$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8dee8075-3acb-4763-9b3d-e95466a386ee.roa File: 8dee8075-3acb-4763-9b3d-e95466a386ee.roa (raw, json) Hash identifier: udaBTr0HdvjXLo7SadJ0ClAGpzcKwj9ZccS/ZDvDKYU= Subject key identifier: 7C:76:C4:09:EC:B3:13:3C:70:AE:CD:8D:6D:D7:A9:92:09:8B:82:1B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 786AABB05973881046AF88F1C456602E17A67BC3 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8dee8075-3acb-4763-9b3d-e95466a386ee.roa Signing time: Sun 19 Oct 2025 18:57:01 +0000 ROA not before: Sun 19 Oct 2025 18:57:01 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.32.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:6a:ab:b0:59:73:88:10:46:af:88:f1:c4:56:60:2e:17:a6:7b:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 18:57:01 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=1a9d729f36a70cbf1ff8d3e7be569021c0e20241b512b62495d6e78213fbe3e2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a1:f8:48:f9:56:c7:e8:f1:98:82:b4:8a:d4: df:2c:21:d8:f8:a9:5d:3a:6b:d3:30:ed:40:86:9b: 91:ad:a7:4a:66:37:59:98:ec:93:4f:bc:e0:a1:59: f9:c4:bd:40:76:d6:f4:7d:1a:a6:3f:8e:b6:bb:7c: be:f9:07:52:e5:8c:d3:77:10:87:d8:45:c1:e7:0c: 3c:96:f2:cb:60:0e:fb:bb:ad:8a:91:4f:b7:9c:19: 98:d2:ac:b5:53:e7:05:91:9e:f1:59:2e:95:13:19: ba:3a:c3:97:47:e0:df:47:31:d5:90:64:76:30:96: 4b:f6:ad:db:14:8a:f9:95:75:7c:0e:40:54:72:dc: bc:a9:bc:6c:10:5a:ef:21:fd:18:11:23:c8:75:ac: 60:9f:e3:0b:c8:96:91:e6:34:ac:7a:5e:1e:a5:d5: eb:18:81:7d:76:76:f1:a4:f9:17:9e:8d:b7:d0:be: 89:41:38:3e:26:45:98:85:ee:71:4c:77:14:27:18: 83:83:e9:02:4f:f7:2c:2a:5f:77:26:ad:8f:56:d5: 36:ae:41:a1:3d:56:32:5e:5c:f0:4b:bd:80:a1:60: 0f:ae:97:9d:c8:c3:be:1e:ca:01:5a:5b:b5:4c:f9: 83:51:68:21:ab:46:56:15:77:5a:39:0d:83:ab:2c: 9b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:76:C4:09:EC:B3:13:3C:70:AE:CD:8D:6D:D7:A9:92:09:8B:82:1B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8dee8075-3acb-4763-9b3d-e95466a386ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.32.221.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:7b:52:fb:5d:93:4e:ff:c0:1a:ea:27:28:b2:df:c1:5f:f5: 41:46:a1:48:92:cf:fb:ce:db:9f:a3:e4:18:87:b9:9b:a3:b3: a9:f0:5e:8d:0d:c1:25:cd:dc:07:27:ae:7f:5b:05:d2:f9:d3: f4:42:d8:54:8d:f8:50:66:07:f0:1e:7a:4a:ba:dc:d2:b3:86: d9:02:d4:25:48:28:22:a3:83:df:99:70:09:ad:9b:5b:63:ed: a2:ac:c7:d3:cd:63:e0:2a:84:13:b8:6b:57:24:3d:35:7e:84: 9e:3c:bc:4a:59:46:6e:52:f4:ac:0c:6a:be:86:48:06:1b:2c: 95:0e:62:d3:fc:ab:da:da:a1:c1:2a:05:0d:7c:5f:c6:57:4a: 34:2b:45:c2:57:9a:59:d6:8e:99:51:01:7e:9b:29:59:92:55: 71:06:de:7c:a4:5c:fa:20:4a:84:77:76:d8:7a:8e:f4:17:55: 78:40:fa:16:94:cf:4a:df:6b:22:12:3c:bf:1a:ae:fe:89:a6: 86:98:ac:60:6c:3c:ae:6f:37:11:5f:fc:dd:8a:13:89:90:2c: 82:0d:bb:f6:26:19:c6:aa:bc:02:ef:35:f9:2e:84:c8:43:e1: 70:5e:f8:cb:02:0f:8d:7c:c8:11:81:52:1f:bd:4c:13:91:e5: ba:42:79:77 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUeGqrsFlziBBGr4jxxFZgLheme8MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTg1NzAxWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AxYTlkNzI5ZjM2YTcwY2JmMWZmOGQzZTdiZTU2OTAyMWMw ZTIwMjQxYjUxMmI2MjQ5NWQ2ZTc4MjEzZmJlM2UyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8ofhI+VbH6PGYgrSK1N8sIdj4qV06a9Mw7UCGm5Gtp0pm N1mY7JNPvOChWfnEvUB21vR9GqY/jra7fL75B1LljNN3EIfYRcHnDDyW8stgDvu7 rYqRT7ecGZjSrLVT5wWRnvFZLpUTGbo6w5dH4N9HMdWQZHYwlkv2rdsUivmVdXwO QFRy3LypvGwQWu8h/RgRI8h1rGCf4wvIlpHmNKx6Xh6l1esYgX12dvGk+ReejbfQ volBOD4mRZiF7nFMdxQnGIOD6QJP9ywqX3cmrY9W1TauQaE9VjJeXPBLvYChYA+u l53Iw74eygFaW7VM+YNRaCGrRlYVd1o5DYOrLJtPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUfHbECeyzEzxwrs2NbdepkgmLghswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzhkZWU4MDc1LTNhY2ItNDc2My05YjNkLWU5NTQ2NmEzODZlZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAANIN0wDQYJKoZIhvcNAQELBQADggEBADt7Uvtdk07/wBrqJyiy38Ff9UFG oUiSz/vO25+j5BiHuZujs6nwXo0NwSXN3Acnrn9bBdL50/RC2FSN+FBmB/Aeekq6 3NKzhtkC1CVIKCKjg9+ZcAmtm1tj7aKsx9PNY+AqhBO4a1ckPTV+hJ48vEpZRm5S 9KwMar6GSAYbLJUOYtP8q9raocEqBQ18X8ZXSjQrRcJXmlnWjplRAX6bKVmSVXEG 3nykXPogSoR3dth6jvQXVXhA+haUz0rfayISPL8arv6JpoaYrGBsPK5vNxFf/N2K E4mQLIINu/YmGcaqvALvNfkuhMhD4XBe+MsCD418yBGBUh+9TBOR5bpCeXc= -----END CERTIFICATE-----Generated at Mon Oct 20 21:12:01 2025 by rpki-client