$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/91910661-4e01-4954-945c-027bff21beb5.roa File: 91910661-4e01-4954-945c-027bff21beb5.roa (raw, json) Hash identifier: TWZdl0DW+vcctiJbhJXLrTPrNSURdUL7r0lfeeYvh1U= Subject key identifier: DB:F3:BF:24:44:39:AE:74:85:37:6F:49:8B:72:2A:33:C8:7C:1E:89 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 194F0C48675783378B6155C8DB90D400351C097F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/91910661-4e01-4954-945c-027bff21beb5.roa Signing time: Tue 07 Oct 2025 15:12:38 +0000 ROA not before: Tue 07 Oct 2025 15:12:38 +0000 ROA not after: Tue 11 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.232.0.0/13 maxlen: 13 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:4f:0c:48:67:57:83:37:8b:61:55:c8:db:90:d4:00:35:1c:09:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 7 15:12:38 2025 GMT Not After : Nov 11 23:59:59 2025 GMT Subject: serialNumber=c57261077e41e5b1cdaa1cf8f97115374b4a511744af8452466c529777eb66c7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:35:90:28:b1:4f:ff:28:47:92:69:68:3e:11: c9:4d:98:be:a8:4c:e6:4b:60:24:b9:4e:14:ea:6a: cc:54:d6:84:51:9d:81:62:32:f7:eb:55:e5:4e:f8: 96:fa:39:f5:63:08:40:0a:22:d3:1b:cb:96:bb:c1: a0:d9:96:44:26:7b:f2:1c:75:db:f2:52:21:bd:f2: ce:98:37:2f:9d:68:94:89:a5:22:d1:59:55:73:c4: 12:79:05:b1:dd:4d:6c:87:90:40:53:bb:09:a8:28: 94:1f:41:43:12:88:f4:36:92:03:e5:3d:bb:ba:93: 17:33:3e:97:ad:d4:bc:f0:71:ad:ed:b9:a4:ae:ca: a2:de:86:ca:73:69:c3:49:78:7a:c1:f1:66:ce:87: 17:8f:df:b8:1f:27:ad:fa:42:fb:91:da:00:e7:48: e4:f3:d3:66:c7:57:7d:2b:81:67:a2:59:79:82:b1: f7:6b:90:46:51:6e:69:c2:82:01:af:e3:8e:41:2b: e0:5e:d4:b8:86:dc:ce:23:39:48:dc:e4:5a:b1:51: 5c:e0:df:07:bf:8f:cb:84:4c:a1:56:1f:28:1f:7c: 3c:4b:4f:07:32:bb:2c:2c:ea:b9:ff:cf:e2:96:72: c9:39:f7:e8:2b:53:95:33:7a:c5:9e:25:dd:08:71: ec:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:F3:BF:24:44:39:AE:74:85:37:6F:49:8B:72:2A:33:C8:7C:1E:89 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/91910661-4e01-4954-945c-027bff21beb5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.232.0.0/13 Signature Algorithm: sha256WithRSAEncryption 23:b0:7c:a4:ee:f6:20:f3:c3:24:15:8a:d9:26:68:4e:1a:47: b8:21:21:fc:ad:d8:9f:a3:44:83:43:78:a0:91:56:3e:4a:2c: db:f8:b8:1a:a4:67:fc:9e:e4:8b:fd:61:4d:a0:93:6a:ea:83: 5e:5c:6f:b1:a5:34:2f:98:48:31:9b:41:15:cb:c4:2e:9f:a5: 42:18:14:85:fe:1b:d6:df:11:e9:0d:d4:ef:1f:ca:1e:f4:a2: 2b:d9:34:08:1e:84:92:4a:66:4d:d4:da:77:7e:3a:d3:28:2d: 1f:af:a1:3c:92:f3:dd:ab:b0:fa:82:f7:50:34:1a:13:f1:57: 06:cc:b0:3e:fd:c2:17:d0:13:8d:5f:bd:9e:fd:84:91:f7:b6: a7:d7:bb:fd:0d:16:74:c6:5d:2f:ba:d3:52:42:df:69:81:dd: 78:f1:8e:0d:17:67:cc:53:1e:f1:3a:75:98:a5:2f:53:60:41: 39:ff:ff:d5:77:99:34:b0:e6:ee:2d:91:47:7b:ca:e9:24:04: 29:fe:5f:3b:c8:c3:ac:42:ed:ed:16:5d:1e:a4:ab:19:f5:5d: 90:78:37:85:0a:20:51:e2:d4:a8:d9:31:2a:e0:2c:74:8a:4c: d2:51:7c:e5:8a:65:4d:6c:f1:b3:84:db:9b:3c:a4:da:f0:17: 08:6c:b7:85 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUGU8MSGdXgzeLYVXI25DUADUcCX8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDA3MTUxMjM4WhcNMjUxMTExMjM1OTU5 WjB6MUkwRwYDVQQFE0BjNTcyNjEwNzdlNDFlNWIxY2RhYTFjZjhmOTcxMTUzNzRi NGE1MTE3NDRhZjg0NTI0NjZjNTI5Nzc3ZWI2NmM3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFNZAosU//KEeSaWg+EclNmL6oTOZLYCS5ThTqasxU1oRR nYFiMvfrVeVO+Jb6OfVjCEAKItMby5a7waDZlkQme/IcddvyUiG98s6YNy+daJSJ pSLRWVVzxBJ5BbHdTWyHkEBTuwmoKJQfQUMSiPQ2kgPlPbu6kxczPpet1Lzwca3t uaSuyqLehspzacNJeHrB8WbOhxeP37gfJ636QvuR2gDnSOTz02bHV30rgWeiWXmC sfdrkEZRbmnCggGv445BK+Be1LiG3M4jOUjc5FqxUVzg3we/j8uETKFWHygffDxL Twcyuyws6rn/z+KWcsk59+grU5UzesWeJd0IceyNAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU2/O/JEQ5rnSFN29Ji3IqM8h8HokwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzkxOTEwNjYxLTRlMDEtNDk1NC05NDVjLTAyN2JmZjIxYmViNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwMN6DANBgkqhkiG9w0BAQsFAAOCAQEAI7B8pO72IPPDJBWK2SZoThpHuCEh /K3Yn6NEg0N4oJFWPkos2/i4GqRn/J7ki/1hTaCTauqDXlxvsaU0L5hIMZtBFcvE Lp+lQhgUhf4b1t8R6Q3U7x/KHvSiK9k0CB6EkkpmTdTad3460ygtH6+hPJLz3auw +oL3UDQaE/FXBsywPv3CF9ATjV+9nv2Ekfe2p9e7/Q0WdMZdL7rTUkLfaYHdePGO DRdnzFMe8Tp1mKUvU2BBOf//1XeZNLDm7i2RR3vK6SQEKf5fO8jDrELt7RZdHqSr GfVdkHg3hQogUeLUqNkxKuAsdIpM0lF85YplTWzxs4Tbmzyk2vAXCGy3hQ== -----END CERTIFICATE-----Generated at Fri Oct 17 23:56:43 2025 by rpki-client