$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/be5c9d29-30b4-48fd-b390-4224bcde9fc4.roa File: be5c9d29-30b4-48fd-b390-4224bcde9fc4.roa (raw, json) Hash identifier: HVXdf4QMtNENN+D75RRnGklEnvhdGa/jZzoHm08E4ew= Subject key identifier: 1D:DE:6F:3F:FF:B4:4D:EB:FA:F3:ED:10:C1:71:27:7E:74:DA:5E:14 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2C0080A878200744CF69DEB487D9FBB53152F4F3 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/be5c9d29-30b4-48fd-b390-4224bcde9fc4.roa Signing time: Sun 19 Oct 2025 12:31:31 +0000 ROA not before: Sun 19 Oct 2025 12:31:31 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.32.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:00:80:a8:78:20:07:44:cf:69:de:b4:87:d9:fb:b5:31:52:f4:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 12:31:31 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=b9502a57b59b3f7ac15831006ec6e414ca5924302d76ad71246830a2fe74bbb8, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f7:c5:49:ed:01:85:a2:d7:52:05:40:22:12: c0:60:dc:cf:c2:79:ad:81:28:79:34:74:31:72:da: 53:2f:f3:b4:b6:e5:ae:2d:ef:ad:ea:e6:22:cd:ff: c3:58:de:2a:f0:91:94:57:94:7e:eb:07:0a:89:eb: 1d:16:e6:69:ec:b6:2d:23:62:d0:d4:ed:67:bc:64: e7:d4:ca:74:3c:d0:6f:11:59:5e:d2:3c:58:63:1d: f6:1c:59:7d:05:fe:53:48:ce:fb:db:8c:7c:83:c7: 75:65:ca:91:8e:4f:3c:89:e8:a2:d9:13:a0:d7:f6: 51:28:00:36:9b:87:c1:f2:6e:0b:a9:73:24:35:36: e2:b6:52:4f:1c:98:43:58:02:75:23:07:fd:fe:f4: 74:9a:78:4e:db:3c:d0:a4:04:5e:a6:a5:c8:e6:27: 87:00:11:b0:95:d5:f1:b8:bd:80:6a:77:6e:0c:f7: 93:37:5f:85:61:57:c5:c1:08:e8:4a:97:91:6a:f2: 34:5f:c2:55:8a:d7:6d:37:8d:24:bb:ff:8a:59:dc: ba:90:a7:8f:a3:6d:44:d4:28:1b:1b:05:9c:45:d0: 70:53:ee:be:fa:20:68:bb:0d:7e:10:51:84:9f:5a: af:7c:69:e9:ed:61:a8:1d:3c:7b:e8:54:b6:ef:b2: 32:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:DE:6F:3F:FF:B4:4D:EB:FA:F3:ED:10:C1:71:27:7E:74:DA:5E:14 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/be5c9d29-30b4-48fd-b390-4224bcde9fc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.32.142.0/24 Signature Algorithm: sha256WithRSAEncryption 96:12:1f:4b:2b:1f:39:73:42:d7:d7:03:99:8e:f4:92:1b:0a: 55:21:6c:ed:64:e2:02:a7:41:a0:a6:d9:8c:ad:8d:c0:8d:e9: f5:ad:be:a1:63:c2:53:7d:55:62:5d:0e:ad:f1:86:92:1f:7f: 32:9d:65:5a:5f:b4:38:52:82:bb:3d:d0:cc:f8:43:d5:e5:84: 66:8f:5d:fa:d4:53:95:91:db:b2:8e:08:34:25:5d:fb:68:0f: 42:ee:60:c6:bd:fa:aa:2f:fa:23:8c:7c:ed:e9:d0:a7:64:16: 6f:58:b5:0e:cd:3c:4f:b1:3f:d1:57:de:29:dc:fa:e6:e9:27: 33:e7:16:9d:5b:7a:9a:8f:23:61:f5:c2:7d:38:45:b7:49:5d: 79:c7:10:83:ac:e8:e5:2d:82:52:40:a3:c1:1b:72:2e:e0:f3: 7f:c0:9f:d2:ce:6d:c1:2f:da:4e:c9:02:32:c2:ba:1a:e0:e4: 5a:ae:5c:54:d1:fe:8d:01:87:0e:f6:f0:a9:30:fd:ca:c0:5d: 05:3f:b9:f0:a8:78:01:e9:18:85:46:e5:f7:02:55:e3:01:58: d9:d2:f4:f2:03:03:6f:b7:d8:2b:dd:66:bf:39:8a:cb:51:d8: d4:0b:ca:ad:9d:48:93:a2:1d:85:55:e1:43:ac:51:74:fa:1a: 4d:57:6d:44 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULACAqHggB0TPad60h9n7tTFS9PMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTIzMTMxWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BiOTUwMmE1N2I1OWIzZjdhYzE1ODMxMDA2ZWM2ZTQxNGNh NTkyNDMwMmQ3NmFkNzEyNDY4MzBhMmZlNzRiYmI4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC598VJ7QGFotdSBUAiEsBg3M/Cea2BKHk0dDFy2lMv87S2 5a4t763q5iLN/8NY3irwkZRXlH7rBwqJ6x0W5mnsti0jYtDU7We8ZOfUynQ80G8R WV7SPFhjHfYcWX0F/lNIzvvbjHyDx3VlypGOTzyJ6KLZE6DX9lEoADabh8Hybgup cyQ1NuK2Uk8cmENYAnUjB/3+9HSaeE7bPNCkBF6mpcjmJ4cAEbCV1fG4vYBqd24M 95M3X4VhV8XBCOhKl5Fq8jRfwlWK1203jSS7/4pZ3LqQp4+jbUTUKBsbBZxF0HBT 7r76IGi7DX4QUYSfWq98aentYagdPHvoVLbvsjIlAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUHd5vP/+0Tev68+0QwXEnfnTaXhQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2JlNWM5ZDI5LTMwYjQtNDhmZC1iMzkwLTQyMjRiY2RlOWZjNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAANII4wDQYJKoZIhvcNAQELBQADggEBAJYSH0srHzlzQtfXA5mO9JIbClUh bO1k4gKnQaCm2YytjcCN6fWtvqFjwlN9VWJdDq3xhpIffzKdZVpftDhSgrs90Mz4 Q9XlhGaPXfrUU5WR27KOCDQlXftoD0LuYMa9+qov+iOMfO3p0KdkFm9YtQ7NPE+x P9FX3inc+ubpJzPnFp1bepqPI2H1wn04RbdJXXnHEIOs6OUtglJAo8Ebci7g83/A n9LObcEv2k7JAjLCuhrg5FquXFTR/o0Bhw728Kkw/crAXQU/ufCoeAHpGIVG5fcC VeMBWNnS9PIDA2+32CvdZr85istR2NQLyq2dSJOiHYVV4UOsUXT6Gk1XbUQ= -----END CERTIFICATE-----Generated at Mon Oct 20 03:06:39 2025 by rpki-client