$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/869fa8ef-177e-4d56-950b-1252997126ef.roa File: 869fa8ef-177e-4d56-950b-1252997126ef.roa (raw, json) Hash identifier: DCKN45rDu6J85M4SpdE0m6Zfn+PYGP3NcE0X9gG7tb0= Subject key identifier: B9:7B:58:4F:E1:04:4B:0A:D4:C4:BC:9D:05:A2:A9:05:7D:24:53:AF Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 425376A4069A02655F6C0FEA9A7FCF63D5F7D298 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/869fa8ef-177e-4d56-950b-1252997126ef.roa Signing time: Sun 19 Oct 2025 16:23:27 +0000 ROA not before: Sun 19 Oct 2025 16:23:27 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.32.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:53:76:a4:06:9a:02:65:5f:6c:0f:ea:9a:7f:cf:63:d5:f7:d2:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 16:23:27 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=4f95da63c88b6750466dea53b2dd28c6f30e41a2011f500daa1293622fbc6eaf, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6d:e0:7a:24:9d:b1:2f:b4:d1:2c:8f:82:1d: 8d:92:89:b2:66:04:65:7d:9a:e9:bc:e1:67:37:19: 9d:86:bf:bb:1e:89:99:1f:a0:9c:5d:fd:00:33:4e: bb:fb:af:d9:18:b9:1d:1b:a5:2c:15:4d:14:ea:82: 1c:a0:02:0a:78:69:9e:90:91:9f:79:00:cd:5e:9d: 9b:67:4b:9f:1e:20:67:b8:d1:d7:28:fc:7f:73:63: 00:3f:cf:a8:e7:a6:69:8e:a2:4a:42:53:9b:07:32: a8:83:24:14:82:dd:f5:f0:1a:d0:9e:5b:62:c2:93: 95:21:ea:c7:2c:88:39:42:f0:7d:20:6b:05:ef:f3: 38:60:fd:bf:70:45:f3:6c:db:8c:e1:95:ed:5c:0b: 86:14:22:54:f8:5e:dc:60:8e:e6:fa:65:ab:63:92: b8:11:b6:5d:e0:1c:3e:d3:53:c1:5f:20:fb:3e:d8: 97:6d:d0:67:dd:a2:65:a5:54:08:45:d0:82:0a:03: a3:c2:4e:b8:60:5a:db:ca:ca:55:02:45:88:c5:af: 7f:d2:27:57:66:41:a3:0a:2d:29:e0:dc:ac:2b:91: 2d:fb:3b:15:25:44:de:b0:57:15:cf:59:26:f2:de: de:b5:9d:73:b6:b8:69:db:f2:70:48:99:6d:29:00: e9:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:7B:58:4F:E1:04:4B:0A:D4:C4:BC:9D:05:A2:A9:05:7D:24:53:AF X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/869fa8ef-177e-4d56-950b-1252997126ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.32.24.0/24 Signature Algorithm: sha256WithRSAEncryption a9:d5:9e:83:91:a8:e6:1a:c9:19:6b:b5:64:26:c4:ba:21:11: b6:16:bb:e8:2f:d8:a1:ab:06:08:38:40:be:74:4b:26:59:fb: 56:c7:b8:52:90:e2:de:e0:29:a6:e6:e5:7d:9f:01:f6:31:d8: a0:74:0b:38:5a:6e:60:c9:85:cb:1c:7b:ca:45:d2:33:27:0f: 58:05:05:18:97:07:dd:16:58:7b:e7:02:32:04:dc:22:44:12: db:45:6f:d8:4e:2a:4b:24:db:e7:75:66:f3:49:f8:d5:9a:92: 42:3c:4a:2a:49:a9:fe:8e:ba:3e:e2:6b:5d:09:6d:94:b3:f4: cc:e8:66:1c:a0:40:54:19:ad:90:69:a9:68:00:ec:67:fd:3c: 77:c0:44:6c:a3:35:42:fb:ff:28:f2:46:ce:b8:be:a7:db:b7: b8:12:00:b7:e8:86:ec:a2:54:75:28:7c:39:5d:b6:7c:e9:b8: f3:7d:5e:a7:88:bf:e2:b5:7f:ea:03:1e:74:23:83:b6:b6:3f: 1c:d5:50:bf:3d:46:0d:32:02:c4:7d:a7:3d:43:74:33:e7:f1: bf:97:36:20:dc:a6:e6:43:40:5c:e7:a5:3b:95:df:45:ed:18: 7a:a3:7e:2f:ad:5c:89:eb:c5:5c:a4:c4:8e:84:c2:b0:b3:b5: 39:91:fc:bc -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQlN2pAaaAmVfbA/qmn/PY9X30pgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTYyMzI3WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A0Zjk1ZGE2M2M4OGI2NzUwNDY2ZGVhNTNiMmRkMjhjNmYz MGU0MWEyMDExZjUwMGRhYTEyOTM2MjJmYmM2ZWFmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxbeB6JJ2xL7TRLI+CHY2SibJmBGV9mum84Wc3GZ2Gv7se iZkfoJxd/QAzTrv7r9kYuR0bpSwVTRTqghygAgp4aZ6QkZ95AM1enZtnS58eIGe4 0dco/H9zYwA/z6jnpmmOokpCU5sHMqiDJBSC3fXwGtCeW2LCk5Uh6scsiDlC8H0g awXv8zhg/b9wRfNs24zhle1cC4YUIlT4Xtxgjub6ZatjkrgRtl3gHD7TU8FfIPs+ 2Jdt0GfdomWlVAhF0IIKA6PCTrhgWtvKylUCRYjFr3/SJ1dmQaMKLSng3KwrkS37 OxUlRN6wVxXPWSby3t61nXO2uGnb8nBImW0pAOkTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUuXtYT+EESwrUxLydBaKpBX0kU68wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg2OWZhOGVmLTE3N2UtNGQ1Ni05NTBiLTEyNTI5OTcxMjZlZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAANIBgwDQYJKoZIhvcNAQELBQADggEBAKnVnoORqOYayRlrtWQmxLohEbYW u+gv2KGrBgg4QL50SyZZ+1bHuFKQ4t7gKabm5X2fAfYx2KB0CzhabmDJhcsce8pF 0jMnD1gFBRiXB90WWHvnAjIE3CJEEttFb9hOKksk2+d1ZvNJ+NWakkI8SipJqf6O uj7ia10JbZSz9MzoZhygQFQZrZBpqWgA7Gf9PHfARGyjNUL7/yjyRs64vqfbt7gS ALfohuyiVHUofDldtnzpuPN9XqeIv+K1f+oDHnQjg7a2PxzVUL89Rg0yAsR9pz1D dDPn8b+XNiDcpuZDQFznpTuV30XtGHqjfi+tXInrxVykxI6EwrCztTmR/Lw= -----END CERTIFICATE-----Generated at Mon Oct 20 03:11:34 2025 by rpki-client