$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/00c20b09-e8bd-47ac-957e-272e1f3064ec.roa File: 00c20b09-e8bd-47ac-957e-272e1f3064ec.roa (raw, json) Hash identifier: m932ejHJJ9qy4u90aINHkcW1wdRcW2SgRb8TUodLti4= Subject key identifier: A1:33:06:98:E6:DC:B5:98:E2:E2:60:57:7A:07:D8:82:D7:3C:25:38 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 696EE0BDF51B2AA692ED401BD43DC32375FBEC72 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/00c20b09-e8bd-47ac-957e-272e1f3064ec.roa Signing time: Wed 24 Sep 2025 17:36:39 +0000 ROA not before: Wed 24 Sep 2025 17:36:39 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.32.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:6e:e0:bd:f5:1b:2a:a6:92:ed:40:1b:d4:3d:c3:23:75:fb:ec:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 17:36:39 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=4d96ab4435c8e399ec0f5e0a2ce0bcf0ddf679f1af1a8c00c5ad92cf5c7c1b37, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:81:21:28:bf:5e:0a:ee:74:b0:79:13:f7:7e: f9:8f:0f:0e:ab:10:71:c7:3a:5f:e5:30:9f:7e:0e: d7:b7:3a:07:50:89:59:29:c2:19:b0:df:52:58:28: 21:de:5c:e5:a4:2a:e4:77:89:5e:ef:4c:ca:0c:5f: 53:e7:e1:14:6b:23:6c:58:f8:64:89:75:d0:fb:2b: 52:6b:e1:49:38:d5:28:8d:79:ea:c6:52:1e:86:d1: 13:a1:fc:a8:01:1d:1a:8c:2d:43:4d:7b:9b:74:53: ac:76:70:2c:4b:55:48:af:79:34:fa:37:9e:76:bc: 43:ec:55:06:b1:dc:65:a2:e2:b8:f3:41:af:5a:cf: cd:92:58:a4:d8:e6:fb:ba:06:38:8e:33:91:79:37: 95:43:34:2e:93:3f:95:df:eb:5c:3f:e7:30:b0:84: cf:15:cd:fe:92:17:eb:71:10:aa:32:2a:57:98:5e: fc:a2:d1:e3:e6:69:d3:e9:61:66:fb:70:59:9d:55: 75:ac:f3:60:95:dc:39:b2:de:8f:b8:d5:82:00:4b: 71:b4:04:ff:a8:40:c1:f8:bc:ff:66:f5:5f:e6:70: a3:a5:9e:34:61:ed:f9:c6:2a:7c:a8:d8:04:12:1a: 34:f2:2b:47:b6:43:e0:ab:ba:4c:d2:67:16:f1:2d: 87:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:33:06:98:E6:DC:B5:98:E2:E2:60:57:7A:07:D8:82:D7:3C:25:38 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/00c20b09-e8bd-47ac-957e-272e1f3064ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.32.91.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:4d:00:e9:7b:19:79:fe:b1:93:08:49:90:56:9e:16:f0:ed: 47:d9:d8:a9:34:fd:8f:f9:73:96:e0:b7:c3:1b:b0:0d:5e:65: 2d:46:40:5b:d3:91:dd:70:ed:a8:98:7a:08:6c:bd:d8:05:46: c5:b7:bd:11:a8:7f:37:f0:46:82:05:c8:53:d6:ac:b8:89:1c: e6:de:52:8f:a9:73:e0:d3:66:86:60:08:09:d8:21:e5:bf:32: 64:99:72:cb:36:0a:67:b3:c6:17:73:49:2b:47:17:9e:80:ab: 66:ee:7d:b0:79:7c:0b:ca:4b:11:00:b1:f2:5c:7f:34:a8:ed: b6:82:62:5a:90:b8:14:03:a9:c8:42:08:b4:6f:ee:e2:6e:b5: 37:c4:22:a8:c8:04:df:4b:c1:84:fe:d4:47:7c:40:67:5b:b0: f2:64:ed:72:0e:43:f6:df:a0:37:13:a4:e3:e3:61:87:67:b4: 20:79:cd:c4:6f:d0:c0:b6:d1:8c:9b:d5:96:2a:11:8f:2a:74: c5:9d:12:b3:d9:32:86:2a:06:13:1a:b9:77:20:07:01:91:cb: 6c:e0:32:90:5d:f6:03:45:7d:f7:98:aa:d5:0c:93:8e:f8:75: 9b:ce:47:13:54:ab:37:1d:b3:d6:b6:2e:9c:cd:48:08:60:ef: dd:25:a5:a8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaW7gvfUbKqaS7UAb1D3DI3X77HIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MTczNjM5WhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZDk2YWI0NDM1YzhlMzk5ZWMwZjVlMGEyY2UwYmNmMGRk ZjY3OWYxYWYxYThjMDBjNWFkOTJjZjVjN2MxYjM3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfgSEov14K7nSweRP3fvmPDw6rEHHHOl/lMJ9+Dte3OgdQ iVkpwhmw31JYKCHeXOWkKuR3iV7vTMoMX1Pn4RRrI2xY+GSJddD7K1Jr4Uk41SiN eerGUh6G0ROh/KgBHRqMLUNNe5t0U6x2cCxLVUiveTT6N552vEPsVQax3GWi4rjz Qa9az82SWKTY5vu6BjiOM5F5N5VDNC6TP5Xf61w/5zCwhM8Vzf6SF+txEKoyKleY Xvyi0ePmadPpYWb7cFmdVXWs82CV3Dmy3o+41YIAS3G0BP+oQMH4vP9m9V/mcKOl njRh7fnGKnyo2AQSGjTyK0e2Q+CrukzSZxbxLYdNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUoTMGmObctZji4mBXegfYgtc8JTgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzAwYzIwYjA5LWU4YmQtNDdhYy05NTdlLTI3MmUxZjMwNjRlYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAANIFswDQYJKoZIhvcNAQELBQADggEBAItNAOl7GXn+sZMISZBWnhbw7UfZ 2Kk0/Y/5c5bgt8MbsA1eZS1GQFvTkd1w7aiYeghsvdgFRsW3vRGofzfwRoIFyFPW rLiJHObeUo+pc+DTZoZgCAnYIeW/MmSZcss2CmezxhdzSStHF56Aq2bufbB5fAvK SxEAsfJcfzSo7baCYlqQuBQDqchCCLRv7uJutTfEIqjIBN9LwYT+1Ed8QGdbsPJk 7XIOQ/bfoDcTpOPjYYdntCB5zcRv0MC20Yyb1ZYqEY8qdMWdErPZMoYqBhMauXcg BwGRy2zgMpBd9gNFffeYqtUMk474dZvORxNUqzcds9a2LpzNSAhg790lpag= -----END CERTIFICATE-----Generated at Sat Oct 18 04:12:41 2025 by rpki-client