$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b2fc80ce-90f8-420a-85e1-7aa7cbeb6780.roa File: b2fc80ce-90f8-420a-85e1-7aa7cbeb6780.roa (raw, json) Hash identifier: jBnLZFwaBcFzhsn6Dvf7Fi/c4ZZpemd5bjVC4kXNNAQ= Subject key identifier: 9A:16:00:0F:CC:F5:40:2F:9F:8D:07:CA:CB:CB:56:CA:3E:20:D2:E4 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 38298CD99FBBCBFADA9640143B0DAA94F5B80058 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b2fc80ce-90f8-420a-85e1-7aa7cbeb6780.roa Signing time: Sun 19 Oct 2025 17:21:23 +0000 ROA not before: Sun 19 Oct 2025 17:21:23 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.32.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:29:8c:d9:9f:bb:cb:fa:da:96:40:14:3b:0d:aa:94:f5:b8:00:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 17:21:23 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=3d2dffd1eb040d14baa61d1f46dbfb59195477bdda40a2c4a4b0dff5621ebd8d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:34:4d:c2:d2:af:b1:fe:dc:3c:37:d7:18:be: 86:c8:0c:5d:c6:a5:67:b1:18:7b:08:94:6e:cb:20: a4:94:b9:76:7f:23:77:9b:cd:29:c9:2b:79:fb:4e: 0b:fd:21:e3:5e:a4:88:6b:cc:0c:3c:5d:1c:7a:c7: 4a:32:08:c7:cb:ff:10:0d:aa:eb:46:99:8a:24:fe: 82:7b:01:e3:09:eb:c7:61:cc:ab:4c:bc:ec:90:38: f1:91:d3:2f:16:64:44:80:a6:ed:e3:48:5c:12:1a: 05:4d:38:df:a3:77:0a:d9:da:38:36:e3:25:37:fc: a5:ea:d9:be:63:95:ef:c7:df:fa:ea:80:76:d9:10: ea:b9:f3:e9:a3:50:dc:f4:dc:8e:98:27:98:d8:24: 27:f3:5b:cb:22:ca:92:80:8c:46:ff:e1:d4:42:2b: 84:44:58:40:ad:0c:e6:23:cc:a9:7a:a4:2b:f8:46: a9:f8:1f:4d:26:b2:5f:bc:b6:f3:ef:88:83:e7:1c: 4c:e7:49:82:0a:de:e1:36:71:29:74:97:36:42:e6: 3c:00:aa:f3:dd:82:21:90:ac:ad:ee:bd:a8:14:35: cd:be:99:93:f9:50:5a:44:c1:41:4a:61:a3:7d:b3: 2b:0f:f8:6e:90:37:80:5f:20:f9:a1:49:af:b9:5f: e6:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:16:00:0F:CC:F5:40:2F:9F:8D:07:CA:CB:CB:56:CA:3E:20:D2:E4 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b2fc80ce-90f8-420a-85e1-7aa7cbeb6780.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.32.72.0/22 Signature Algorithm: sha256WithRSAEncryption 4d:bd:b4:6d:fe:f1:fb:d3:86:09:db:35:32:b1:4d:07:c6:ae: 9c:2a:9d:3f:23:67:5c:f1:38:f4:ac:f1:00:7a:1b:4b:6e:b2: 9d:fc:8e:ed:52:88:cd:90:e1:03:1e:f2:e2:c8:51:b7:b1:40: 3d:e5:fc:02:5e:e4:98:17:5c:21:7f:24:6b:87:1d:8a:53:e2: 81:8c:68:03:3d:08:2f:05:8a:b7:7a:66:9b:f4:80:51:58:a8: bd:ac:a2:fa:4d:93:1b:9e:f8:1a:a7:73:60:fd:76:64:6a:47: 3d:7a:a8:d8:63:8b:3f:5e:ec:31:2f:f4:fb:3a:d0:75:cf:54: ca:33:9b:e0:76:d7:54:e6:95:37:6b:66:e4:4b:b7:7e:d3:50: 19:e6:8f:7d:23:b7:86:11:96:02:85:b5:2d:a6:04:ee:60:69: e7:7b:f7:d8:8d:57:0d:be:dc:62:9f:55:1c:87:f5:4c:ec:1e: 81:72:0c:44:fe:16:a4:25:d0:dc:21:44:d0:69:ec:b1:ea:47: f7:1f:d4:e9:ef:ed:8f:59:bc:0c:50:83:79:b4:57:51:fa:89: 3f:4b:ea:46:79:53:dc:75:34:63:92:7d:8b:6c:4b:75:4b:b2: 29:36:76:6c:b7:ce:8a:96:60:ca:86:a8:e7:95:15:78:68:c7: f9:8d:43:b0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOCmM2Z+7y/ralkAUOw2qlPW4AFgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTcyMTIzWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AzZDJkZmZkMWViMDQwZDE0YmFhNjFkMWY0NmRiZmI1OTE5 NTQ3N2JkZGE0MGEyYzRhNGIwZGZmNTYyMWViZDhkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCKNE3C0q+x/tw8N9cYvobIDF3GpWexGHsIlG7LIKSUuXZ/ I3ebzSnJK3n7Tgv9IeNepIhrzAw8XRx6x0oyCMfL/xANqutGmYok/oJ7AeMJ68dh zKtMvOyQOPGR0y8WZESApu3jSFwSGgVNON+jdwrZ2jg24yU3/KXq2b5jle/H3/rq gHbZEOq58+mjUNz03I6YJ5jYJCfzW8siypKAjEb/4dRCK4REWECtDOYjzKl6pCv4 Rqn4H00msl+8tvPviIPnHEznSYIK3uE2cSl0lzZC5jwAqvPdgiGQrK3uvagUNc2+ mZP5UFpEwUFKYaN9sysP+G6QN4BfIPmhSa+5X+Z5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUmhYAD8z1QC+fjQfKy8tWyj4g0uQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2IyZmM4MGNlLTkwZjgtNDIwYS04NWUxLTdhYTdjYmViNjc4MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAINIEgwDQYJKoZIhvcNAQELBQADggEBAE29tG3+8fvThgnbNTKxTQfGrpwq nT8jZ1zxOPSs8QB6G0tusp38ju1SiM2Q4QMe8uLIUbexQD3l/AJe5JgXXCF/JGuH HYpT4oGMaAM9CC8Fird6Zpv0gFFYqL2sovpNkxue+Bqnc2D9dmRqRz16qNhjiz9e 7DEv9Ps60HXPVMozm+B211TmlTdrZuRLt37TUBnmj30jt4YRlgKFtS2mBO5gaed7 99iNVw2+3GKfVRyH9UzsHoFyDET+FqQl0NwhRNBp7LHqR/cf1Onv7Y9ZvAxQg3m0 V1H6iT9L6kZ5U9x1NGOSfYtsS3VLsik2dmy3zoqWYMqGqOeVFXhox/mNQ7A= -----END CERTIFICATE-----Generated at Mon Oct 20 11:09:50 2025 by rpki-client