$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ef348073-ddca-405b-904a-c8188c98260f.roa File: ef348073-ddca-405b-904a-c8188c98260f.roa (raw, json) Hash identifier: mtbSM4bAvfhuf9ZtRk59xKnlLrFcO/TaEApJlJhcoCM= Subject key identifier: DC:AA:9F:E8:8E:4B:05:73:12:CC:88:B9:5A:AE:90:A3:C8:DB:56:D0 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5885D5DF65EFA439D297012F51C832D5E636D850 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ef348073-ddca-405b-904a-c8188c98260f.roa Signing time: Sun 19 Oct 2025 09:31:37 +0000 ROA not before: Sun 19 Oct 2025 09:31:37 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.32.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:85:d5:df:65:ef:a4:39:d2:97:01:2f:51:c8:32:d5:e6:36:d8:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 09:31:37 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=695a910c3b487d7deade26c7001e09b3d31d38f021d516dbf7dac46237ad2efd, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f5:7e:aa:d4:64:1c:b2:76:51:cc:4c:be:7d: 06:66:4c:58:65:0b:de:91:7b:b5:ed:65:c1:11:12: 80:05:ff:81:70:8f:65:64:51:d9:50:8f:46:17:7d: 80:d5:0e:5e:a9:04:25:fb:bf:a9:3e:15:a2:b4:9c: 76:a8:0e:5a:39:41:8d:11:f1:3c:b1:d8:96:9c:e7: b7:b3:db:24:e4:3f:78:e2:bb:28:84:70:10:97:44: 4a:b5:ad:eb:4b:2a:f1:66:8c:10:0c:cc:24:2e:78: b5:74:74:88:18:3d:59:75:b1:77:f4:cc:b9:2e:0a: cb:dd:9c:e3:f9:6c:4d:06:86:b3:c1:92:5d:64:73: f7:b7:2f:4d:c0:4c:d5:97:2b:2a:e2:70:fc:50:a4: d8:79:b9:b7:1c:50:03:6a:27:31:13:f0:7d:93:73: e8:af:86:0c:b5:f0:dd:fe:2c:c6:94:94:1d:56:a2: 3b:54:2d:59:c6:b1:c9:1b:ab:d2:46:d0:11:78:e0: e3:f1:36:57:1a:3b:3c:87:d1:61:38:a1:19:89:35: 2a:66:68:1c:d6:db:a3:cd:9f:7c:02:12:e0:87:18: 31:2f:a8:d5:f7:66:f2:39:69:55:dc:d1:68:99:9b: 24:26:39:ff:a3:6d:82:c9:da:6d:30:e9:ee:cc:ec: 33:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:AA:9F:E8:8E:4B:05:73:12:CC:88:B9:5A:AE:90:A3:C8:DB:56:D0 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ef348073-ddca-405b-904a-c8188c98260f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.32.145.0/24 Signature Algorithm: sha256WithRSAEncryption 18:e0:78:7f:ff:e7:58:28:26:5c:b9:9c:ec:6f:93:f6:95:d2: 7a:af:be:49:ae:f2:4e:3d:62:0d:1d:1a:eb:15:1b:fa:00:17: 25:91:fe:dc:b7:47:12:b5:d4:44:08:20:71:a5:3b:b6:9f:f0: d2:ed:96:3a:ef:8a:6d:70:a4:5c:03:39:6c:bc:fb:f5:eb:a2: ba:ef:dd:cb:91:11:bb:8e:31:bc:ed:de:81:56:46:6f:fe:cc: 3b:e2:58:fc:50:53:13:40:c1:2a:26:a9:48:c7:d7:87:6c:35: 2c:85:13:49:59:92:77:b6:70:d9:20:91:d2:32:53:cc:b9:1e: 87:27:ab:f4:f7:67:01:b3:c0:4a:c2:db:eb:e9:21:14:fb:80: 8b:e5:ee:6d:4a:d9:1b:dd:6c:7e:3b:b0:68:2b:17:88:09:c7: 04:4a:f0:03:5b:78:af:09:1f:8b:91:66:01:35:51:f7:fc:6b: 36:6d:bf:8f:54:5a:d9:73:ed:98:63:bb:45:e8:66:74:95:57: 11:fd:02:22:ae:1e:b8:6f:f3:e5:8e:6e:85:1b:c7:92:67:0b: e5:8b:86:e9:f2:a4:22:29:4e:83:11:9a:a9:77:7d:e5:bd:45: 52:f6:99:29:8a:c7:67:cc:06:3d:9b:a6:52:a2:0c:43:a6:75: 0f:c5:e7:1c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWIXV32XvpDnSlwEvUcgy1eY22FAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MDkzMTM3WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A2OTVhOTEwYzNiNDg3ZDdkZWFkZTI2YzcwMDFlMDliM2Qz MWQzOGYwMjFkNTE2ZGJmN2RhYzQ2MjM3YWQyZWZkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC59X6q1GQcsnZRzEy+fQZmTFhlC96Re7XtZcEREoAF/4Fw j2VkUdlQj0YXfYDVDl6pBCX7v6k+FaK0nHaoDlo5QY0R8Tyx2Jac57ez2yTkP3ji uyiEcBCXREq1retLKvFmjBAMzCQueLV0dIgYPVl1sXf0zLkuCsvdnOP5bE0GhrPB kl1kc/e3L03ATNWXKyricPxQpNh5ubccUANqJzET8H2Tc+ivhgy18N3+LMaUlB1W ojtULVnGsckbq9JG0BF44OPxNlcaOzyH0WE4oRmJNSpmaBzW26PNn3wCEuCHGDEv qNX3ZvI5aVXc0WiZmyQmOf+jbYLJ2m0w6e7M7DPXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU3Kqf6I5LBXMSzIi5Wq6Qo8jbVtAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2VmMzQ4MDczLWRkY2EtNDA1Yi05MDRhLWM4MTg4Yzk4MjYwZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAANIJEwDQYJKoZIhvcNAQELBQADggEBABjgeH//51goJly5nOxvk/aV0nqv vkmu8k49Yg0dGusVG/oAFyWR/ty3RxK11EQIIHGlO7af8NLtljrvim1wpFwDOWy8 +/Xrorrv3cuREbuOMbzt3oFWRm/+zDviWPxQUxNAwSomqUjH14dsNSyFE0lZkne2 cNkgkdIyU8y5Hocnq/T3ZwGzwErC2+vpIRT7gIvl7m1K2RvdbH47sGgrF4gJxwRK 8ANbeK8JH4uRZgE1Uff8azZtv49UWtlz7Zhju0XoZnSVVxH9AiKuHrhv8+WOboUb x5JnC+WLhunypCIpToMRmql3feW9RVL2mSmKx2fMBj2bplKiDEOmdQ/F5xw= -----END CERTIFICATE-----Generated at Mon Oct 20 11:55:27 2025 by rpki-client