$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/731c9555-99ca-49f8-926c-1e8dcf581e62.roa File: 731c9555-99ca-49f8-926c-1e8dcf581e62.roa (raw, json) Hash identifier: z31hUqTEc9KAhn04FotDi+PJ3eDaM+YDdigcl6xwU3I= Subject key identifier: F0:F2:7A:77:65:B6:E8:01:AE:CE:D5:06:A8:C5:D2:B5:F1:95:32:48 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5410EDA7F8383F8AFD0ADA3D3C3BF34E4B7EEA74 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/731c9555-99ca-49f8-926c-1e8dcf581e62.roa Signing time: Sun 19 Oct 2025 09:32:45 +0000 ROA not before: Sun 19 Oct 2025 09:32:45 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.32.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:10:ed:a7:f8:38:3f:8a:fd:0a:da:3d:3c:3b:f3:4e:4b:7e:ea:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 09:32:45 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=9412ea11972dd1d1ce710eebf44959507a8e8309f1062f100768f74668f08185, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:bf:3b:aa:32:a4:2a:15:15:6d:03:c6:97:b7: dd:4a:ec:f3:9b:1b:cc:9d:d1:e0:ef:27:89:33:99: f1:90:2b:b0:96:83:ff:1a:5b:d7:11:6b:49:13:93: e7:f2:1d:c0:c8:c8:04:30:60:c4:0d:37:6f:70:86: e3:3d:22:7a:88:14:c1:71:65:de:4d:12:5f:36:3f: 59:85:77:90:6b:dc:d7:5b:74:ac:6f:dd:80:bc:bb: 2b:b7:6b:63:4c:fa:70:6e:37:64:60:26:e0:04:4d: 35:00:a1:83:83:ad:87:45:22:6c:87:6f:b2:e7:01: 60:6e:25:b8:6f:dc:f6:1b:b0:48:60:20:71:25:f4: 66:30:76:0b:35:c0:48:7d:f6:53:47:cb:ed:5e:02: c6:c0:e4:8b:c5:b4:9b:f9:e1:45:e4:6d:b6:90:d7: 5f:d3:79:7c:2a:ae:24:05:5b:56:84:6d:28:1a:45: ef:e4:aa:f6:a9:ef:f1:30:b6:4d:e3:85:9b:c7:81: e1:97:4d:b9:bf:3f:37:82:a8:15:a1:c5:25:c2:39: 1e:28:53:5c:be:9a:ab:97:e8:b7:16:b2:3f:cd:b1: e7:f5:da:32:95:86:11:9a:35:4d:ea:01:4c:77:c5: 39:7a:e2:d4:86:99:7b:2c:0f:2a:1b:94:47:ba:3c: 92:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:F2:7A:77:65:B6:E8:01:AE:CE:D5:06:A8:C5:D2:B5:F1:95:32:48 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/731c9555-99ca-49f8-926c-1e8dcf581e62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.32.192.0/21 Signature Algorithm: sha256WithRSAEncryption 15:06:7f:99:2a:c5:76:74:97:07:4a:5a:6a:86:2b:35:e4:49: e2:b5:10:e5:57:02:47:5e:2e:17:18:da:5b:92:53:4a:c3:1c: 23:cd:99:28:90:56:5d:67:4f:98:61:33:ae:2b:06:ee:f5:11: 35:f1:c6:19:3b:8a:68:c5:d4:45:c6:a5:29:db:61:a5:17:c5: c3:a5:65:bd:08:84:86:6f:3c:91:19:37:2b:19:14:21:18:f3: 65:c4:73:2b:b5:7d:59:36:a2:25:4b:8b:87:a3:47:e8:63:1c: 84:3d:34:e9:1b:d4:bc:0d:01:d5:13:ce:43:5b:11:c2:8e:03: 28:63:64:6b:52:95:29:12:6a:b7:97:98:35:fc:9e:d8:ec:0c: d3:a9:ed:2d:17:ea:14:9e:ac:32:e5:c3:ca:ac:da:f6:81:f7: 7c:3c:da:3f:61:17:2c:34:fb:47:1c:b9:25:1f:73:e4:94:9b: a5:35:c8:6d:c1:db:44:64:4d:34:d0:83:44:a6:af:e1:52:62: c8:23:06:a8:6d:a8:dc:45:cc:62:19:78:f0:6e:29:98:d0:79: c2:a7:f0:32:50:2d:d1:92:8b:8f:8b:aa:58:f6:d5:1b:9b:49: 92:0b:ad:77:5d:e8:97:2c:e7:2a:bc:58:52:a3:ff:a7:38:64: 6a:8e:04:85 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVBDtp/g4P4r9Cto9PDvzTkt+6nQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MDkzMjQ1WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A5NDEyZWExMTk3MmRkMWQxY2U3MTBlZWJmNDQ5NTk1MDdh OGU4MzA5ZjEwNjJmMTAwNzY4Zjc0NjY4ZjA4MTg1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCEvzuqMqQqFRVtA8aXt91K7PObG8yd0eDvJ4kzmfGQK7CW g/8aW9cRa0kTk+fyHcDIyAQwYMQNN29whuM9InqIFMFxZd5NEl82P1mFd5Br3Ndb dKxv3YC8uyu3a2NM+nBuN2RgJuAETTUAoYODrYdFImyHb7LnAWBuJbhv3PYbsEhg IHEl9GYwdgs1wEh99lNHy+1eAsbA5IvFtJv54UXkbbaQ11/TeXwqriQFW1aEbSga Re/kqvap7/Ewtk3jhZvHgeGXTbm/PzeCqBWhxSXCOR4oU1y+mquX6LcWsj/Nsef1 2jKVhhGaNU3qAUx3xTl64tSGmXssDyoblEe6PJLpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU8PJ6d2W26AGuztUGqMXStfGVMkgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzczMWM5NTU1LTk5Y2EtNDlmOC05MjZjLTFlOGRjZjU4MWU2Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMNIMAwDQYJKoZIhvcNAQELBQADggEBABUGf5kqxXZ0lwdKWmqGKzXkSeK1 EOVXAkdeLhcY2luSU0rDHCPNmSiQVl1nT5hhM64rBu71ETXxxhk7imjF1EXGpSnb YaUXxcOlZb0IhIZvPJEZNysZFCEY82XEcyu1fVk2oiVLi4ejR+hjHIQ9NOkb1LwN AdUTzkNbEcKOAyhjZGtSlSkSareXmDX8ntjsDNOp7S0X6hSerDLlw8qs2vaB93w8 2j9hFyw0+0ccuSUfc+SUm6U1yG3B20RkTTTQg0Smr+FSYsgjBqhtqNxFzGIZePBu KZjQecKn8DJQLdGSi4+Lqlj21RubSZILrXdd6Jcs5yq8WFKj/6c4ZGqOBIU= -----END CERTIFICATE-----Generated at Mon Oct 20 21:11:51 2025 by rpki-client