$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2e17650b-e2d0-4538-8c09-1e77e3eb39f4.roa File: 2e17650b-e2d0-4538-8c09-1e77e3eb39f4.roa (raw, json) Hash identifier: AsYGwxLhG73Le+JjLJBgrk7sDCITlQhtLD9uQKYvU6w= Subject key identifier: B9:13:38:B0:7C:27:F3:4F:A1:4F:C6:8D:87:8C:7B:9A:8F:A6:74:E8 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 222B66932F2C70CA0D6C5B51FE5451AD02F262ED Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2e17650b-e2d0-4538-8c09-1e77e3eb39f4.roa Signing time: Wed 24 Sep 2025 18:44:02 +0000 ROA not before: Wed 24 Sep 2025 18:44:02 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.35.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:2b:66:93:2f:2c:70:ca:0d:6c:5b:51:fe:54:51:ad:02:f2:62:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 18:44:02 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=317a58cc25a0416ea57f45bd8484f3e0972995c894cab457e598666af47cb260, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:45:3a:e5:0d:60:9b:91:82:9d:c6:b1:67:51: 79:08:be:58:bd:38:77:d0:2d:f0:21:8f:35:d1:e6: af:c7:c4:4b:e8:0b:90:bc:d3:2f:15:98:3e:ae:41: 8e:e1:29:fc:4d:67:05:24:83:8d:15:11:5f:fa:90: 1b:e4:e2:31:05:e0:a4:34:23:c3:30:47:75:bf:c3: 33:bb:67:5c:69:46:35:ce:86:21:0e:b6:e7:77:1a: eb:fe:7f:87:7a:43:65:a9:b3:d8:b9:db:a2:33:68: 67:fe:fe:58:b1:7f:aa:37:19:13:a5:13:03:cf:a3: 96:50:a1:da:d3:80:fe:08:d9:6b:0b:d7:c7:d1:6f: ad:32:ef:76:40:37:a8:38:be:19:80:5b:fa:d6:40: 43:35:b6:0f:af:4b:ff:51:89:a9:13:bc:9f:4d:d0: 36:26:86:e6:ea:03:76:09:12:e6:34:b9:f7:b4:56: fa:d9:d8:db:85:8c:eb:75:cc:db:3c:d9:3d:05:31: 70:d6:d2:44:07:e4:0f:09:42:b4:c9:e6:49:82:66: e2:e0:6e:75:75:a8:29:c5:2b:96:bd:e2:e1:08:5b: ee:8e:bf:74:2a:d9:29:89:c7:7e:96:fe:df:0c:88: e4:6d:6d:ae:63:8f:48:18:ff:7f:86:a8:ab:85:ed: fd:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:13:38:B0:7C:27:F3:4F:A1:4F:C6:8D:87:8C:7B:9A:8F:A6:74:E8 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2e17650b-e2d0-4538-8c09-1e77e3eb39f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.35.52.0/22 Signature Algorithm: sha256WithRSAEncryption 14:06:82:24:1f:56:53:1f:74:8c:72:b4:22:20:cf:4d:1b:af: 89:cc:2a:22:e7:ef:93:8b:20:6e:5b:aa:cb:04:39:30:0a:22: bf:cf:93:b2:98:09:ba:b7:8e:2b:f6:9e:66:27:ce:3f:1c:01: 7e:49:dc:75:4e:c3:df:4c:a6:e2:c2:8a:bc:ec:5d:bc:a6:4a: a6:69:16:18:56:1c:e7:6e:9b:7c:0a:78:a9:32:6d:50:44:6d: 63:45:84:ab:70:03:cc:ff:9c:6f:24:79:f1:c7:b6:89:af:65: 32:5c:f5:d8:9a:da:8f:ca:f2:3b:86:48:f8:6e:8a:5d:64:b0: c0:e7:41:3c:69:5f:8f:8d:dd:b0:93:33:9d:98:8e:2b:e4:83: 3d:83:8c:d6:48:3e:40:3e:73:a2:d6:ce:df:3c:d9:fd:c0:7c: 3c:32:e0:e2:12:83:82:80:3e:4e:c6:02:3e:5d:7d:b2:da:3e: db:9c:b8:90:f7:69:58:c8:fb:2c:8f:7a:2d:45:44:ba:5d:f2: 7f:08:72:ae:0d:22:9b:b8:11:96:f0:e9:b1:2b:d0:41:28:42: 0f:b8:fb:1a:be:a6:07:0c:30:0b:a8:00:fd:eb:01:5d:6a:47: e6:22:64:d7:be:96:49:cd:26:62:6e:ce:21:cb:12:0d:9f:ea: 86:18:21:14 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIitmky8scMoNbFtR/lRRrQLyYu0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MTg0NDAyWhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0AzMTdhNThjYzI1YTA0MTZlYTU3ZjQ1YmQ4NDg0ZjNlMDk3 Mjk5NWM4OTRjYWI0NTdlNTk4NjY2YWY0N2NiMjYwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6RTrlDWCbkYKdxrFnUXkIvli9OHfQLfAhjzXR5q/HxEvo C5C80y8VmD6uQY7hKfxNZwUkg40VEV/6kBvk4jEF4KQ0I8MwR3W/wzO7Z1xpRjXO hiEOtud3Guv+f4d6Q2Wps9i526IzaGf+/lixf6o3GROlEwPPo5ZQodrTgP4I2WsL 18fRb60y73ZAN6g4vhmAW/rWQEM1tg+vS/9RiakTvJ9N0DYmhubqA3YJEuY0ufe0 VvrZ2NuFjOt1zNs82T0FMXDW0kQH5A8JQrTJ5kmCZuLgbnV1qCnFK5a94uEIW+6O v3Qq2SmJx36W/t8MiORtba5jj0gY/3+GqKuF7f23AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUuRM4sHwn80+hT8aNh4x7mo+mdOgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzJlMTc2NTBiLWUyZDAtNDUzOC04YzA5LTFlNzdlM2ViMzlmNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAINIzQwDQYJKoZIhvcNAQELBQADggEBABQGgiQfVlMfdIxytCIgz00br4nM KiLn75OLIG5bqssEOTAKIr/Pk7KYCbq3jiv2nmYnzj8cAX5J3HVOw99MpuLCirzs XbymSqZpFhhWHOdum3wKeKkybVBEbWNFhKtwA8z/nG8kefHHtomvZTJc9dia2o/K 8juGSPhuil1ksMDnQTxpX4+N3bCTM52Yjivkgz2DjNZIPkA+c6LWzt882f3AfDwy 4OISg4KAPk7GAj5dfbLaPtucuJD3aVjI+yyPei1FRLpd8n8Icq4NIpu4EZbw6bEr 0EEoQg+4+xq+pgcMMAuoAP3rAV1qR+YiZNe+lknNJmJuziHLEg2f6oYYIRQ= -----END CERTIFICATE-----Generated at Sat Oct 18 02:14:10 2025 by rpki-client