$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9dfb4e85-a292-41bf-b360-f74b026f379e.roa File: 9dfb4e85-a292-41bf-b360-f74b026f379e.roa (raw, json) Hash identifier: F/aUFpXS6q67v2OZcwSskN5fwA1aoBAUPAO1oUsO6Pw= Subject key identifier: EE:F9:D9:2A:1D:A5:A1:8D:90:88:55:E2:E6:00:41:34:9B:0D:BF:63 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 476D024730CD9DD2127383BDA1322E4C00E184FD Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9dfb4e85-a292-41bf-b360-f74b026f379e.roa Signing time: Wed 24 Sep 2025 18:33:14 +0000 ROA not before: Wed 24 Sep 2025 18:33:14 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.32.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:6d:02:47:30:cd:9d:d2:12:73:83:bd:a1:32:2e:4c:00:e1:84:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 18:33:14 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=bef313236b181a2652a719fb69266329d64aa2703ce7ba90457344c569338e24, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ed:93:cb:12:19:bb:70:b0:42:d8:d2:5b:38: a9:44:58:f9:32:61:98:2a:1c:b8:48:45:c1:4f:4b: af:c0:90:5b:20:a8:72:f4:0d:6f:64:fa:4c:63:dc: 77:12:71:39:3b:80:a2:cd:e6:d1:49:69:9b:bd:e2: 44:e6:a4:36:5e:f7:43:73:fb:d7:dc:0f:50:66:43: f2:32:4e:13:40:b1:ee:e7:d0:ef:2c:22:f8:29:07: 8c:cd:62:e2:d0:04:01:06:6a:ae:3e:19:e0:2c:fe: 3b:b7:75:96:0b:57:e2:54:52:58:79:de:69:f7:cf: 4a:d2:47:79:ec:b6:2f:ca:35:5f:30:95:10:05:6e: 0e:f3:98:ce:fe:9a:b0:d7:e3:d4:b9:db:f1:90:53: ab:7b:4f:e6:b6:ae:05:0b:11:f4:aa:41:34:14:43: 82:2a:17:b1:1d:64:d4:d0:c9:51:8b:9f:21:f3:e3: 58:b9:67:9b:f7:2a:36:63:42:15:42:e1:38:ea:8c: d3:c9:5a:ac:5b:14:16:19:f0:99:90:bb:d9:04:90: 30:c7:a7:09:34:70:7d:2e:d3:54:9a:ac:88:5f:46: c0:57:40:c4:8c:d3:8a:ef:a8:e7:4c:cd:c4:32:51: 16:9b:9c:cc:48:b7:3e:40:1d:0f:ad:77:9e:0b:e5: aa:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:F9:D9:2A:1D:A5:A1:8D:90:88:55:E2:E6:00:41:34:9B:0D:BF:63 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9dfb4e85-a292-41bf-b360-f74b026f379e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.32.212.0/22 Signature Algorithm: sha256WithRSAEncryption 81:6e:6d:f6:fd:5c:04:26:58:d4:88:2f:f6:8b:e8:cc:c9:4c: bc:ff:18:d2:47:ab:8a:a2:0f:f0:4a:82:99:49:34:28:f8:8f: 69:83:de:56:65:9a:e3:2e:c4:23:cb:c1:e6:26:95:96:ea:74: a9:ff:cd:0c:fc:3c:44:8a:3b:ec:ef:a0:c5:44:1b:7f:86:b6: 1e:4d:d4:fa:b0:42:97:d3:71:21:14:7f:a5:1b:f6:56:6f:57: a9:3b:17:00:9f:18:59:2e:d8:9e:34:83:88:82:62:11:d6:56: cd:10:4b:63:9a:02:f2:cf:48:c8:70:ac:ae:d7:8f:c9:b8:e2: a0:8c:3f:1d:d7:c2:53:05:e4:d4:12:b1:7f:94:c9:71:8c:29: 31:d5:8f:37:22:e5:67:7b:4e:b2:a2:d0:4d:c8:73:90:a6:74: 39:05:8c:a0:b9:e3:7b:a3:1f:e7:7b:ef:7c:cf:e0:7f:53:9a: 6d:7e:3b:ba:4a:60:f7:ea:74:c5:69:55:be:78:4c:fa:7b:52: 41:af:9b:be:18:95:54:bd:86:cf:5c:3f:a7:ba:2d:75:93:12: 87:55:12:7a:1c:20:dd:43:a3:43:c2:d2:74:68:fd:c2:69:d0: ba:40:3b:51:e7:b6:74:3b:c1:67:a7:b7:e4:07:34:dd:ea:f8: fc:51:41:4a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUR20CRzDNndISc4O9oTIuTADhhP0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MTgzMzE0WhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BiZWYzMTMyMzZiMTgxYTI2NTJhNzE5ZmI2OTI2NjMyOWQ2 NGFhMjcwM2NlN2JhOTA0NTczNDRjNTY5MzM4ZTI0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDV7ZPLEhm7cLBC2NJbOKlEWPkyYZgqHLhIRcFPS6/AkFsg qHL0DW9k+kxj3HcScTk7gKLN5tFJaZu94kTmpDZe90Nz+9fcD1BmQ/IyThNAse7n 0O8sIvgpB4zNYuLQBAEGaq4+GeAs/ju3dZYLV+JUUlh53mn3z0rSR3nsti/KNV8w lRAFbg7zmM7+mrDX49S52/GQU6t7T+a2rgULEfSqQTQUQ4IqF7EdZNTQyVGLnyHz 41i5Z5v3KjZjQhVC4TjqjNPJWqxbFBYZ8JmQu9kEkDDHpwk0cH0u01SarIhfRsBX QMSM04rvqOdMzcQyURabnMxItz5AHQ+td54L5arfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU7vnZKh2loY2QiFXi5gBBNJsNv2MwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzlkZmI0ZTg1LWEyOTItNDFiZi1iMzYwLWY3NGIwMjZmMzc5ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAININQwDQYJKoZIhvcNAQELBQADggEBAIFubfb9XAQmWNSIL/aL6MzJTLz/ GNJHq4qiD/BKgplJNCj4j2mD3lZlmuMuxCPLweYmlZbqdKn/zQz8PESKO+zvoMVE G3+Gth5N1PqwQpfTcSEUf6Ub9lZvV6k7FwCfGFku2J40g4iCYhHWVs0QS2OaAvLP SMhwrK7Xj8m44qCMPx3XwlMF5NQSsX+UyXGMKTHVjzci5Wd7TrKi0E3Ic5CmdDkF jKC543ujH+d773zP4H9Tmm1+O7pKYPfqdMVpVb54TPp7UkGvm74YlVS9hs9cP6e6 LXWTEodVEnocIN1Do0PC0nRo/cJp0LpAO1HntnQ7wWent+QHNN3q+PxRQUo= -----END CERTIFICATE-----Generated at Fri Oct 17 23:47:40 2025 by rpki-client