$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7cb99d92-ee30-41af-821d-6d35ccf3e873.roa File: 7cb99d92-ee30-41af-821d-6d35ccf3e873.roa (raw, json) Hash identifier: BacVoFySvHDS+tuNIzFfNKolmx15pVlh096ONEroCfI= Subject key identifier: F5:CE:ED:E1:51:FE:75:5D:42:34:E3:95:25:D3:54:00:39:CA:E1:2D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5ECC3E4E76D5462DC979B536F979F47C9B79FA78 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7cb99d92-ee30-41af-821d-6d35ccf3e873.roa Signing time: Sun 19 Oct 2025 11:12:29 +0000 ROA not before: Sun 19 Oct 2025 11:12:29 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.32.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:cc:3e:4e:76:d5:46:2d:c9:79:b5:36:f9:79:f4:7c:9b:79:fa:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 11:12:29 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=872f6b9a81a53e63a9160bd6f4955c1947b06f86a8dc5b2045efbab373c5a6ad, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0b:3f:3f:9c:ac:e6:ba:e1:80:bb:32:5c:60: 7c:fc:6b:15:ef:4a:23:73:57:76:5c:14:12:dc:c9: c5:98:bc:b3:89:6c:e5:8d:30:53:fe:96:1a:4b:57: 11:09:30:86:7b:b5:fb:fe:99:5f:d1:b4:86:a5:72: 36:fc:6d:b6:dd:15:78:ce:d0:fc:ca:dc:22:ce:87: a6:72:27:14:f0:de:91:e7:4f:1c:13:62:b0:6b:26: ad:70:96:f1:0c:ca:dc:c1:ec:da:22:8a:73:48:37: b9:8d:2c:a1:40:6a:4c:26:a5:3d:fb:b4:ff:fc:f5: 10:e4:9f:a7:58:08:9c:9d:96:25:2b:fc:09:f3:91: 1a:1f:85:d9:44:82:19:75:cb:f8:32:e4:23:3b:0d: fe:16:37:cf:81:06:4c:be:34:b6:c0:19:e2:81:5f: e3:03:4f:12:2a:b1:16:4d:b8:51:d4:03:3c:8b:e2: 18:59:f5:0a:67:92:6b:78:7c:38:e0:9a:b9:7b:99: 5b:e8:89:c1:51:0e:30:56:d0:8a:1e:84:c9:dc:8d: 21:cc:f0:11:f9:a0:d3:3f:65:bf:d3:54:12:be:3b: 7f:43:c1:01:9e:bc:f9:a9:b0:b5:2c:ac:e4:d6:80: ca:15:4f:86:e5:a5:1f:ca:7d:73:6b:5a:c1:ac:68: 2c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:CE:ED:E1:51:FE:75:5D:42:34:E3:95:25:D3:54:00:39:CA:E1:2D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7cb99d92-ee30-41af-821d-6d35ccf3e873.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.32.170.0/24 Signature Algorithm: sha256WithRSAEncryption 75:89:4d:30:d5:8b:85:5a:af:e3:8a:16:4d:5f:67:b5:f5:98: 28:4b:95:71:d0:13:f3:6c:db:d3:38:61:56:8d:4f:26:f6:35: f2:b8:b3:ab:a9:a1:72:5c:18:75:83:28:a3:f8:14:1a:6e:87: 5e:dc:a3:b5:2b:92:f9:1b:1d:77:58:90:51:ac:62:c7:3f:f2: a8:82:16:e5:68:9d:40:18:b3:cf:6d:93:86:56:e9:b0:48:2c: 29:d3:e9:cc:b1:83:cb:21:61:1a:f4:cf:2e:84:bb:37:68:76: 12:56:70:01:f7:c9:68:e9:f6:bd:98:e0:cc:00:7c:4a:ad:52: f1:77:21:1e:10:5b:f7:31:40:5d:fd:2f:c9:9e:fc:81:e7:a5: 14:92:21:e0:0e:e9:64:38:df:d1:d7:a8:09:79:3f:df:96:6d: d8:88:eb:b6:62:59:83:f1:35:b0:17:69:40:df:6a:1f:13:f3: 47:06:96:a9:9d:86:c7:f4:31:45:db:b0:60:b3:af:b9:75:26: 1a:64:57:27:b5:5d:18:73:4c:bf:53:7c:a9:52:8b:da:53:0b: 9a:78:48:0d:ef:33:a3:8a:34:99:d5:ea:72:75:e7:e8:70:c5: 21:ff:d0:5d:d4:5b:95:56:14:a2:40:01:b4:7f:a6:08:72:6b: bd:08:d3:13 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXsw+TnbVRi3JebU2+Xn0fJt5+ngwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTExMjI5WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4NzJmNmI5YTgxYTUzZTYzYTkxNjBiZDZmNDk1NWMxOTQ3 YjA2Zjg2YThkYzViMjA0NWVmYmFiMzczYzVhNmFkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCkCz8/nKzmuuGAuzJcYHz8axXvSiNzV3ZcFBLcycWYvLOJ bOWNMFP+lhpLVxEJMIZ7tfv+mV/RtIalcjb8bbbdFXjO0PzK3CLOh6ZyJxTw3pHn TxwTYrBrJq1wlvEMytzB7NoiinNIN7mNLKFAakwmpT37tP/89RDkn6dYCJydliUr /AnzkRofhdlEghl1y/gy5CM7Df4WN8+BBky+NLbAGeKBX+MDTxIqsRZNuFHUAzyL 4hhZ9Qpnkmt4fDjgmrl7mVvoicFRDjBW0IoehMncjSHM8BH5oNM/Zb/TVBK+O39D wQGevPmpsLUsrOTWgMoVT4blpR/KfXNrWsGsaCyxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU9c7t4VH+dV1CNOOVJdNUADnK4S0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzdjYjk5ZDkyLWVlMzAtNDFhZi04MjFkLTZkMzVjY2YzZTg3My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAANIKowDQYJKoZIhvcNAQELBQADggEBAHWJTTDVi4Var+OKFk1fZ7X1mChL lXHQE/Ns29M4YVaNTyb2NfK4s6upoXJcGHWDKKP4FBpuh17co7UrkvkbHXdYkFGs Ysc/8qiCFuVonUAYs89tk4ZW6bBILCnT6cyxg8shYRr0zy6EuzdodhJWcAH3yWjp 9r2Y4MwAfEqtUvF3IR4QW/cxQF39L8me/IHnpRSSIeAO6WQ439HXqAl5P9+WbdiI 67ZiWYPxNbAXaUDfah8T80cGlqmdhsf0MUXbsGCzr7l1JhpkVye1XRhzTL9TfKlS i9pTC5p4SA3vM6OKNJnV6nJ15+hwxSH/0F3UW5VWFKJAAbR/pghya70I0xM= -----END CERTIFICATE-----Generated at Mon Oct 20 06:11:03 2025 by rpki-client