$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/89d5211b-cd01-46a3-87d4-8c7959c0b711.roa File: 89d5211b-cd01-46a3-87d4-8c7959c0b711.roa (raw, json) Hash identifier: falHgNGU4jpqW0icvJXh9A1LFrakEaHVHHOsMlc7jgU= Subject key identifier: A5:53:D2:6A:02:9E:AC:4A:B7:D3:FE:5B:36:52:11:D9:3F:90:F1:20 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0B33BFFBA68A09E6D4987EBD31D11B8E2357A497 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/89d5211b-cd01-46a3-87d4-8c7959c0b711.roa Signing time: Wed 24 Sep 2025 17:32:57 +0000 ROA not before: Wed 24 Sep 2025 17:32:57 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.32.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:33:bf:fb:a6:8a:09:e6:d4:98:7e:bd:31:d1:1b:8e:23:57:a4:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 17:32:57 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=bcd78adcf75b8c6f9c8369f4be656f7a06ec2b5aef92bf34cb56dcd448043d38, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:77:e2:7e:7c:9f:0c:ad:29:62:39:ab:38:da: 4b:3b:6d:1e:06:1f:29:a5:25:20:31:b3:70:9b:ac: ea:8b:4d:80:51:de:ec:cf:3f:80:b2:ea:1f:27:f2: a3:65:c2:e1:58:14:b3:b1:45:1d:5c:c6:d2:f0:aa: 8b:6c:e5:c6:c3:b6:36:76:7b:a2:ab:7b:2c:13:b4: dc:aa:e4:96:4b:82:c9:a4:88:6d:0e:0e:5c:03:cd: 9d:a5:85:13:df:6a:e7:31:9f:68:8e:83:42:04:e3: 6c:48:fd:a2:7a:70:9e:61:19:99:58:4d:33:d9:37: a3:9f:c0:3b:73:8c:57:b1:36:00:d9:b4:10:93:ac: 92:03:02:37:35:b5:2b:7e:8f:a5:a6:60:e6:f1:55: 60:a8:48:4a:03:22:f2:9a:c2:3d:86:71:d6:f8:de: 18:ab:27:12:98:7a:bc:2f:74:ce:1a:9c:23:94:d7: fa:ad:be:2c:06:f1:a7:e3:72:ce:ed:a5:4f:f8:79: ca:13:ea:32:7f:be:25:5c:77:75:aa:14:cd:6d:25: f9:c2:61:88:d5:ab:32:8f:82:19:27:b6:fa:46:fe: 9d:70:6b:09:6b:db:32:9f:37:95:66:a4:22:ba:01: e4:d8:10:0f:16:cd:b0:28:24:21:81:0e:1d:01:d7: 83:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:53:D2:6A:02:9E:AC:4A:B7:D3:FE:5B:36:52:11:D9:3F:90:F1:20 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/89d5211b-cd01-46a3-87d4-8c7959c0b711.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.32.65.0/24 Signature Algorithm: sha256WithRSAEncryption 83:c2:78:a9:e4:27:23:ed:9b:7f:a1:ac:d5:57:cc:c5:13:70: 40:c5:4f:dc:19:c0:c4:d3:47:b3:e3:d2:7c:76:0b:d9:f5:c3: 22:bb:da:b5:e7:32:ba:cb:a9:4b:a5:47:0c:3a:b9:32:e3:d2: 88:3f:bc:5e:d9:9b:b2:6a:0b:5c:5a:70:79:1a:d4:0f:38:07: cd:5f:1a:da:45:f2:32:f7:1f:97:95:52:b2:2e:d1:51:31:62: 30:d1:b1:db:56:07:ed:58:6f:e6:ac:ca:c2:4e:97:6a:93:e6: f8:0b:58:a4:6d:6b:6c:ed:36:49:5e:08:2a:81:dc:32:53:86: 9e:83:d8:15:f7:ac:17:39:e5:3a:bf:34:d3:89:4b:82:80:74: ca:9e:2e:64:f2:4e:43:b9:78:92:ac:86:01:5b:1b:38:40:d2: 5d:9a:ae:4b:15:9c:d0:59:4d:89:eb:c8:9b:93:22:89:37:fc: 0c:a8:8a:6a:72:bd:04:2d:41:15:7c:e7:bd:d9:91:53:82:6e: 07:81:af:94:63:d8:08:4a:02:0b:39:9e:86:a5:fe:1e:e9:c1: 55:aa:85:95:72:5d:66:6c:48:32:3d:a5:57:cc:50:d2:d3:af: 99:e4:8b:b3:e3:c3:7a:4a:dc:b1:90:d8:ec:60:2e:92:f6:99: b6:f2:f0:69 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCzO/+6aKCebUmH69MdEbjiNXpJcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MTczMjU3WhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BiY2Q3OGFkY2Y3NWI4YzZmOWM4MzY5ZjRiZTY1NmY3YTA2 ZWMyYjVhZWY5MmJmMzRjYjU2ZGNkNDQ4MDQzZDM4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGd+J+fJ8MrSliOas42ks7bR4GHymlJSAxs3CbrOqLTYBR 3uzPP4Cy6h8n8qNlwuFYFLOxRR1cxtLwqots5cbDtjZ2e6KreywTtNyq5JZLgsmk iG0ODlwDzZ2lhRPfaucxn2iOg0IE42xI/aJ6cJ5hGZlYTTPZN6OfwDtzjFexNgDZ tBCTrJIDAjc1tSt+j6WmYObxVWCoSEoDIvKawj2Gcdb43hirJxKYerwvdM4anCOU 1/qtviwG8afjcs7tpU/4ecoT6jJ/viVcd3WqFM1tJfnCYYjVqzKPghkntvpG/p1w awlr2zKfN5VmpCK6AeTYEA8WzbAoJCGBDh0B14OfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUpVPSagKerEq30/5bNlIR2T+Q8SAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg5ZDUyMTFiLWNkMDEtNDZhMy04N2Q0LThjNzk1OWMwYjcxMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAANIEEwDQYJKoZIhvcNAQELBQADggEBAIPCeKnkJyPtm3+hrNVXzMUTcEDF T9wZwMTTR7Pj0nx2C9n1wyK72rXnMrrLqUulRww6uTLj0og/vF7Zm7JqC1xacHka 1A84B81fGtpF8jL3H5eVUrIu0VExYjDRsdtWB+1Yb+asysJOl2qT5vgLWKRta2zt NkleCCqB3DJThp6D2BX3rBc55Tq/NNOJS4KAdMqeLmTyTkO5eJKshgFbGzhA0l2a rksVnNBZTYnryJuTIok3/AyoimpyvQQtQRV8573ZkVOCbgeBr5Rj2AhKAgs5noal /h7pwVWqhZVyXWZsSDI9pVfMUNLTr5nki7Pjw3pK3LGQ2OxgLpL2mbby8Gk= -----END CERTIFICATE-----Generated at Fri Oct 17 21:59:04 2025 by rpki-client