$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6dae9c60-54ba-4409-b826-0bd01bc6d694.roa File: 6dae9c60-54ba-4409-b826-0bd01bc6d694.roa (raw, json) Hash identifier: 9V4DemjLLMm3Cxy2QL4UbL1qeCRlz1/3xS6YNYwuH40= Subject key identifier: AA:3D:53:75:30:01:F2:4D:81:90:F1:4D:6C:39:55:33:B7:DF:13:99 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 797CF9EEAEDEA29C36578CB1ACFE13EA6D788229 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6dae9c60-54ba-4409-b826-0bd01bc6d694.roa Signing time: Sun 19 Oct 2025 12:19:16 +0000 ROA not before: Sun 19 Oct 2025 12:19:16 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.32.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:7c:f9:ee:ae:de:a2:9c:36:57:8c:b1:ac:fe:13:ea:6d:78:82:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 12:19:16 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=0298273ce39cbb0d7e722de23b18f537ea08cab2a960809233615621df8fbc37, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:98:bb:d1:3f:0c:a2:64:33:72:3e:2d:c0:f8: 2b:94:6b:e1:99:47:f8:93:3c:72:89:d0:ee:ad:26: 8c:5c:fe:7a:f7:84:0f:cc:bf:6d:b2:4d:a8:31:59: 06:55:cd:eb:0b:9f:41:7c:74:b0:b7:bc:bd:5d:10: bc:0c:9b:5f:3f:c9:30:80:fe:7f:95:07:02:0a:8e: f3:72:3f:fa:f1:cb:ee:39:23:4d:2c:4d:97:8c:48: 61:09:7d:10:22:1c:5c:4f:98:5b:f4:46:1c:87:be: 74:29:51:e6:56:b8:83:9e:e6:72:7f:bd:aa:e2:d5: 52:11:08:0e:e3:d3:55:cb:25:d4:d8:a9:90:a7:2b: b1:bf:04:3b:7d:e9:fd:96:fb:ec:69:36:57:c9:bd: 49:b4:64:78:b4:ca:73:32:4b:aa:50:d8:82:b7:f2: f1:5e:a1:3f:ee:25:25:78:92:e0:cb:79:6a:88:11: fd:d7:ee:d6:81:c5:af:be:2b:22:ac:59:f1:90:b7: 98:3a:62:29:12:da:6a:cb:20:e5:9b:85:f0:3e:3f: 1a:d0:c1:99:6d:cc:de:62:cb:b8:4b:db:7f:8f:28: 18:0f:a2:22:67:5f:6c:ca:26:ae:13:19:a2:f1:77: 44:6b:61:af:c1:28:19:0a:d2:0f:79:ce:ac:39:dd: 98:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:3D:53:75:30:01:F2:4D:81:90:F1:4D:6C:39:55:33:B7:DF:13:99 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6dae9c60-54ba-4409-b826-0bd01bc6d694.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.32.212.0/24 Signature Algorithm: sha256WithRSAEncryption 44:bf:51:d2:fb:bb:1c:48:ff:ed:ed:f4:e2:36:94:15:37:84: ae:e1:7b:56:1b:d2:87:9f:b4:8e:20:a8:d8:55:e8:1e:71:90: 56:2f:7e:16:e6:c5:7f:5b:27:26:52:ea:0b:72:de:59:95:17: 6a:3b:39:ce:b3:61:8a:e8:01:e5:0b:67:70:c1:de:0e:3b:47: ad:42:93:99:0d:79:89:a7:32:b1:5f:74:a4:32:2a:91:09:2c: 47:62:76:5d:98:c0:e8:a6:d8:89:5d:83:b2:62:52:01:2e:cc: 76:b2:ea:e0:f3:35:e7:5c:67:c7:fa:7b:8b:dc:e9:a3:17:bc: ff:d2:f6:62:c1:36:14:e4:cc:08:a7:8d:67:c3:f4:46:1c:a6: e7:2b:21:69:0b:8d:9d:28:35:5f:66:2e:06:0c:a5:de:a8:80: d3:75:74:9d:7f:e5:72:f0:cd:4c:ed:63:a6:06:3a:ad:0d:5a: 61:c6:ce:a5:7b:9f:11:2d:a9:e2:43:67:e4:87:70:2a:32:56: 40:a6:1d:8f:2f:55:cd:0e:2f:a0:52:03:ed:65:4c:2b:9c:c0: 0c:89:49:6f:a5:37:76:b0:b1:45:ef:ac:2c:90:7d:ff:0c:0a: 0e:e0:ae:09:38:32:5d:12:0f:62:0f:a3:23:e0:ce:fc:07:81: 64:06:4e:b6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUeXz57q7eopw2V4yxrP4T6m14gikwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTIxOTE2WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AwMjk4MjczY2UzOWNiYjBkN2U3MjJkZTIzYjE4ZjUzN2Vh MDhjYWIyYTk2MDgwOTIzMzYxNTYyMWRmOGZiYzM3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDomLvRPwyiZDNyPi3A+CuUa+GZR/iTPHKJ0O6tJoxc/nr3 hA/Mv22yTagxWQZVzesLn0F8dLC3vL1dELwMm18/yTCA/n+VBwIKjvNyP/rxy+45 I00sTZeMSGEJfRAiHFxPmFv0RhyHvnQpUeZWuIOe5nJ/vari1VIRCA7j01XLJdTY qZCnK7G/BDt96f2W++xpNlfJvUm0ZHi0ynMyS6pQ2IK38vFeoT/uJSV4kuDLeWqI Ef3X7taBxa++KyKsWfGQt5g6YikS2mrLIOWbhfA+PxrQwZltzN5iy7hL23+PKBgP oiJnX2zKJq4TGaLxd0RrYa/BKBkK0g95zqw53ZhZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUqj1TdTAB8k2BkPFNbDlVM7ffE5kwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzZkYWU5YzYwLTU0YmEtNDQwOS1iODI2LTBiZDAxYmM2ZDY5NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAANINQwDQYJKoZIhvcNAQELBQADggEBAES/UdL7uxxI/+3t9OI2lBU3hK7h e1Yb0oeftI4gqNhV6B5xkFYvfhbmxX9bJyZS6gty3lmVF2o7Oc6zYYroAeULZ3DB 3g47R61Ck5kNeYmnMrFfdKQyKpEJLEdidl2YwOim2Ildg7JiUgEuzHay6uDzNedc Z8f6e4vc6aMXvP/S9mLBNhTkzAinjWfD9EYcpucrIWkLjZ0oNV9mLgYMpd6ogNN1 dJ1/5XLwzUztY6YGOq0NWmHGzqV7nxEtqeJDZ+SHcCoyVkCmHY8vVc0OL6BSA+1l TCucwAyJSW+lN3awsUXvrCyQff8MCg7grgk4Ml0SD2IPoyPgzvwHgWQGTrY= -----END CERTIFICATE-----Generated at Mon Oct 20 11:09:29 2025 by rpki-client