$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/68914e45-086d-443c-ac01-13a4b35c7a91.roa File: 68914e45-086d-443c-ac01-13a4b35c7a91.roa (raw, json) Hash identifier: i3tnn/jERNTEaRLE01I6TWaLfoSybyMFFNQ1J699Y2U= Subject key identifier: 2C:8C:87:A5:DC:07:7E:E5:21:17:30:C1:58:F6:63:DB:51:35:8B:4F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1FAD797A374C8CEB19F2819D73430AEC6AFB68B7 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/68914e45-086d-443c-ac01-13a4b35c7a91.roa Signing time: Sun 19 Oct 2025 10:03:40 +0000 ROA not before: Sun 19 Oct 2025 10:03:40 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.32.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:ad:79:7a:37:4c:8c:eb:19:f2:81:9d:73:43:0a:ec:6a:fb:68:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 10:03:40 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=bf29e932868751e928060be126bd805e5eb75ededf3a1824249163e4de1d8d98, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0e:3c:0a:a7:e0:15:26:c5:99:d9:ca:4f:66: c0:40:3c:26:b7:2c:fe:19:64:20:9c:64:f7:8b:0a: ed:4e:50:a8:a1:60:ad:f6:62:3e:5c:bb:fc:e8:b1: 6c:37:b8:5f:4b:c2:68:e5:57:cd:3b:17:6e:5f:0c: 4c:62:d7:0e:f9:52:6d:03:3d:69:5a:0b:7a:bb:5f: 8e:71:36:a2:9f:3b:59:78:d8:c3:20:4a:19:5e:70: f8:45:82:66:4e:44:e1:fa:19:a1:02:d1:6e:db:83: d7:1a:25:8d:e9:44:e6:f3:99:6a:8d:02:fe:3b:00: 1c:d7:a2:fc:8f:65:ee:62:cc:38:69:1a:4a:e5:da: 1a:39:c9:28:e9:3b:5d:5e:0a:4b:74:45:a4:6e:bb: df:70:7b:74:f9:3c:a8:01:88:f6:65:98:f2:e5:a9: b9:5f:34:b3:e1:17:0a:7d:24:65:e9:80:fc:93:5a: 6d:92:08:ee:39:3e:56:b0:df:68:f2:dc:87:f1:c0: b9:9b:9d:f3:b0:67:86:ec:11:9f:44:2a:15:df:e3: 99:3c:b0:5b:b2:2e:1a:40:62:6b:40:61:dc:30:cb: 51:aa:22:d3:64:06:37:29:c8:0e:32:6a:f9:10:38: 93:75:6f:81:dc:15:2f:98:32:50:d0:5a:82:8f:67: 2a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:8C:87:A5:DC:07:7E:E5:21:17:30:C1:58:F6:63:DB:51:35:8B:4F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/68914e45-086d-443c-ac01-13a4b35c7a91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.32.40.0/22 Signature Algorithm: sha256WithRSAEncryption 61:46:a0:de:9f:5e:cb:7d:b5:fd:56:4b:32:f1:cb:e1:f0:c1: 68:0c:51:8e:a9:af:36:80:c4:a1:c4:b6:e8:24:dd:38:bf:ad: 3d:73:ab:b5:b8:32:44:dc:a3:d8:19:7d:95:4d:1a:4a:6f:73: dd:6e:ab:ba:8f:ec:81:bb:35:a3:bd:8e:2f:9a:2a:13:10:f1: 6d:73:e5:19:69:d0:ce:aa:15:29:d1:49:71:35:cd:32:ee:d6: 1a:4c:88:df:bc:dd:7a:6a:ca:73:23:cf:bc:ce:3c:3b:bb:0e: e2:03:88:0f:6d:2a:79:20:34:1c:02:e4:3b:8d:17:7e:29:28: ac:c0:7d:30:36:4e:a2:e0:d9:44:c9:54:66:9f:54:32:2e:56: eb:c2:23:aa:45:27:ed:a2:de:62:8f:48:92:7c:58:01:eb:d4: 5a:0b:24:90:63:ae:62:f7:23:82:10:02:b5:ec:38:e4:bd:56: ce:50:38:4a:98:f5:b8:5e:3e:f4:0f:61:9f:42:a5:7f:0b:cf: 28:a1:ba:ce:7e:8f:ff:ac:29:f4:b0:49:bb:b1:3d:28:11:02: 64:5a:24:d2:68:1c:e3:01:9f:8e:97:ec:39:05:d0:bc:24:bc: d2:55:e0:bf:0e:e9:6e:55:a5:6e:18:88:d6:cc:09:b7:8b:4e: cb:1f:85:66 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUH615ejdMjOsZ8oGdc0MK7Gr7aLcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTAwMzQwWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BiZjI5ZTkzMjg2ODc1MWU5MjgwNjBiZTEyNmJkODA1ZTVl Yjc1ZWRlZGYzYTE4MjQyNDkxNjNlNGRlMWQ4ZDk4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8DjwKp+AVJsWZ2cpPZsBAPCa3LP4ZZCCcZPeLCu1OUKih YK32Yj5cu/zosWw3uF9LwmjlV807F25fDExi1w75Um0DPWlaC3q7X45xNqKfO1l4 2MMgShlecPhFgmZOROH6GaEC0W7bg9caJY3pRObzmWqNAv47ABzXovyPZe5izDhp Gkrl2ho5ySjpO11eCkt0RaRuu99we3T5PKgBiPZlmPLlqblfNLPhFwp9JGXpgPyT Wm2SCO45Plaw32jy3IfxwLmbnfOwZ4bsEZ9EKhXf45k8sFuyLhpAYmtAYdwwy1Gq ItNkBjcpyA4yavkQOJN1b4HcFS+YMlDQWoKPZyqvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQULIyHpdwHfuUhFzDBWPZj21E1i08wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzY4OTE0ZTQ1LTA4NmQtNDQzYy1hYzAxLTEzYTRiMzVjN2E5MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAINICgwDQYJKoZIhvcNAQELBQADggEBAGFGoN6fXst9tf1WSzLxy+HwwWgM UY6przaAxKHEtugk3Ti/rT1zq7W4MkTco9gZfZVNGkpvc91uq7qP7IG7NaO9ji+a KhMQ8W1z5Rlp0M6qFSnRSXE1zTLu1hpMiN+83XpqynMjz7zOPDu7DuIDiA9tKnkg NBwC5DuNF34pKKzAfTA2TqLg2UTJVGafVDIuVuvCI6pFJ+2i3mKPSJJ8WAHr1FoL JJBjrmL3I4IQArXsOOS9Vs5QOEqY9bhePvQPYZ9CpX8Lzyihus5+j/+sKfSwSbux PSgRAmRaJNJoHOMBn46X7DkF0LwkvNJV4L8O6W5VpW4YiNbMCbeLTssfhWY= -----END CERTIFICATE-----Generated at Mon Oct 20 03:00:04 2025 by rpki-client