$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/28c1acc0-aded-4de3-a697-49782c5d7732.roa File: 28c1acc0-aded-4de3-a697-49782c5d7732.roa (raw, json) Hash identifier: n6Gl83NhLby5iz9Cyjfiq7EFGcXL+/oiP+rmm69NsCo= Subject key identifier: A5:7A:8F:E6:29:6C:92:65:16:1F:92:F9:CB:AB:C1:6C:08:C6:08:06 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 717B08941175163325CE751E4247F1F0295BDFC8 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/28c1acc0-aded-4de3-a697-49782c5d7732.roa Signing time: Wed 24 Sep 2025 17:24:28 +0000 ROA not before: Wed 24 Sep 2025 17:24:28 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.32.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:7b:08:94:11:75:16:33:25:ce:75:1e:42:47:f1:f0:29:5b:df:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 17:24:28 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=f3a3ceda69853de2c0081b34895a459f602f232a1b3e18e20d4f7c9235b65be4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ae:7d:07:ed:4d:ee:76:15:22:64:4a:ef:cc: a1:1b:fd:f4:c7:a3:fa:0b:39:4a:db:c5:a5:19:19: 83:f9:69:c6:58:82:5d:30:ba:6f:83:88:7b:38:f5: 80:33:4f:da:ec:4a:e9:3e:55:20:e5:18:a0:78:8d: b0:27:51:53:f6:22:7c:93:2c:08:db:18:89:64:0c: 2a:e3:80:a3:d5:11:de:22:0a:6e:19:57:c3:c4:c4: 85:31:cf:dd:e9:74:ac:4e:bc:44:82:f7:86:6f:1d: a9:0d:d3:9e:a9:a3:7a:22:3f:a4:5e:e2:d2:c6:60: 79:7d:3d:0c:78:ff:e5:4f:8b:d4:88:2d:0f:2f:56: 90:7e:63:56:50:38:e3:b5:9b:f4:09:fd:59:b1:06: 4b:5f:0c:ce:70:53:ea:58:da:e2:08:af:83:5a:66: cf:7b:07:28:fc:dc:bf:46:94:2c:3b:8c:e5:31:3f: 51:ff:a5:80:e5:39:57:93:55:8c:b5:46:ec:23:5a: b2:b3:73:25:e2:e5:8c:ab:ad:50:ea:66:1e:08:48: d6:38:0e:6f:e7:c3:cc:02:96:cd:19:8f:86:f3:7f: e8:ca:08:b8:0c:b1:93:bf:ec:b2:14:6a:10:2e:9a: 6b:1a:a8:2e:92:3e:98:b0:b9:b3:74:33:61:3e:7f: 5b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:7A:8F:E6:29:6C:92:65:16:1F:92:F9:CB:AB:C1:6C:08:C6:08:06 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/28c1acc0-aded-4de3-a697-49782c5d7732.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.32.14.0/24 Signature Algorithm: sha256WithRSAEncryption 94:79:ff:77:4c:60:46:f3:80:81:7b:af:37:df:ed:8e:47:c6: c5:be:02:8e:56:fd:bc:aa:eb:ac:dc:90:82:3f:cc:ca:bd:c7: eb:e3:2b:d9:a6:ca:17:3d:1f:12:e6:a2:5e:c3:22:df:0d:c2: 45:7e:f8:fb:a6:37:15:32:ce:71:2c:d0:4b:12:bd:67:08:48: 7a:04:61:e8:50:86:60:dd:a7:61:6b:1a:2b:1c:66:c6:3b:f7: 6c:45:5e:4f:97:2d:9e:ea:f2:46:eb:19:93:56:f6:56:b4:47: 9f:3b:dc:a0:5b:26:ea:e6:48:5e:26:0f:a1:28:41:43:67:5a: 7f:b7:83:f6:df:99:38:f4:c1:0d:81:48:a5:e3:32:e2:82:ee: bc:ff:19:e5:8b:97:9d:1e:3e:d6:0a:8c:82:c1:ec:ce:95:16: c2:be:0f:0e:ab:c3:0a:a1:ed:03:0b:44:07:c6:c2:16:36:b5: c0:f4:94:67:42:2b:87:53:26:49:10:14:b3:a6:67:21:cb:9f: 8b:9b:f4:a9:0c:e9:72:26:8e:29:b6:83:a7:5d:e7:97:c3:8d: 51:d1:cd:b6:09:c0:d5:f3:ec:43:03:de:0d:0e:86:0a:fc:26: 0a:bc:f2:25:3e:7f:54:ad:7e:c0:30:d5:33:c2:69:68:81:00: 60:dd:07:57 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcXsIlBF1FjMlznUeQkfx8Clb38gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MTcyNDI4WhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BmM2EzY2VkYTY5ODUzZGUyYzAwODFiMzQ4OTVhNDU5ZjYw MmYyMzJhMWIzZTE4ZTIwZDRmN2M5MjM1YjY1YmU0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJrn0H7U3udhUiZErvzKEb/fTHo/oLOUrbxaUZGYP5acZY gl0wum+DiHs49YAzT9rsSuk+VSDlGKB4jbAnUVP2InyTLAjbGIlkDCrjgKPVEd4i Cm4ZV8PExIUxz93pdKxOvESC94ZvHakN056po3oiP6Re4tLGYHl9PQx4/+VPi9SI LQ8vVpB+Y1ZQOOO1m/QJ/VmxBktfDM5wU+pY2uIIr4NaZs97Byj83L9GlCw7jOUx P1H/pYDlOVeTVYy1RuwjWrKzcyXi5YyrrVDqZh4ISNY4Dm/nw8wCls0Zj4bzf+jK CLgMsZO/7LIUahAummsaqC6SPpiwubN0M2E+f1spAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUpXqP5ilskmUWH5L5y6vBbAjGCAYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzI4YzFhY2MwLWFkZWQtNGRlMy1hNjk3LTQ5NzgyYzVkNzczMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAANIA4wDQYJKoZIhvcNAQELBQADggEBAJR5/3dMYEbzgIF7rzff7Y5HxsW+ Ao5W/byq66zckII/zMq9x+vjK9mmyhc9HxLmol7DIt8NwkV++PumNxUyznEs0EsS vWcISHoEYehQhmDdp2FrGiscZsY792xFXk+XLZ7q8kbrGZNW9la0R5873KBbJurm SF4mD6EoQUNnWn+3g/bfmTj0wQ2BSKXjMuKC7rz/GeWLl50ePtYKjILB7M6VFsK+ Dw6rwwqh7QMLRAfGwhY2tcD0lGdCK4dTJkkQFLOmZyHLn4ub9KkM6XImjim2g6dd 55fDjVHRzbYJwNXz7EMD3g0Ohgr8Jgq88iU+f1StfsAw1TPCaWiBAGDdB1c= -----END CERTIFICATE-----Generated at Sat Oct 18 05:08:52 2025 by rpki-client