$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/627625a2-232a-4623-a06b-c154be7c9a09.roa File: 627625a2-232a-4623-a06b-c154be7c9a09.roa (raw, json) Hash identifier: YBW4xIOlRLRfA49pGjmpTD4Yo4sBMomtCVR+ooM3URw= Subject key identifier: 14:47:69:1F:36:0C:6B:69:E0:42:C3:FF:45:8F:3E:0E:B0:A1:BF:DD Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4E8E2D06663655001AA1C1BF000A20E141F60408 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/627625a2-232a-4623-a06b-c154be7c9a09.roa Signing time: Wed 24 Sep 2025 18:30:38 +0000 ROA not before: Wed 24 Sep 2025 18:30:38 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.35.54.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:8e:2d:06:66:36:55:00:1a:a1:c1:bf:00:0a:20:e1:41:f6:04:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 18:30:38 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=cebc29f6d742fe31d07639eee5229aeb9d71fe7291e3bbfe3b01842b983e1720, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:69:78:0d:60:94:ef:ad:8b:7e:1a:cf:1d:8a: 7e:f8:95:e9:8a:ed:68:1e:96:95:0d:42:1d:7c:a9: 59:de:30:d1:e8:f6:91:bf:53:78:26:58:e1:91:87: 5a:b5:c5:2f:c8:5f:e9:1a:bc:89:44:43:dc:79:02: e9:87:75:50:82:ed:ca:55:cb:46:df:7e:52:e1:60: 28:94:d2:56:bd:40:ce:e4:0d:7a:6c:5b:5a:d5:85: 03:6c:27:04:82:4a:fa:49:ab:0e:fb:1a:35:f0:ab: 70:87:99:13:30:47:af:0b:52:91:70:0f:66:dc:b7: c0:16:75:c3:6b:6d:a1:1b:3f:b6:49:85:fd:8e:8b: 83:b2:3f:cc:f3:3a:cb:2f:65:f7:35:2e:8e:5b:e8: a9:65:b2:22:4b:d8:52:e1:87:03:c5:10:f2:b0:d6: a2:1f:2b:08:87:77:c1:4e:25:45:4c:da:38:15:53: c9:87:a8:6a:b7:5c:3e:26:dc:f4:da:fa:3b:8b:e5: 95:f2:9c:cf:aa:70:e1:13:7a:99:b5:05:31:61:ab: b9:88:99:ea:5b:65:3a:66:ca:47:d1:d4:e2:a7:d6: 70:72:76:0c:93:25:36:3a:f8:8a:a4:ef:5c:fc:50: 38:a0:ab:20:8e:d8:54:5b:65:0f:3d:7e:d9:ea:ca: 3e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:47:69:1F:36:0C:6B:69:E0:42:C3:FF:45:8F:3E:0E:B0:A1:BF:DD X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/627625a2-232a-4623-a06b-c154be7c9a09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.35.54.0/23 Signature Algorithm: sha256WithRSAEncryption 9b:11:48:4d:64:d4:27:1e:df:7a:1c:7b:97:a4:e9:8d:09:3a: cd:a4:c9:e6:51:8e:c1:55:16:cc:80:22:5d:6e:ea:01:5c:fd: ec:3c:3d:a6:61:dc:4b:45:30:42:4b:41:ab:ec:a0:6a:62:c7: 7b:09:1b:b8:9a:5b:db:9b:35:90:a2:97:e0:ac:53:d8:e6:2a: 9d:22:aa:68:b6:a3:02:5d:60:4f:ac:b5:c6:4d:75:29:57:d6: b6:4c:da:13:d8:e8:4d:fa:5d:1f:10:d6:7d:8e:0e:50:d9:9e: 27:c0:f3:88:0a:24:b1:98:49:ea:27:61:1f:59:34:55:3a:5b: c2:13:aa:74:c1:c5:49:24:9d:cb:f0:08:6c:05:2b:aa:31:21: 97:cd:1b:ae:46:5b:ba:be:98:09:ca:29:33:31:d9:b6:67:ce: c0:3c:9d:f0:33:28:b3:85:b4:13:c3:a0:31:3c:68:92:e6:15: 8f:6a:27:64:9a:da:5a:f6:fc:6d:1f:b4:31:72:95:68:89:3d: 67:11:c5:07:05:ad:f1:66:6e:89:87:79:b7:74:fb:73:8e:a1: 6f:7f:55:31:fc:7e:c5:99:bb:f5:7b:89:c0:86:7c:19:18:bb: ed:a7:83:ab:4f:11:aa:3b:47:73:b2:a1:fb:23:8e:ed:cb:84: 8e:3f:d6:25 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTo4tBmY2VQAaocG/AAog4UH2BAgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MTgzMDM4WhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BjZWJjMjlmNmQ3NDJmZTMxZDA3NjM5ZWVlNTIyOWFlYjlk NzFmZTcyOTFlM2JiZmUzYjAxODQyYjk4M2UxNzIwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxaXgNYJTvrYt+Gs8din74lemK7WgelpUNQh18qVneMNHo 9pG/U3gmWOGRh1q1xS/IX+kavIlEQ9x5AumHdVCC7cpVy0bfflLhYCiU0la9QM7k DXpsW1rVhQNsJwSCSvpJqw77GjXwq3CHmRMwR68LUpFwD2bct8AWdcNrbaEbP7ZJ hf2Oi4OyP8zzOssvZfc1Lo5b6KllsiJL2FLhhwPFEPKw1qIfKwiHd8FOJUVM2jgV U8mHqGq3XD4m3PTa+juL5ZXynM+qcOETepm1BTFhq7mImepbZTpmykfR1OKn1nBy dgyTJTY6+Iqk71z8UDigqyCO2FRbZQ89ftnqyj6jAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUFEdpHzYMa2ngQsP/RY8+DrChv90wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzYyNzYyNWEyLTIzMmEtNDYyMy1hMDZiLWMxNTRiZTdjOWEwOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAENIzYwDQYJKoZIhvcNAQELBQADggEBAJsRSE1k1Cce33oce5ek6Y0JOs2k yeZRjsFVFsyAIl1u6gFc/ew8PaZh3EtFMEJLQavsoGpix3sJG7iaW9ubNZCil+Cs U9jmKp0iqmi2owJdYE+stcZNdSlX1rZM2hPY6E36XR8Q1n2ODlDZnifA84gKJLGY SeonYR9ZNFU6W8ITqnTBxUkkncvwCGwFK6oxIZfNG65GW7q+mAnKKTMx2bZnzsA8 nfAzKLOFtBPDoDE8aJLmFY9qJ2Sa2lr2/G0ftDFylWiJPWcRxQcFrfFmbomHebd0 +3OOoW9/VTH8fsWZu/V7icCGfBkYu+2ng6tPEao7R3Oyofsjju3LhI4/1iU= -----END CERTIFICATE-----Generated at Fri Oct 17 23:52:29 2025 by rpki-client