$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/14eb0555-385e-4161-8c50-81aaf3947f64.roa File: 14eb0555-385e-4161-8c50-81aaf3947f64.roa (raw, json) Hash identifier: wm5lv0l8ZM6NXTpw8NGJFNXvuBWFCPBgJbdxVqhdc30= Subject key identifier: 35:66:39:7E:9E:00:DD:D2:F6:0B:58:53:59:75:37:2E:77:D0:81:27 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 45C832C63482FDC31F851C294463DEF0AF4B4617 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/14eb0555-385e-4161-8c50-81aaf3947f64.roa Signing time: Wed 24 Sep 2025 18:43:53 +0000 ROA not before: Wed 24 Sep 2025 18:43:53 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.35.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:c8:32:c6:34:82:fd:c3:1f:85:1c:29:44:63:de:f0:af:4b:46:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 18:43:53 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=34e2c6cd4f6ff9c9489c5ffd6bc51baf27661b5fd5fb061afa3d12f50b53e301, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b4:4a:b7:be:9b:ac:c0:52:d7:f2:ba:24:44: fc:34:08:5a:e7:e7:31:5c:4c:f4:95:b2:2f:92:93: ce:34:ce:df:c8:f9:70:c4:bc:1f:e5:0c:3a:55:30: 17:59:13:97:28:03:21:29:09:3d:9c:bf:e4:c5:a1: 02:d1:a7:5d:3e:e8:63:bd:0c:ab:01:d5:69:16:85: ab:c4:50:b8:11:9e:9e:da:da:3d:d3:c8:8b:a3:7a: 4c:57:92:9b:aa:b0:76:27:ff:bd:b9:1d:b3:93:1f: 42:29:1a:11:1f:3a:f2:f4:f7:e9:e5:ac:f1:d1:9e: 70:69:59:d8:c7:12:54:ee:03:13:61:fd:75:39:87: b5:c5:c9:4c:32:00:22:75:ca:ce:dc:ba:37:11:95: 06:61:ad:13:17:f7:02:69:de:a9:15:ef:fa:e9:f1: ae:18:dd:98:97:0a:9d:df:8e:db:6f:a2:30:22:41: a9:72:2f:09:7d:1d:1f:74:ac:d2:b5:70:f5:ae:27: d2:20:b5:2d:47:53:01:83:44:11:0a:0f:5b:9f:b5: e4:f7:13:79:27:da:bf:0c:6d:5d:6a:d0:b4:07:76: 9f:ee:cd:da:3d:a7:ab:b1:e0:6f:04:64:a9:b1:b9: 40:be:7a:1e:8a:96:d1:21:93:1d:56:00:98:be:27: f3:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:66:39:7E:9E:00:DD:D2:F6:0B:58:53:59:75:37:2E:77:D0:81:27 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/14eb0555-385e-4161-8c50-81aaf3947f64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.35.244.0/22 Signature Algorithm: sha256WithRSAEncryption 15:46:cf:15:57:37:70:ad:2c:95:ff:af:e9:6e:b4:3b:f5:6e: 31:c5:30:60:d2:87:6b:53:6c:08:97:ea:6c:ec:d4:18:8e:88: fb:93:2c:5b:07:49:a4:b7:ea:00:39:31:c1:34:5e:48:77:00: e9:9d:f5:44:79:87:72:cb:c0:38:cc:18:f3:d8:73:76:ef:77: d8:33:a3:d4:7b:df:45:14:4b:33:d7:47:98:47:34:6e:a3:1e: 96:1c:91:0c:a3:bb:c5:e5:65:4c:d6:21:15:ff:6b:0d:81:d0: af:82:16:11:9d:3c:fa:40:00:35:0a:5c:a6:f5:5e:06:4a:9e: bf:53:80:ab:01:24:00:63:ba:f5:aa:08:6b:52:a3:05:29:d8: 5f:16:6b:51:b2:e6:9a:cb:73:34:2d:de:82:7d:a0:0d:00:d2: 70:a4:9f:5f:f9:5b:4b:21:7b:ef:65:18:25:d0:91:c4:91:81: 26:38:05:7f:06:0f:7a:09:15:cf:17:2b:9b:b5:76:fe:31:7c: bb:a7:40:92:a0:d0:6e:ab:75:a0:dd:89:47:d9:16:f9:27:1f: c4:8e:77:88:f1:48:ec:8f:fd:6c:d7:29:65:b0:7e:db:02:6b: f9:23:30:1d:81:1d:8c:87:00:07:16:44:cf:02:69:88:a1:73: 19:8a:4e:31 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURcgyxjSC/cMfhRwpRGPe8K9LRhcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MTg0MzUzWhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0AzNGUyYzZjZDRmNmZmOWM5NDg5YzVmZmQ2YmM1MWJhZjI3 NjYxYjVmZDVmYjA2MWFmYTNkMTJmNTBiNTNlMzAxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+tEq3vpuswFLX8rokRPw0CFrn5zFcTPSVsi+Sk840zt/I +XDEvB/lDDpVMBdZE5coAyEpCT2cv+TFoQLRp10+6GO9DKsB1WkWhavEULgRnp7a 2j3TyIujekxXkpuqsHYn/725HbOTH0IpGhEfOvL09+nlrPHRnnBpWdjHElTuAxNh /XU5h7XFyUwyACJ1ys7cujcRlQZhrRMX9wJp3qkV7/rp8a4Y3ZiXCp3fjttvojAi QalyLwl9HR90rNK1cPWuJ9IgtS1HUwGDRBEKD1ufteT3E3kn2r8MbV1q0LQHdp/u zdo9p6ux4G8EZKmxuUC+eh6KltEhkx1WAJi+J/PBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUNWY5fp4A3dL2C1hTWXU3LnfQgScwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzE0ZWIwNTU1LTM4NWUtNDE2MS04YzUwLTgxYWFmMzk0N2Y2NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAINI/QwDQYJKoZIhvcNAQELBQADggEBABVGzxVXN3CtLJX/r+lutDv1bjHF MGDSh2tTbAiX6mzs1BiOiPuTLFsHSaS36gA5McE0Xkh3AOmd9UR5h3LLwDjMGPPY c3bvd9gzo9R730UUSzPXR5hHNG6jHpYckQyju8XlZUzWIRX/aw2B0K+CFhGdPPpA ADUKXKb1XgZKnr9TgKsBJABjuvWqCGtSowUp2F8Wa1Gy5prLczQt3oJ9oA0A0nCk n1/5W0she+9lGCXQkcSRgSY4BX8GD3oJFc8XK5u1dv4xfLunQJKg0G6rdaDdiUfZ FvknH8SOd4jxSOyP/WzXKWWwftsCa/kjMB2BHYyHAAcWRM8CaYihcxmKTjE= -----END CERTIFICATE-----Generated at Sat Oct 18 05:07:10 2025 by rpki-client