$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4877503f-348b-4611-a72c-26eb2152177c.roa File: 4877503f-348b-4611-a72c-26eb2152177c.roa (raw, json) Hash identifier: Hhbba2Ba7HqUHt7hJhBHw+UyW/PirvygV4JnFeYauXI= Subject key identifier: 7C:0F:50:7C:AA:50:30:39:B2:1B:C3:EC:63:8D:78:0D:49:03:CE:DE Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2D4B656EECD986948F5F974456D897865E6752DD Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4877503f-348b-4611-a72c-26eb2152177c.roa Signing time: Wed 24 Sep 2025 17:54:02 +0000 ROA not before: Wed 24 Sep 2025 17:54:02 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.35.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:4b:65:6e:ec:d9:86:94:8f:5f:97:44:56:d8:97:86:5e:67:52:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 17:54:02 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=2facbc0b4b4d26c8d19603136653d190ef014a994ff203ce89903d296530cd73, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:82:6b:48:c6:b0:90:bc:d1:e9:9c:d3:66:78: 3b:e1:28:05:1a:0f:31:16:96:8c:9a:df:f5:67:6f: ba:7d:9f:a1:36:5b:01:08:46:19:d5:ab:62:d0:8f: b4:51:83:b2:df:41:dc:6c:6b:64:73:d8:e6:21:ce: 47:ec:d3:e7:51:08:91:1e:d2:fa:e2:f1:35:9b:0f: ec:e7:a1:e4:ca:0f:3e:11:fa:fc:5d:b5:c1:33:7e: 1d:fc:08:43:0c:92:4c:7f:3d:cc:13:4c:2c:9b:4a: 3b:2f:53:bb:69:6e:a5:c5:9d:58:ce:07:61:2c:d4: 3f:4d:96:a4:f5:51:5d:55:da:f0:c9:00:ed:f1:24: 48:78:2b:dd:ec:a4:64:f9:9b:67:5f:61:6b:91:92: 5c:c4:bf:86:20:b6:66:30:24:5e:97:69:8d:b3:4f: c3:8f:cc:1b:b9:7e:02:0e:23:58:fb:b9:1c:cc:e6: 6f:61:b0:40:25:a3:02:12:db:69:9a:68:0d:d3:6c: 26:23:31:3e:44:af:40:ff:8a:01:24:7b:5e:28:55: a6:66:c5:13:5b:da:f8:06:ac:99:b4:c6:7a:a5:f9: 24:54:4e:ca:3f:43:cc:f6:41:6a:00:97:53:bb:36: 45:00:6e:2c:26:c6:bd:99:2b:37:73:e4:c4:d7:9a: 30:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:0F:50:7C:AA:50:30:39:B2:1B:C3:EC:63:8D:78:0D:49:03:CE:DE X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4877503f-348b-4611-a72c-26eb2152177c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.35.132.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:c1:76:d5:f2:13:52:b3:37:4f:00:b4:4a:b3:d8:20:db:d2: f6:8b:c1:1b:88:50:85:68:ce:5a:34:de:62:57:6f:7b:e6:b5: ac:b0:a6:87:64:17:cc:1c:5f:75:47:d9:95:be:62:aa:1d:ff: 78:4f:22:72:84:5e:fb:81:42:1e:02:e5:de:16:2d:71:42:b1: 58:ed:b0:b0:71:c6:ce:2f:60:7c:6b:8f:ef:c3:fd:c1:25:87: 26:d1:14:cf:79:73:80:1a:93:81:cc:be:e9:60:a5:e1:4a:e6: 62:25:d7:89:ab:cf:a0:a4:be:52:4e:4d:11:9b:58:48:40:cd: 0d:57:18:1c:51:3e:c1:7d:5c:34:f0:c3:8a:0a:5d:a8:fc:c6: fc:04:c3:29:f8:41:6c:d1:24:33:6b:08:5b:6a:9d:06:2d:68: b5:f6:01:a0:f8:17:ac:b8:dc:44:49:16:ae:5c:e1:28:b3:6c: 1a:1c:3a:4f:dd:2d:99:7f:11:92:e9:fb:b3:82:bf:8f:e3:dd: 3c:2c:6d:fb:83:ee:c2:30:90:1a:bf:1f:45:e3:d5:c8:99:87: 02:55:df:9f:c9:bf:13:da:34:dd:58:3d:1f:2b:23:f3:a9:43: 54:6a:b8:32:56:bb:61:49:27:05:c5:d1:bc:90:80:b8:67:9d: 4a:27:45:fe -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULUtlbuzZhpSPX5dEVtiXhl5nUt0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MTc1NDAyWhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0AyZmFjYmMwYjRiNGQyNmM4ZDE5NjAzMTM2NjUzZDE5MGVm MDE0YTk5NGZmMjAzY2U4OTkwM2QyOTY1MzBjZDczMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDjgmtIxrCQvNHpnNNmeDvhKAUaDzEWloya3/Vnb7p9n6E2 WwEIRhnVq2LQj7RRg7LfQdxsa2Rz2OYhzkfs0+dRCJEe0vri8TWbD+znoeTKDz4R +vxdtcEzfh38CEMMkkx/PcwTTCybSjsvU7tpbqXFnVjOB2Es1D9NlqT1UV1V2vDJ AO3xJEh4K93spGT5m2dfYWuRklzEv4YgtmYwJF6XaY2zT8OPzBu5fgIOI1j7uRzM 5m9hsEAlowIS22maaA3TbCYjMT5Er0D/igEke14oVaZmxRNb2vgGrJm0xnql+SRU Tso/Q8z2QWoAl1O7NkUAbiwmxr2ZKzdz5MTXmjCNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUfA9QfKpQMDmyG8PsY414DUkDzt4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQ4Nzc1MDNmLTM0OGItNDYxMS1hNzJjLTI2ZWIyMTUyMTc3Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAANI4QwDQYJKoZIhvcNAQELBQADggEBAC3BdtXyE1KzN08AtEqz2CDb0vaL wRuIUIVozlo03mJXb3vmtaywpodkF8wcX3VH2ZW+Yqod/3hPInKEXvuBQh4C5d4W LXFCsVjtsLBxxs4vYHxrj+/D/cElhybRFM95c4Aak4HMvulgpeFK5mIl14mrz6Ck vlJOTRGbWEhAzQ1XGBxRPsF9XDTww4oKXaj8xvwEwyn4QWzRJDNrCFtqnQYtaLX2 AaD4F6y43ERJFq5c4SizbBocOk/dLZl/EZLp+7OCv4/j3TwsbfuD7sIwkBq/H0Xj 1ciZhwJV35/JvxPaNN1YPR8rI/OpQ1RquDJWu2FJJwXF0byQgLhnnUonRf4= -----END CERTIFICATE-----Generated at Sat Oct 18 05:11:56 2025 by rpki-client