$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6aa8d35d-4267-4310-a813-a98eda36414e.roa File: 6aa8d35d-4267-4310-a813-a98eda36414e.roa (raw, json) Hash identifier: ORirV2mMesqshTICFGyuN/bjEDv3frA5Gm9J3vwoY6c= Subject key identifier: 33:5A:A1:07:B7:F4:70:D2:03:2D:4F:7C:05:1D:8F:F6:6F:D1:93:97 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 77035B3C199F3218664D9DED76ADF7FD1CB9D7AE Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6aa8d35d-4267-4310-a813-a98eda36414e.roa Signing time: Sun 19 Oct 2025 10:00:12 +0000 ROA not before: Sun 19 Oct 2025 10:00:12 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.32.216.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:03:5b:3c:19:9f:32:18:66:4d:9d:ed:76:ad:f7:fd:1c:b9:d7:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 10:00:12 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=023d72d837fdd5c0a1ac665ca5e4f77a9491bc8d09bb184414c1fc3487580711, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7c:6d:db:5b:6c:c7:62:7a:8c:21:9e:cf:c0: 02:9c:dd:9e:d6:1d:7e:5b:b0:64:76:31:de:9e:a7: ec:62:e9:9b:70:de:24:22:ff:b2:76:ab:42:25:ef: 15:b4:c4:bc:20:30:c9:dd:ae:f4:3a:be:7d:81:50: c7:9e:5c:3b:df:d6:26:90:43:a7:af:8f:d9:c8:2b: 07:92:40:42:5c:08:83:4f:54:c3:39:ca:30:4e:a3: cb:17:55:57:3a:0a:d5:bb:f5:27:02:b8:85:5b:67: 5b:ab:9a:91:2a:37:ea:a7:e6:5c:0f:dc:ed:c0:94: c9:ef:79:a0:fe:cd:16:96:06:d9:12:ff:f0:88:4e: 06:4c:e2:21:af:07:6a:bd:97:77:fc:d9:43:95:05: ce:17:d8:ca:9d:25:17:a4:96:67:91:37:77:0b:34: 51:ad:c7:13:84:f5:b2:de:29:a0:bc:0e:bb:9d:17: 60:b2:55:73:47:f9:60:97:79:56:98:69:7c:34:97: 04:7e:02:ac:6e:c9:60:8e:a3:4b:0e:0d:32:57:99: 53:b8:74:a6:ae:93:9b:d2:84:89:72:ba:ed:18:87: e6:6f:16:98:aa:e5:56:17:ac:df:0d:90:32:f4:c6: c7:c0:d7:d4:48:de:03:b8:76:7b:7a:31:5c:59:05: 76:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:5A:A1:07:B7:F4:70:D2:03:2D:4F:7C:05:1D:8F:F6:6F:D1:93:97 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6aa8d35d-4267-4310-a813-a98eda36414e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.32.216.0/23 Signature Algorithm: sha256WithRSAEncryption 1c:d7:8f:c5:45:ea:ac:f4:31:84:f1:db:30:f5:fb:24:9f:cd: 2b:c3:75:22:03:b5:72:cb:d8:07:a9:db:c2:63:42:87:c7:07: 39:c4:52:12:e4:e8:25:bf:ad:84:87:ba:f7:0e:23:0e:e7:35: cb:7b:54:91:6c:d9:ca:f8:5b:29:89:88:f8:f8:3d:0d:4f:c9: 3d:d8:7e:ad:01:6e:69:05:6f:ce:9c:4c:3f:32:54:d0:a8:91: 9b:04:08:19:20:e5:18:bb:d9:ae:48:39:c9:41:68:e9:f4:ab: e7:ff:8f:db:3a:75:68:19:e9:cc:90:7c:46:9f:3d:99:02:ab: 09:4f:07:48:a8:24:3e:be:83:75:d4:74:b7:44:47:f1:5d:a0: 99:66:37:44:83:13:10:33:4b:d3:d5:6f:2f:32:ad:1f:58:53: 71:bf:a9:b8:89:93:e2:17:59:54:30:0d:d3:bf:76:eb:6d:97: ed:04:e1:39:d1:d6:97:c2:36:b3:41:c1:33:6a:ac:a4:61:69: 61:4c:79:b0:8f:c9:45:f6:4f:82:f0:2e:f4:74:0f:99:2a:b9: 89:47:b5:20:fd:e8:36:ee:41:eb:5d:b0:36:47:37:06:be:a1: fa:5e:c6:f6:e4:d2:2a:0e:c9:5d:bd:11:82:1e:a6:77:71:06: 61:eb:45:16 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdwNbPBmfMhhmTZ3tdq33/Ry5164wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTAwMDEyWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AwMjNkNzJkODM3ZmRkNWMwYTFhYzY2NWNhNWU0Zjc3YTk0 OTFiYzhkMDliYjE4NDQxNGMxZmMzNDg3NTgwNzExMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0fG3bW2zHYnqMIZ7PwAKc3Z7WHX5bsGR2Md6ep+xi6Ztw 3iQi/7J2q0Il7xW0xLwgMMndrvQ6vn2BUMeeXDvf1iaQQ6evj9nIKweSQEJcCINP VMM5yjBOo8sXVVc6CtW79ScCuIVbZ1urmpEqN+qn5lwP3O3AlMnveaD+zRaWBtkS //CITgZM4iGvB2q9l3f82UOVBc4X2MqdJReklmeRN3cLNFGtxxOE9bLeKaC8Drud F2CyVXNH+WCXeVaYaXw0lwR+AqxuyWCOo0sODTJXmVO4dKauk5vShIlyuu0Yh+Zv Fpiq5VYXrN8NkDL0xsfA19RI3gO4dnt6MVxZBXbTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUM1qhB7f0cNIDLU98BR2P9m/Rk5cwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzZhYThkMzVkLTQyNjctNDMxMC1hODEzLWE5OGVkYTM2NDE0ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAENINgwDQYJKoZIhvcNAQELBQADggEBABzXj8VF6qz0MYTx2zD1+ySfzSvD dSIDtXLL2Aep28JjQofHBznEUhLk6CW/rYSHuvcOIw7nNct7VJFs2cr4WymJiPj4 PQ1PyT3Yfq0BbmkFb86cTD8yVNCokZsECBkg5Ri72a5IOclBaOn0q+f/j9s6dWgZ 6cyQfEafPZkCqwlPB0ioJD6+g3XUdLdER/FdoJlmN0SDExAzS9PVby8yrR9YU3G/ qbiJk+IXWVQwDdO/duttl+0E4TnR1pfCNrNBwTNqrKRhaWFMebCPyUX2T4LwLvR0 D5kquYlHtSD96DbuQetdsDZHNwa+ofpexvbk0ioOyV29EYIepndxBmHrRRY= -----END CERTIFICATE-----Generated at Mon Oct 20 02:55:44 2025 by rpki-client