$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/19b500a6-6bac-42b4-bba0-d106a7d9eb41.roa File: 19b500a6-6bac-42b4-bba0-d106a7d9eb41.roa (raw, json) Hash identifier: PoKPSiDPd2378M/IFgtAYMjjAYYk25pyVzQv5qK5df8= Subject key identifier: 7D:46:26:DE:9C:60:95:F7:53:6D:23:C9:28:9E:95:AF:C8:26:7C:9D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5EADF23A7B8E0534C90BA8021C8303BB03C647A7 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/19b500a6-6bac-42b4-bba0-d106a7d9eb41.roa Signing time: Wed 24 Sep 2025 17:59:55 +0000 ROA not before: Wed 24 Sep 2025 17:59:55 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.35.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:ad:f2:3a:7b:8e:05:34:c9:0b:a8:02:1c:83:03:bb:03:c6:47:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 17:59:55 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=fb09375d09a5e0980c7f6bccc1109362ae58f1126cb7993d89042183a2e92d2f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:30:f0:1b:40:1b:24:7d:99:e3:0b:5e:28:2c: a6:2f:78:35:4a:a6:1a:a7:c3:bf:43:a3:a9:36:94: a5:19:4a:23:a5:61:20:e3:6d:6c:61:fa:73:ba:fc: 76:85:b0:51:b2:90:f4:99:a7:20:f3:91:b5:a8:3d: 29:9b:27:3e:6e:d8:1e:83:7e:6f:aa:d0:41:fb:28: f6:df:af:ea:eb:97:68:6f:61:c6:7e:3e:9c:48:96: 28:f9:66:a0:a5:4d:c6:08:ce:5b:2c:be:64:1e:0f: ce:4a:b7:c7:48:16:c7:20:dd:98:c1:a0:b6:f2:4d: 70:4e:73:2d:36:55:84:d8:28:aa:07:67:48:26:93: a4:8e:b9:8e:82:27:3d:9c:f0:45:61:c7:47:57:9b: d7:17:56:4c:3d:40:32:d3:85:12:06:b4:ec:20:27: 33:98:04:b4:e3:8f:ec:e0:e6:80:45:f2:0c:36:b2: 20:76:e1:86:8f:4f:be:98:21:4c:73:72:40:9d:c7: 73:1a:c3:98:cb:8f:79:78:be:e9:9f:b8:a1:4f:a4: c7:ee:de:0d:be:e1:52:c4:18:ef:65:ac:cb:4c:6e: d5:26:9a:ae:81:16:ef:4a:22:38:26:00:80:4a:19: ab:23:9c:99:51:c2:71:4d:c7:92:c4:23:72:1d:25: 8f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:46:26:DE:9C:60:95:F7:53:6D:23:C9:28:9E:95:AF:C8:26:7C:9D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/19b500a6-6bac-42b4-bba0-d106a7d9eb41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.35.237.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:54:4f:b5:a7:82:b1:2d:67:4c:8c:04:11:3d:a2:67:66:35: 56:af:44:32:11:b1:46:b6:47:8d:3c:cb:85:e1:5c:9a:35:df: e9:a5:ac:87:41:d5:dc:d2:04:9a:3b:bd:fb:c5:ef:6c:09:ed: 26:89:17:eb:e9:17:af:db:bb:dc:05:1b:57:7c:66:81:ba:11: 07:ce:e1:bf:c3:fc:4d:4f:d6:14:6f:67:7b:99:9b:3d:4f:ce: 13:62:53:f6:ae:cf:82:50:b7:ff:f4:5a:80:ce:c0:d3:d6:0f: 1c:5c:19:04:f6:e1:27:44:51:13:3a:43:8f:8b:21:7a:21:84: 85:45:16:f7:3b:eb:4c:d3:6b:d0:76:7c:38:92:63:13:dc:89: 1b:91:04:2c:bc:ae:a8:f2:a6:d1:17:5b:05:f9:fc:6a:ab:36: 35:36:78:b5:68:a8:fa:8a:8e:89:1b:89:90:8b:b0:26:5b:1c: 84:4d:59:1a:ef:9d:f1:6a:0a:4f:13:e8:51:a6:96:66:83:0b: 2b:6d:4f:8e:41:89:37:69:93:ff:ab:16:67:30:a2:47:ab:f3: 11:53:3f:61:36:c9:b5:d6:d5:1f:a1:82:48:b0:db:db:c3:a8: 39:c8:f3:bc:cc:ee:51:53:db:9c:f4:88:1a:2f:88:fc:6f:80: 58:8b:e7:2f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXq3yOnuOBTTJC6gCHIMDuwPGR6cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MTc1OTU1WhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BmYjA5Mzc1ZDA5YTVlMDk4MGM3ZjZiY2NjMTEwOTM2MmFl NThmMTEyNmNiNzk5M2Q4OTA0MjE4M2EyZTkyZDJmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBMPAbQBskfZnjC14oLKYveDVKphqnw79Do6k2lKUZSiOl YSDjbWxh+nO6/HaFsFGykPSZpyDzkbWoPSmbJz5u2B6Dfm+q0EH7KPbfr+rrl2hv YcZ+PpxIlij5ZqClTcYIzlssvmQeD85Kt8dIFscg3ZjBoLbyTXBOcy02VYTYKKoH Z0gmk6SOuY6CJz2c8EVhx0dXm9cXVkw9QDLThRIGtOwgJzOYBLTjj+zg5oBF8gw2 siB24YaPT76YIUxzckCdx3Maw5jLj3l4vumfuKFPpMfu3g2+4VLEGO9lrMtMbtUm mq6BFu9KIjgmAIBKGasjnJlRwnFNx5LEI3IdJY/9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUfUYm3pxglfdTbSPJKJ6Vr8gmfJ0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzE5YjUwMGE2LTZiYWMtNDJiNC1iYmEwLWQxMDZhN2Q5ZWI0MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAANI+0wDQYJKoZIhvcNAQELBQADggEBACpUT7WngrEtZ0yMBBE9omdmNVav RDIRsUa2R408y4XhXJo13+mlrIdB1dzSBJo7vfvF72wJ7SaJF+vpF6/bu9wFG1d8 ZoG6EQfO4b/D/E1P1hRvZ3uZmz1PzhNiU/auz4JQt//0WoDOwNPWDxxcGQT24SdE URM6Q4+LIXohhIVFFvc760zTa9B2fDiSYxPciRuRBCy8rqjyptEXWwX5/GqrNjU2 eLVoqPqKjokbiZCLsCZbHIRNWRrvnfFqCk8T6FGmlmaDCyttT45BiTdpk/+rFmcw oker8xFTP2E2ybXW1R+hgkiw29vDqDnI87zM7lFT25z0iBoviPxvgFiL5y8= -----END CERTIFICATE-----Generated at Fri Oct 17 22:18:10 2025 by rpki-client