$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/83694003-6c95-44cd-8abb-45afe0503c85.roa File: 83694003-6c95-44cd-8abb-45afe0503c85.roa (raw, json) Hash identifier: Q7KzclZuItonbvMY8yhedPeEZsKJD5DhCrU4ZRy1Veg= Subject key identifier: F7:71:C5:C1:C3:A6:37:4B:65:77:EA:91:E3:96:A4:1B:D6:02:36:0B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2C4D05E0697BA29D20898935877DA88041DE57DD Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/83694003-6c95-44cd-8abb-45afe0503c85.roa Signing time: Wed 24 Sep 2025 17:53:43 +0000 ROA not before: Wed 24 Sep 2025 17:53:43 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.35.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:4d:05:e0:69:7b:a2:9d:20:89:89:35:87:7d:a8:80:41:de:57:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 17:53:43 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=731a2b238e9714273f5a026fd14b4d6960caf58f2df268219e1e043c9639ee12, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7f:5b:57:b3:d0:6d:a4:4b:b3:7b:e7:c7:e4: 17:7f:c7:48:fd:a4:20:7d:43:22:7e:76:89:ec:6d: 28:92:dd:37:98:b7:5b:4b:4e:aa:58:59:89:5a:a1: b4:5b:c1:4d:09:d5:8d:bf:d3:4e:09:51:2f:09:46: 38:27:49:ce:ae:01:76:29:6e:d7:35:04:d8:53:87: 3f:17:12:0a:a7:4d:d8:7a:ca:17:d6:fb:43:94:ee: 47:18:c5:0b:d4:2d:11:61:81:6c:64:5b:14:64:1c: 7f:05:55:5a:99:d1:0f:93:13:fc:64:ec:70:ad:b0: ee:e3:af:83:61:a3:d5:05:3f:cb:84:d0:fa:25:21: 9e:d9:1f:d6:1f:eb:e9:b8:4d:8b:ec:19:c3:dc:f4: 4f:23:5a:49:b5:4c:8f:7f:5f:20:07:21:ba:f8:75: 8f:ac:ef:69:3d:75:2a:7e:08:2a:45:86:ed:5d:f0: a4:b2:8c:b2:7c:7f:23:6c:c6:a8:f5:eb:8f:fb:6c: ac:8f:05:85:81:a6:3a:42:0e:b1:e2:b2:df:25:c6: 1f:ec:85:72:1d:72:fb:13:42:99:cb:8d:b6:6f:6b: a2:0b:00:93:39:44:4f:ef:46:ae:bc:6c:8e:8f:f1: 55:84:2e:db:0b:52:e9:95:69:25:c0:36:93:80:14: 9e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:71:C5:C1:C3:A6:37:4B:65:77:EA:91:E3:96:A4:1B:D6:02:36:0B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/83694003-6c95-44cd-8abb-45afe0503c85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.35.119.0/24 Signature Algorithm: sha256WithRSAEncryption 10:a2:6c:33:40:38:39:c2:be:bc:a9:db:03:7c:f1:06:2d:6d: f6:ab:1e:64:37:d9:ce:f8:c2:9a:ac:30:eb:ce:85:cb:02:d6: d1:e2:ce:e9:65:ee:cc:e2:9c:45:31:55:8a:fe:47:fb:10:39: 61:48:c2:38:77:bb:ef:81:8c:46:d1:e2:fc:0f:a4:ac:f9:e4: 06:5d:b9:0d:66:a1:87:17:ca:5b:6c:ac:7e:70:a8:84:12:15: a7:b0:1c:63:0f:04:48:9a:03:ef:f8:e9:6e:0e:10:c9:0b:33: a3:d6:c5:f7:04:24:9e:5c:f3:4b:cf:34:e9:67:fd:b6:39:91: 47:a7:2f:74:14:aa:e1:9a:c4:36:5c:eb:c2:e3:59:65:8f:1a: 12:af:e5:e6:16:4b:0c:10:37:84:c3:5e:a2:02:af:92:a2:cb: b2:38:cd:d2:31:c7:5e:fd:93:e7:ba:a4:3b:a7:23:e6:9c:33: 11:16:db:63:32:5e:51:89:60:52:99:25:7a:e5:bc:24:f5:7b: 7d:29:0b:e2:fd:4c:ca:f8:78:ba:d5:1b:8f:3f:05:3b:ef:2c: 99:f2:c9:8d:4d:39:03:55:9b:b5:ea:2d:2b:f1:a7:69:72:d1: cb:84:7c:47:a7:0d:34:fa:24:5b:5e:a4:69:9d:55:b5:0f:6d: 96:9d:b9:29 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULE0F4Gl7op0giYk1h32ogEHeV90wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MTc1MzQzWhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A3MzFhMmIyMzhlOTcxNDI3M2Y1YTAyNmZkMTRiNGQ2OTYw Y2FmNThmMmRmMjY4MjE5ZTFlMDQzYzk2MzllZTEyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCkf1tXs9BtpEuze+fH5Bd/x0j9pCB9QyJ+donsbSiS3TeY t1tLTqpYWYlaobRbwU0J1Y2/004JUS8JRjgnSc6uAXYpbtc1BNhThz8XEgqnTdh6 yhfW+0OU7kcYxQvULRFhgWxkWxRkHH8FVVqZ0Q+TE/xk7HCtsO7jr4Nho9UFP8uE 0PolIZ7ZH9Yf6+m4TYvsGcPc9E8jWkm1TI9/XyAHIbr4dY+s72k9dSp+CCpFhu1d 8KSyjLJ8fyNsxqj164/7bKyPBYWBpjpCDrHist8lxh/shXIdcvsTQpnLjbZva6IL AJM5RE/vRq68bI6P8VWELtsLUumVaSXANpOAFJ69AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU93HFwcOmN0tld+qR45akG9YCNgswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzgzNjk0MDAzLTZjOTUtNDRjZC04YWJiLTQ1YWZlMDUwM2M4NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAANI3cwDQYJKoZIhvcNAQELBQADggEBABCibDNAODnCvryp2wN88QYtbfar HmQ32c74wpqsMOvOhcsC1tHizull7szinEUxVYr+R/sQOWFIwjh3u++BjEbR4vwP pKz55AZduQ1moYcXyltsrH5wqIQSFaewHGMPBEiaA+/46W4OEMkLM6PWxfcEJJ5c 80vPNOln/bY5kUenL3QUquGaxDZc68LjWWWPGhKv5eYWSwwQN4TDXqICr5Kiy7I4 zdIxx179k+e6pDunI+acMxEW22MyXlGJYFKZJXrlvCT1e30pC+L9TMr4eLrVG48/ BTvvLJnyyY1NOQNVm7XqLSvxp2ly0cuEfEenDTT6JFtepGmdVbUPbZaduSk= -----END CERTIFICATE-----Generated at Fri Oct 17 22:00:17 2025 by rpki-client