$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/70f290d5-dc5c-4118-9c93-3be3fe0d67ed.roa File: 70f290d5-dc5c-4118-9c93-3be3fe0d67ed.roa (raw, json) Hash identifier: VqHayluqu81m2yNUSB5PN5bRxWrerQtZ0mHMhz8xfOk= Subject key identifier: B7:75:CD:16:0C:12:47:4F:53:91:79:DC:D3:2A:BB:37:6A:08:70:C7 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 679D1962F67C0A49818CF32812D24B2F843BA5BA Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/70f290d5-dc5c-4118-9c93-3be3fe0d67ed.roa Signing time: Wed 24 Sep 2025 18:33:10 +0000 ROA not before: Wed 24 Sep 2025 18:33:10 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.32.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:9d:19:62:f6:7c:0a:49:81:8c:f3:28:12:d2:4b:2f:84:3b:a5:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 18:33:10 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=78b4a84c29ef9a665f6b88f0f8121d5385af7aa4e2d1980eb998c045209b8554, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:79:b9:01:2a:a2:b1:5c:ab:c4:0e:a3:50:14: 65:a4:5c:f3:32:c0:10:69:68:b5:29:35:0e:fb:ac: f8:e8:ca:2e:94:19:32:8a:7f:d4:08:85:08:e4:88: 5d:7f:43:60:e5:7f:16:00:19:85:b9:85:26:d6:d2: f1:3d:69:e3:af:a7:72:ee:66:9f:b7:f3:04:ed:d4: 34:ac:23:1c:d7:15:6c:1e:6b:01:5a:e0:c9:3b:47: 2f:9d:18:1f:26:c3:54:3a:75:4b:6d:b9:6f:38:d2: a9:e2:0d:13:24:64:55:62:51:46:a5:48:a5:47:ec: e6:c0:7c:6f:08:7e:09:92:a1:56:35:1d:45:b5:02: 42:fd:78:0f:af:b7:39:84:9f:2f:f3:a7:4e:28:41: 31:41:76:90:b2:68:a0:21:36:23:1b:d2:de:38:4c: f8:a0:17:7d:a4:08:1a:1c:4d:02:1c:53:19:e9:c0: 02:f6:80:bf:76:3b:af:76:39:41:a6:e1:50:b7:be: 3b:b1:88:e4:59:d9:40:e6:58:62:a8:e2:aa:73:52: fb:f3:f3:3d:02:f0:19:67:24:3e:2a:02:14:53:19: 34:a7:ea:0d:39:a3:2e:b0:4b:72:af:c6:65:0f:32: 35:97:e7:f3:ea:e8:4a:57:0c:3e:30:f2:75:e0:ec: 1d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:75:CD:16:0C:12:47:4F:53:91:79:DC:D3:2A:BB:37:6A:08:70:C7 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/70f290d5-dc5c-4118-9c93-3be3fe0d67ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.32.20.0/22 Signature Algorithm: sha256WithRSAEncryption 0d:80:95:e8:41:43:c0:f2:4f:2c:57:ce:a9:d5:07:f3:cc:d6: 89:8a:39:28:8d:80:29:11:96:76:2f:e8:4b:e4:d5:c0:bf:f9: 5c:72:66:86:52:71:bd:3a:d7:aa:c7:10:bd:74:4d:a2:05:5c: 89:cf:a4:eb:82:b6:19:ff:35:26:5f:ea:e3:6f:19:5a:65:9f: 04:04:e1:af:c5:6b:5d:fc:ec:49:9e:22:cf:3d:71:1c:20:93: b0:49:0f:31:ea:84:ec:35:6b:76:c9:a4:ee:22:ad:eb:02:79: 7c:11:a9:bd:8c:e7:85:7f:8e:de:91:99:ee:d4:54:32:7f:6c: 64:91:05:ff:ae:6b:04:c7:1b:d0:72:d0:8d:52:82:12:51:24: 47:db:92:0b:e8:ce:1d:8d:19:b4:5b:bd:95:fa:f2:f2:02:64: 56:24:67:34:fb:41:82:af:60:1c:3e:ab:3b:31:fa:66:c6:55: b4:d8:29:cc:07:09:f6:6e:01:e3:a2:f6:79:9a:65:f2:a8:2a: af:2d:64:d4:e3:45:1b:36:7a:22:7b:8d:93:8f:7e:da:70:ad: ed:8b:15:5b:79:17:fe:40:7a:a6:8a:e7:f3:85:eb:49:e7:12: 27:a3:b9:08:16:aa:29:9e:e5:2c:83:54:dc:75:48:f2:ef:96: a1:c6:85:22 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZ50ZYvZ8CkmBjPMoEtJLL4Q7pbowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MTgzMzEwWhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A3OGI0YTg0YzI5ZWY5YTY2NWY2Yjg4ZjBmODEyMWQ1Mzg1 YWY3YWE0ZTJkMTk4MGViOTk4YzA0NTIwOWI4NTU0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFebkBKqKxXKvEDqNQFGWkXPMywBBpaLUpNQ77rPjoyi6U GTKKf9QIhQjkiF1/Q2DlfxYAGYW5hSbW0vE9aeOvp3LuZp+38wTt1DSsIxzXFWwe awFa4Mk7Ry+dGB8mw1Q6dUttuW840qniDRMkZFViUUalSKVH7ObAfG8IfgmSoVY1 HUW1AkL9eA+vtzmEny/zp04oQTFBdpCyaKAhNiMb0t44TPigF32kCBocTQIcUxnp wAL2gL92O692OUGm4VC3vjuxiORZ2UDmWGKo4qpzUvvz8z0C8BlnJD4qAhRTGTSn 6g05oy6wS3KvxmUPMjWX5/Pq6EpXDD4w8nXg7B05AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUt3XNFgwSR09TkXnc0yq7N2oIcMcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzcwZjI5MGQ1LWRjNWMtNDExOC05YzkzLTNiZTNmZTBkNjdlZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAINIBQwDQYJKoZIhvcNAQELBQADggEBAA2AlehBQ8DyTyxXzqnVB/PM1omK OSiNgCkRlnYv6Evk1cC/+VxyZoZScb0616rHEL10TaIFXInPpOuCthn/NSZf6uNv GVplnwQE4a/Fa1387EmeIs89cRwgk7BJDzHqhOw1a3bJpO4iresCeXwRqb2M54V/ jt6Rme7UVDJ/bGSRBf+uawTHG9By0I1SghJRJEfbkgvozh2NGbRbvZX68vICZFYk ZzT7QYKvYBw+qzsx+mbGVbTYKcwHCfZuAeOi9nmaZfKoKq8tZNTjRRs2eiJ7jZOP ftpwre2LFVt5F/5AeqaK5/OF60nnEiejuQgWqime5SyDVNx1SPLvlqHGhSI= -----END CERTIFICATE-----Generated at Fri Oct 17 23:43:28 2025 by rpki-client