$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ddfbbb12-b1b1-4ed3-bd96-5e1cf62c98b4.roa File: ddfbbb12-b1b1-4ed3-bd96-5e1cf62c98b4.roa (raw, json) Hash identifier: h6b2k5n/mlmQdsV1NIj+80aNx6b9I/QyXm1/uTLJ+iE= Subject key identifier: D1:00:1E:DB:4A:F0:06:D3:B3:3A:70:D5:F8:8D:D2:EF:D5:03:8B:9C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7EDC1E6ADF7F0BD157D0EC41858D784B935DEFEB Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ddfbbb12-b1b1-4ed3-bd96-5e1cf62c98b4.roa Signing time: Sun 19 Oct 2025 08:52:27 +0000 ROA not before: Sun 19 Oct 2025 08:52:27 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.32.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:dc:1e:6a:df:7f:0b:d1:57:d0:ec:41:85:8d:78:4b:93:5d:ef:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 08:52:27 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=54c81e28578bc3d6889a2589447745f4d4ca53a528eed13195a741a2e09b672c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:53:53:21:a3:a5:1e:88:01:05:5f:dc:40:fe: 3a:01:ed:97:60:ff:8e:f7:4a:43:9c:1d:35:ec:78: f4:ec:17:f8:e9:ac:36:d4:e6:64:04:a7:4d:37:d0: 5f:a8:18:9c:22:05:11:12:5e:01:78:d7:3d:52:23: 20:6d:fd:16:f7:db:21:c7:8e:3c:78:06:f3:ab:06: a5:e5:8b:d8:08:d5:aa:4f:a9:6a:e2:79:5e:9c:8b: 56:69:34:43:95:32:eb:c7:65:41:11:c7:d6:32:71: 48:e1:3f:32:cc:44:f8:09:0b:00:ba:eb:db:30:0f: b5:22:11:b4:97:b1:eb:84:3c:7c:63:b0:0c:78:45: 9f:51:20:be:ed:6a:7e:0c:2a:5a:ea:3e:36:11:8d: 69:5e:08:93:74:75:d6:ad:ed:dd:88:e5:d0:b3:de: 73:99:a8:da:bf:a0:21:0f:23:f5:75:08:42:2b:bb: 07:5f:8b:55:ff:1a:64:83:8b:99:1d:fd:e1:09:12: 26:28:d2:e9:ce:4f:eb:4b:71:36:14:ba:cf:a1:66: 51:f0:ae:08:45:1b:4c:16:aa:a9:6e:0c:96:dc:cb: 83:03:dc:cf:b9:88:73:8d:ec:a1:50:a9:b0:c7:f8: 85:ac:85:0e:41:25:9f:fc:a4:ee:4b:b9:4f:c3:35: 50:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:00:1E:DB:4A:F0:06:D3:B3:3A:70:D5:F8:8D:D2:EF:D5:03:8B:9C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ddfbbb12-b1b1-4ed3-bd96-5e1cf62c98b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.32.0.0/14 Signature Algorithm: sha256WithRSAEncryption 58:f1:b7:05:2a:23:db:61:6c:39:e6:b8:74:a3:36:fa:74:1f: 62:d3:92:66:ee:95:3b:96:38:aa:51:85:4a:e2:2b:fc:08:28: 71:5c:82:64:9c:74:31:db:b7:f7:ab:33:01:8d:43:7e:68:6c: 90:bb:6b:01:24:ba:df:9b:d3:6a:03:f0:63:9a:05:bc:1b:01: 17:bf:38:6d:3d:5f:8d:2e:5d:44:70:b1:ee:8d:81:22:92:79: 27:52:f9:9b:76:da:d8:ac:49:de:36:f3:61:fe:f3:05:e8:cb: 2b:6e:f9:56:69:76:d8:fb:8b:ec:67:9e:09:34:0b:3f:83:a8: 1b:fc:3e:6b:97:7e:0e:ff:70:ed:1f:d2:b0:be:11:87:a0:df: b2:c1:64:ee:7c:8d:c4:d7:0b:1a:fe:1b:e5:40:42:63:5f:0b: 0b:4a:4e:e2:50:59:ea:75:02:e2:18:08:d3:35:bc:f0:9f:cd: c2:8f:05:dd:38:dd:11:3a:f6:45:66:fc:eb:65:1e:71:9c:dc: 62:96:30:bd:bf:06:cb:5b:a2:75:9a:a9:db:43:39:da:e7:1b: 82:5e:45:3f:ce:61:af:dc:8c:d5:33:c4:6b:1a:dd:ad:af:a1: ff:4a:67:31:10:08:62:89:b2:4c:c8:02:1b:91:60:2f:a7:21: 99:6a:17:c7 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUftweat9/C9FX0OxBhY14S5Nd7+swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MDg1MjI3WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A1NGM4MWUyODU3OGJjM2Q2ODg5YTI1ODk0NDc3NDVmNGQ0 Y2E1M2E1MjhlZWQxMzE5NWE3NDFhMmUwOWI2NzJjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLU1Mho6UeiAEFX9xA/joB7Zdg/473SkOcHTXsePTsF/jp rDbU5mQEp0030F+oGJwiBRESXgF41z1SIyBt/Rb32yHHjjx4BvOrBqXli9gI1apP qWrieV6ci1ZpNEOVMuvHZUERx9YycUjhPzLMRPgJCwC669swD7UiEbSXseuEPHxj sAx4RZ9RIL7tan4MKlrqPjYRjWleCJN0ddat7d2I5dCz3nOZqNq/oCEPI/V1CEIr uwdfi1X/GmSDi5kd/eEJEiYo0unOT+tLcTYUus+hZlHwrghFG0wWqqluDJbcy4MD 3M+5iHON7KFQqbDH+IWshQ5BJZ/8pO5LuU/DNVAlAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU0QAe20rwBtOzOnDV+I3S79UDi5wwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2RkZmJiYjEyLWIxYjEtNGVkMy1iZDk2LTVlMWNmNjJjOThiNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwINIDANBgkqhkiG9w0BAQsFAAOCAQEAWPG3BSoj22FsOea4dKM2+nQfYtOS Zu6VO5Y4qlGFSuIr/AgocVyCZJx0Mdu396szAY1DfmhskLtrASS635vTagPwY5oF vBsBF784bT1fjS5dRHCx7o2BIpJ5J1L5m3ba2KxJ3jbzYf7zBejLK275Vml22PuL 7GeeCTQLP4OoG/w+a5d+Dv9w7R/SsL4Rh6DfssFk7nyNxNcLGv4b5UBCY18LC0pO 4lBZ6nUC4hgI0zW88J/Nwo8F3TjdETr2RWb862UecZzcYpYwvb8Gy1uidZqp20M5 2ucbgl5FP85hr9yM1TPEaxrdra+h/0pnMRAIYomyTMgCG5FgL6chmWoXxw== -----END CERTIFICATE-----Generated at Mon Oct 20 11:10:28 2025 by rpki-client