$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/98a86877-b01c-4155-b3be-d001a868a872.roa File: 98a86877-b01c-4155-b3be-d001a868a872.roa (raw, json) Hash identifier: fIxJ1zAE7fAkiBSKbTb/VBtFNeD7qKCQYp9sMSyQNvI= Subject key identifier: BF:B3:F9:F5:DC:5E:86:0D:09:96:30:14:F1:49:C9:3F:B6:13:02:64 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 39D66E291B879DFDF78EBE62B4BD4DA0EA00C083 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/98a86877-b01c-4155-b3be-d001a868a872.roa Signing time: Wed 24 Sep 2025 18:12:42 +0000 ROA not before: Wed 24 Sep 2025 18:12:42 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.32.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:d6:6e:29:1b:87:9d:fd:f7:8e:be:62:b4:bd:4d:a0:ea:00:c0:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 18:12:42 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=c17f9b988da2a73af907ac813d37a4990d0a35a611992b807a351cd84b4b268b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:fe:9e:0a:62:c7:ba:e0:8d:79:6f:01:7c:14: 2d:43:57:7d:32:55:97:13:78:05:72:30:92:39:db: 53:25:d0:e2:33:7a:26:87:c4:13:24:e0:79:3a:28: ad:07:b6:db:a4:c2:48:49:c8:0b:03:26:05:d4:db: f8:a5:c9:f7:42:34:bf:95:e5:86:c4:2e:0f:52:78: 00:7f:47:a3:e2:46:73:84:ab:4f:24:35:3c:95:79: bf:11:0c:9e:7f:a9:bb:c8:6d:26:c7:16:6b:ba:58: 60:b7:b7:73:05:38:9a:43:14:03:9b:75:ef:b8:e5: 3b:5d:19:1a:38:95:8f:c7:e6:37:de:82:e9:0d:b2: 5f:5c:2b:9a:f3:5a:c5:5a:3b:8e:12:0f:fd:b4:63: 66:f0:95:9f:61:10:6e:6b:2e:14:7e:e3:aa:86:04: 91:82:80:66:ee:87:26:8b:c1:fc:43:73:05:21:ab: 27:ec:9d:07:3a:16:ac:68:df:84:67:25:d1:c4:0c: 05:5b:3d:61:eb:63:aa:73:02:be:16:14:65:06:11: b7:a8:b4:56:68:41:01:73:fc:97:fa:1b:99:23:91: e1:05:fb:07:a2:f0:2e:1c:09:95:54:1d:31:37:5b: 4c:54:33:57:17:ca:cf:c0:1c:99:5e:01:fb:4d:98: b7:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:B3:F9:F5:DC:5E:86:0D:09:96:30:14:F1:49:C9:3F:B6:13:02:64 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/98a86877-b01c-4155-b3be-d001a868a872.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.32.250.0/23 Signature Algorithm: sha256WithRSAEncryption 52:e4:49:a9:cb:9d:98:77:25:0d:5c:d3:49:3a:f1:61:f6:fb: 9a:c7:11:1b:dc:8a:9b:d6:b9:f0:73:63:a8:5b:93:6b:88:d7: 6f:20:2f:d8:e8:83:5e:52:a8:07:ae:2b:0a:e3:64:63:48:1e: ff:95:d1:98:30:a4:5a:d5:17:e5:10:e0:87:83:22:65:c5:31: b5:0a:fc:6b:48:3d:cf:7e:04:41:f1:32:5b:2e:77:58:8f:05: 75:0a:fc:f8:4d:cd:1e:6a:a0:c2:7c:b2:18:08:6f:83:c0:ee: 00:3a:f8:a8:b1:b4:35:e7:4a:f9:18:25:d8:39:a2:39:48:a5: 22:20:86:36:75:1f:c2:d7:d6:d5:6e:23:3f:02:64:c4:1d:6d: 92:a5:6b:50:3a:a9:03:4e:16:a1:7e:69:2e:ca:de:46:37:b8: 2c:be:a0:35:ca:a8:a6:3e:70:cf:c4:f5:56:bd:e9:6a:d6:6e: 46:32:82:11:5b:db:0c:b1:b3:fd:b8:53:6f:56:a7:27:3e:f9: c3:44:d8:79:0e:5d:b3:74:58:3c:d1:d2:a6:13:dc:d8:06:3c: 6c:88:77:6b:8e:f1:e7:f5:4b:90:a0:8b:54:9f:68:96:de:2d: ad:7c:02:9b:c3:8b:eb:f8:ce:1b:77:e6:7e:4b:0e:59:11:86: e9:33:3e:82 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOdZuKRuHnf33jr5itL1NoOoAwIMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MTgxMjQyWhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BjMTdmOWI5ODhkYTJhNzNhZjkwN2FjODEzZDM3YTQ5OTBk MGEzNWE2MTE5OTJiODA3YTM1MWNkODRiNGIyNjhiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCV/p4KYse64I15bwF8FC1DV30yVZcTeAVyMJI521Ml0OIz eiaHxBMk4Hk6KK0HttukwkhJyAsDJgXU2/ilyfdCNL+V5YbELg9SeAB/R6PiRnOE q08kNTyVeb8RDJ5/qbvIbSbHFmu6WGC3t3MFOJpDFAObde+45TtdGRo4lY/H5jfe gukNsl9cK5rzWsVaO44SD/20Y2bwlZ9hEG5rLhR+46qGBJGCgGbuhyaLwfxDcwUh qyfsnQc6Fqxo34RnJdHEDAVbPWHrY6pzAr4WFGUGEbeotFZoQQFz/Jf6G5kjkeEF +wei8C4cCZVUHTE3W0xUM1cXys/AHJleAftNmLfpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUv7P59dxehg0JljAU8UnJP7YTAmQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzk4YTg2ODc3LWIwMWMtNDE1NS1iM2JlLWQwMDFhODY4YTg3Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAENIPowDQYJKoZIhvcNAQELBQADggEBAFLkSanLnZh3JQ1c00k68WH2+5rH ERvcipvWufBzY6hbk2uI128gL9jog15SqAeuKwrjZGNIHv+V0ZgwpFrVF+UQ4IeD ImXFMbUK/GtIPc9+BEHxMlsud1iPBXUK/PhNzR5qoMJ8shgIb4PA7gA6+KixtDXn SvkYJdg5ojlIpSIghjZ1H8LX1tVuIz8CZMQdbZKla1A6qQNOFqF+aS7K3kY3uCy+ oDXKqKY+cM/E9Va96WrWbkYyghFb2wyxs/24U29Wpyc++cNE2HkOXbN0WDzR0qYT 3NgGPGyId2uO8ef1S5Cgi1SfaJbeLa18ApvDi+v4zht35n5LDlkRhukzPoI= -----END CERTIFICATE-----Generated at Fri Oct 17 21:58:42 2025 by rpki-client