$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7246f323-76bb-44f2-8f00-3a857b764827.roa File: 7246f323-76bb-44f2-8f00-3a857b764827.roa (raw, json) Hash identifier: sR4QXDd5kXk8Gr3hXx7I1EvlWzQr/i3ohu129cvig2o= Subject key identifier: CF:9C:3E:B2:29:53:42:32:0D:54:F7:24:82:F9:35:CD:E5:90:B7:F1 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 22B508B6FEDABC2666F9E3C3A774C4E50BE88E0E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7246f323-76bb-44f2-8f00-3a857b764827.roa Signing time: Sun 19 Oct 2025 16:13:43 +0000 ROA not before: Sun 19 Oct 2025 16:13:43 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.32.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:b5:08:b6:fe:da:bc:26:66:f9:e3:c3:a7:74:c4:e5:0b:e8:8e:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 16:13:43 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=3a39ffc9811a7e5704135b05bf9e55b34acfff1ac3d56bc538046e89a1e36dc9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:93:35:3f:ad:07:e9:a1:f0:93:48:af:19:a4: ff:e9:14:da:69:dc:57:dc:a7:1e:89:16:c4:d6:29: 4c:2b:d6:92:b0:7f:d0:3d:0c:ae:31:fa:a2:33:91: c0:65:b7:3b:7e:11:91:f9:1c:cf:34:72:dd:08:86: 3e:00:d6:b1:f9:ef:46:d6:e5:12:c3:b1:c9:46:c1: 33:12:17:0f:4a:7d:f3:69:cf:cb:ec:39:9d:26:e2: 65:bf:4e:ba:27:da:66:7b:9a:07:8d:e7:c3:bb:03: 4e:65:8a:d4:4f:d9:cf:9b:95:9a:e8:66:0b:d4:6c: 2a:0f:2f:bf:4a:8b:7e:86:ac:a1:17:eb:cc:97:ef: 98:dd:8b:e3:e7:2e:4d:dd:4e:82:95:43:be:24:41: e0:5e:3e:0d:7f:ff:09:7d:b3:19:b9:9a:47:6d:ff: 94:03:08:3c:eb:26:ef:7a:ea:49:c7:6d:29:e5:6e: 37:15:51:7d:89:94:35:40:f7:b0:7b:9d:83:4e:10: d1:a2:58:70:b2:59:b4:39:4e:65:d7:cc:ea:71:fc: 08:6e:db:a8:3d:a1:c6:65:e9:76:3c:1b:66:ea:d9: ce:aa:ad:5f:fb:19:25:de:ed:df:41:b9:73:f1:21: c2:03:4a:4a:ab:2d:4b:76:a7:64:2b:bb:19:66:8e: 22:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:9C:3E:B2:29:53:42:32:0D:54:F7:24:82:F9:35:CD:E5:90:B7:F1 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7246f323-76bb-44f2-8f00-3a857b764827.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.32.207.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:2c:7f:05:ae:39:68:a5:81:f5:1f:6e:2c:bb:1f:6a:87:a3: f2:f9:bc:a0:a7:59:8b:5c:5f:b7:09:a7:5c:9a:6e:1b:5f:17: 22:95:0c:56:2d:42:4d:b3:cd:b9:06:b0:a7:e3:89:5d:16:26: a8:5c:db:b1:df:2c:2f:d2:d0:03:58:21:9f:20:bf:22:6a:bf: 3a:61:75:6b:38:29:d1:0f:9e:6b:35:64:c1:94:27:81:34:2a: ca:36:c0:1a:3f:a0:8d:64:d7:17:75:f9:69:c4:e2:b8:21:68: 73:ea:59:f3:77:46:15:c7:bf:42:9c:9c:c2:85:14:8e:0b:49: 7e:ec:40:21:18:e4:d2:2a:0c:56:15:94:44:c9:de:5b:84:3d: 24:c8:34:e1:61:9f:68:eb:3e:73:e5:11:6f:b6:2e:06:c0:f0: 09:41:db:60:c5:b4:86:f4:00:f6:b8:56:ef:04:f1:ce:a8:53: 62:98:f3:be:f8:bb:bb:ce:9f:44:67:48:c3:63:35:c5:cc:fe: f6:09:71:f4:f5:a9:69:3f:ef:2f:30:48:2d:4e:66:38:9d:47: db:68:53:47:f7:81:54:a5:cb:be:79:f4:f6:9f:7a:58:52:b4: a4:b2:3c:58:db:42:8d:99:44:d9:16:e9:ba:e9:7e:1d:48:5d: 7c:d3:41:18 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIrUItv7avCZm+ePDp3TE5Qvojg4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTYxMzQzWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AzYTM5ZmZjOTgxMWE3ZTU3MDQxMzViMDViZjllNTViMzRh Y2ZmZjFhYzNkNTZiYzUzODA0NmU4OWExZTM2ZGM5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCgkzU/rQfpofCTSK8ZpP/pFNpp3Ffcpx6JFsTWKUwr1pKw f9A9DK4x+qIzkcBltzt+EZH5HM80ct0Ihj4A1rH570bW5RLDsclGwTMSFw9KffNp z8vsOZ0m4mW/Tron2mZ7mgeN58O7A05litRP2c+blZroZgvUbCoPL79Ki36GrKEX 68yX75jdi+PnLk3dToKVQ74kQeBePg1//wl9sxm5mkdt/5QDCDzrJu966knHbSnl bjcVUX2JlDVA97B7nYNOENGiWHCyWbQ5TmXXzOpx/Ahu26g9ocZl6XY8G2bq2c6q rV/7GSXe7d9BuXPxIcIDSkqrLUt2p2QruxlmjiJpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUz5w+silTQjINVPckgvk1zeWQt/EwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzcyNDZmMzIzLTc2YmItNDRmMi04ZjAwLTNhODU3Yjc2NDgyNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAANIM8wDQYJKoZIhvcNAQELBQADggEBAE4sfwWuOWilgfUfbiy7H2qHo/L5 vKCnWYtcX7cJp1yabhtfFyKVDFYtQk2zzbkGsKfjiV0WJqhc27HfLC/S0ANYIZ8g vyJqvzphdWs4KdEPnms1ZMGUJ4E0Kso2wBo/oI1k1xd1+WnE4rghaHPqWfN3RhXH v0KcnMKFFI4LSX7sQCEY5NIqDFYVlETJ3luEPSTINOFhn2jrPnPlEW+2LgbA8AlB 22DFtIb0APa4Vu8E8c6oU2KY8774u7vOn0RnSMNjNcXM/vYJcfT1qWk/7y8wSC1O ZjidR9toU0f3gVSly7559PafelhStKSyPFjbQo2ZRNkW6brpfh1IXXzTQRg= -----END CERTIFICATE-----Generated at Mon Oct 20 11:14:05 2025 by rpki-client