$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a2bc7c9a-fab4-4383-b222-26b868d97172.roa File: a2bc7c9a-fab4-4383-b222-26b868d97172.roa (raw, json) Hash identifier: vjek9hPjJwMx0/p3Be7FmTZ7ynsdAIKFHrYjfcvBDBc= Subject key identifier: 5F:84:AC:96:C1:94:E7:17:7F:6A:83:39:A2:1C:79:B1:CD:66:AF:AB Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 319C003494C84997FDC0670F6EEB21101445DDAB Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a2bc7c9a-fab4-4383-b222-26b868d97172.roa Signing time: Wed 24 Sep 2025 17:53:34 +0000 ROA not before: Wed 24 Sep 2025 17:53:34 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.35.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:9c:00:34:94:c8:49:97:fd:c0:67:0f:6e:eb:21:10:14:45:dd:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 17:53:34 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=8c98c3e3c95bf37486563e1770b6277d29e70f55d5e463e7229f6228a90419cd, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:bc:8d:4b:5b:cb:8c:0e:da:b3:51:bb:d4:c4: d2:f7:51:72:e2:24:73:92:11:d2:49:2b:c1:7c:70: fd:c0:db:79:81:bb:fc:40:66:b0:6b:3f:43:84:25: 38:2b:cf:65:c6:78:35:89:69:54:cb:95:08:b1:ee: a0:76:0c:05:8d:b6:f5:a8:d7:0b:be:26:f3:2e:a0: e8:e0:6f:28:2e:c7:7b:20:c7:b4:5e:88:72:7e:42: 1c:5f:6c:f4:12:d6:dc:e4:e1:fa:f6:02:15:dd:ed: 4d:51:11:92:50:72:fa:19:34:34:7f:f0:0d:a7:c4: 99:da:ff:12:c5:95:39:66:ef:2e:f4:0f:7f:76:fa: 76:f3:72:c8:d3:35:fd:05:4e:5a:87:ba:c9:03:69: 60:74:c3:9d:e4:b0:69:bf:de:8a:0c:99:15:7f:d9: 42:7f:01:99:36:cf:3a:70:b5:fa:20:c7:60:cf:ae: 74:b5:a3:f0:3c:85:85:e9:a9:b7:9e:0d:7b:eb:4a: 25:e1:e7:71:23:bd:60:f4:74:2e:12:95:8c:6a:67: b6:d6:ce:75:23:fc:05:ee:19:7d:14:e2:da:bb:d8: a0:52:bf:80:f1:0d:b3:8a:5c:b2:fd:9c:16:27:86: 7f:aa:09:ab:b1:10:f7:59:a2:cc:97:46:15:72:9d: 91:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:84:AC:96:C1:94:E7:17:7F:6A:83:39:A2:1C:79:B1:CD:66:AF:AB X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a2bc7c9a-fab4-4383-b222-26b868d97172.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.35.109.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:a4:f0:e3:3a:0e:d0:9d:e3:c0:ed:c2:71:14:43:64:d1:55: 21:84:72:e0:e2:ae:fb:93:de:a9:b1:84:9b:ab:af:84:92:f2: 63:5f:b4:d5:ef:da:fe:c1:4e:09:f3:50:b2:d5:bf:ae:05:e4: cc:1d:00:48:11:6a:c0:68:4a:6c:92:18:0b:22:71:50:9d:9c: 6a:dc:79:93:80:8f:1c:1e:34:bd:ae:96:7d:71:22:05:2e:0b: 32:ee:10:3c:23:21:17:79:07:76:1e:c3:4d:d5:b0:3a:2a:3c: e7:18:a9:05:65:af:e2:9a:5e:9c:1a:90:04:d4:30:6c:b0:1b: d1:2e:82:fa:48:0f:88:27:9d:45:3a:b7:c5:9d:24:db:5a:3c: 5b:7c:93:3f:f8:04:d1:f3:88:61:33:59:57:4f:4b:7b:be:92: fe:74:b4:f9:95:ce:40:d6:fc:90:21:37:a4:ee:7f:3a:0a:21: cc:a2:83:cf:60:57:a0:98:dd:f5:5e:bf:49:d1:87:17:01:d0: 25:60:4b:04:c4:19:77:42:e8:08:ac:3c:2e:f0:fb:f0:f5:cf: 55:d2:97:be:40:75:d3:aa:d2:50:1c:2d:a7:7d:8e:bc:e2:8f: 4e:ca:71:56:8c:72:55:0c:bb:73:64:70:d9:2f:0a:73:72:86: 93:69:c0:c8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMZwANJTISZf9wGcPbushEBRF3aswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MTc1MzM0WhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A4Yzk4YzNlM2M5NWJmMzc0ODY1NjNlMTc3MGI2Mjc3ZDI5 ZTcwZjU1ZDVlNDYzZTcyMjlmNjIyOGE5MDQxOWNkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD6vI1LW8uMDtqzUbvUxNL3UXLiJHOSEdJJK8F8cP3A23mB u/xAZrBrP0OEJTgrz2XGeDWJaVTLlQix7qB2DAWNtvWo1wu+JvMuoOjgbygux3sg x7ReiHJ+QhxfbPQS1tzk4fr2AhXd7U1REZJQcvoZNDR/8A2nxJna/xLFlTlm7y70 D392+nbzcsjTNf0FTlqHuskDaWB0w53ksGm/3ooMmRV/2UJ/AZk2zzpwtfogx2DP rnS1o/A8hYXpqbeeDXvrSiXh53EjvWD0dC4SlYxqZ7bWznUj/AXuGX0U4tq72KBS v4DxDbOKXLL9nBYnhn+qCauxEPdZosyXRhVynZGLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUX4SslsGU5xd/aoM5ohx5sc1mr6swHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2EyYmM3YzlhLWZhYjQtNDM4My1iMjIyLTI2Yjg2OGQ5NzE3Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAANI20wDQYJKoZIhvcNAQELBQADggEBAAuk8OM6DtCd48DtwnEUQ2TRVSGE cuDirvuT3qmxhJurr4SS8mNftNXv2v7BTgnzULLVv64F5MwdAEgRasBoSmySGAsi cVCdnGrceZOAjxweNL2uln1xIgUuCzLuEDwjIRd5B3Yew03VsDoqPOcYqQVlr+Ka XpwakATUMGywG9EugvpID4gnnUU6t8WdJNtaPFt8kz/4BNHziGEzWVdPS3u+kv50 tPmVzkDW/JAhN6TufzoKIcyig89gV6CY3fVev0nRhxcB0CVgSwTEGXdC6AisPC7w +/D1z1XSl75AddOq0lAcLad9jrzij07KcVaMclUMu3NkcNkvCnNyhpNpwMg= -----END CERTIFICATE-----Generated at Sat Oct 18 02:17:30 2025 by rpki-client