDhkMWQ1NTRmYmU0ZWZmMjgxMGY0NTk5NTkyNWZl NmJlMTJjMWQ5ZDdmM2FlMThiMjNiZjgyYWFhMzg3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvY6Mi8qdPYutX8S9Hiv1AKCoHRjwhCeAoa1e/MkSGl62T f0nDSl+GTZ6hlBY+/8kReAAsVbAsgkBI0NkZgoJgPs78+1fJYNCI5yl/6gfEGf0b aVh9ngEQtvA1oZaYrg7lDTwI6diQpxTepdiK3z7obMbBVGu71QX0TYVYnRStkDKn Y9Z4v8Rup1FcRc4VLzEAxNGsRZzmeIZETaD63wkeB7w1a8it72gKkQlj5VVEve3e fnE9IivhyEhOAb/FB/P53nQAt/JEJWJVWrLwVl28Wi0Ob3mdivXVWHvqWT6gxbdx jPVrhLKJMJ3/atDSl0UDAQbkL1yvGX3NwDTng0uLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUK/nfdySwS56cqHqAWswDqUHhMWMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzU4NzJiYjJlLTA3Y2ItNGQ1MC1iZDU1LTIzODIwOGYxYWMwOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAENI9wwDQYJKoZIhvcNAQELBQADggEBAFxmxfdHmKc7HLKFy+ZvTFJH2AVu BQKdAjR01BeL86Nax1Q7787/CHfnc168a47b2oLiMS5nnAO9ONrKJzg1HHk3wSWs ZuO17dNnSRESqAYYiXcjcGpsf8gyttAVbjcqizIYyrA14cbpJxq3Dg/qzaU86cPd CYUg5BrwcEgEEK1mqcpakK0qWF/NT7+GJTWkxcm50oTfQQ78OgRGAJsAeOkAack0 Bro4zdcFik+B6vGUlS3DEHIr/jJKUrb70ius3HQRXz/yHCuTt8adZHd45Hsgby/T HCfY6D/jMGchm+aNwG6i62QJiuWQAiIJ1aIy/3r2HGHllc3fHqTNg9U221w= -----END CERTIFICATE-----Generated at Mon Oct 20 06:09:25 2025 by rpki-client