$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/196eaa09-076a-455d-bec1-28b257410f24.roa File: 196eaa09-076a-455d-bec1-28b257410f24.roa (raw, json) Hash identifier: VUsO2pDuRE+s1kfLdIoaMkrVar3GhQSFp41Sbnu5AjQ= Subject key identifier: FA:0F:19:E6:CA:DF:C0:E3:EC:57:31:09:7F:F0:94:2A:B0:34:B1:5C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 32D73983BA99594D2A3907877B75D18F0AF3FD9B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/196eaa09-076a-455d-bec1-28b257410f24.roa Signing time: Wed 24 Sep 2025 17:57:56 +0000 ROA not before: Wed 24 Sep 2025 17:57:56 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.35.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:d7:39:83:ba:99:59:4d:2a:39:07:87:7b:75:d1:8f:0a:f3:fd:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 17:57:56 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=500e6815778049e5088cf71220acff532425d30387bd6098c6354c61b8bc25f0, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a5:31:b9:0f:de:86:f7:ee:13:f5:6d:f1:b3: 39:7b:c7:f6:d9:ac:6c:1b:29:36:7c:c8:7d:ba:e2: 28:fc:f2:3d:58:ca:6c:7c:39:ba:0c:dc:df:6e:c5: 15:c2:da:57:ae:7b:1b:48:cf:af:1c:05:f2:a2:0f: 17:f9:7a:9e:b8:a2:82:9a:64:aa:3a:f9:e7:68:ea: ed:eb:b6:85:3a:98:b1:2c:cb:53:2b:27:be:d0:57: 82:ca:e0:9b:eb:99:65:01:99:eb:1c:c3:63:82:37: cb:6a:70:7f:45:97:cf:ec:23:13:3f:92:23:84:c6: 1e:b4:8e:18:7a:53:4c:df:34:ea:81:c5:5f:7a:da: 5c:d5:95:94:b4:80:ec:68:ac:5a:8b:0a:b7:3f:7d: 49:9f:2c:da:e6:7f:02:15:8f:55:17:cb:02:04:0f: 36:d9:6a:c0:db:02:84:8e:ce:31:ec:54:a5:b8:58: 4c:fe:13:b4:8b:f2:38:64:44:a9:ae:13:5d:63:8a: e8:98:c5:8e:50:60:c6:7c:8c:07:84:c9:ee:8e:a9: ee:3c:41:3c:10:53:71:16:8b:26:41:a9:7a:ac:8e: 59:25:d8:bf:dd:57:be:7a:df:51:23:f3:11:21:e4: fe:a8:68:06:dd:fc:0f:f2:1e:b2:8a:43:25:cc:f8: 99:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:0F:19:E6:CA:DF:C0:E3:EC:57:31:09:7F:F0:94:2A:B0:34:B1:5C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/196eaa09-076a-455d-bec1-28b257410f24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.35.198.0/24 Signature Algorithm: sha256WithRSAEncryption 74:d2:26:99:1d:99:48:12:d0:28:0a:0d:e5:81:be:92:e0:b2: 74:83:7c:b6:01:25:82:a4:84:f7:b8:d2:93:4b:33:b3:ff:8c: 06:25:73:af:91:40:fb:b4:74:25:f9:29:0a:f9:0a:38:fe:07: 40:c3:41:74:a5:72:ce:00:90:19:92:eb:32:19:2b:2b:71:94: 95:d9:7c:8e:78:ad:ab:46:15:44:77:74:cd:c9:fe:5f:c7:f0: 2f:1c:9a:43:5a:ce:c0:be:d8:41:44:a7:42:43:04:0f:06:56: b2:2a:d5:6f:00:46:cb:da:58:b4:ed:ab:16:df:07:d4:df:4b: c2:1f:8b:74:73:a8:ae:1e:85:d6:6c:25:58:1a:d6:df:6d:4b: 78:60:bf:60:0e:bc:6a:de:eb:68:e9:6c:c6:1c:41:27:80:66: 4d:e4:a4:65:a6:dd:52:2f:49:cb:66:70:a0:c9:1a:bf:8b:d8: 5c:af:0b:9e:c1:8e:91:6c:56:9e:00:0d:07:c5:8c:35:2e:c5: fe:f4:5b:10:43:41:95:ed:19:7b:b9:32:37:3f:57:2d:22:87: 29:d4:a5:83:64:39:48:6d:7c:2c:ae:cb:c0:83:dd:9c:b3:21: 5b:e5:cf:85:00:e0:71:8b:ca:2b:cd:4f:dc:ce:d4:aa:d8:0d: 0a:78:38:16 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMtc5g7qZWU0qOQeHe3XRjwrz/ZswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MTc1NzU2WhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A1MDBlNjgxNTc3ODA0OWU1MDg4Y2Y3MTIyMGFjZmY1MzI0 MjVkMzAzODdiZDYwOThjNjM1NGM2MWI4YmMyNWYwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9pTG5D96G9+4T9W3xszl7x/bZrGwbKTZ8yH264ij88j1Y ymx8OboM3N9uxRXC2leuextIz68cBfKiDxf5ep64ooKaZKo6+edo6u3rtoU6mLEs y1MrJ77QV4LK4JvrmWUBmescw2OCN8tqcH9Fl8/sIxM/kiOExh60jhh6U0zfNOqB xV962lzVlZS0gOxorFqLCrc/fUmfLNrmfwIVj1UXywIEDzbZasDbAoSOzjHsVKW4 WEz+E7SL8jhkRKmuE11jiuiYxY5QYMZ8jAeEye6Oqe48QTwQU3EWiyZBqXqsjlkl 2L/dV75631Ej8xEh5P6oaAbd/A/yHrKKQyXM+JkPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU+g8Z5srfwOPsVzEJf/CUKrA0sVwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzE5NmVhYTA5LTA3NmEtNDU1ZC1iZWMxLTI4YjI1NzQxMGYyNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAANI8YwDQYJKoZIhvcNAQELBQADggEBAHTSJpkdmUgS0CgKDeWBvpLgsnSD fLYBJYKkhPe40pNLM7P/jAYlc6+RQPu0dCX5KQr5Cjj+B0DDQXSlcs4AkBmS6zIZ KytxlJXZfI54ratGFUR3dM3J/l/H8C8cmkNazsC+2EFEp0JDBA8GVrIq1W8ARsva WLTtqxbfB9TfS8Ifi3RzqK4ehdZsJVga1t9tS3hgv2AOvGre62jpbMYcQSeAZk3k pGWm3VIvSctmcKDJGr+L2FyvC57BjpFsVp4ADQfFjDUuxf70WxBDQZXtGXu5Mjc/ Vy0ihynUpYNkOUhtfCyuy8CD3ZyzIVvlz4UA4HGLyivNT9zO1KrYDQp4OBY= -----END CERTIFICATE-----Generated at Fri Oct 17 22:19:00 2025 by rpki-client