$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/98a64da7-9996-4bc7-976c-84f0ad2f9a13.roa File: 98a64da7-9996-4bc7-976c-84f0ad2f9a13.roa (raw, json) Hash identifier: u8NrEtzCop+CH+z6QkxSDM+AONWhS7sZxzyB2SrTmUw= Subject key identifier: 6A:B4:D6:A0:EE:0F:3C:41:91:B0:2F:00:0E:83:0A:A7:90:E2:EB:CF Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4780304121F6C2CAF88FB8F58697C3BBA45A59F7 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/98a64da7-9996-4bc7-976c-84f0ad2f9a13.roa Signing time: Wed 24 Sep 2025 17:57:32 +0000 ROA not before: Wed 24 Sep 2025 17:57:32 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.35.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:80:30:41:21:f6:c2:ca:f8:8f:b8:f5:86:97:c3:bb:a4:5a:59:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 17:57:32 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=2e0527e65196a8d11df26a5abff5c9596b77a90ded9a1ddc0a706555637890a1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2f:d3:56:ea:e0:1e:1d:a0:62:22:8b:60:11: 1a:50:e7:a6:bf:62:23:33:8b:dc:36:ec:05:7b:22: 0d:9b:5a:f5:6f:66:4b:e6:a0:ac:32:7a:07:4c:ab: 17:5e:27:c3:73:6a:94:dc:77:05:c9:77:dd:b0:4e: 94:1e:e6:28:af:ac:83:91:c3:4b:8b:0b:ec:54:b8: aa:fa:5a:64:52:3e:17:d5:fa:1b:e4:49:56:85:d9: 48:2d:fc:77:89:f5:38:df:75:67:3d:62:79:6a:9b: b7:fc:8f:31:d9:98:72:57:df:8f:51:30:5e:a7:93: 18:a9:52:b8:aa:43:1d:67:bc:e6:e4:ba:21:2c:08: 3a:fd:18:ed:07:aa:76:f8:8e:05:8e:26:51:c7:2f: 9d:d5:39:f4:9f:80:6c:1b:5b:4a:c2:1b:df:e9:91: aa:d5:0d:ca:a1:e9:6a:dd:ed:86:ea:35:14:3f:cc: fa:e1:ee:33:81:f9:54:05:15:88:9d:ea:99:df:35: 01:64:d2:df:72:f3:1a:ae:d1:14:9f:80:e5:e1:3d: de:4b:cd:8b:8d:03:8b:89:ff:0a:e6:f9:35:f0:47: a3:03:13:fd:6e:39:2d:c1:c4:71:6f:4b:3f:69:b6: fe:c0:d1:dd:7c:9a:83:29:d7:61:71:6c:df:b6:83: d0:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:B4:D6:A0:EE:0F:3C:41:91:B0:2F:00:0E:83:0A:A7:90:E2:EB:CF X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/98a64da7-9996-4bc7-976c-84f0ad2f9a13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.35.179.0/24 Signature Algorithm: sha256WithRSAEncryption 87:12:62:38:9d:9d:aa:2e:2a:24:29:71:03:b7:12:4a:59:81: 12:ed:96:c7:3d:0a:80:13:93:2e:30:0a:ae:8b:69:08:fa:a4: 0d:2c:07:61:0c:ec:49:f0:a2:c6:c8:89:58:dd:ef:05:b6:e2: 2d:1d:75:c5:c0:8b:d2:7b:f8:9f:eb:40:c2:72:8f:57:58:ac: f3:d2:20:ef:e9:ed:e1:3f:fc:b2:34:4d:e4:53:d7:32:72:f8: 34:15:64:98:e8:5e:a8:69:1c:b0:6f:1b:cd:15:5c:1d:06:6e: a7:4f:32:a3:51:48:83:1b:28:49:8b:09:51:0c:49:64:d5:56: 72:9d:c6:5a:ec:e4:f7:2d:0a:c8:d2:cd:74:2f:49:86:6c:66: de:cb:7e:32:61:e9:ec:fb:d4:7f:68:93:01:64:37:00:b4:1a: e2:4d:89:09:33:12:f4:cb:50:7a:b1:e8:7b:66:66:bb:db:f6: af:8e:de:93:ad:e6:32:be:ec:d2:db:a1:1c:3e:3e:ea:05:f5: 34:0e:f7:83:34:62:61:27:1d:3c:3b:5b:41:a5:f4:f1:9a:77: fa:38:c6:aa:0c:8d:a7:b7:34:7a:08:21:23:f5:ce:14:b8:22: 25:a6:dc:82:ee:d6:2d:3a:38:15:d5:6a:cf:50:89:d8:b9:37: 52:f6:b9:a7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUR4AwQSH2wsr4j7j1hpfDu6RaWfcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MTc1NzMyWhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0AyZTA1MjdlNjUxOTZhOGQxMWRmMjZhNWFiZmY1Yzk1OTZi NzdhOTBkZWQ5YTFkZGMwYTcwNjU1NTYzNzg5MGExMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/L9NW6uAeHaBiIotgERpQ56a/YiMzi9w27AV7Ig2bWvVv ZkvmoKwyegdMqxdeJ8NzapTcdwXJd92wTpQe5iivrIORw0uLC+xUuKr6WmRSPhfV +hvkSVaF2Ugt/HeJ9TjfdWc9Ynlqm7f8jzHZmHJX349RMF6nkxipUriqQx1nvObk uiEsCDr9GO0Hqnb4jgWOJlHHL53VOfSfgGwbW0rCG9/pkarVDcqh6Wrd7YbqNRQ/ zPrh7jOB+VQFFYid6pnfNQFk0t9y8xqu0RSfgOXhPd5LzYuNA4uJ/wrm+TXwR6MD E/1uOS3BxHFvSz9ptv7A0d18moMp12FxbN+2g9ATAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUarTWoO4PPEGRsC8ADoMKp5Di688wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzk4YTY0ZGE3LTk5OTYtNGJjNy05NzZjLTg0ZjBhZDJmOWExMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAANI7MwDQYJKoZIhvcNAQELBQADggEBAIcSYjidnaouKiQpcQO3EkpZgRLt lsc9CoATky4wCq6LaQj6pA0sB2EM7EnwosbIiVjd7wW24i0ddcXAi9J7+J/rQMJy j1dYrPPSIO/p7eE//LI0TeRT1zJy+DQVZJjoXqhpHLBvG80VXB0GbqdPMqNRSIMb KEmLCVEMSWTVVnKdxlrs5PctCsjSzXQvSYZsZt7LfjJh6ez71H9okwFkNwC0GuJN iQkzEvTLUHqx6HtmZrvb9q+O3pOt5jK+7NLboRw+PuoF9TQO94M0YmEnHTw7W0Gl 9PGad/o4xqoMjae3NHoIISP1zhS4IiWm3ILu1i06OBXVas9Qidi5N1L2uac= -----END CERTIFICATE-----Generated at Fri Oct 17 21:57:24 2025 by rpki-client