$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/45abe27c-a913-42cc-aa4f-ec9418e93312.roa File: 45abe27c-a913-42cc-aa4f-ec9418e93312.roa (raw, json) Hash identifier: fwa4KM/y5Qx7cN6jnZDDVCx1NR2DcGpsuu4j6JsPKsQ= Subject key identifier: F7:42:0F:A2:29:5F:DA:FD:F1:E4:1C:29:B3:15:74:FB:A5:86:35:49 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 522894E0DFD2B1496D6A314B0E49C1550B91BC85 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/45abe27c-a913-42cc-aa4f-ec9418e93312.roa Signing time: Wed 24 Sep 2025 18:44:24 +0000 ROA not before: Wed 24 Sep 2025 18:44:24 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.32.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:28:94:e0:df:d2:b1:49:6d:6a:31:4b:0e:49:c1:55:0b:91:bc:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 18:44:24 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=f75b145ec5390bb90cc382fee2bb2d556a002d7d2235f0ec94bb3e6471bbe28e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e7:bf:16:4f:8b:ab:fd:2c:f0:ad:6e:81:6a: 4b:d1:07:cb:66:c8:9b:45:94:d3:07:62:a0:72:30: 1e:e8:7c:d5:86:44:e8:cb:3f:05:19:31:d5:bb:2e: 72:62:50:1c:e2:eb:76:51:88:8e:87:b0:8e:32:a1: dc:e3:cf:64:a0:b4:85:c9:25:a0:b5:53:c4:62:a6: 15:57:db:82:77:a4:52:30:89:c4:03:55:7e:46:9d: c8:dd:d4:ee:7e:e1:d9:87:1c:a2:32:ee:57:24:40: e1:39:59:e4:35:31:36:16:0c:68:a7:5d:ed:a2:67: 87:e6:bd:be:df:db:c4:05:b4:b9:4c:92:0f:18:a3: a1:81:94:07:a8:1e:8b:e8:0a:d3:e9:31:f9:7f:34: f3:ec:03:1a:6a:98:3c:c3:c5:ed:a5:92:19:1f:1f: 5e:e0:e1:f1:0e:96:c9:3c:90:50:63:95:5a:5b:62: 44:8e:38:5f:92:f0:60:14:1d:26:5b:fa:6c:81:2c: a6:49:e2:5e:46:21:ea:ef:3b:65:a5:bc:b4:53:82: 36:ca:f3:69:4a:ae:0c:42:f0:4a:91:c4:12:6e:dd: 04:ad:5a:a0:cb:73:76:ec:46:54:12:f1:ee:a4:db: db:b8:a6:32:a9:a9:7d:0e:db:72:59:02:ba:82:34: 41:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:42:0F:A2:29:5F:DA:FD:F1:E4:1C:29:B3:15:74:FB:A5:86:35:49 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/45abe27c-a913-42cc-aa4f-ec9418e93312.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.32.144.0/21 Signature Algorithm: sha256WithRSAEncryption 7d:3b:5f:6e:f6:03:64:6e:39:b7:3f:09:02:20:45:d0:57:23: 72:86:94:ad:37:6d:6e:95:fc:5a:37:04:3b:aa:5a:46:11:32: be:a4:a8:12:bf:4b:9c:b3:a0:95:8e:b1:d2:15:49:84:3f:e5: cf:35:b7:f5:73:73:fc:1f:25:83:44:23:2f:9f:34:07:b7:a2: 52:b5:e9:c0:0b:f7:8b:d1:02:31:fc:b3:f7:75:29:f5:27:02: 89:ac:79:94:f6:c1:07:c5:9d:70:18:fc:90:4b:15:38:66:d5: f0:93:07:a7:2f:27:77:b6:e3:23:f3:de:c2:fc:18:95:99:fb: d1:44:6b:56:60:03:af:e1:69:48:fc:1a:09:6a:f0:00:7b:72: 15:44:ad:9f:d7:08:e3:8f:e7:37:69:5f:85:db:cc:04:9f:76: 23:67:31:68:68:b9:b3:f4:5c:01:9a:3e:28:3f:5f:c5:a2:9d: c5:2d:b5:d8:f5:1e:4b:14:56:46:a1:9c:f5:2b:55:dd:8e:12: 26:eb:4c:b2:4e:f9:af:62:02:f4:21:38:5f:24:ef:41:67:ac: 0f:29:e7:8f:50:d8:ed:42:0e:03:fe:75:36:6a:d5:9b:86:d9: 68:4a:ee:18:01:7a:60:5e:eb:89:57:e5:56:26:76:a0:1e:18: 6b:15:d3:b7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUiiU4N/SsUltajFLDknBVQuRvIUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MTg0NDI0WhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BmNzViMTQ1ZWM1MzkwYmI5MGNjMzgyZmVlMmJiMmQ1NTZh MDAyZDdkMjIzNWYwZWM5NGJiM2U2NDcxYmJlMjhlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCk578WT4ur/SzwrW6BakvRB8tmyJtFlNMHYqByMB7ofNWG ROjLPwUZMdW7LnJiUBzi63ZRiI6HsI4yodzjz2SgtIXJJaC1U8RiphVX24J3pFIw icQDVX5Gncjd1O5+4dmHHKIy7lckQOE5WeQ1MTYWDGinXe2iZ4fmvb7f28QFtLlM kg8Yo6GBlAeoHovoCtPpMfl/NPPsAxpqmDzDxe2lkhkfH17g4fEOlsk8kFBjlVpb YkSOOF+S8GAUHSZb+myBLKZJ4l5GIervO2WlvLRTgjbK82lKrgxC8EqRxBJu3QSt WqDLc3bsRlQS8e6k29u4pjKpqX0O23JZArqCNEFvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU90IPoilf2v3x5BwpsxV0+6WGNUkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQ1YWJlMjdjLWE5MTMtNDJjYy1hYTRmLWVjOTQxOGU5MzMxMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMNIJAwDQYJKoZIhvcNAQELBQADggEBAH07X272A2RuObc/CQIgRdBXI3KG lK03bW6V/Fo3BDuqWkYRMr6kqBK/S5yzoJWOsdIVSYQ/5c81t/Vzc/wfJYNEIy+f NAe3olK16cAL94vRAjH8s/d1KfUnAomseZT2wQfFnXAY/JBLFThm1fCTB6cvJ3e2 4yPz3sL8GJWZ+9FEa1ZgA6/haUj8Gglq8AB7chVErZ/XCOOP5zdpX4XbzASfdiNn MWhoubP0XAGaPig/X8WincUttdj1HksUVkahnPUrVd2OEibrTLJO+a9iAvQhOF8k 70FnrA8p549Q2O1CDgP+dTZq1ZuG2WhK7hgBemBe64lX5VYmdqAeGGsV07c= -----END CERTIFICATE-----Generated at Fri Oct 17 22:14:56 2025 by rpki-client