$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6aacfbed-06a0-4a01-b178-07efbcec22ad.roa File: 6aacfbed-06a0-4a01-b178-07efbcec22ad.roa (raw, json) Hash identifier: wTz0Fk8ZXvUi0KQu83XyDOPKd6UL0gko/Ck5h3mb0RA= Subject key identifier: EE:C1:6E:45:5B:2A:71:BF:71:F6:22:3D:56:A8:8E:80:6F:08:11:41 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6F500EDE40A276FC94FF10A5C4AD5D8F847DB982 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6aacfbed-06a0-4a01-b178-07efbcec22ad.roa Signing time: Wed 24 Sep 2025 17:53:38 +0000 ROA not before: Wed 24 Sep 2025 17:53:38 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.35.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:50:0e:de:40:a2:76:fc:94:ff:10:a5:c4:ad:5d:8f:84:7d:b9:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 17:53:38 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=bc5db0e4e2d9a1405fb761f4618bd869f2c86f17ea72a6f4354807a71f34f215, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ec:26:60:e3:cd:2f:49:c3:66:60:68:1f:27: 38:98:da:1b:82:dc:70:54:1e:c6:43:90:03:6e:55: 6e:d3:df:8c:7f:e0:5b:92:d7:8e:28:d8:db:46:e1: a0:02:1e:2b:19:77:f0:48:86:3e:f2:2a:78:8d:cb: 92:3b:7e:2d:d8:a5:f5:bc:59:58:9a:d1:b4:7c:50: b8:d9:ff:ad:fc:9d:d8:89:17:f5:4f:91:49:b6:8d: 45:9c:82:93:aa:57:cb:7f:a2:e5:60:c3:20:4c:75: 54:e0:3b:b5:e9:13:f1:ec:98:29:b6:fd:fa:e0:ed: 0c:83:3b:3a:8a:ab:2b:53:f2:e4:aa:4b:d8:9a:07: 46:74:98:04:eb:ef:37:27:c3:88:f2:95:91:dd:be: 38:b7:37:73:56:04:77:36:29:9b:9c:2f:22:00:3e: f1:5d:35:b0:ad:a0:04:d4:ab:09:db:1e:56:fe:0d: c5:72:0f:17:8a:ea:d5:bb:da:2e:2a:81:2e:d0:59: 7c:79:35:dc:75:08:2a:f9:43:01:23:36:67:fc:58: 35:dc:fd:8f:3e:8e:36:69:14:0b:fa:1a:6c:05:e7: 22:3a:6c:3d:3d:6a:1e:db:df:18:bc:42:c8:e0:e0: e2:a3:5e:6e:42:55:95:26:4b:92:dd:ef:2b:27:5e: ff:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:C1:6E:45:5B:2A:71:BF:71:F6:22:3D:56:A8:8E:80:6F:08:11:41 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6aacfbed-06a0-4a01-b178-07efbcec22ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.35.113.0/24 Signature Algorithm: sha256WithRSAEncryption 19:45:7d:13:36:bb:3c:49:a5:aa:64:8c:62:f5:c1:01:89:72: e0:ff:ed:bf:9e:8a:22:c9:5f:a4:a7:8e:ee:58:5e:ab:df:7a: 39:98:a1:a4:95:be:8a:72:5b:92:4a:49:74:98:93:d3:62:e6: ff:53:af:a2:ec:b0:dd:f4:89:9c:4d:d5:d2:95:f0:c1:6c:68: 63:fa:96:a0:9b:30:12:bf:cf:f1:4d:8d:2f:31:20:8a:d8:0d: ba:3d:ce:22:aa:a9:db:8e:c5:cc:88:ef:5e:50:05:81:72:8c: c9:bb:c8:ae:7e:ff:9a:e8:83:5b:df:fa:69:0b:bb:47:ad:68: 81:c2:24:e9:84:63:7c:98:8f:78:00:1e:0c:f0:ef:e0:09:8d: ca:0c:d7:4c:9b:e2:3a:45:43:c5:ed:02:10:26:a8:21:6d:a7: fd:9a:e4:6f:bc:8d:66:77:3a:82:9b:b6:2d:c7:66:02:58:1f: b5:32:41:03:e5:3a:0e:e7:96:9c:9d:d6:37:31:87:2b:26:51: b6:bf:82:da:0a:90:fa:75:12:74:9f:ec:14:df:53:f0:37:35: 57:e3:14:19:c4:2c:8d:90:e8:61:8d:68:4c:c9:2b:83:44:60: 6a:ce:50:cc:18:4a:2e:39:e8:e5:17:77:1b:6a:9d:76:66:d5: c1:39:53:65 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUb1AO3kCidvyU/xClxK1dj4R9uYIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MTc1MzM4WhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BiYzVkYjBlNGUyZDlhMTQwNWZiNzYxZjQ2MThiZDg2OWYy Yzg2ZjE3ZWE3MmE2ZjQzNTQ4MDdhNzFmMzRmMjE1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZ7CZg480vScNmYGgfJziY2huC3HBUHsZDkANuVW7T34x/ 4FuS144o2NtG4aACHisZd/BIhj7yKniNy5I7fi3YpfW8WVia0bR8ULjZ/638ndiJ F/VPkUm2jUWcgpOqV8t/ouVgwyBMdVTgO7XpE/HsmCm2/frg7QyDOzqKqytT8uSq S9iaB0Z0mATr7zcnw4jylZHdvji3N3NWBHc2KZucLyIAPvFdNbCtoATUqwnbHlb+ DcVyDxeK6tW72i4qgS7QWXx5Ndx1CCr5QwEjNmf8WDXc/Y8+jjZpFAv6GmwF5yI6 bD09ah7b3xi8Qsjg4OKjXm5CVZUmS5Ld7ysnXv8TAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU7sFuRVsqcb9x9iI9VqiOgG8IEUEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzZhYWNmYmVkLTA2YTAtNGEwMS1iMTc4LTA3ZWZiY2VjMjJhZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAANI3EwDQYJKoZIhvcNAQELBQADggEBABlFfRM2uzxJpapkjGL1wQGJcuD/ 7b+eiiLJX6Snju5YXqvfejmYoaSVvopyW5JKSXSYk9Ni5v9Tr6LssN30iZxN1dKV 8MFsaGP6lqCbMBK/z/FNjS8xIIrYDbo9ziKqqduOxcyI715QBYFyjMm7yK5+/5ro g1vf+mkLu0etaIHCJOmEY3yYj3gAHgzw7+AJjcoM10yb4jpFQ8XtAhAmqCFtp/2a 5G+8jWZ3OoKbti3HZgJYH7UyQQPlOg7nlpyd1jcxhysmUba/gtoKkPp1EnSf7BTf U/A3NVfjFBnELI2Q6GGNaEzJK4NEYGrOUMwYSi456OUXdxtqnXZm1cE5U2U= -----END CERTIFICATE-----Generated at Fri Oct 17 21:57:18 2025 by rpki-client