$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/13ac45f4-2cd8-4537-9c6d-965ee6f11507.roa File: 13ac45f4-2cd8-4537-9c6d-965ee6f11507.roa (raw, json) Hash identifier: TaISqZpWe5PdHFIJH833/zSUhA83C4agKI9Ud4ilSwQ= Subject key identifier: 54:3F:F5:BB:E8:2C:EF:C3:9D:B6:AD:9C:27:F5:2C:9A:1E:BD:43:FC Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 44472923224CF8B86B480EAA2742F0D5CC3CDFE7 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/13ac45f4-2cd8-4537-9c6d-965ee6f11507.roa Signing time: Wed 24 Sep 2025 18:01:38 +0000 ROA not before: Wed 24 Sep 2025 18:01:38 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.35.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:47:29:23:22:4c:f8:b8:6b:48:0e:aa:27:42:f0:d5:cc:3c:df:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 18:01:38 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=935fc3050b5ebfda9978a56f5854fb49ce2da3a55bdfa891e974d59fb8cd3d3a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:21:64:38:c4:47:29:08:58:eb:07:07:d3:2c: ed:e3:71:7b:a9:0a:a4:fb:30:a9:29:fd:89:4c:ac: ef:f2:8d:05:3c:70:95:f0:5e:5e:16:1b:36:2e:f8: 70:22:40:e3:24:0d:f3:e8:f5:cf:e7:56:06:db:91: ad:70:e9:2b:13:53:3e:69:0d:07:d3:aa:3d:58:88: df:bd:a3:57:2f:fb:ba:39:42:52:39:07:08:71:b9: f5:42:51:bd:3d:ec:46:39:b9:36:18:5a:91:40:06: 96:b9:a1:05:96:5a:62:24:7b:2d:59:bf:93:ec:00: e4:85:4a:c0:a2:01:60:1e:4f:e1:32:1a:b5:7b:9d: b3:be:14:85:2b:cf:b3:f5:ec:9b:eb:7f:64:42:03: 8e:85:82:50:5c:67:b1:1d:62:29:d2:31:9b:5b:76: 73:1e:f9:ec:28:48:4a:ab:70:6b:46:8e:03:64:c7: 9e:ee:35:8b:5c:c2:20:38:5f:b1:28:d4:0a:b3:f3: d2:96:6f:bb:ca:c7:ac:10:8a:3b:8c:d6:d1:4a:3e: 0f:db:b0:2e:c3:7c:05:12:89:ad:8a:03:5e:b5:f1: 7c:17:c6:68:08:9d:7b:1b:37:52:f6:4c:61:85:28: 14:e4:5f:ca:42:f2:a7:c3:75:3c:77:7e:53:a0:71: 0f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:3F:F5:BB:E8:2C:EF:C3:9D:B6:AD:9C:27:F5:2C:9A:1E:BD:43:FC X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/13ac45f4-2cd8-4537-9c6d-965ee6f11507.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.35.254.0/24 Signature Algorithm: sha256WithRSAEncryption 34:31:2f:60:24:ef:02:3b:34:17:08:03:b2:01:6a:d7:01:e4: d0:38:57:73:c9:45:8a:9c:a7:7b:f9:b0:87:6f:b1:7d:0d:12: 58:b8:73:f6:29:1c:f9:0c:81:2a:11:bf:44:a5:b6:a2:40:33: 0b:fb:a0:fb:19:24:67:f6:29:82:8f:90:36:7c:46:a6:70:cd: a9:c7:81:b2:c4:38:dc:cf:c2:a7:67:91:ec:46:d1:12:93:3b: 65:46:3e:dd:ca:c3:5e:0f:cc:df:5a:8d:79:5a:3f:cc:24:aa: 9f:e6:71:a1:b8:ca:21:29:ab:1c:8e:fc:9d:eb:5e:3d:2e:c5: 31:21:da:0d:58:67:59:77:69:40:9a:4c:de:6a:c1:fc:5d:8f: 8c:13:50:dd:16:fc:f4:d7:61:94:a0:98:68:03:b6:f8:85:45: ea:09:d6:1c:9f:5b:e5:5a:4f:5a:c3:cf:14:0f:50:7f:a7:61: 73:33:03:ce:40:9e:a2:d8:5e:21:62:c8:ba:21:c1:e7:62:50: d2:4e:c2:8a:ee:a9:5d:04:55:83:a6:0f:0e:69:92:80:be:3d: 63:71:24:c9:8e:75:f6:f7:2f:b6:9f:c0:c7:9e:a8:4b:10:97: e1:8a:df:36:28:06:de:dc:03:29:ea:b4:b0:b3:2d:9c:cc:d8: 52:49:8a:b9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUREcpIyJM+LhrSA6qJ0Lw1cw83+cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MTgwMTM4WhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A5MzVmYzMwNTBiNWViZmRhOTk3OGE1NmY1ODU0ZmI0OWNl MmRhM2E1NWJkZmE4OTFlOTc0ZDU5ZmI4Y2QzZDNhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpIWQ4xEcpCFjrBwfTLO3jcXupCqT7MKkp/YlMrO/yjQU8 cJXwXl4WGzYu+HAiQOMkDfPo9c/nVgbbka1w6SsTUz5pDQfTqj1YiN+9o1cv+7o5 QlI5BwhxufVCUb097EY5uTYYWpFABpa5oQWWWmIkey1Zv5PsAOSFSsCiAWAeT+Ey GrV7nbO+FIUrz7P17Jvrf2RCA46FglBcZ7EdYinSMZtbdnMe+ewoSEqrcGtGjgNk x57uNYtcwiA4X7Eo1Aqz89KWb7vKx6wQijuM1tFKPg/bsC7DfAUSia2KA1618XwX xmgInXsbN1L2TGGFKBTkX8pC8qfDdTx3flOgcQ8lAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUVD/1u+gs78Odtq2cJ/Usmh69Q/wwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzEzYWM0NWY0LTJjZDgtNDUzNy05YzZkLTk2NWVlNmYxMTUwNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAANI/4wDQYJKoZIhvcNAQELBQADggEBADQxL2Ak7wI7NBcIA7IBatcB5NA4 V3PJRYqcp3v5sIdvsX0NEli4c/YpHPkMgSoRv0SltqJAMwv7oPsZJGf2KYKPkDZ8 RqZwzanHgbLEONzPwqdnkexG0RKTO2VGPt3Kw14PzN9ajXlaP8wkqp/mcaG4yiEp qxyO/J3rXj0uxTEh2g1YZ1l3aUCaTN5qwfxdj4wTUN0W/PTXYZSgmGgDtviFReoJ 1hyfW+VaT1rDzxQPUH+nYXMzA85AnqLYXiFiyLohwediUNJOworuqV0EVYOmDw5p koC+PWNxJMmOdfb3L7afwMeeqEsQl+GK3zYoBt7cAynqtLCzLZzM2FJJirk= -----END CERTIFICATE-----Generated at Sat Oct 18 07:40:20 2025 by rpki-client