$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2aa288ea-c433-4f22-9bc0-03d00a4edd02.roa File: 2aa288ea-c433-4f22-9bc0-03d00a4edd02.roa (raw, json) Hash identifier: ONip10hS+JKtXzE6vUh5wCoFQbv+cLU1nX/XMMhpNR0= Subject key identifier: 95:D7:CE:84:1C:57:22:DA:E2:8D:BD:B6:7F:5B:FF:90:8B:A4:5C:8E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4CCB5EE1013C7B604C8AE28A75AB5F2E60ED4B2C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2aa288ea-c433-4f22-9bc0-03d00a4edd02.roa Signing time: Wed 24 Sep 2025 18:25:52 +0000 ROA not before: Wed 24 Sep 2025 18:25:52 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.35.180.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:cb:5e:e1:01:3c:7b:60:4c:8a:e2:8a:75:ab:5f:2e:60:ed:4b:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 18:25:52 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=f20a125e080782a3845da9ad0884916f71d6ab1c4e3ef34ff3eee48ea8a50ca1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a9:52:74:d5:00:07:6d:fc:d3:53:ac:b2:9e: cc:2b:59:3a:9a:98:ae:83:e3:b6:5a:04:ed:6e:58: aa:f0:0b:fb:5c:f0:16:7d:df:03:93:03:52:62:71: 75:90:2c:1d:9a:79:18:fa:38:e0:08:8b:0a:85:ee: 38:cc:33:06:a5:46:f0:64:62:61:7d:dd:d9:65:ec: 81:f5:1a:de:4b:89:fa:75:1f:ad:4b:e7:d6:fd:85: cd:c8:96:ce:b6:22:0f:6e:97:23:85:56:23:1b:f2: e1:0d:6e:5b:41:02:87:99:78:1c:5d:0e:d2:bb:bf: 29:4e:9d:0d:8a:ed:09:1e:23:06:0f:96:59:60:32: 2d:bb:16:8a:e3:10:c1:0c:59:d2:93:f0:f7:92:23: a4:e8:14:56:3a:b6:18:ec:ef:35:c8:f1:a4:df:45: 57:cd:e5:30:d2:a3:e5:e6:4f:47:d2:57:ce:a7:96: 77:4c:78:7d:c1:31:7a:62:58:a9:50:28:69:9d:28: 30:3b:29:22:1a:52:6e:7c:a8:c7:e8:b7:76:f0:b6: 7a:a8:72:44:de:0d:7d:0e:ef:c9:62:fb:e8:cd:36: ab:68:b2:1c:00:ee:12:60:83:41:fb:52:24:50:79: d5:c8:4a:04:9d:c9:f9:b1:48:52:e9:bd:cc:0f:2d: 80:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:D7:CE:84:1C:57:22:DA:E2:8D:BD:B6:7F:5B:FF:90:8B:A4:5C:8E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2aa288ea-c433-4f22-9bc0-03d00a4edd02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.35.180.0/23 Signature Algorithm: sha256WithRSAEncryption 06:8e:a0:5e:ce:78:12:26:6d:40:22:50:c7:54:48:a7:d9:a5: bf:bf:ba:66:28:fd:8c:40:17:4b:eb:4f:95:02:e9:cd:57:ac: 00:d1:6f:40:7c:e1:97:1c:a6:3a:a1:c4:7a:cb:75:14:90:5d: 02:02:94:df:02:bb:51:23:df:79:20:3f:b6:0f:bf:e1:c7:d0: 0c:d4:12:b4:62:6e:40:d7:07:ff:70:e8:23:fa:5f:29:b5:6b: 62:32:fa:3d:ae:97:1b:73:8d:3e:97:1b:8d:c7:59:12:c0:65: d6:d2:83:b1:8e:57:47:06:3a:14:d0:99:44:34:f0:65:d4:ef: b2:d4:c4:39:26:4e:40:53:f1:9e:5b:f1:35:b0:65:bf:2d:e0: 8b:ab:16:85:94:63:af:93:a0:86:0e:df:8d:69:49:5c:a6:79: f5:5f:c4:5f:1e:e9:c2:ed:62:71:c7:70:d9:62:be:8d:fa:da: 84:a6:31:25:b2:af:7c:1f:be:50:70:6a:1a:d8:b1:c0:1d:0f: f2:4d:b0:a9:36:5a:be:37:e1:22:05:0f:ee:f4:41:84:a8:fc: d0:ce:dd:a9:76:67:a8:ae:de:4c:cc:79:33:06:e2:18:6b:7d: da:48:ce:39:42:73:52:66:55:20:56:17:a4:99:70:c1:34:8d: 56:11:e8:55 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTMte4QE8e2BMiuKKdatfLmDtSywwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MTgyNTUyWhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BmMjBhMTI1ZTA4MDc4MmEzODQ1ZGE5YWQwODg0OTE2Zjcx ZDZhYjFjNGUzZWYzNGZmM2VlZTQ4ZWE4YTUwY2ExMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqqVJ01QAHbfzTU6yynswrWTqamK6D47ZaBO1uWKrwC/tc 8BZ93wOTA1JicXWQLB2aeRj6OOAIiwqF7jjMMwalRvBkYmF93dll7IH1Gt5Lifp1 H61L59b9hc3Ils62Ig9ulyOFViMb8uENbltBAoeZeBxdDtK7vylOnQ2K7QkeIwYP lllgMi27ForjEMEMWdKT8PeSI6ToFFY6thjs7zXI8aTfRVfN5TDSo+XmT0fSV86n lndMeH3BMXpiWKlQKGmdKDA7KSIaUm58qMfot3bwtnqockTeDX0O78li++jNNqto shwA7hJgg0H7UiRQedXISgSdyfmxSFLpvcwPLYDvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUldfOhBxXItrijb22f1v/kIukXI4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzJhYTI4OGVhLWM0MzMtNGYyMi05YmMwLTAzZDAwYTRlZGQwMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAENI7QwDQYJKoZIhvcNAQELBQADggEBAAaOoF7OeBImbUAiUMdUSKfZpb+/ umYo/YxAF0vrT5UC6c1XrADRb0B84ZccpjqhxHrLdRSQXQIClN8Cu1Ej33kgP7YP v+HH0AzUErRibkDXB/9w6CP6Xym1a2Iy+j2ulxtzjT6XG43HWRLAZdbSg7GOV0cG OhTQmUQ08GXU77LUxDkmTkBT8Z5b8TWwZb8t4IurFoWUY6+ToIYO341pSVymefVf xF8e6cLtYnHHcNlivo362oSmMSWyr3wfvlBwahrYscAdD/JNsKk2Wr434SIFD+70 QYSo/NDO3al2Z6iu3kzMeTMG4hhrfdpIzjlCc1JmVSBWF6SZcME0jVYR6FU= -----END CERTIFICATE-----Generated at Sat Oct 18 05:09:18 2025 by rpki-client