$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3fe34922-d20e-4d79-a696-63218e343754.roa File: 3fe34922-d20e-4d79-a696-63218e343754.roa (raw, json) Hash identifier: TE2X98kWC/jGgwhmRPxi+wSObCByPqw4wUaKwoIn60M= Subject key identifier: D2:B6:AD:E1:99:EF:9F:65:3B:CC:F8:FE:80:72:A6:C1:92:4F:25:C6 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 646C840BA62B00FFB01D4CDC6FCDB2B1AEDE1D27 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3fe34922-d20e-4d79-a696-63218e343754.roa Signing time: Wed 24 Sep 2025 18:12:38 +0000 ROA not before: Wed 24 Sep 2025 18:12:38 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.32.240.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:6c:84:0b:a6:2b:00:ff:b0:1d:4c:dc:6f:cd:b2:b1:ae:de:1d:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 18:12:38 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=a433f754361dd05c9259b3e56a6ba741f7fe2dc92c5172d06de0f2cb6d05c3ba, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f2:15:c6:65:4a:c3:f6:11:d7:6b:69:98:54: a5:14:cd:c7:39:f9:94:f8:71:5e:d8:f9:18:6c:41: d3:56:d8:73:d7:65:26:1a:c5:63:7b:c3:a3:67:b3: 6d:0f:14:5c:45:c8:fa:97:8a:ec:93:0e:16:d6:4e: 64:e9:02:42:04:df:32:74:5c:48:2a:a4:50:1e:a3: 59:2d:50:92:16:0a:51:b3:32:af:e5:a1:d7:83:f4: 45:83:84:2f:a8:db:41:12:07:9f:a0:27:b0:7c:1e: 45:93:96:72:8a:a2:74:cc:b8:6c:a7:07:9b:d0:f8: 64:04:c0:11:94:27:e2:70:1b:e0:fb:6b:6f:d2:f5: 31:f7:20:74:bf:d5:40:5a:78:d1:79:54:97:40:83: 48:0c:bc:5e:a3:eb:d2:8f:d7:d4:52:8e:8a:a1:b9: 9d:7e:90:20:85:97:d7:e9:04:ad:74:0c:2d:a3:b7: 3d:88:8a:c9:6a:c1:15:97:d3:85:64:af:5f:3e:12: 98:3a:ac:b4:8c:4d:fe:7e:e3:87:a2:70:59:ca:f5: 98:17:f0:8f:d2:6d:ce:8b:04:cb:a1:15:89:ec:b2: d9:62:2b:f5:16:bf:79:6d:b7:dd:f1:78:ab:5b:40: 0b:66:4c:a5:bb:26:35:eb:a1:81:d3:ee:6a:ed:78: a6:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:B6:AD:E1:99:EF:9F:65:3B:CC:F8:FE:80:72:A6:C1:92:4F:25:C6 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3fe34922-d20e-4d79-a696-63218e343754.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.32.240.0/23 Signature Algorithm: sha256WithRSAEncryption 98:e6:5a:4d:ac:7f:2c:cb:91:0c:38:53:f8:0b:61:c1:b0:77: 13:ba:ff:82:3d:6d:da:26:bb:31:69:8e:04:54:22:0c:1e:57: 31:dc:2d:76:2d:a7:d3:17:46:47:c4:b5:70:3e:77:4d:82:94: 74:75:d7:de:78:ac:bd:0e:d9:ec:84:da:27:cf:c0:85:ac:77: 08:f8:c4:66:29:cb:86:82:6f:a4:1c:e1:8c:1c:00:e0:2e:11: 5c:30:1c:aa:f8:f9:12:75:d8:de:3d:ed:0b:9d:bf:79:01:33: 22:b8:bd:fc:e9:7f:bd:8b:06:ff:3b:f2:e1:ec:bd:17:87:c1: aa:4c:57:15:ed:e5:00:ed:72:87:6f:81:66:5c:e2:55:19:a2: 45:61:23:0e:04:0f:c4:47:3e:30:95:e1:46:ef:10:b8:b9:8b: e4:d0:b8:44:5b:98:f0:f2:d9:ea:13:ba:b5:fa:14:6c:a3:5f: 7e:76:93:76:40:af:ee:c3:13:33:3d:31:62:76:7e:ea:70:b9: ad:ef:58:90:bc:1d:a4:e9:33:58:90:a3:6c:35:68:e7:0a:03: dc:f2:36:10:3f:ab:cd:d6:f4:67:f0:ff:6d:54:dd:fc:de:4e: 29:3b:0a:4b:29:05:fb:44:5c:a7:6e:59:1d:1f:de:ed:9a:15: 09:ab:7c:8c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZGyEC6YrAP+wHUzcb82ysa7eHScwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MTgxMjM4WhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BhNDMzZjc1NDM2MWRkMDVjOTI1OWIzZTU2YTZiYTc0MWY3 ZmUyZGM5MmM1MTcyZDA2ZGUwZjJjYjZkMDVjM2JhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCg8hXGZUrD9hHXa2mYVKUUzcc5+ZT4cV7Y+RhsQdNW2HPX ZSYaxWN7w6Nns20PFFxFyPqXiuyTDhbWTmTpAkIE3zJ0XEgqpFAeo1ktUJIWClGz Mq/lodeD9EWDhC+o20ESB5+gJ7B8HkWTlnKKonTMuGynB5vQ+GQEwBGUJ+JwG+D7 a2/S9TH3IHS/1UBaeNF5VJdAg0gMvF6j69KP19RSjoqhuZ1+kCCFl9fpBK10DC2j tz2IislqwRWX04Vkr18+Epg6rLSMTf5+44eicFnK9ZgX8I/Sbc6LBMuhFYnsstli K/UWv3ltt93xeKtbQAtmTKW7JjXroYHT7mrteKbjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU0rat4Znvn2U7zPj+gHKmwZJPJcYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzNmZTM0OTIyLWQyMGUtNGQ3OS1hNjk2LTYzMjE4ZTM0Mzc1NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAENIPAwDQYJKoZIhvcNAQELBQADggEBAJjmWk2sfyzLkQw4U/gLYcGwdxO6 /4I9bdomuzFpjgRUIgweVzHcLXYtp9MXRkfEtXA+d02ClHR11954rL0O2eyE2ifP wIWsdwj4xGYpy4aCb6Qc4YwcAOAuEVwwHKr4+RJ12N497Qudv3kBMyK4vfzpf72L Bv878uHsvReHwapMVxXt5QDtcodvgWZc4lUZokVhIw4ED8RHPjCV4UbvELi5i+TQ uERbmPDy2eoTurX6FGyjX352k3ZAr+7DEzM9MWJ2fupwua3vWJC8HaTpM1iQo2w1 aOcKA9zyNhA/q83W9Gfw/21U3fzeTik7CkspBftEXKduWR0f3u2aFQmrfIw= -----END CERTIFICATE-----Generated at Sat Oct 18 02:36:26 2025 by rpki-client