$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/88c1c389-dfa5-4410-a34e-61156579f3ad.roa File: 88c1c389-dfa5-4410-a34e-61156579f3ad.roa (raw, json) Hash identifier: alHXSljJSAMbHSWHWGqF5K4Hu3pISmqSUUzZtJi4mE0= Subject key identifier: 37:1B:14:05:FD:00:3E:51:B4:6D:21:7D:A8:5D:BD:3B:1B:F2:08:04 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6172E249F54E2CE55F28799A6E06130731E9B39D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/88c1c389-dfa5-4410-a34e-61156579f3ad.roa Signing time: Wed 24 Sep 2025 17:28:56 +0000 ROA not before: Wed 24 Sep 2025 17:28:56 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.32.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:72:e2:49:f5:4e:2c:e5:5f:28:79:9a:6e:06:13:07:31:e9:b3:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 17:28:56 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=7088d57d3c7f52667ab77c8a260791ed5923abc48d6f0a07c2e9e03ae1f4c2bb, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:be:d6:1a:57:bb:38:23:fa:17:91:97:fe:2a: d4:9a:ee:5b:d2:9b:5f:57:42:7d:d7:48:ea:53:20: 81:8b:f5:f1:b8:11:bf:9d:7e:bd:9d:13:56:57:37: 46:09:be:e4:1b:6c:b0:66:4e:4b:e2:34:90:c9:3c: 39:26:5b:43:b7:cc:ce:2b:5b:7d:4c:66:f7:f9:bf: 01:27:47:e2:db:f1:48:c2:7c:93:cf:73:e9:e8:91: fe:66:2e:e8:f2:30:90:96:26:6e:3c:04:8d:17:00: 0f:3e:c7:c1:48:75:aa:41:00:96:c3:e1:f8:4d:ac: a0:e6:4e:5c:09:93:08:1d:7f:de:f3:52:f0:89:f9: 67:da:c1:1f:6e:25:62:8f:ae:d7:ce:3d:cf:a7:00: c1:28:79:fa:91:eb:a5:29:e5:55:ae:c8:3f:ee:ff: c3:47:3e:92:c0:3e:84:66:ec:e0:bb:fa:86:26:8c: d9:2c:18:b8:fb:71:fd:d9:00:6e:8e:db:4e:b5:65: af:03:67:9b:3d:e0:e9:9a:6c:bf:7b:09:60:8f:24: fe:a1:e8:ff:58:aa:3d:76:e9:70:34:cd:9d:54:7e: 02:cd:86:91:ed:d1:ae:a1:b8:d7:a2:cc:77:47:03: 39:44:fb:f1:3b:42:c2:fc:3c:6c:33:0c:ff:ff:c4: 92:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:1B:14:05:FD:00:3E:51:B4:6D:21:7D:A8:5D:BD:3B:1B:F2:08:04 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/88c1c389-dfa5-4410-a34e-61156579f3ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.32.229.0/24 Signature Algorithm: sha256WithRSAEncryption a5:7e:a6:53:b1:10:d1:12:d3:5b:41:59:7c:e2:04:6d:71:df: b8:a1:6f:e1:fc:c8:77:8d:1f:f7:4d:03:04:a9:b7:95:d6:03: b2:85:71:75:c1:b4:73:41:d2:62:8d:00:9e:28:39:74:e7:f4: 85:ee:fd:21:3b:35:d6:e9:7d:b1:14:d8:76:e3:76:d3:10:09: b9:2e:af:be:41:93:7f:a9:05:61:aa:83:9f:9c:97:18:23:1c: d3:1e:be:86:d9:82:02:40:8f:75:d8:42:cd:71:0b:ab:f1:e8: 81:a0:14:94:e1:6c:fc:ee:63:6c:06:9e:56:21:df:97:40:6c: 58:e1:d7:f0:b9:8a:27:dc:ff:ab:9a:57:1d:c0:31:45:ed:fc: 20:18:40:7a:9c:91:12:d2:e9:39:2c:75:da:b9:5f:83:f6:df: 96:54:16:49:ef:1f:97:58:ba:64:d8:5e:63:3f:a0:d9:b2:87: 0e:ef:cb:31:07:79:8c:dd:2d:f7:dc:b6:f8:bd:ff:f5:d8:92: 46:c7:a8:d0:cb:4c:68:47:fa:9b:28:57:43:6d:d0:c5:2e:cc: 49:fc:2c:ab:27:d6:5a:8a:cf:ca:8c:b3:53:88:9e:52:d9:7d: bf:55:0a:be:da:6a:c1:1c:df:ef:61:ab:6b:fe:f7:1f:62:b9: 8d:36:64:fb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYXLiSfVOLOVfKHmabgYTBzHps50wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MTcyODU2WhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A3MDg4ZDU3ZDNjN2Y1MjY2N2FiNzdjOGEyNjA3OTFlZDU5 MjNhYmM0OGQ2ZjBhMDdjMmU5ZTAzYWUxZjRjMmJiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCovtYaV7s4I/oXkZf+KtSa7lvSm19XQn3XSOpTIIGL9fG4 Eb+dfr2dE1ZXN0YJvuQbbLBmTkviNJDJPDkmW0O3zM4rW31MZvf5vwEnR+Lb8UjC fJPPc+nokf5mLujyMJCWJm48BI0XAA8+x8FIdapBAJbD4fhNrKDmTlwJkwgdf97z UvCJ+WfawR9uJWKPrtfOPc+nAMEoefqR66Up5VWuyD/u/8NHPpLAPoRm7OC7+oYm jNksGLj7cf3ZAG6O2061Za8DZ5s94OmabL97CWCPJP6h6P9Yqj126XA0zZ1UfgLN hpHt0a6huNeizHdHAzlE+/E7QsL8PGwzDP//xJJpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUNxsUBf0APlG0bSF9qF29OxvyCAQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg4YzFjMzg5LWRmYTUtNDQxMC1hMzRlLTYxMTU2NTc5ZjNhZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAANIOUwDQYJKoZIhvcNAQELBQADggEBAKV+plOxENES01tBWXziBG1x37ih b+H8yHeNH/dNAwSpt5XWA7KFcXXBtHNB0mKNAJ4oOXTn9IXu/SE7NdbpfbEU2Hbj dtMQCbkur75Bk3+pBWGqg5+clxgjHNMevobZggJAj3XYQs1xC6vx6IGgFJThbPzu Y2wGnlYh35dAbFjh1/C5iifc/6uaVx3AMUXt/CAYQHqckRLS6Tksddq5X4P235ZU FknvH5dYumTYXmM/oNmyhw7vyzEHeYzdLffctvi9//XYkkbHqNDLTGhH+psoV0Nt 0MUuzEn8LKsn1lqKz8qMs1OInlLZfb9VCr7aasEc3+9hq2v+9x9iuY02ZPs= -----END CERTIFICATE-----Generated at Fri Oct 17 23:41:20 2025 by rpki-client