$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ebaefaf3-2f68-4c44-8fc3-0e373b2ab771.roa File: ebaefaf3-2f68-4c44-8fc3-0e373b2ab771.roa (raw, json) Hash identifier: 1C3F4d2WLsk4GuH/leW57c+OJmbfln4Fs1NJds8rtRg= Subject key identifier: 1C:3D:3B:BA:B1:BB:1D:DE:92:19:35:19:5E:97:2E:50:9F:BD:79:68 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 12E31B5E1285BA8FB78EC88CEDA458025BF026A9 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ebaefaf3-2f68-4c44-8fc3-0e373b2ab771.roa Signing time: Sun 19 Oct 2025 20:12:30 +0000 ROA not before: Sun 19 Oct 2025 20:12:30 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.32.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:e3:1b:5e:12:85:ba:8f:b7:8e:c8:8c:ed:a4:58:02:5b:f0:26:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 20:12:30 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=afa68cc0f2c6530a86f22509c247359e34f87ffb04b3cae1e51ebcd3e635b5fc, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7a:16:74:e5:21:a7:ec:db:2f:fd:11:ac:00: 02:29:05:32:42:73:6a:75:46:63:6e:75:65:a0:66: 64:d4:5d:ec:79:c8:7c:4b:f7:24:bf:6f:29:b2:37: 8b:5e:68:83:05:e7:42:53:77:ef:dc:47:08:16:09: de:7f:a9:e9:bf:00:67:66:d5:9c:fb:7c:ed:16:b5: 29:ed:41:d1:17:ac:8b:8f:2f:86:ae:f0:47:97:df: 9e:10:80:67:39:b2:d7:ca:03:29:23:83:56:f2:55: 3c:17:f8:d9:25:90:34:c4:17:4b:70:f0:b0:b4:b2: 5a:9c:8d:46:c7:62:30:4f:f9:49:f7:bc:eb:78:c0: 16:e6:db:2a:ec:ed:db:14:29:50:85:02:52:7a:81: e4:2f:80:03:17:d7:48:08:c6:45:c1:e4:0c:06:e3: 61:95:58:10:db:a0:bf:f5:aa:4e:09:7f:61:5d:b3: 73:6c:46:cb:0e:4b:25:e7:17:4c:a8:de:15:3d:d7: 51:76:bf:12:51:d9:29:de:34:42:e9:d1:2b:5e:78: 94:e7:cd:a2:29:03:8f:4c:38:ce:f0:96:59:a9:3b: db:fa:4e:61:0c:48:b2:c0:f1:ba:4f:34:af:35:44: 41:85:13:42:2c:ca:1d:68:e2:3f:72:7f:4c:5f:00: 30:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:3D:3B:BA:B1:BB:1D:DE:92:19:35:19:5E:97:2E:50:9F:BD:79:68 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ebaefaf3-2f68-4c44-8fc3-0e373b2ab771.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.32.37.0/24 Signature Algorithm: sha256WithRSAEncryption 92:9f:9b:83:7b:7b:b7:7a:cc:5b:aa:f5:b5:35:48:88:d8:77: ed:64:35:ae:34:c2:e7:98:5d:bf:10:18:1e:45:b9:43:09:9f: 7a:35:45:39:55:33:f4:38:b3:fe:a5:0d:cf:54:51:40:da:ee: 66:f3:11:c9:8b:65:29:12:66:88:69:b9:8c:5a:44:5b:6c:e4: 54:a4:29:49:94:e6:6a:6b:8c:02:25:c0:e6:b8:dc:16:68:d5: 58:e6:eb:b2:ed:e1:6e:82:87:41:2a:7c:24:76:dc:3a:7f:33: d4:47:42:a9:b8:ba:ef:28:10:cd:a1:88:ff:21:b4:fc:26:64: 5d:e9:99:d0:0f:e6:a9:bb:34:83:26:9c:91:23:b0:b0:10:cf: dd:34:3d:70:ae:e9:73:42:7e:f2:c9:47:a8:86:d1:51:cd:79: f0:83:1d:f6:79:ad:20:23:fa:ba:37:c5:27:ab:9a:75:af:0a: 0d:2a:8c:33:0d:df:48:ec:1e:5a:c2:34:64:f1:e4:5a:3e:6d: fd:c4:83:c6:cc:f8:9e:92:6a:a8:e8:dc:34:50:0e:04:3c:88: 22:c9:43:2a:e3:0d:c5:e1:c3:a8:69:1a:3c:dc:18:68:11:4c: e7:14:e6:87:20:10:30:4f:cf:9b:6a:bc:0d:e0:c4:f9:39:dc: cf:fe:46:79 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEuMbXhKFuo+3jsiM7aRYAlvwJqkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MjAxMjMwWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BhZmE2OGNjMGYyYzY1MzBhODZmMjI1MDljMjQ3MzU5ZTM0 Zjg3ZmZiMDRiM2NhZTFlNTFlYmNkM2U2MzViNWZjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCnehZ05SGn7Nsv/RGsAAIpBTJCc2p1RmNudWWgZmTUXex5 yHxL9yS/bymyN4teaIMF50JTd+/cRwgWCd5/qem/AGdm1Zz7fO0WtSntQdEXrIuP L4au8EeX354QgGc5stfKAykjg1byVTwX+NklkDTEF0tw8LC0slqcjUbHYjBP+Un3 vOt4wBbm2yrs7dsUKVCFAlJ6geQvgAMX10gIxkXB5AwG42GVWBDboL/1qk4Jf2Fd s3NsRssOSyXnF0yo3hU911F2vxJR2SneNELp0SteeJTnzaIpA49MOM7wllmpO9v6 TmEMSLLA8bpPNK81REGFE0Isyh1o4j9yf0xfADDJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUHD07urG7Hd6SGTUZXpcuUJ+9eWgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2ViYWVmYWYzLTJmNjgtNGM0NC04ZmMzLTBlMzczYjJhYjc3MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAANICUwDQYJKoZIhvcNAQELBQADggEBAJKfm4N7e7d6zFuq9bU1SIjYd+1k Na40wueYXb8QGB5FuUMJn3o1RTlVM/Q4s/6lDc9UUUDa7mbzEcmLZSkSZohpuYxa RFts5FSkKUmU5mprjAIlwOa43BZo1Vjm67Lt4W6Ch0EqfCR23Dp/M9RHQqm4uu8o EM2hiP8htPwmZF3pmdAP5qm7NIMmnJEjsLAQz900PXCu6XNCfvLJR6iG0VHNefCD HfZ5rSAj+ro3xSermnWvCg0qjDMN30jsHlrCNGTx5Fo+bf3Eg8bM+J6Saqjo3DRQ DgQ8iCLJQyrjDcXhw6hpGjzcGGgRTOcU5ocgEDBPz5tqvA3gxPk53M/+Rnk= -----END CERTIFICATE-----Generated at Mon Oct 20 06:11:48 2025 by rpki-client