$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/30eb29a7-375d-42ef-9224-582e7565f672.roa File: 30eb29a7-375d-42ef-9224-582e7565f672.roa (raw, json) Hash identifier: U+NbEceBeeUg1SiKtnqTt0117l4MwlAB6OcfwF2SWd8= Subject key identifier: F6:DF:FB:20:9C:38:BE:D7:3E:CA:40:5D:43:65:3B:48:6E:72:1E:E2 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 377A27B7E68C287389D6355B021674F5DFDB39C0 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/30eb29a7-375d-42ef-9224-582e7565f672.roa Signing time: Wed 24 Sep 2025 18:01:49 +0000 ROA not before: Wed 24 Sep 2025 18:01:49 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.35.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:7a:27:b7:e6:8c:28:73:89:d6:35:5b:02:16:74:f5:df:db:39:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 18:01:49 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=6b2227290ba0140aeed41179f4a619c347c017d47e17b7c7aca670c9d620d1e2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:4e:df:e7:a5:b1:97:32:b1:60:da:43:59:5e: 4a:86:ba:f2:46:75:a1:37:0f:f8:46:90:77:e7:64: 43:49:7d:9e:e7:cf:45:bc:c2:bd:8e:3a:93:fe:81: 7d:38:a8:d8:bb:78:d9:1a:af:08:53:b9:a1:b1:f8: 01:a5:20:48:74:60:e9:6e:2e:1a:cf:da:3c:ce:62: 38:59:ea:32:36:ff:c4:5e:fd:47:12:ff:22:b4:93: fa:68:b1:86:07:49:ad:26:fc:11:6d:e5:6a:03:1f: 12:18:32:f4:31:17:68:c5:95:e5:e3:71:68:2c:7b: cd:0e:02:ef:1f:6c:c6:43:d1:37:15:21:76:f7:04: 41:00:ce:ee:ec:85:82:1f:d7:4f:f6:19:64:bb:87: 40:63:4b:20:4a:f9:fb:e6:4a:54:54:25:e4:90:75: 7e:39:e6:ed:8b:15:f7:79:4e:a5:dd:fb:2c:aa:69: f6:6f:c9:9d:2f:67:bf:9e:c3:c2:0e:ff:2f:df:dc: ce:59:47:a4:54:ce:88:7d:79:4b:3a:08:e8:39:b2: 0e:90:a9:5f:e0:28:ee:da:72:4a:ac:a0:fe:cc:7c: 74:9b:82:fd:cd:2c:05:f1:0a:28:ce:bf:63:a2:8f: 4b:7e:5e:26:3d:b5:6f:7d:85:22:7d:5e:56:ab:9a: f9:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:DF:FB:20:9C:38:BE:D7:3E:CA:40:5D:43:65:3B:48:6E:72:1E:E2 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/30eb29a7-375d-42ef-9224-582e7565f672.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.35.34.0/24 Signature Algorithm: sha256WithRSAEncryption 05:d3:b9:e2:42:c1:d7:8e:a3:03:2e:36:59:96:c0:0c:c9:b7: bc:c0:da:b3:7e:64:d1:50:b7:ce:c5:4d:33:b5:8d:d4:38:72: 1a:97:f3:66:90:ca:df:06:01:1e:5c:e1:1c:91:65:30:ec:43: 1b:b3:c8:ea:fd:b0:75:eb:f7:60:3d:4e:65:ee:b5:2b:0e:d5: 22:c4:10:37:47:85:a0:82:42:76:38:57:3a:fd:fa:07:1d:8c: 97:c6:cb:35:80:d5:fd:32:cd:a3:8d:70:34:90:f0:41:2c:f1: 05:67:ef:f4:06:41:b1:84:a6:cb:f2:e3:48:37:00:51:d8:36: 25:e9:f9:da:ef:82:92:87:55:1e:ed:22:f4:5d:95:58:d2:22: 62:e9:d5:f1:ab:e7:0c:69:dd:4b:cc:a4:60:77:e5:ec:8f:9a: 52:25:ba:8a:6c:12:6a:b3:10:e7:06:8b:b7:eb:c2:c9:d2:a7: 1c:6b:54:23:2e:86:ec:66:82:bf:d4:4a:59:74:b8:08:b3:3f: e1:ea:df:1f:58:9d:28:79:94:3b:d3:64:7a:04:35:cc:d0:ab: 6d:be:4c:87:d3:b5:4e:b0:0b:06:4b:ac:1c:16:6d:98:70:05: c8:50:fc:dc:0c:a2:63:2a:e4:72:08:47:a7:d3:10:5a:02:63: c2:36:52:64 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUN3ont+aMKHOJ1jVbAhZ09d/bOcAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MTgwMTQ5WhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A2YjIyMjcyOTBiYTAxNDBhZWVkNDExNzlmNGE2MTljMzQ3 YzAxN2Q0N2UxN2I3YzdhY2E2NzBjOWQ2MjBkMWUyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDsTt/npbGXMrFg2kNZXkqGuvJGdaE3D/hGkHfnZENJfZ7n z0W8wr2OOpP+gX04qNi7eNkarwhTuaGx+AGlIEh0YOluLhrP2jzOYjhZ6jI2/8Re /UcS/yK0k/posYYHSa0m/BFt5WoDHxIYMvQxF2jFleXjcWgse80OAu8fbMZD0TcV IXb3BEEAzu7shYIf10/2GWS7h0BjSyBK+fvmSlRUJeSQdX455u2LFfd5TqXd+yyq afZvyZ0vZ7+ew8IO/y/f3M5ZR6RUzoh9eUs6COg5sg6QqV/gKO7ackqsoP7MfHSb gv3NLAXxCijOv2Oij0t+XiY9tW99hSJ9XlarmvlZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU9t/7IJw4vtc+ykBdQ2U7SG5yHuIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzMwZWIyOWE3LTM3NWQtNDJlZi05MjI0LTU4MmU3NTY1ZjY3Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAANIyIwDQYJKoZIhvcNAQELBQADggEBAAXTueJCwdeOowMuNlmWwAzJt7zA 2rN+ZNFQt87FTTO1jdQ4chqX82aQyt8GAR5c4RyRZTDsQxuzyOr9sHXr92A9TmXu tSsO1SLEEDdHhaCCQnY4Vzr9+gcdjJfGyzWA1f0yzaONcDSQ8EEs8QVn7/QGQbGE psvy40g3AFHYNiXp+drvgpKHVR7tIvRdlVjSImLp1fGr5wxp3UvMpGB35eyPmlIl uopsEmqzEOcGi7frwsnSpxxrVCMuhuxmgr/USll0uAizP+Hq3x9YnSh5lDvTZHoE NczQq22+TIfTtU6wCwZLrBwWbZhwBchQ/NwMomMq5HIIR6fTEFoCY8I2UmQ= -----END CERTIFICATE-----Generated at Fri Oct 17 22:15:27 2025 by rpki-client