$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9fce38c9-1951-473d-9ba2-733d013edc9d.roa File: 9fce38c9-1951-473d-9ba2-733d013edc9d.roa (raw, json) Hash identifier: pWN5BOyd80PlxeJjE1Xyziia9JlPYerRp7Bzw+EFSoc= Subject key identifier: 7A:F7:FB:1D:87:39:40:B2:4C:1C:BE:F3:F8:5F:F9:62:93:37:6C:24 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5715349BC72949B8FA8B04824B3F5C2B6A22FA79 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9fce38c9-1951-473d-9ba2-733d013edc9d.roa Signing time: Sun 19 Oct 2025 14:53:51 +0000 ROA not before: Sun 19 Oct 2025 14:53:51 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.32.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:15:34:9b:c7:29:49:b8:fa:8b:04:82:4b:3f:5c:2b:6a:22:fa:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 14:53:51 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=65858f3f272dc87a73d672d4a5bf9c48c66f890f24d00970f6b3029ef208db7f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b2:25:67:9c:94:4a:9c:ed:03:65:d2:d8:57: fd:8f:f3:e8:79:fc:ed:ea:a0:b7:11:8a:71:d2:ef: e8:7c:46:c4:a1:3f:52:17:5d:89:c7:86:8a:f4:43: d5:3c:a6:03:50:61:d7:8f:c2:76:5d:7c:00:3a:e2: b8:80:a5:cc:fb:d5:6a:b2:73:73:fa:d6:15:89:1d: f4:6c:23:62:61:6e:48:a6:c5:06:3b:a2:1d:a4:44: 47:9e:c3:2c:40:8a:30:93:61:aa:52:3d:f3:fd:ab: 03:9f:b9:e6:24:6a:82:bf:78:4b:ea:3c:b2:ce:6f: 5e:f8:20:f8:62:46:b3:48:58:e4:ff:b7:c4:17:0b: 8f:4c:87:8e:b4:32:ea:34:da:2b:d8:4f:12:66:5b: 8f:7f:89:8a:be:33:66:01:8d:99:f8:7a:c2:f6:49: 5b:6e:8f:e1:84:b6:11:b3:16:44:7b:91:64:a5:ce: a6:c5:54:b2:ad:9a:7b:26:2a:21:3b:59:0e:cb:08: e3:62:ea:e4:35:5f:94:f2:60:0d:94:52:da:55:0a: f2:b2:57:be:40:d3:2c:88:0f:63:56:ba:8c:26:09: 35:53:4d:ef:9b:9d:a7:b0:36:36:0c:5d:5d:63:b6: f3:c9:2c:9a:54:a6:89:86:fe:0c:05:29:0b:c3:61: 71:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:F7:FB:1D:87:39:40:B2:4C:1C:BE:F3:F8:5F:F9:62:93:37:6C:24 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9fce38c9-1951-473d-9ba2-733d013edc9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.32.48.0/20 Signature Algorithm: sha256WithRSAEncryption ad:a1:fc:31:13:86:a3:e2:e5:8b:28:73:7c:ea:66:75:cb:4c: ba:29:4a:13:0c:f1:7c:d4:35:56:9e:78:3d:c5:be:83:b3:4a: ef:fb:94:d4:cf:50:e9:39:b1:85:36:6a:51:6b:7a:30:83:93: 27:69:f8:09:90:da:28:65:60:c3:7a:01:4f:fd:ee:f8:9a:aa: 00:f2:ed:35:ed:70:57:f1:5c:79:0c:98:8d:5d:e4:a3:6a:c3: fa:e7:5d:9c:48:fc:ef:bd:00:cd:36:40:77:74:35:e5:74:63: 9d:8b:d9:05:f6:1b:ba:8f:07:f1:0d:ec:96:1b:89:d3:da:13: 32:56:3c:1b:be:32:c3:e1:59:44:e4:c7:55:37:1e:d9:97:df: d9:e9:ab:e4:33:be:52:79:86:08:2b:41:cc:95:f8:3a:40:35: 69:7b:4a:20:f7:9e:0d:79:a1:90:ac:81:0f:38:21:b5:f4:d1: 64:dc:0c:82:97:84:1f:15:96:ac:71:41:74:35:bf:b1:ca:61: 65:e6:23:f1:59:77:63:84:53:5a:2e:78:e3:21:99:cd:10:aa: 55:02:48:9b:fe:1a:92:1e:60:01:88:f7:d0:80:e6:54:ed:3c: 65:d7:73:5c:95:af:e6:e2:8c:68:ef:54:d1:2b:8e:a6:56:15: 01:57:cd:32 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVxU0m8cpSbj6iwSCSz9cK2oi+nkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTQ1MzUxWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A2NTg1OGYzZjI3MmRjODdhNzNkNjcyZDRhNWJmOWM0OGM2 NmY4OTBmMjRkMDA5NzBmNmIzMDI5ZWYyMDhkYjdmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCMsiVnnJRKnO0DZdLYV/2P8+h5/O3qoLcRinHS7+h8RsSh P1IXXYnHhor0Q9U8pgNQYdePwnZdfAA64riApcz71Wqyc3P61hWJHfRsI2Jhbkim xQY7oh2kREeewyxAijCTYapSPfP9qwOfueYkaoK/eEvqPLLOb174IPhiRrNIWOT/ t8QXC49Mh460Muo02ivYTxJmW49/iYq+M2YBjZn4esL2SVtuj+GEthGzFkR7kWSl zqbFVLKtmnsmKiE7WQ7LCONi6uQ1X5TyYA2UUtpVCvKyV75A0yyID2NWuowmCTVT Te+bnaewNjYMXV1jtvPJLJpUpomG/gwFKQvDYXGDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUevf7HYc5QLJMHL7z+F/5YpM3bCQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzlmY2UzOGM5LTE5NTEtNDczZC05YmEyLTczM2QwMTNlZGM5ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQNIDAwDQYJKoZIhvcNAQELBQADggEBAK2h/DEThqPi5Ysoc3zqZnXLTLop ShMM8XzUNVaeeD3FvoOzSu/7lNTPUOk5sYU2alFrejCDkydp+AmQ2ihlYMN6AU/9 7viaqgDy7TXtcFfxXHkMmI1d5KNqw/rnXZxI/O+9AM02QHd0NeV0Y52L2QX2G7qP B/EN7JYbidPaEzJWPBu+MsPhWUTkx1U3HtmX39npq+QzvlJ5hggrQcyV+DpANWl7 SiD3ng15oZCsgQ84IbX00WTcDIKXhB8VlqxxQXQ1v7HKYWXmI/FZd2OEU1oueOMh mc0QqlUCSJv+GpIeYAGI99CA5lTtPGXXc1yVr+bijGjvVNErjqZWFQFXzTI= -----END CERTIFICATE-----Generated at Mon Oct 20 21:11:54 2025 by rpki-client