$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7ed0942e-e938-41cf-9701-1eed2ed882db.roa File: 7ed0942e-e938-41cf-9701-1eed2ed882db.roa (raw, json) Hash identifier: QurtT27JYz9J9pqATg8zpdh2NJprmPTn0Nmcy3rIuE4= Subject key identifier: 6F:50:FE:E0:54:95:B7:58:DF:C0:62:DB:48:80:4B:6D:48:20:F7:93 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2EB82C52AB01B4E927650CE66CA6FA4EDD8EA6C5 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7ed0942e-e938-41cf-9701-1eed2ed882db.roa Signing time: Sun 19 Oct 2025 15:42:26 +0000 ROA not before: Sun 19 Oct 2025 15:42:26 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.32.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:b8:2c:52:ab:01:b4:e9:27:65:0c:e6:6c:a6:fa:4e:dd:8e:a6:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 15:42:26 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=4a529cbba262eb014f9d34c2069db71a50006bfb7f5884dcf13b5d9a90cf4a8c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:df:5c:94:8c:5c:4f:2b:cc:25:16:1f:7d:87: fd:56:af:3f:ed:91:0b:31:e8:ab:1e:db:23:bc:74: 10:82:aa:a5:07:91:e7:41:b5:f4:9b:ea:36:16:f3: 8c:a5:dc:ff:5d:53:33:0c:b9:1a:3f:56:7f:32:0b: 49:c1:e5:59:21:7e:bc:e9:91:0d:94:46:ed:b4:32: 98:b9:2b:3b:27:26:ce:1e:c1:e6:ad:ae:55:eb:f0: 75:54:10:81:02:57:eb:df:bd:ed:28:1f:15:80:cc: 00:56:2f:5a:a7:73:55:c6:b5:2c:eb:ad:9c:9c:e5: 96:74:fa:3d:11:69:80:b4:a5:66:4e:e3:3f:fb:7c: 0a:dd:9b:66:6c:1c:12:f1:b0:dd:3e:6d:e8:cd:e9: bf:8d:0e:f0:cb:b2:2f:35:a9:77:bb:0a:c6:ef:5c: 11:e3:8e:d9:83:5c:af:bd:27:a8:5e:4a:fd:27:18: 0e:a7:9a:70:08:1a:9f:25:0b:1f:18:d8:4e:98:0a: c5:12:d3:d1:7e:1b:dd:2c:cc:e4:80:d1:61:57:80: 7d:7c:3d:e7:cb:2f:20:84:bc:24:66:3e:e3:f8:a5: d4:f9:22:ce:5a:38:c8:dd:66:94:4c:70:a6:eb:26: 8a:69:bd:04:47:3e:30:0d:97:69:0c:51:f9:9a:3d: 8f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:50:FE:E0:54:95:B7:58:DF:C0:62:DB:48:80:4B:6D:48:20:F7:93 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7ed0942e-e938-41cf-9701-1eed2ed882db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.32.169.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:3b:cc:d6:a7:e0:36:48:ea:26:ba:aa:e0:b5:c1:fa:65:7e: c8:67:7b:76:81:54:c6:04:ad:bb:6d:43:04:e5:1d:14:55:44: 7d:41:84:7e:e8:e0:1e:86:1b:dc:b2:97:bf:df:90:4d:26:ac: 00:2e:0c:59:ef:74:71:63:c7:d0:f3:fb:af:16:5f:78:2f:4a: 83:33:26:c5:c3:9c:6f:c6:f5:62:bd:3d:2b:a2:da:dd:cf:f3: 68:7b:1b:52:49:db:a2:4e:d6:65:14:ea:66:c7:a3:16:79:94: 5f:2e:fc:4e:a4:d3:41:b6:7a:5c:25:23:07:63:94:87:73:79: ec:ef:8b:fa:ed:28:bc:15:0a:b7:67:78:f5:9d:a4:3a:3d:5e: 05:74:fc:a2:cc:8f:1f:7a:e2:a0:a8:e1:a8:7e:51:f3:9a:fa: 3b:60:d3:60:aa:61:e9:f5:86:e2:f6:ef:d1:b8:e8:87:9d:86: 76:41:09:44:15:74:6f:0e:ff:23:1e:c4:28:ca:44:00:21:a8: 73:75:ee:e7:25:f0:59:b6:fd:ca:0b:93:e6:63:81:2f:f5:2e: 41:c5:a1:cc:b8:79:b1:19:8c:55:3d:c0:7c:2b:79:13:36:85: 39:ed:b9:95:63:9a:67:4c:9d:cc:a0:47:13:97:ba:e4:43:de: ff:23:3a:b1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULrgsUqsBtOknZQzmbKb6Tt2OpsUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTU0MjI2WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A0YTUyOWNiYmEyNjJlYjAxNGY5ZDM0YzIwNjlkYjcxYTUw MDA2YmZiN2Y1ODg0ZGNmMTNiNWQ5YTkwY2Y0YThjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDW31yUjFxPK8wlFh99h/1Wrz/tkQsx6Kse2yO8dBCCqqUH kedBtfSb6jYW84yl3P9dUzMMuRo/Vn8yC0nB5VkhfrzpkQ2URu20Mpi5KzsnJs4e weatrlXr8HVUEIECV+vfve0oHxWAzABWL1qnc1XGtSzrrZyc5ZZ0+j0RaYC0pWZO 4z/7fArdm2ZsHBLxsN0+bejN6b+NDvDLsi81qXe7CsbvXBHjjtmDXK+9J6heSv0n GA6nmnAIGp8lCx8Y2E6YCsUS09F+G90szOSA0WFXgH18PefLLyCEvCRmPuP4pdT5 Is5aOMjdZpRMcKbrJoppvQRHPjANl2kMUfmaPY9xAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUb1D+4FSVt1jfwGLbSIBLbUgg95MwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzdlZDA5NDJlLWU5MzgtNDFjZi05NzAxLTFlZWQyZWQ4ODJkYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAANIKkwDQYJKoZIhvcNAQELBQADggEBAEw7zNan4DZI6ia6quC1wfplfshn e3aBVMYErbttQwTlHRRVRH1BhH7o4B6GG9yyl7/fkE0mrAAuDFnvdHFjx9Dz+68W X3gvSoMzJsXDnG/G9WK9PSui2t3P82h7G1JJ26JO1mUU6mbHoxZ5lF8u/E6k00G2 elwlIwdjlIdzeezvi/rtKLwVCrdnePWdpDo9XgV0/KLMjx964qCo4ah+UfOa+jtg 02CqYen1huL279G46IedhnZBCUQVdG8O/yMexCjKRAAhqHN17ucl8Fm2/coLk+Zj gS/1LkHFocy4ebEZjFU9wHwreRM2hTntuZVjmmdMncygRxOXuuRD3v8jOrE= -----END CERTIFICATE-----Generated at Mon Oct 20 11:11:00 2025 by rpki-client