$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b713331d-92ee-49da-a2a2-ad42fa00f62b.roa File: b713331d-92ee-49da-a2a2-ad42fa00f62b.roa (raw, json) Hash identifier: owDSLgfoOX3dUwPRBAZF2FcPX2VAwAa+slLPOf/uZdo= Subject key identifier: 06:8C:FE:92:21:49:04:EA:87:28:E0:56:E0:15:22:2A:9A:E1:25:8D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1D9A7C470E68443814F7A503DD40F6A3E507DC2E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b713331d-92ee-49da-a2a2-ad42fa00f62b.roa Signing time: Sun 19 Oct 2025 20:20:12 +0000 ROA not before: Sun 19 Oct 2025 20:20:12 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.35.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:9a:7c:47:0e:68:44:38:14:f7:a5:03:dd:40:f6:a3:e5:07:dc:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 20:20:12 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=c8fd8ced7dcc6d4d44aeed2d5bcf34555b1e3234fb1843db578255bb468efdc9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:44:63:d7:75:a5:f2:36:39:d9:01:35:a2:3d: 67:58:f7:3b:aa:98:50:9a:2c:9b:d9:d3:48:72:b5: 5b:ae:54:00:cd:d2:b6:22:68:54:47:5c:98:50:62: c3:e5:21:82:28:33:5d:02:96:f7:a3:b9:44:c0:f4: 00:02:5c:1f:58:83:8e:ce:c6:19:5e:1c:d0:41:77: b0:e5:5a:fa:5f:e0:0a:9f:77:21:f1:16:69:95:86: 86:44:0e:3e:19:8d:d7:b4:a9:7c:b2:b8:e3:72:d7: 3c:73:3e:0d:5d:fa:78:0f:f5:e4:1f:37:56:0c:c8: ea:ad:91:dd:55:da:7c:f0:ad:0a:e6:ea:25:13:ec: a1:f8:bc:e9:9f:8f:c0:68:93:d7:e3:18:0c:1f:65: ec:ac:d1:fa:15:1e:4d:01:85:a1:3b:a2:60:5f:e2: 61:46:7d:96:be:95:a8:c2:1d:21:49:1d:52:de:4d: bd:ad:e1:d1:a5:6e:3e:fe:cb:00:06:10:c0:b4:bf: f0:ff:c7:80:8e:c9:0e:f9:e2:d2:31:e3:74:e1:c1: 30:81:2d:27:02:23:6d:71:5b:ec:01:92:cb:01:ad: ed:dc:20:1d:02:87:a7:18:48:81:41:48:4d:b9:62: b0:5e:2e:07:a6:09:f6:31:3a:3e:2d:a2:55:6e:7f: e3:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:8C:FE:92:21:49:04:EA:87:28:E0:56:E0:15:22:2A:9A:E1:25:8D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b713331d-92ee-49da-a2a2-ad42fa00f62b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.35.132.0/23 Signature Algorithm: sha256WithRSAEncryption 9c:f1:bc:da:b2:40:f7:f2:3d:94:46:4c:4a:0d:3a:c1:97:07: 5f:e2:d6:e8:8e:d8:ef:1b:9c:a4:06:ca:e2:97:06:80:4e:4f: 57:74:ac:3f:3a:93:f4:36:f3:6d:ba:e3:3e:2e:60:19:db:48: 62:ae:ef:78:de:4d:45:89:36:10:ab:79:62:46:d2:10:18:00: 00:95:76:7f:fb:88:13:cc:d1:33:21:4a:17:6a:a4:bb:3f:71: 87:93:82:eb:a3:b8:d0:08:fe:3c:cc:49:98:44:9b:db:79:3e: ad:87:f8:cb:d3:43:c2:80:24:f0:ee:74:a5:22:24:46:88:41: 91:ba:1d:a9:ae:d0:6a:c1:96:0b:93:a3:bd:b9:a7:3d:79:41: 79:ae:d4:a3:1e:24:b1:8e:43:fa:35:0f:55:04:ac:ab:97:82: ed:84:37:ab:a2:d4:13:35:26:b1:63:ed:33:7f:6d:9c:16:e0: c9:d4:ae:bf:f6:d5:b3:e7:d2:ff:3f:27:50:71:1a:02:0d:ee: a2:50:0c:1f:bf:8c:80:7e:40:e3:62:2a:ff:38:09:c3:2a:88: 87:4d:4f:f0:3e:19:7d:95:54:65:b6:90:c4:78:5b:55:43:64: 56:e5:a1:e9:be:b1:9f:bb:57:53:1f:4b:0b:38:ee:b7:50:4f: fe:ec:a3:34 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHZp8Rw5oRDgU96UD3UD2o+UH3C4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MjAyMDEyWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BjOGZkOGNlZDdkY2M2ZDRkNDRhZWVkMmQ1YmNmMzQ1NTVi MWUzMjM0ZmIxODQzZGI1NzgyNTViYjQ2OGVmZGM5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD1RGPXdaXyNjnZATWiPWdY9zuqmFCaLJvZ00hytVuuVADN 0rYiaFRHXJhQYsPlIYIoM10ClvejuUTA9AACXB9Yg47OxhleHNBBd7DlWvpf4Aqf dyHxFmmVhoZEDj4Zjde0qXyyuONy1zxzPg1d+ngP9eQfN1YMyOqtkd1V2nzwrQrm 6iUT7KH4vOmfj8Bok9fjGAwfZeys0foVHk0BhaE7omBf4mFGfZa+lajCHSFJHVLe Tb2t4dGlbj7+ywAGEMC0v/D/x4COyQ754tIx43ThwTCBLScCI21xW+wBkssBre3c IB0Ch6cYSIFBSE25YrBeLgemCfYxOj4tolVuf+NfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUBoz+kiFJBOqHKOBW4BUiKprhJY0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2I3MTMzMzFkLTkyZWUtNDlkYS1hMmEyLWFkNDJmYTAwZjYyYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAENI4QwDQYJKoZIhvcNAQELBQADggEBAJzxvNqyQPfyPZRGTEoNOsGXB1/i 1uiO2O8bnKQGyuKXBoBOT1d0rD86k/Q282264z4uYBnbSGKu73jeTUWJNhCreWJG 0hAYAACVdn/7iBPM0TMhShdqpLs/cYeTguujuNAI/jzMSZhEm9t5Pq2H+MvTQ8KA JPDudKUiJEaIQZG6Hamu0GrBlguTo725pz15QXmu1KMeJLGOQ/o1D1UErKuXgu2E N6ui1BM1JrFj7TN/bZwW4MnUrr/21bPn0v8/J1BxGgIN7qJQDB+/jIB+QONiKv84 CcMqiIdNT/A+GX2VVGW2kMR4W1VDZFbloem+sZ+7V1MfSws47rdQT/7sozQ= -----END CERTIFICATE-----Generated at Mon Oct 20 19:16:04 2025 by rpki-client