$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ebffbfd0-0a9d-41fd-8b86-0dc4d88c7a84.roa File: ebffbfd0-0a9d-41fd-8b86-0dc4d88c7a84.roa (raw, json) Hash identifier: LoPaGhiGzj7rvJ2KQ84I/1hOBCt+zt0fhZN+nB8dlbY= Subject key identifier: 38:6E:23:81:36:19:E3:66:72:88:99:00:57:63:B6:6D:92:70:AD:74 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7296FC1672ADE678643F7DCAFC0D6AF272435B73 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ebffbfd0-0a9d-41fd-8b86-0dc4d88c7a84.roa Signing time: Sun 19 Oct 2025 13:22:31 +0000 ROA not before: Sun 19 Oct 2025 13:22:31 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.32.106.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:96:fc:16:72:ad:e6:78:64:3f:7d:ca:fc:0d:6a:f2:72:43:5b:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 13:22:31 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=9014a9d0111eb942094f056aacffb75bcc525fd466127f28cdc206cd45077c7d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a2:4d:30:02:5c:68:28:41:1f:80:83:74:62: 2c:44:b5:ef:ee:87:bf:1c:88:e6:71:37:a4:24:2f: dd:3b:12:db:e2:d2:f0:6c:ed:4e:f6:84:30:b5:a7: c9:07:ec:8e:d0:54:99:2f:e7:6e:40:79:93:6f:7b: 00:06:f2:46:bc:94:d9:92:fa:99:a3:22:79:f2:e8: ce:54:4c:78:76:2e:ee:ae:ec:3b:8b:29:fa:95:30: a6:07:28:fd:8f:96:ee:49:d7:da:ac:0b:4e:fe:1d: 31:9f:e3:5b:7b:dd:f7:90:30:59:64:26:cc:3e:30: b7:73:49:6f:06:7c:77:06:cf:40:4b:4a:5d:c1:1a: 2c:22:92:ac:84:1a:d2:85:36:12:e3:a4:fc:98:f7: 06:a7:8a:3f:84:df:6d:4b:08:ec:9f:db:39:e3:c1: 65:af:51:b7:74:c1:1e:37:94:20:df:a8:6d:e8:a7: 18:ba:e3:92:6a:03:b7:76:0b:1f:05:1c:ba:2d:a4: 77:ff:ce:06:bd:cf:07:7c:03:79:ba:b3:ce:86:d4: 6a:2b:74:5c:9f:e6:71:01:ff:21:38:5a:75:75:26: 6c:96:ca:ce:8c:1c:37:8c:0b:e6:e7:41:0d:0f:2c: a8:99:e6:34:f4:46:95:eb:70:e8:9b:45:c6:7f:2a: 87:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:6E:23:81:36:19:E3:66:72:88:99:00:57:63:B6:6D:92:70:AD:74 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ebffbfd0-0a9d-41fd-8b86-0dc4d88c7a84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.32.106.0/23 Signature Algorithm: sha256WithRSAEncryption 2c:44:9b:10:d3:f7:56:af:cd:f4:75:c1:8d:49:55:04:fb:89: 94:c7:5f:76:e7:83:c2:87:e3:8c:e3:6e:78:db:a8:c4:bb:24: fc:c0:02:0b:98:fa:bd:86:33:7b:89:7b:f8:51:1d:54:91:2e: ab:93:63:f4:6b:87:e8:09:26:4b:ae:f7:5f:ba:1b:c9:15:db: ff:9c:4f:d5:e1:41:9f:12:69:23:d0:e2:f4:52:4d:b1:73:cb: f4:ec:44:51:37:6f:4d:a8:34:e5:84:95:19:1e:16:35:4b:d7: 33:61:e3:57:2a:22:9e:fb:6c:c0:e7:a3:7c:ce:64:41:00:a9: 75:da:05:cd:83:eb:07:9c:4f:1c:74:bd:05:c9:48:95:2e:4e: d8:26:be:92:a2:2e:be:14:9e:b4:15:09:9c:da:71:72:73:0c: e2:18:8d:3c:3a:f4:b1:df:dc:43:67:53:8c:ac:e3:eb:72:aa: ec:fe:fd:08:2b:8f:e6:0c:9a:6e:94:bd:3e:ef:e0:3b:1c:f7: 32:ae:6d:56:2f:a6:ea:40:09:4c:6c:17:f9:db:7a:17:d6:23: 50:45:4c:05:dd:41:8c:93:f2:8b:70:97:2e:12:a8:0a:24:27: ed:36:a1:5d:fd:86:7c:7b:ae:80:38:ae:dd:6d:0a:15:28:a5: 23:3f:1a:41 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcpb8FnKt5nhkP33K/A1q8nJDW3MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTMyMjMxWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A5MDE0YTlkMDExMWViOTQyMDk0ZjA1NmFhY2ZmYjc1YmNj NTI1ZmQ0NjYxMjdmMjhjZGMyMDZjZDQ1MDc3YzdkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDaok0wAlxoKEEfgIN0YixEte/uh78ciOZxN6QkL907Etvi 0vBs7U72hDC1p8kH7I7QVJkv525AeZNvewAG8ka8lNmS+pmjInny6M5UTHh2Lu6u 7DuLKfqVMKYHKP2Plu5J19qsC07+HTGf41t73feQMFlkJsw+MLdzSW8GfHcGz0BL Sl3BGiwikqyEGtKFNhLjpPyY9wanij+E321LCOyf2znjwWWvUbd0wR43lCDfqG3o pxi645JqA7d2Cx8FHLotpHf/zga9zwd8A3m6s86G1GordFyf5nEB/yE4WnV1JmyW ys6MHDeMC+bnQQ0PLKiZ5jT0RpXrcOibRcZ/KofNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUOG4jgTYZ42ZyiJkAV2O2bZJwrXQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2ViZmZiZmQwLTBhOWQtNDFmZC04Yjg2LTBkYzRkODhjN2E4NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAENIGowDQYJKoZIhvcNAQELBQADggEBACxEmxDT91avzfR1wY1JVQT7iZTH X3bng8KH44zjbnjbqMS7JPzAAguY+r2GM3uJe/hRHVSRLquTY/Rrh+gJJkuu91+6 G8kV2/+cT9XhQZ8SaSPQ4vRSTbFzy/TsRFE3b02oNOWElRkeFjVL1zNh41cqIp77 bMDno3zOZEEAqXXaBc2D6wecTxx0vQXJSJUuTtgmvpKiLr4UnrQVCZzacXJzDOIY jTw69LHf3ENnU4ys4+tyquz+/Qgrj+YMmm6UvT7v4Dsc9zKubVYvpupACUxsF/nb ehfWI1BFTAXdQYyT8otwly4SqAokJ+02oV39hnx7roA4rt1tChUopSM/GkE= -----END CERTIFICATE-----Generated at Mon Oct 20 11:01:48 2025 by rpki-client