$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/abfda1a8-0f9b-416e-a50a-48e577e6ab43.roa File: abfda1a8-0f9b-416e-a50a-48e577e6ab43.roa (raw, json) Hash identifier: w3vKgjiZXjZCAbYeK6WvYhZPYWjUhxtJ2V7gBQ/58wc= Subject key identifier: F6:25:87:E6:5B:9D:89:2D:86:8E:CA:BF:81:57:B0:C7:0F:AB:83:DA Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 34B87B9AB575AA74C0118CA8625804113325F62C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/abfda1a8-0f9b-416e-a50a-48e577e6ab43.roa Signing time: Sun 19 Oct 2025 23:11:21 +0000 ROA not before: Sun 19 Oct 2025 23:11:21 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.32.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:b8:7b:9a:b5:75:aa:74:c0:11:8c:a8:62:58:04:11:33:25:f6:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 23:11:21 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=620392cd7ae9d261247c6cd2b315e4e296068ccecd992a0261169b0837e2bc9b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:1e:46:c2:a7:e4:0d:43:6e:cb:40:3e:ea:32: cf:83:6a:28:b7:e8:2e:77:65:51:d2:0e:19:67:da: 4b:70:13:0d:8d:c6:93:b4:54:68:0f:38:7e:84:05: 1e:25:32:43:36:2b:03:bd:68:fe:af:f3:47:2b:3a: a1:c9:be:dc:b9:26:28:8e:4c:0b:4b:51:cc:3a:6f: f5:e5:a3:f9:61:26:13:fd:a4:35:8b:38:5a:6b:2e: 2d:c1:86:bd:67:86:3f:d4:ae:8c:af:ec:cf:6f:b0: 73:63:e9:b8:04:6f:31:d2:a4:33:5b:2e:dd:c3:e9: 14:f5:fa:78:74:a5:55:68:80:73:d3:09:de:77:17: 84:42:c8:68:5c:6e:f6:d4:ec:17:8f:f5:9a:9b:56: 0d:73:ec:ce:a8:46:e8:17:e8:b5:c5:43:e0:11:d9: 38:5c:c9:a3:b1:53:43:52:3e:4a:bd:11:c2:f3:f4: 70:0b:e2:bd:99:df:72:86:11:0d:18:cc:06:23:8f: e8:a6:03:61:d7:1b:98:5e:0a:95:c3:8d:ad:bb:12: 88:8f:26:60:6d:3f:99:c7:ef:28:ae:c5:1f:e0:10: 3a:21:96:55:31:ff:a2:f5:36:d1:0d:d9:cf:dc:51: ea:f8:d7:0b:f3:04:94:8d:51:2c:de:7b:38:c1:d1: 44:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:25:87:E6:5B:9D:89:2D:86:8E:CA:BF:81:57:B0:C7:0F:AB:83:DA X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/abfda1a8-0f9b-416e-a50a-48e577e6ab43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.32.208.0/24 Signature Algorithm: sha256WithRSAEncryption 78:c5:04:78:6c:72:fa:a4:8a:b7:98:cb:45:ea:57:6f:a2:cd: 5a:6b:82:ce:d4:cd:5b:c6:bb:a4:10:78:9d:fc:3f:0d:7a:04: d1:4d:c1:ae:e1:45:52:44:d0:82:39:bf:6d:53:8a:5d:bd:a7: df:e3:8e:89:2e:36:dd:5e:4e:32:8b:74:8b:27:a9:d8:92:bd: 09:a8:01:8e:31:cc:d9:3a:1d:1f:86:8d:91:9b:4e:47:e3:25: e4:c2:f1:64:fb:55:c5:4e:79:da:51:15:db:d7:55:8a:4a:4e: af:e8:ba:71:39:6f:92:d8:c1:ae:9d:9f:9d:84:00:45:f5:c3: 2b:28:be:f9:af:f7:43:19:25:89:59:1e:94:ab:72:ac:dd:9d: c6:2f:27:47:08:3d:43:bc:a6:38:e9:5d:f5:e0:5d:23:0a:ce: 1b:87:fb:5a:8f:6b:c1:40:8d:78:2c:4e:8c:47:49:28:30:7d: 98:18:a8:73:1a:04:a8:e7:38:3b:58:0d:a8:9f:d0:ac:4b:15: 74:30:0f:90:eb:b4:f8:14:e8:0f:9a:67:fb:b7:43:c9:66:de: 88:63:50:ee:1c:ab:38:7b:be:85:6a:30:6a:7f:9f:63:2f:6e: 7e:56:bc:c1:6d:04:6f:bb:04:91:7c:18:0d:67:f7:8c:19:7e: 5a:f3:e5:aa -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNLh7mrV1qnTAEYyoYlgEETMl9iwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MjMxMTIxWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A2MjAzOTJjZDdhZTlkMjYxMjQ3YzZjZDJiMzE1ZTRlMjk2 MDY4Y2NlY2Q5OTJhMDI2MTE2OWIwODM3ZTJiYzliMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDhHkbCp+QNQ27LQD7qMs+Daii36C53ZVHSDhln2ktwEw2N xpO0VGgPOH6EBR4lMkM2KwO9aP6v80crOqHJvty5JiiOTAtLUcw6b/Xlo/lhJhP9 pDWLOFprLi3Bhr1nhj/Uroyv7M9vsHNj6bgEbzHSpDNbLt3D6RT1+nh0pVVogHPT Cd53F4RCyGhcbvbU7BeP9ZqbVg1z7M6oRugX6LXFQ+AR2ThcyaOxU0NSPkq9EcLz 9HAL4r2Z33KGEQ0YzAYjj+imA2HXG5heCpXDja27EoiPJmBtP5nH7yiuxR/gEDoh llUx/6L1NtEN2c/cUer41wvzBJSNUSzeezjB0US7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU9iWH5ludiS2Gjsq/gVewxw+rg9owHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2FiZmRhMWE4LTBmOWItNDE2ZS1hNTBhLTQ4ZTU3N2U2YWI0My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAANINAwDQYJKoZIhvcNAQELBQADggEBAHjFBHhscvqkireYy0XqV2+izVpr gs7UzVvGu6QQeJ38Pw16BNFNwa7hRVJE0II5v21Til29p9/jjokuNt1eTjKLdIsn qdiSvQmoAY4xzNk6HR+GjZGbTkfjJeTC8WT7VcVOedpRFdvXVYpKTq/ounE5b5LY wa6dn52EAEX1wysovvmv90MZJYlZHpSrcqzdncYvJ0cIPUO8pjjpXfXgXSMKzhuH +1qPa8FAjXgsToxHSSgwfZgYqHMaBKjnODtYDaif0KxLFXQwD5DrtPgU6A+aZ/u3 Q8lm3ohjUO4cqzh7voVqMGp/n2Mvbn5WvMFtBG+7BJF8GA1n94wZflrz5ao= -----END CERTIFICATE-----Generated at Mon Oct 20 15:44:42 2025 by rpki-client