$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fb4ffd37-0aaa-4335-af51-590cf731d40a.roa File: fb4ffd37-0aaa-4335-af51-590cf731d40a.roa (raw, json) Hash identifier: 9P32d0NrMuM6OLvXeYRGCJs9N2HdH18k8i9wYPA+HR0= Subject key identifier: 77:CF:B4:24:FC:39:BB:73:C0:AD:2D:D5:CA:17:C6:F5:5C:2A:2E:CE Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2E775CCD0952F2B5B8A3A2A4FF99A84ADF82FF9F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fb4ffd37-0aaa-4335-af51-590cf731d40a.roa Signing time: Sun 19 Oct 2025 17:33:50 +0000 ROA not before: Sun 19 Oct 2025 17:33:50 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.32.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:77:5c:cd:09:52:f2:b5:b8:a3:a2:a4:ff:99:a8:4a:df:82:ff:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 17:33:50 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=937ceb6709f3591c4c45fdcf4c9eeb39ae6bd45e06132ec979581754da2f6599, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e1:e4:ac:df:2a:b1:52:9d:80:4f:aa:54:84: ad:d5:f6:75:f8:1f:95:69:be:d7:79:d2:54:71:0b: af:f5:85:3d:4a:ac:f5:58:87:7e:2b:38:d6:46:a8: e5:ae:e8:d8:72:2e:21:4f:f9:e0:7a:9c:f1:35:b6: 95:e6:97:a2:b7:52:b7:13:72:67:af:f4:6f:53:b5: d9:2e:b4:ce:e2:06:5c:ef:8b:69:c7:11:d2:e3:33: b3:e9:8a:5e:19:2b:f7:d9:3e:2a:98:c1:34:44:38: e8:2d:ee:c7:4a:21:f6:78:98:06:f3:a3:53:cd:d2: e1:2c:59:2d:ac:b7:db:d7:cc:0b:2a:16:82:94:7b: 29:59:be:4b:42:6e:02:a8:e7:cb:04:47:25:95:2f: 39:f8:b2:0a:86:29:54:33:50:2e:06:3f:22:7f:05: ba:97:91:31:f5:3e:82:44:59:b3:10:5a:1d:e2:d1: 8e:53:35:f3:1f:2e:37:bd:72:46:96:47:20:bf:c5: 8b:b2:cc:29:f1:1f:ef:90:8f:14:70:ad:82:ea:23: 35:5c:ec:8f:38:58:5c:c2:c8:44:3d:1b:9a:ab:12: 34:32:b8:18:79:15:28:c8:69:f6:c3:4d:37:fd:3a: 94:3d:ff:34:b8:86:eb:2f:c3:17:84:2a:a5:54:2e: 1a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:CF:B4:24:FC:39:BB:73:C0:AD:2D:D5:CA:17:C6:F5:5C:2A:2E:CE X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fb4ffd37-0aaa-4335-af51-590cf731d40a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.32.104.0/21 Signature Algorithm: sha256WithRSAEncryption 60:6c:bf:5d:b7:16:25:a4:e2:92:d6:26:da:b8:06:82:0f:c4: b0:25:44:61:92:58:2e:21:57:2c:03:f5:fc:fb:54:1c:f1:1d: 80:08:80:ef:aa:7e:a4:84:7d:e3:69:96:ff:35:93:69:82:95: 22:a7:64:96:91:99:0d:35:a8:1e:2d:c4:e9:0c:e7:9c:26:18: ce:0d:38:f1:23:7e:8a:89:ae:0c:96:6b:04:c2:e2:ee:5c:70: 81:67:35:69:23:b0:0e:61:55:00:c5:b6:5b:4d:87:cd:fb:6a: 53:03:cc:c4:f0:c4:21:58:88:12:e4:57:41:5c:26:36:d3:ff: ef:23:a8:7e:e2:0b:c0:7d:ec:b9:ef:d7:e5:4d:9d:e5:1d:c0: a7:bb:d4:59:84:1e:7e:85:a1:3d:02:68:a5:3b:60:98:f9:ef: af:56:91:f0:81:b3:40:9f:ae:45:c2:81:8b:a7:e3:9b:2b:65: b3:3b:56:f4:57:41:7a:6f:92:48:92:30:42:95:87:0e:cf:f8: f6:40:5d:d5:7f:f7:10:b4:fa:d9:24:33:76:91:88:4b:bb:b6: 0b:b0:ae:c2:33:93:88:42:8f:7a:98:73:e4:d2:22:68:2a:a0: 52:32:73:99:e6:84:5b:66:5c:87:7b:75:a0:46:82:3c:91:a1: 1b:0e:fb:0e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULndczQlS8rW4o6Kk/5moSt+C/58wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTczMzUwWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A5MzdjZWI2NzA5ZjM1OTFjNGM0NWZkY2Y0YzllZWIzOWFl NmJkNDVlMDYxMzJlYzk3OTU4MTc1NGRhMmY2NTk5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCf4eSs3yqxUp2AT6pUhK3V9nX4H5Vpvtd50lRxC6/1hT1K rPVYh34rONZGqOWu6NhyLiFP+eB6nPE1tpXml6K3UrcTcmev9G9TtdkutM7iBlzv i2nHEdLjM7Ppil4ZK/fZPiqYwTREOOgt7sdKIfZ4mAbzo1PN0uEsWS2st9vXzAsq FoKUeylZvktCbgKo58sERyWVLzn4sgqGKVQzUC4GPyJ/BbqXkTH1PoJEWbMQWh3i 0Y5TNfMfLje9ckaWRyC/xYuyzCnxH++QjxRwrYLqIzVc7I84WFzCyEQ9G5qrEjQy uBh5FSjIafbDTTf9OpQ9/zS4husvwxeEKqVULhopAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUd8+0JPw5u3PArS3VyhfG9VwqLs4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2ZiNGZmZDM3LTBhYWEtNDMzNS1hZjUxLTU5MGNmNzMxZDQwYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMNIGgwDQYJKoZIhvcNAQELBQADggEBAGBsv123FiWk4pLWJtq4BoIPxLAl RGGSWC4hVywD9fz7VBzxHYAIgO+qfqSEfeNplv81k2mClSKnZJaRmQ01qB4txOkM 55wmGM4NOPEjfoqJrgyWawTC4u5ccIFnNWkjsA5hVQDFtltNh837alMDzMTwxCFY iBLkV0FcJjbT/+8jqH7iC8B97Lnv1+VNneUdwKe71FmEHn6FoT0CaKU7YJj5769W kfCBs0CfrkXCgYun45srZbM7VvRXQXpvkkiSMEKVhw7P+PZAXdV/9xC0+tkkM3aR iEu7tguwrsIzk4hCj3qYc+TSImgqoFIyc5nmhFtmXId7daBGgjyRoRsO+w4= -----END CERTIFICATE-----Generated at Mon Oct 20 02:59:27 2025 by rpki-client