$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0ff0df60-281e-4ec6-8d76-25773f4beead.roa File: 0ff0df60-281e-4ec6-8d76-25773f4beead.roa (raw, json) Hash identifier: yVart3/TPkjv5M09CA8q70WNDSvI5oBP6X+GaHumomM= Subject key identifier: 5A:D8:68:44:B3:0F:44:AE:B1:45:B1:56:57:01:AC:EA:25:E8:A5:08 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 27298E63A17E40F3A31970BAA2F1805ED7A7DFAD Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0ff0df60-281e-4ec6-8d76-25773f4beead.roa Signing time: Wed 24 Sep 2025 17:58:01 +0000 ROA not before: Wed 24 Sep 2025 17:58:01 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.35.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:29:8e:63:a1:7e:40:f3:a3:19:70:ba:a2:f1:80:5e:d7:a7:df:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 17:58:01 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=97de2ef4f27828be468c00e7b88c52a28bb6faf60fa08b5e6d486dc17cfc002c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:95:cf:84:a8:2c:a8:d7:07:60:78:76:a0:20: 09:e5:f1:9c:6f:0c:45:3d:c2:a5:36:87:f5:21:b9: 6d:e7:4a:5d:c9:e2:4b:98:d2:3e:67:f5:0d:3d:10: bf:9c:51:4a:dc:30:30:b7:89:d1:04:74:65:91:5c: af:ad:b6:b2:c0:94:72:d8:9e:5e:b2:6d:3c:36:31: 13:4a:a9:1b:7c:0c:9c:71:58:a3:3e:0b:8c:d9:43: 58:b4:1a:36:30:c7:15:4f:b5:b9:ef:76:16:5d:61: 49:60:9d:5e:59:15:10:85:86:84:e7:59:bb:a4:29: 07:08:4c:43:d4:76:46:57:1d:8a:32:51:ac:ad:5a: ac:04:6d:35:9e:4e:ff:ae:2d:98:47:37:5b:51:a2: 29:85:2d:da:cb:6f:93:39:5d:96:ab:d6:da:aa:1d: 9d:e2:73:b0:63:48:e7:d0:39:d6:dc:4e:3b:12:81: 4b:1c:78:ba:d0:04:10:a6:7f:1a:dc:e4:85:40:4d: 18:c4:90:92:3b:1a:3d:12:00:21:51:30:51:cc:61: 9d:7f:32:ea:36:95:b5:68:c1:66:6f:40:f9:3a:c4: ed:a6:53:0e:c8:76:e3:76:63:b8:05:8f:80:2d:d4: fe:00:8f:77:21:5c:d6:94:b8:de:be:7f:30:6c:7d: 8f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:D8:68:44:B3:0F:44:AE:B1:45:B1:56:57:01:AC:EA:25:E8:A5:08 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0ff0df60-281e-4ec6-8d76-25773f4beead.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.35.201.0/24 Signature Algorithm: sha256WithRSAEncryption 49:5f:83:2d:98:1d:42:e5:e0:ef:be:ab:62:0d:28:39:d9:66: 13:3b:af:b0:38:30:6c:3a:f1:7f:42:5d:1b:c3:b9:a8:cc:75: df:3a:36:8a:ce:6c:3a:fb:49:7d:16:09:ca:c3:4c:1a:39:01: 97:ec:94:ae:7a:60:1c:c8:b9:68:d7:71:e2:a4:3d:b0:f2:81: 7c:75:d3:0c:ef:54:5c:d7:1a:a2:96:02:e4:d8:70:8b:8c:f6: 6d:79:f9:02:f2:7d:8d:c3:0d:7e:c0:ff:95:3d:e3:af:c1:61: 0b:d8:b0:46:fc:cd:59:71:92:b4:ff:dd:c0:9b:fc:96:a4:9b: 0d:71:03:10:be:d5:42:d5:27:2a:ca:4e:f3:27:cf:7f:00:26: fa:04:c9:97:bc:37:5b:16:6b:4d:af:0a:83:f2:87:6b:39:68: af:f2:64:37:58:47:06:5f:c9:43:b0:8e:08:1e:7f:65:b5:d5: 29:0b:25:8c:2d:18:05:45:81:c2:5b:0e:de:fd:c1:e9:8c:cd: 92:d9:23:fc:52:f4:b5:55:e2:4a:0f:d8:ac:52:a7:73:2a:df: 28:c3:b8:b4:65:72:70:59:21:fe:26:9e:c9:af:1d:dd:3f:99: 77:a7:88:e0:c4:55:80:85:87:53:7a:be:4d:d9:7e:9d:62:d5: 33:0a:f4:06 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJymOY6F+QPOjGXC6ovGAXten360wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MTc1ODAxWhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A5N2RlMmVmNGYyNzgyOGJlNDY4YzAwZTdiODhjNTJhMjhi YjZmYWY2MGZhMDhiNWU2ZDQ4NmRjMTdjZmMwMDJjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCslc+EqCyo1wdgeHagIAnl8ZxvDEU9wqU2h/UhuW3nSl3J 4kuY0j5n9Q09EL+cUUrcMDC3idEEdGWRXK+ttrLAlHLYnl6ybTw2MRNKqRt8DJxx WKM+C4zZQ1i0GjYwxxVPtbnvdhZdYUlgnV5ZFRCFhoTnWbukKQcITEPUdkZXHYoy UaytWqwEbTWeTv+uLZhHN1tRoimFLdrLb5M5XZar1tqqHZ3ic7BjSOfQOdbcTjsS gUsceLrQBBCmfxrc5IVATRjEkJI7Gj0SACFRMFHMYZ1/Muo2lbVowWZvQPk6xO2m Uw7IduN2Y7gFj4At1P4Aj3chXNaUuN6+fzBsfY8/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUWthoRLMPRK6xRbFWVwGs6iXopQgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzBmZjBkZjYwLTI4MWUtNGVjNi04ZDc2LTI1NzczZjRiZWVhZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAANI8kwDQYJKoZIhvcNAQELBQADggEBAElfgy2YHULl4O++q2INKDnZZhM7 r7A4MGw68X9CXRvDuajMdd86NorObDr7SX0WCcrDTBo5AZfslK56YBzIuWjXceKk PbDygXx10wzvVFzXGqKWAuTYcIuM9m15+QLyfY3DDX7A/5U946/BYQvYsEb8zVlx krT/3cCb/Jakmw1xAxC+1ULVJyrKTvMnz38AJvoEyZe8N1sWa02vCoPyh2s5aK/y ZDdYRwZfyUOwjggef2W11SkLJYwtGAVFgcJbDt79wemMzZLZI/xS9LVV4koP2KxS p3Mq3yjDuLRlcnBZIf4mnsmvHd0/mXeniODEVYCFh1N6vk3Zfp1i1TMK9AY= -----END CERTIFICATE-----Generated at Sat Oct 18 05:09:20 2025 by rpki-client