$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9df3daa4-5df0-43cb-996d-53b1e35f7189.roa File: 9df3daa4-5df0-43cb-996d-53b1e35f7189.roa (raw, json) Hash identifier: 0h5/9lqcmekYI0DR5NWGFHD3sfUgo0oxYmiAuKJ4tP0= Subject key identifier: F8:84:E1:8C:F2:0C:D1:C7:54:E6:46:E1:5B:35:DF:F0:11:FD:86:81 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 337E2022D0D054AB38E8D0E643BB645F1F806CAF Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9df3daa4-5df0-43cb-996d-53b1e35f7189.roa Signing time: Wed 24 Sep 2025 18:33:19 +0000 ROA not before: Wed 24 Sep 2025 18:33:19 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.32.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:7e:20:22:d0:d0:54:ab:38:e8:d0:e6:43:bb:64:5f:1f:80:6c:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 18:33:19 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=07eefe2ac071c4e86fd9b9dbc77b02079177b293bb5d43777f6b5e6cf6dbfff9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:02:50:02:a5:b4:99:38:a9:0c:7e:44:e8:63: d8:1a:66:49:18:e5:0e:c2:db:92:ba:89:18:4f:70: 9c:f9:d7:82:a3:d2:dd:02:9c:5b:2f:1c:8d:1c:4d: 37:ba:91:4b:6a:3d:07:ea:0d:36:23:fb:de:4b:b0: 80:0c:23:09:87:a5:1d:0a:89:80:19:1a:34:91:45: c6:d9:0f:20:a6:d1:92:70:1c:2f:4a:b9:43:01:db: eb:ed:5c:e6:0c:19:2d:da:7a:8d:13:6f:0a:94:9f: 1c:01:ee:d5:c7:67:af:ba:22:a6:76:4e:a3:70:a7: cd:c7:9c:71:a2:1f:54:75:b7:a9:20:96:a9:d7:c8: ef:a5:70:bc:92:45:d0:39:ec:b1:79:c0:6b:90:65: 6c:4f:a3:35:17:ca:b8:e5:c7:92:05:ac:86:96:fc: 4e:09:d0:f6:af:a3:d8:f5:15:3c:b7:aa:53:9a:b7: 10:7d:dc:0f:6e:c0:61:52:82:ab:db:44:fd:24:2c: df:f8:47:97:2a:4f:43:ba:b7:87:9d:9b:60:4e:fb: aa:07:71:ee:06:a6:95:be:a7:24:b9:d5:c2:a4:40: cc:94:a2:38:fb:c0:5a:4c:52:6a:ff:6a:57:03:25: 04:cb:ab:87:2d:da:0a:ec:56:82:cd:30:2e:fc:0f: 7d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:84:E1:8C:F2:0C:D1:C7:54:E6:46:E1:5B:35:DF:F0:11:FD:86:81 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9df3daa4-5df0-43cb-996d-53b1e35f7189.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.32.228.0/22 Signature Algorithm: sha256WithRSAEncryption 96:75:0a:32:c6:0e:b8:d2:69:ae:89:04:6e:5b:9e:d7:ca:cc: 84:f4:72:e4:4f:e9:1b:be:7c:ab:a4:03:b8:65:d7:32:42:64: 4e:9d:0f:2c:3e:17:b8:ee:ea:3d:38:75:ba:57:af:ec:2c:df: 94:e8:9d:79:ae:30:7c:28:3d:23:16:92:02:95:8f:dd:09:5f: 10:dd:81:5c:cc:c8:3e:d7:7d:c9:23:76:c4:7f:71:b4:e3:2d: 50:2a:0e:96:39:c2:c7:08:2b:59:c1:cb:26:ec:6e:31:f9:94: d8:8b:52:d5:5d:18:d9:e1:e9:15:3f:85:53:25:75:57:f6:f3: 7c:eb:15:40:71:d1:c7:12:33:bd:1f:a0:b3:f5:67:14:e9:72: cb:57:52:45:51:84:74:ef:d4:a8:50:1a:6d:b8:21:55:62:bd: 52:23:a9:4a:a6:ca:ec:55:25:08:fc:06:51:07:00:31:75:ef: 5e:9e:29:7a:ef:f4:2e:e7:aa:9e:77:e0:81:90:ac:2b:34:17: 19:fd:70:ec:47:13:ba:17:7f:9b:5b:79:ec:ac:52:d2:19:7b: 9a:2a:08:70:4d:c9:8e:ec:ce:af:b3:e8:ff:68:72:89:a4:31: 83:81:4a:09:cf:e8:bb:85:6a:aa:0c:db:f8:b7:64:b9:4b:4e: 78:44:12:3a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUM34gItDQVKs46NDmQ7tkXx+AbK8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MTgzMzE5WhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0AwN2VlZmUyYWMwNzFjNGU4NmZkOWI5ZGJjNzdiMDIwNzkx NzdiMjkzYmI1ZDQzNzc3ZjZiNWU2Y2Y2ZGJmZmY5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCXAlACpbSZOKkMfkToY9gaZkkY5Q7C25K6iRhPcJz514Kj 0t0CnFsvHI0cTTe6kUtqPQfqDTYj+95LsIAMIwmHpR0KiYAZGjSRRcbZDyCm0ZJw HC9KuUMB2+vtXOYMGS3aeo0TbwqUnxwB7tXHZ6+6IqZ2TqNwp83HnHGiH1R1t6kg lqnXyO+lcLySRdA57LF5wGuQZWxPozUXyrjlx5IFrIaW/E4J0Pavo9j1FTy3qlOa txB93A9uwGFSgqvbRP0kLN/4R5cqT0O6t4edm2BO+6oHce4GppW+pyS51cKkQMyU ojj7wFpMUmr/alcDJQTLq4ct2grsVoLNMC78D33NAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU+IThjPIM0cdU5kbhWzXf8BH9hoEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzlkZjNkYWE0LTVkZjAtNDNjYi05OTZkLTUzYjFlMzVmNzE4OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAINIOQwDQYJKoZIhvcNAQELBQADggEBAJZ1CjLGDrjSaa6JBG5bntfKzIT0 cuRP6Ru+fKukA7hl1zJCZE6dDyw+F7ju6j04dbpXr+ws35TonXmuMHwoPSMWkgKV j90JXxDdgVzMyD7XfckjdsR/cbTjLVAqDpY5wscIK1nByybsbjH5lNiLUtVdGNnh 6RU/hVMldVf283zrFUBx0ccSM70foLP1ZxTpcstXUkVRhHTv1KhQGm24IVVivVIj qUqmyuxVJQj8BlEHADF1716eKXrv9C7nqp534IGQrCs0Fxn9cOxHE7oXf5tbeeys UtIZe5oqCHBNyY7szq+z6P9ocomkMYOBSgnP6LuFaqoM2/i3ZLlLTnhEEjo= -----END CERTIFICATE-----Generated at Fri Oct 17 21:58:57 2025 by rpki-client