$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8c1b306f-3555-43bd-b635-5d81f86440fe.roa File: 8c1b306f-3555-43bd-b635-5d81f86440fe.roa (raw, json) Hash identifier: 1mU/wOkCbONFGG6Xlay8tjPgrufaQWw1GRyxpXGg+gA= Subject key identifier: 5E:48:40:79:F3:D9:56:C8:DD:1D:2F:4D:87:02:76:9A:19:F7:71:38 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3354ABF38EE32553EF088F28A7A31806B62A5CEA Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8c1b306f-3555-43bd-b635-5d81f86440fe.roa Signing time: Wed 24 Sep 2025 17:57:40 +0000 ROA not before: Wed 24 Sep 2025 17:57:40 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.35.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:54:ab:f3:8e:e3:25:53:ef:08:8f:28:a7:a3:18:06:b6:2a:5c:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 17:57:40 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=1a363a57f8f877d09343fb203f68bbec23bfc96b41812d2953624d289b04ba37, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2f:98:9f:6d:30:f2:64:4d:2b:72:85:13:bf: c8:60:6f:2d:0f:df:ef:a5:66:52:f4:66:60:9a:ea: df:17:af:4b:6c:ae:3d:e1:95:15:9c:f4:18:23:37: cf:51:31:36:c7:c3:2d:a7:c8:65:2d:b2:1e:6f:8c: 28:c8:a0:70:11:f5:0c:db:3f:10:91:5b:cd:fb:c8: 1e:c4:34:ea:dd:e8:cd:ca:25:ea:76:44:ec:9f:53: 59:f9:90:93:cc:5b:cf:32:5f:17:46:21:aa:cc:b2: 46:f4:18:c3:8e:69:60:01:78:51:5e:72:f8:1e:73: ed:f3:2c:ce:9f:04:fd:ce:d2:1d:0d:4e:07:ee:a9: a5:41:a6:20:09:30:06:52:d3:4a:fd:ce:1f:d7:e6: 16:5f:8a:06:60:aa:65:8d:c8:3e:a5:5e:44:47:3a: a1:9b:9d:42:11:d2:06:96:8e:9b:17:33:77:ef:5e: e1:e3:f1:6e:b6:7e:17:87:4a:33:bd:b7:e9:43:61: 77:81:db:07:12:87:45:61:ec:c3:65:e9:41:e7:dc: b6:e8:fe:4d:38:f0:68:2e:27:94:0c:e5:03:71:8e: f9:7d:69:8c:fc:45:c1:6f:dc:1f:3f:a6:52:56:f4: 41:7d:d9:48:19:69:34:12:6f:58:8a:36:97:ad:15: 4f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:48:40:79:F3:D9:56:C8:DD:1D:2F:4D:87:02:76:9A:19:F7:71:38 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8c1b306f-3555-43bd-b635-5d81f86440fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.35.186.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:db:89:e3:f7:68:11:7d:7f:de:9e:5c:40:ed:24:8a:90:3e: 73:a5:da:73:9b:8a:33:9b:db:af:d2:47:5d:9a:d5:4e:b5:7a: 85:2e:9e:06:e0:4d:b0:59:7d:14:8a:d4:16:8a:7e:c3:b5:43: 96:9d:49:14:65:9a:66:02:76:ef:77:5f:3b:ed:a2:6f:cc:45: 98:06:5c:20:28:0c:8d:b1:0b:11:8d:48:dc:e0:63:2f:f5:62: 3e:e6:1f:83:5e:19:72:ec:6b:26:84:60:cc:b1:4f:9f:04:d6: 60:b2:68:1e:49:37:40:22:12:67:5d:a6:ca:a4:d9:2d:05:70: 44:33:82:ec:b1:48:20:38:bb:ce:21:7e:27:e6:c3:61:ec:c4: 5b:5b:82:d6:c2:67:e3:42:31:af:ad:9f:a1:40:e6:8e:ea:95: e1:6c:74:62:28:71:41:67:f8:87:ae:db:0e:30:ad:b6:a0:30: 21:a0:4b:f1:25:f7:43:27:7b:4d:2b:e6:c4:9a:7b:2a:7f:ba: 93:38:41:1b:5f:c2:dc:b4:94:43:97:b7:3b:b4:0c:dd:f1:0e: 92:23:5e:b2:c7:b9:85:af:d4:b7:2c:92:ac:92:63:5a:94:f8: 7b:b2:dd:f5:13:25:82:3f:60:06:ec:38:79:e0:a6:21:1e:9c: 34:5f:1c:f2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUM1Sr847jJVPvCI8op6MYBrYqXOowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MTc1NzQwWhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0AxYTM2M2E1N2Y4Zjg3N2QwOTM0M2ZiMjAzZjY4YmJlYzIz YmZjOTZiNDE4MTJkMjk1MzYyNGQyODliMDRiYTM3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQClL5ifbTDyZE0rcoUTv8hgby0P3++lZlL0ZmCa6t8Xr0ts rj3hlRWc9BgjN89RMTbHwy2nyGUtsh5vjCjIoHAR9QzbPxCRW837yB7ENOrd6M3K Jep2ROyfU1n5kJPMW88yXxdGIarMskb0GMOOaWABeFFecvgec+3zLM6fBP3O0h0N TgfuqaVBpiAJMAZS00r9zh/X5hZfigZgqmWNyD6lXkRHOqGbnUIR0gaWjpsXM3fv XuHj8W62fheHSjO9t+lDYXeB2wcSh0Vh7MNl6UHn3Lbo/k048GguJ5QM5QNxjvl9 aYz8RcFv3B8/plJW9EF92UgZaTQSb1iKNpetFU9FAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUXkhAefPZVsjdHS9NhwJ2mhn3cTgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzhjMWIzMDZmLTM1NTUtNDNiZC1iNjM1LTVkODFmODY0NDBmZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAANI7owDQYJKoZIhvcNAQELBQADggEBABrbieP3aBF9f96eXEDtJIqQPnOl 2nObijOb26/SR12a1U61eoUungbgTbBZfRSK1BaKfsO1Q5adSRRlmmYCdu93Xzvt om/MRZgGXCAoDI2xCxGNSNzgYy/1Yj7mH4NeGXLsayaEYMyxT58E1mCyaB5JN0Ai Emddpsqk2S0FcEQzguyxSCA4u84hfifmw2HsxFtbgtbCZ+NCMa+tn6FA5o7qleFs dGIocUFn+Ieu2w4wrbagMCGgS/El90Mne00r5sSaeyp/upM4QRtfwty0lEOXtzu0 DN3xDpIjXrLHuYWv1LcskqySY1qU+Huy3fUTJYI/YAbsOHngpiEenDRfHPI= -----END CERTIFICATE-----Generated at Fri Oct 17 22:04:09 2025 by rpki-client