$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8a9eb171-484d-4969-b088-d89112ebb2e0.roa File: 8a9eb171-484d-4969-b088-d89112ebb2e0.roa (raw, json) Hash identifier: c3eaieEMfmrjhayeSqtIgP4jK0zSbwlD2mYSXMXOwys= Subject key identifier: 2D:0D:DA:AB:72:91:CC:13:BF:F5:25:AD:8C:F7:D5:17:F3:95:DD:F3 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 412A66B04470B7E25AC8E57B52723C8C1B03A8EC Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8a9eb171-484d-4969-b088-d89112ebb2e0.roa Signing time: Sun 19 Oct 2025 16:20:08 +0000 ROA not before: Sun 19 Oct 2025 16:20:08 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.35.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:2a:66:b0:44:70:b7:e2:5a:c8:e5:7b:52:72:3c:8c:1b:03:a8:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 16:20:08 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=eb7aff05ae11c9a4c1f773d5d9cd5b1348fecf7db36c10fff1f93ada9e487053, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:12:e1:e4:ff:db:a2:45:c4:49:ec:ab:93:c3: 17:36:b8:d1:ba:e8:bd:ef:4c:ef:b6:48:13:92:44: d2:b1:3b:9c:5c:67:80:f5:84:cf:f2:e4:ba:70:27: 35:13:bb:76:ff:e7:78:de:e8:f2:98:22:74:af:55: 18:c3:ae:03:03:97:04:e6:b2:80:c7:49:35:b4:fe: a9:89:92:fc:cc:f1:d7:47:6d:b6:86:cf:82:a6:52: f7:84:7a:fd:fc:9e:0c:4f:91:27:3d:18:98:a2:31: b5:d3:72:d5:61:ef:02:69:e0:13:aa:fb:86:b8:95: a2:06:8f:f8:9f:e7:a1:d1:b4:5d:a7:a7:1d:39:5e: c5:8a:b5:99:06:30:f7:cb:17:21:cb:24:c8:3e:4a: dd:b6:51:b1:43:c8:6e:e7:8f:55:fd:4e:ca:21:74: 1c:d6:91:f4:cf:be:01:4e:7d:aa:c5:91:f8:15:27: 45:2c:66:45:b3:af:ef:a3:5d:28:a1:bf:99:5d:d5: f2:fc:ad:9d:e1:8a:dd:5c:d3:ae:40:6d:ce:c9:d6: 04:13:cc:ea:40:86:04:06:da:ce:28:61:78:d4:71: 9f:1a:94:dd:ed:86:c3:44:3d:b9:f4:dd:e2:79:65: b2:b4:cc:ca:7d:bc:1b:ad:e2:1f:25:00:fd:a3:de: ba:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:0D:DA:AB:72:91:CC:13:BF:F5:25:AD:8C:F7:D5:17:F3:95:DD:F3 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8a9eb171-484d-4969-b088-d89112ebb2e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.35.128.0/21 Signature Algorithm: sha256WithRSAEncryption 6e:4a:ea:d7:24:98:64:23:9b:32:79:a1:9d:bb:52:62:1d:01: 39:e4:7d:94:25:9b:ae:03:b4:ab:30:19:f4:3e:28:8d:9d:2f: 29:95:c8:68:34:45:51:25:97:76:84:0d:7d:94:51:66:6f:38: 3f:f2:55:21:65:b9:46:b4:0f:bf:76:d6:cc:12:48:d3:86:06: db:0b:8b:b4:d2:ac:3d:21:07:d3:92:fa:0b:7e:bf:63:8e:15: 65:2b:cb:46:61:35:0b:3c:74:4f:bb:fb:ef:e4:80:73:16:87: 09:48:3e:c4:a3:85:b3:f8:92:90:70:2c:01:3f:e6:8d:b3:78: 5b:39:e5:c2:f2:ca:19:70:39:87:ff:99:07:a2:ab:ca:b3:2b: 13:10:4d:8a:d7:4a:69:ed:03:77:df:bd:0c:13:9e:da:66:ba: d0:ac:57:c5:c9:ab:43:3a:37:41:20:13:9d:7b:90:49:d4:c4: 7a:32:6e:2e:51:5b:eb:de:12:5a:b7:fd:d3:5f:ba:53:c6:67: 05:30:83:bd:a6:4f:eb:b9:bc:ef:e0:a5:61:14:af:46:da:da: 6b:02:ce:8f:63:c4:fd:6b:83:8a:f1:88:31:44:90:9e:ae:c9: a8:04:99:7a:5e:a5:67:f6:25:af:7e:40:5d:54:0a:51:94:3e: ea:e0:d9:49 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQSpmsERwt+JayOV7UnI8jBsDqOwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTYyMDA4WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BlYjdhZmYwNWFlMTFjOWE0YzFmNzczZDVkOWNkNWIxMzQ4 ZmVjZjdkYjM2YzEwZmZmMWY5M2FkYTllNDg3MDUzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCcEuHk/9uiRcRJ7KuTwxc2uNG66L3vTO+2SBOSRNKxO5xc Z4D1hM/y5LpwJzUTu3b/53je6PKYInSvVRjDrgMDlwTmsoDHSTW0/qmJkvzM8ddH bbaGz4KmUveEev38ngxPkSc9GJiiMbXTctVh7wJp4BOq+4a4laIGj/if56HRtF2n px05XsWKtZkGMPfLFyHLJMg+St22UbFDyG7nj1X9TsohdBzWkfTPvgFOfarFkfgV J0UsZkWzr++jXSihv5ld1fL8rZ3hit1c065Abc7J1gQTzOpAhgQG2s4oYXjUcZ8a lN3thsNEPbn03eJ5ZbK0zMp9vBut4h8lAP2j3rpDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQULQ3aq3KRzBO/9SWtjPfVF/OV3fMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzhhOWViMTcxLTQ4NGQtNDk2OS1iMDg4LWQ4OTExMmViYjJlMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMNI4AwDQYJKoZIhvcNAQELBQADggEBAG5K6tckmGQjmzJ5oZ27UmIdATnk fZQlm64DtKswGfQ+KI2dLymVyGg0RVEll3aEDX2UUWZvOD/yVSFluUa0D7921swS SNOGBtsLi7TSrD0hB9OS+gt+v2OOFWUry0ZhNQs8dE+7++/kgHMWhwlIPsSjhbP4 kpBwLAE/5o2zeFs55cLyyhlwOYf/mQeiq8qzKxMQTYrXSmntA3ffvQwTntpmutCs V8XJq0M6N0EgE517kEnUxHoybi5RW+veElq3/dNfulPGZwUwg72mT+u5vO/gpWEU r0ba2msCzo9jxP1rg4rxiDFEkJ6uyagEmXpepWf2Ja9+QF1UClGUPurg2Uk= -----END CERTIFICATE-----Generated at Mon Oct 20 08:41:51 2025 by rpki-client