$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1a4a053b-ccab-472e-be4a-ddeb411bbced.roa File: 1a4a053b-ccab-472e-be4a-ddeb411bbced.roa (raw, json) Hash identifier: j2rslQemIMoDT/wtVb2xeJtMVd276/A980dQ2cC6Usk= Subject key identifier: D0:78:3C:BD:88:75:0C:D5:9E:94:54:4F:59:09:E7:C5:FF:60:67:F1 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5F2A3A81306749AE7CA71A261D7F7D0F74E77176 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1a4a053b-ccab-472e-be4a-ddeb411bbced.roa Signing time: Wed 24 Sep 2025 18:44:04 +0000 ROA not before: Wed 24 Sep 2025 18:44:04 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.35.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:2a:3a:81:30:67:49:ae:7c:a7:1a:26:1d:7f:7d:0f:74:e7:71:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 18:44:04 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=69a338593c1a44ad4546f5bb4179e1a011d5f10235de972ffae10161d2e4951f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ef:a7:b3:f3:39:5c:d5:8e:2d:3e:ec:a5:90: 67:cb:c8:39:9d:a4:57:e8:98:35:78:df:aa:57:67: b9:a7:fb:5f:5e:36:7a:3f:02:7c:12:d7:7d:f1:d5: 0f:18:02:51:80:79:57:95:81:e8:e3:c9:f6:59:08: ae:d5:bc:95:32:f5:fe:37:00:c9:ca:e6:a5:77:4e: 8c:92:21:f6:ee:f2:cd:c5:4c:2a:3f:40:26:20:89: 0e:bb:45:df:c1:86:75:b2:eb:d2:c1:92:e9:87:80: 70:56:26:20:81:11:58:a5:8c:ec:0d:88:96:d9:76: 71:14:1f:87:ac:6c:b1:0d:bb:2e:f3:eb:ae:7d:ae: bb:7c:e7:a4:86:39:0a:47:ea:b1:ee:8c:fa:94:85: 81:cb:dd:04:f7:32:10:75:17:ae:c3:cf:65:9f:5a: ca:4d:db:99:fe:86:4d:ac:cb:c8:91:81:3a:4e:ee: 90:fa:f0:a5:a3:0f:c2:38:56:7f:aa:7a:a4:d3:fd: b3:f3:07:48:cc:d8:ad:0a:07:ca:81:f5:60:0c:f6: 97:24:af:75:60:35:8d:6e:2f:87:2c:e3:fd:67:41: 39:c1:76:7c:ec:f8:71:db:08:ae:eb:65:b4:3d:c3: 08:1c:8f:36:41:a2:6e:10:22:83:6e:e1:df:83:fe: 56:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:78:3C:BD:88:75:0C:D5:9E:94:54:4F:59:09:E7:C5:FF:60:67:F1 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1a4a053b-ccab-472e-be4a-ddeb411bbced.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.35.60.0/22 Signature Algorithm: sha256WithRSAEncryption 31:c2:74:48:f4:35:5d:63:08:7d:2d:b3:3f:c4:a7:25:c0:28: 77:0e:ca:58:01:cc:bc:a8:9b:f9:33:73:76:18:11:63:af:d2: c6:22:60:c0:55:c8:be:da:59:b2:33:ba:4e:85:08:38:4a:9e: e2:f8:d4:e0:2d:ed:4e:a4:ff:eb:d9:f0:86:67:68:f7:bc:0b: 6a:27:fb:78:b0:9e:0b:5d:db:41:5b:5c:84:64:8b:5f:f8:2e: 27:32:66:61:cc:ed:aa:4e:04:da:7b:8e:b6:e0:49:62:42:cf: 78:06:71:ed:1f:57:f6:96:4e:83:51:9a:7a:63:93:1d:0e:bc: 8e:92:50:6d:9d:a5:60:d9:41:30:5e:be:9c:5a:6d:86:9a:5b: 4b:af:12:97:17:df:f8:8c:85:05:dd:ac:5d:b9:62:e6:f3:28: fc:de:1b:d2:21:7c:f0:fd:86:2d:13:59:32:ab:ef:e1:33:6b: 82:22:41:99:f8:3f:4a:8b:5d:02:b9:f4:5a:b3:01:2f:07:fc: 29:00:da:33:74:88:40:2f:5e:2d:6e:69:90:d0:36:26:0c:6f: bd:dc:ff:ff:d1:47:4b:d1:20:9d:40:9c:2a:31:b4:ae:db:aa: e5:2e:78:0a:5b:44:34:6b:2b:f8:7f:fb:ed:af:a1:9a:5e:d3: 14:59:80:e7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXyo6gTBnSa58pxomHX99D3TncXYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MTg0NDA0WhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A2OWEzMzg1OTNjMWE0NGFkNDU0NmY1YmI0MTc5ZTFhMDEx ZDVmMTAyMzVkZTk3MmZmYWUxMDE2MWQyZTQ5NTFmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDh76ez8zlc1Y4tPuylkGfLyDmdpFfomDV436pXZ7mn+19e Nno/AnwS133x1Q8YAlGAeVeVgejjyfZZCK7VvJUy9f43AMnK5qV3ToySIfbu8s3F TCo/QCYgiQ67Rd/BhnWy69LBkumHgHBWJiCBEViljOwNiJbZdnEUH4esbLENuy7z 6659rrt856SGOQpH6rHujPqUhYHL3QT3MhB1F67Dz2WfWspN25n+hk2sy8iRgTpO 7pD68KWjD8I4Vn+qeqTT/bPzB0jM2K0KB8qB9WAM9pckr3VgNY1uL4cs4/1nQTnB dnzs+HHbCK7rZbQ9wwgcjzZBom4QIoNu4d+D/lYnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU0Hg8vYh1DNWelFRPWQnnxf9gZ/EwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzFhNGEwNTNiLWNjYWItNDcyZS1iZTRhLWRkZWI0MTFiYmNlZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAINIzwwDQYJKoZIhvcNAQELBQADggEBADHCdEj0NV1jCH0tsz/EpyXAKHcO ylgBzLyom/kzc3YYEWOv0sYiYMBVyL7aWbIzuk6FCDhKnuL41OAt7U6k/+vZ8IZn aPe8C2on+3iwngtd20FbXIRki1/4LicyZmHM7apOBNp7jrbgSWJCz3gGce0fV/aW ToNRmnpjkx0OvI6SUG2dpWDZQTBevpxabYaaW0uvEpcX3/iMhQXdrF25YubzKPze G9IhfPD9hi0TWTKr7+Eza4IiQZn4P0qLXQK59FqzAS8H/CkA2jN0iEAvXi1uaZDQ NiYMb73c///RR0vRIJ1AnCoxtK7bquUueApbRDRrK/h/++2voZpe0xRZgOc= -----END CERTIFICATE-----Generated at Fri Oct 17 22:14:25 2025 by rpki-client