$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f78fc060-2f44-43fb-995b-b57460aff4b4.roa File: f78fc060-2f44-43fb-995b-b57460aff4b4.roa (raw, json) Hash identifier: XgXFMSzQ7iLe1lY7CniT8+1gL3qVRjqD+UgD7lXShsc= Subject key identifier: E3:85:5B:5B:8E:84:57:C4:D6:E4:E4:FB:E9:BA:83:63:12:C4:BB:75 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 67238DF9CB73BF7B750F5199D75CC72EDC7E2696 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f78fc060-2f44-43fb-995b-b57460aff4b4.roa Signing time: Sun 19 Oct 2025 22:21:25 +0000 ROA not before: Sun 19 Oct 2025 22:21:25 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.32.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:23:8d:f9:cb:73:bf:7b:75:0f:51:99:d7:5c:c7:2e:dc:7e:26:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 22:21:25 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=e5921cae1441da4cb98af8a9439eed9360ae70bb9535c6bf81ee47d602192d91, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:cd:e9:ca:56:17:8b:23:10:ed:80:f9:4e:4a: 33:03:5e:33:87:e0:f9:07:90:04:f1:f0:a5:93:8f: 55:77:a2:ce:7a:2c:97:e5:a8:23:51:a5:19:32:93: a1:34:ad:e7:2e:b7:64:82:8d:b9:28:d2:cb:74:3c: 2a:1e:9d:e7:5a:50:26:fe:e1:22:38:81:2d:11:3e: ee:d4:f4:d2:38:0a:f1:98:86:27:82:9a:79:7b:97: 46:4f:f1:3d:cd:48:f9:ee:fe:40:35:50:f6:c1:2c: 81:db:0a:85:c1:4b:ee:83:9b:33:20:5e:ef:a9:61: 98:c6:2f:af:10:3d:85:35:6a:0a:04:ae:f9:7d:80: 2d:58:ce:64:20:8b:07:87:e1:4b:c1:d5:cf:89:cb: 22:a4:98:85:1c:4e:ce:f6:41:39:55:a2:79:e9:41: 43:a6:3b:d5:b2:62:f3:ca:16:b9:69:25:3e:32:c9: 06:c5:e9:cc:fe:c8:a8:21:1c:d7:5d:96:ae:36:05: 76:c7:f8:f6:27:e6:d9:36:20:4a:42:35:f9:bc:74: 13:bc:9d:bb:49:b0:c4:3c:e5:d9:5a:75:ff:8a:08: 18:03:67:3d:12:5f:e7:6d:5a:c8:94:1e:2a:7d:43: ab:d8:e4:3b:54:47:1a:fe:98:1f:b5:7b:aa:bc:cb: 9d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:85:5B:5B:8E:84:57:C4:D6:E4:E4:FB:E9:BA:83:63:12:C4:BB:75 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f78fc060-2f44-43fb-995b-b57460aff4b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.32.15.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:9e:17:80:3f:8e:97:bb:2e:0c:2b:6b:53:63:ef:ac:bc:88: f3:c2:da:19:3f:bf:8d:d0:a2:d9:fe:cf:bc:6d:69:13:66:66: cd:8f:10:11:7d:7d:15:65:98:41:d7:a8:e4:3e:41:80:12:aa: 7b:92:10:bd:14:29:f3:6b:61:3f:01:52:ca:a1:9c:28:82:53: 25:56:37:c7:b3:7e:59:a8:ef:40:3b:0b:b2:81:7b:d9:a4:bc: 19:8b:3c:e4:34:93:c6:5a:da:1f:2c:0b:a2:17:87:ba:de:ec: 60:e1:51:bc:53:a9:b7:58:56:4f:ef:06:44:f8:2d:56:6e:d6: 66:56:2a:0d:64:61:2d:25:4f:19:8e:6e:ff:91:9d:33:5f:0b: 3b:40:7b:a3:80:f6:0c:45:2c:9d:e7:b0:20:4a:be:6f:14:56: 2a:ee:53:99:9d:90:d0:06:a0:b9:cd:52:f4:f7:39:d9:44:fd: 4e:6c:08:ab:0d:49:f4:2a:fd:78:c9:58:a1:ce:26:d2:fc:f4: c2:9d:14:a4:fe:6d:d5:2f:48:c8:cc:75:ba:a3:dd:ff:d1:0e: 0a:a0:30:e7:55:5f:8b:b2:42:4e:f4:21:0b:1b:67:97:e1:47: 30:f7:45:3b:19:2d:8a:01:ba:19:b4:00:96:fd:41:09:4a:e5: 50:04:c1:0d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZyON+ctzv3t1D1GZ11zHLtx+JpYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MjIyMTI1WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BlNTkyMWNhZTE0NDFkYTRjYjk4YWY4YTk0MzllZWQ5MzYw YWU3MGJiOTUzNWM2YmY4MWVlNDdkNjAyMTkyZDkxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCYzenKVheLIxDtgPlOSjMDXjOH4PkHkATx8KWTj1V3os56 LJflqCNRpRkyk6E0recut2SCjbko0st0PCoenedaUCb+4SI4gS0RPu7U9NI4CvGY hieCmnl7l0ZP8T3NSPnu/kA1UPbBLIHbCoXBS+6DmzMgXu+pYZjGL68QPYU1agoE rvl9gC1YzmQgiweH4UvB1c+JyyKkmIUcTs72QTlVonnpQUOmO9WyYvPKFrlpJT4y yQbF6cz+yKghHNddlq42BXbH+PYn5tk2IEpCNfm8dBO8nbtJsMQ85dladf+KCBgD Zz0SX+dtWsiUHip9Q6vY5DtURxr+mB+1e6q8y513AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU44VbW46EV8TW5OT76bqDYxLEu3UwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Y3OGZjMDYwLTJmNDQtNDNmYi05OTViLWI1NzQ2MGFmZjRiNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAANIA8wDQYJKoZIhvcNAQELBQADggEBACqeF4A/jpe7Lgwra1Nj76y8iPPC 2hk/v43Qotn+z7xtaRNmZs2PEBF9fRVlmEHXqOQ+QYASqnuSEL0UKfNrYT8BUsqh nCiCUyVWN8ezflmo70A7C7KBe9mkvBmLPOQ0k8Za2h8sC6IXh7re7GDhUbxTqbdY Vk/vBkT4LVZu1mZWKg1kYS0lTxmObv+RnTNfCztAe6OA9gxFLJ3nsCBKvm8UViru U5mdkNAGoLnNUvT3OdlE/U5sCKsNSfQq/XjJWKHOJtL89MKdFKT+bdUvSMjMdbqj 3f/RDgqgMOdVX4uyQk70IQsbZ5fhRzD3RTsZLYoBuhm0AJb9QQlK5VAEwQ0= -----END CERTIFICATE-----Generated at Mon Oct 20 15:46:50 2025 by rpki-client