$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/35695218-9bbf-4634-88f5-f39c4a2263c9.roa File: 35695218-9bbf-4634-88f5-f39c4a2263c9.roa (raw, json) Hash identifier: ZuJ0mQk8rlDXt+feYJNw95LRErK3uojLKsTQY179G3Q= Subject key identifier: EE:7C:F9:01:C0:85:71:46:C8:79:EE:FC:95:44:7E:07:50:CD:89:92 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 385858D0B1A685605EFFE4269F40A51177A3D79B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/35695218-9bbf-4634-88f5-f39c4a2263c9.roa Signing time: Wed 24 Sep 2025 18:42:17 +0000 ROA not before: Wed 24 Sep 2025 18:42:17 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.35.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:58:58:d0:b1:a6:85:60:5e:ff:e4:26:9f:40:a5:11:77:a3:d7:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 18:42:17 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=dbeec03aafa574432675bc259cffc0ea60f8d128768683a43ca1d39e815e90f9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:bc:59:33:0d:87:d3:01:4b:29:3f:98:c7:47: c3:03:47:63:a0:65:15:41:33:60:6d:5a:63:8a:c0: 8a:1e:da:35:78:fd:0d:43:cd:d5:ca:f1:02:c7:b2: 51:64:cc:05:90:85:81:b7:50:e9:3b:82:b6:aa:6f: 70:6c:e3:f6:6e:a9:ae:9d:83:b9:b6:fa:87:3a:4e: ae:68:46:9b:eb:b4:32:ec:24:68:51:43:43:92:a6: a7:d0:10:98:79:92:e7:99:05:10:17:16:0d:94:b7: 63:d8:68:bb:4e:e0:dd:57:23:2c:56:96:15:8d:15: 70:1b:3f:6d:b5:ea:48:1f:96:ef:87:7b:18:a1:40: bc:91:73:92:25:fa:bd:8a:00:f8:ce:91:cd:d2:02: 16:07:92:a0:b8:7a:51:bf:c5:69:cd:24:28:fc:b1: 28:b1:59:7e:df:ea:e1:77:78:a4:62:33:69:36:2e: 79:c5:64:45:20:88:0e:6e:68:08:ed:d3:8e:f7:ed: ae:64:5b:92:9f:a6:aa:e1:b1:32:30:e1:12:e0:01: f5:b8:3b:18:15:ef:23:75:31:6d:9d:53:4b:01:bd: ba:00:bd:68:e9:18:e5:99:6d:ab:06:27:fc:ad:eb: 9d:41:60:16:02:40:1b:69:4f:d2:1f:f8:80:58:8e: d1:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:7C:F9:01:C0:85:71:46:C8:79:EE:FC:95:44:7E:07:50:CD:89:92 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/35695218-9bbf-4634-88f5-f39c4a2263c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.35.236.0/22 Signature Algorithm: sha256WithRSAEncryption aa:ad:5b:a1:e2:db:89:20:1d:c3:d5:4b:92:d0:2b:4b:3f:be: 95:f5:de:01:71:62:56:d5:d2:6a:07:d5:b5:5d:e0:8e:92:70: d9:f2:4e:ee:0d:a8:cb:02:70:7f:c0:e9:bc:7e:61:6a:9f:31: d4:fa:6d:62:00:e4:11:a0:d2:1a:49:21:4f:d6:d0:56:52:f4: 3a:80:61:4f:da:b5:42:99:10:95:88:94:7d:df:8f:9a:c2:ed: 84:60:be:d8:1e:48:10:7d:2a:c3:99:b3:38:fa:7c:06:2c:51: d0:17:e0:7c:ad:97:7f:7b:1f:87:5b:44:5c:b7:f1:5f:63:28: 94:35:5c:1c:af:0f:ed:0e:72:9e:06:17:f0:f8:dc:7a:b7:af: a8:4f:b4:16:36:3c:72:d0:cc:30:8a:e4:e5:a1:94:3e:ec:9a: 83:a0:b7:db:c9:39:44:19:95:19:18:26:12:58:d9:6c:6b:08: 41:fb:1e:f7:12:57:be:66:24:0d:ad:a0:e3:3a:3c:ad:ba:39: 90:2a:49:f5:14:f3:6a:39:5e:7a:03:b2:48:d8:c1:e0:c1:ad: e1:df:59:85:40:38:5e:82:aa:e8:10:ee:a3:93:79:99:34:e2: 79:04:30:be:6c:23:2d:e7:af:34:6c:b4:e7:40:c0:94:e4:df: 6f:c3:9b:c7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOFhY0LGmhWBe/+Qmn0ClEXej15swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MTg0MjE3WhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BkYmVlYzAzYWFmYTU3NDQzMjY3NWJjMjU5Y2ZmYzBlYTYw ZjhkMTI4NzY4NjgzYTQzY2ExZDM5ZTgxNWU5MGY5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDuvFkzDYfTAUspP5jHR8MDR2OgZRVBM2BtWmOKwIoe2jV4 /Q1DzdXK8QLHslFkzAWQhYG3UOk7graqb3Bs4/Zuqa6dg7m2+oc6Tq5oRpvrtDLs JGhRQ0OSpqfQEJh5kueZBRAXFg2Ut2PYaLtO4N1XIyxWlhWNFXAbP2216kgflu+H exihQLyRc5Il+r2KAPjOkc3SAhYHkqC4elG/xWnNJCj8sSixWX7f6uF3eKRiM2k2 LnnFZEUgiA5uaAjt04737a5kW5KfpqrhsTIw4RLgAfW4OxgV7yN1MW2dU0sBvboA vWjpGOWZbasGJ/yt651BYBYCQBtpT9If+IBYjtEBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU7nz5AcCFcUbIee78lUR+B1DNiZIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzM1Njk1MjE4LTliYmYtNDYzNC04OGY1LWYzOWM0YTIyNjNjOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAINI+wwDQYJKoZIhvcNAQELBQADggEBAKqtW6Hi24kgHcPVS5LQK0s/vpX1 3gFxYlbV0moH1bVd4I6ScNnyTu4NqMsCcH/A6bx+YWqfMdT6bWIA5BGg0hpJIU/W 0FZS9DqAYU/atUKZEJWIlH3fj5rC7YRgvtgeSBB9KsOZszj6fAYsUdAX4Hytl397 H4dbRFy38V9jKJQ1XByvD+0Ocp4GF/D43Hq3r6hPtBY2PHLQzDCK5OWhlD7smoOg t9vJOUQZlRkYJhJY2WxrCEH7HvcSV75mJA2toOM6PK26OZAqSfUU82o5XnoDskjY weDBreHfWYVAOF6CqugQ7qOTeZk04nkEML5sIy3nrzRstOdAwJTk32/Dm8c= -----END CERTIFICATE-----Generated at Sat Oct 18 07:32:13 2025 by rpki-client