$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9b9d37ff-31f5-46e6-a6b8-b6d59d673912.roa File: 9b9d37ff-31f5-46e6-a6b8-b6d59d673912.roa (raw, json) Hash identifier: 0oRcJgUrzQ5LxdgWMHjv5f2xkdGQmFaTRkRa+UIiLks= Subject key identifier: F0:44:96:FD:8C:05:60:98:A8:46:86:31:7E:D5:4D:07:43:1A:F5:11 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 123772D28F9B79684E749D645FA58DDD918617B1 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9b9d37ff-31f5-46e6-a6b8-b6d59d673912.roa Signing time: Sun 19 Oct 2025 18:55:42 +0000 ROA not before: Sun 19 Oct 2025 18:55:42 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.32.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:37:72:d2:8f:9b:79:68:4e:74:9d:64:5f:a5:8d:dd:91:86:17:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 18:55:42 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=836026968294c97b49a84b6005c431b807367450ecbda70643803c8fe81cf8a4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:6f:de:d3:2a:ce:36:aa:d6:18:30:fc:08:d0: 28:7e:ad:81:10:7c:23:4b:3f:21:44:d6:d6:c8:c9: 96:30:cf:4c:a9:61:6f:cb:1e:30:6c:ee:df:d6:8f: 37:95:2f:89:cf:5c:f7:37:b6:40:1c:3f:00:00:45: da:5f:4f:40:1a:89:23:92:89:48:81:ab:ba:b9:b9: 77:9c:fe:6b:65:7a:51:99:35:4b:1b:a3:aa:ce:5a: 35:c6:17:58:5c:44:53:8b:95:5a:2c:1b:36:75:47: 95:19:d6:22:5a:f6:1d:a9:20:d3:30:03:e8:7d:4f: 1a:dd:41:7f:7e:ea:69:92:6d:b3:7c:9a:88:aa:f4: 24:d2:41:66:7e:f8:62:9e:c1:4b:0a:53:73:9f:f2: b7:c6:ba:48:10:ce:48:6b:8c:87:9b:31:71:3e:6d: c0:e5:f3:05:4e:c5:12:e8:c1:cb:0b:2f:c0:f0:c1: f7:6e:10:7f:7d:79:a6:7c:cd:39:ae:a8:a2:5d:20: 18:1c:94:e2:6e:55:3d:2a:e1:70:8d:1b:1d:15:4c: ba:84:a3:7b:b7:1d:8a:43:f3:9c:95:d5:0f:0c:c3: 42:ae:67:fc:b8:7b:62:bc:6b:1e:2b:f9:22:aa:b2: fa:69:ca:bb:c7:42:76:97:b1:cf:08:33:4c:91:b9: f6:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:44:96:FD:8C:05:60:98:A8:46:86:31:7E:D5:4D:07:43:1A:F5:11 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9b9d37ff-31f5-46e6-a6b8-b6d59d673912.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.32.152.0/22 Signature Algorithm: sha256WithRSAEncryption 49:02:24:7b:9a:93:a1:63:94:16:6f:ce:52:6e:13:af:fb:11: 9a:43:e3:60:6d:52:e7:7c:22:1b:bb:48:99:69:63:fa:19:48: c1:8b:85:7b:10:cd:f5:75:ec:20:83:56:07:8a:c1:8b:e0:de: 70:3a:09:6e:98:c8:47:4c:2c:a5:36:36:36:3a:30:6b:19:8a: d4:b9:53:34:a3:a6:18:e4:e7:85:5f:c6:c0:33:fd:4a:52:64: c6:65:5f:33:e7:13:b9:0d:03:10:ec:16:c8:80:91:8a:eb:2c: 44:c6:27:33:33:db:2a:35:ec:ed:40:7c:e3:3f:2c:c7:a6:6a: 6b:09:32:a4:33:c9:23:5e:53:0d:bc:75:06:42:83:b4:b7:c9: 18:37:7a:60:e2:30:a6:67:93:85:6e:06:32:17:07:16:92:be: 1b:5e:ef:1c:b5:f3:6b:6a:3f:50:e7:c0:70:60:53:6f:6e:ec: 54:d7:a5:59:4f:55:96:47:58:71:30:63:77:e5:cd:6e:27:a3: ab:32:3c:2b:f0:8a:f7:b4:70:88:8b:e1:79:af:bb:56:28:21: 62:ff:f2:c5:68:40:75:21:0a:01:94:6c:67:25:22:1b:4c:71: 75:e3:73:68:ba:21:b0:be:6d:81:b2:81:90:79:d6:2c:e6:33: 6b:63:e0:86 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEjdy0o+beWhOdJ1kX6WN3ZGGF7EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTg1NTQyWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4MzYwMjY5NjgyOTRjOTdiNDlhODRiNjAwNWM0MzFiODA3 MzY3NDUwZWNiZGE3MDY0MzgwM2M4ZmU4MWNmOGE0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZb97TKs42qtYYMPwI0Ch+rYEQfCNLPyFE1tbIyZYwz0yp YW/LHjBs7t/WjzeVL4nPXPc3tkAcPwAARdpfT0AaiSOSiUiBq7q5uXec/mtlelGZ NUsbo6rOWjXGF1hcRFOLlVosGzZ1R5UZ1iJa9h2pINMwA+h9TxrdQX9+6mmSbbN8 moiq9CTSQWZ++GKewUsKU3Of8rfGukgQzkhrjIebMXE+bcDl8wVOxRLowcsLL8Dw wfduEH99eaZ8zTmuqKJdIBgclOJuVT0q4XCNGx0VTLqEo3u3HYpD85yV1Q8Mw0Ku Z/y4e2K8ax4r+SKqsvppyrvHQnaXsc8IM0yRufZnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU8ESW/YwFYJioRoYxftVNB0Ma9REwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzliOWQzN2ZmLTMxZjUtNDZlNi1hNmI4LWI2ZDU5ZDY3MzkxMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAINIJgwDQYJKoZIhvcNAQELBQADggEBAEkCJHuak6FjlBZvzlJuE6/7EZpD 42BtUud8Ihu7SJlpY/oZSMGLhXsQzfV17CCDVgeKwYvg3nA6CW6YyEdMLKU2NjY6 MGsZitS5UzSjphjk54VfxsAz/UpSZMZlXzPnE7kNAxDsFsiAkYrrLETGJzMz2yo1 7O1AfOM/LMemamsJMqQzySNeUw28dQZCg7S3yRg3emDiMKZnk4VuBjIXBxaSvhte 7xy182tqP1DnwHBgU29u7FTXpVlPVZZHWHEwY3flzW4no6syPCvwive0cIiL4Xmv u1YoIWL/8sVoQHUhCgGUbGclIhtMcXXjc2i6IbC+bYGygZB51izmM2tj4IY= -----END CERTIFICATE-----Generated at Tue Oct 21 04:21:08 2025 by rpki-client