$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a4d9c4fb-7eee-42da-9c99-e63d1e02a839.roa File: a4d9c4fb-7eee-42da-9c99-e63d1e02a839.roa (raw, json) Hash identifier: R9v2Ix+cJq3miblUX58JnVxe6vO1V7S0ihC9pxOm4Zs= Subject key identifier: AB:A8:08:A2:97:E5:2E:B9:31:40:F1:E0:D8:BD:1F:DC:40:AD:08:C0 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0494BF6947688C31E8ED9B1334DA67366BBA75C1 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a4d9c4fb-7eee-42da-9c99-e63d1e02a839.roa Signing time: Wed 24 Sep 2025 17:53:33 +0000 ROA not before: Wed 24 Sep 2025 17:53:33 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.35.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:94:bf:69:47:68:8c:31:e8:ed:9b:13:34:da:67:36:6b:ba:75:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 17:53:33 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=f641b3046dd83ad17649286bdb2963d4989165e630bb8671b477216208a2b91e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b6:6b:73:36:bb:e2:ae:34:e7:65:2d:00:77: d0:0b:af:84:05:f3:87:19:75:f4:8b:16:4a:9b:5e: ea:ac:84:e7:6d:fa:a6:18:e7:89:62:48:a7:d2:82: f7:f8:92:f1:e0:a3:e6:51:77:aa:1d:eb:5f:a3:f9: 3c:31:ea:07:c7:4c:65:d7:c9:cb:5e:ee:74:af:d4: c1:8b:c9:fe:26:85:56:a2:43:2f:90:75:a4:d9:f3: ca:19:6a:2d:da:29:98:72:47:82:47:6d:c4:d1:59: ed:15:74:53:92:08:b6:d2:50:a2:eb:28:1c:69:7b: ef:7d:b7:37:63:1b:42:ad:95:74:d4:1e:db:75:d9: e5:19:d5:71:c7:f4:40:fb:58:ee:43:f2:e0:7d:ef: a2:a1:51:1a:42:42:e7:b0:d1:33:78:c5:d2:dc:d3: 9e:24:44:ea:a0:a3:0f:af:c3:18:70:e3:9b:b1:74: 23:5b:01:08:ad:de:01:bb:fc:7d:36:af:f0:a7:84: b5:70:f3:fb:33:86:9a:a5:cf:6e:b2:5e:ee:42:6c: 87:f9:ff:8f:b7:ee:e0:f9:d9:76:f7:d2:37:72:ed: 26:e7:6f:74:8f:9e:d5:e9:d0:57:49:1c:6d:a7:c2: f6:03:c2:39:95:27:de:fc:fa:35:d5:30:5c:80:a8: 69:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:A8:08:A2:97:E5:2E:B9:31:40:F1:E0:D8:BD:1F:DC:40:AD:08:C0 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a4d9c4fb-7eee-42da-9c99-e63d1e02a839.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.35.108.0/24 Signature Algorithm: sha256WithRSAEncryption 92:2c:20:ed:9f:c7:87:61:f7:7d:d1:90:be:e3:19:6a:57:dd: 8b:8c:3d:3a:02:13:06:dd:07:5a:31:d2:50:df:ef:07:75:96: ac:18:dc:9e:22:1d:2d:1a:6c:4e:a8:78:d6:5e:ed:a3:ba:9d: 54:f2:66:e5:b4:cd:1e:78:0d:a9:7b:6f:99:77:0e:61:c0:c6: df:8f:57:4f:db:be:3e:d3:09:98:f6:d4:18:a3:97:89:ba:b5: 0f:4b:52:62:70:2d:53:c8:dc:6e:55:e7:67:8f:12:73:e1:f3: c4:08:b2:cd:08:67:16:90:0c:6b:db:ab:13:16:7b:b3:a4:63: 8b:33:fb:d9:ce:a4:a7:12:3d:fc:43:9e:27:46:35:20:c0:ea: e7:ad:be:c9:44:9f:97:0c:1b:f6:3a:1f:c4:bb:01:8a:df:0d: cb:6f:ab:6e:6d:2a:69:2a:b5:43:f2:20:e1:ee:65:e3:69:06: 7d:92:da:34:fb:29:f7:48:74:73:92:c1:da:22:8d:29:5d:f2: 65:9a:78:fe:a4:4b:bd:ed:2e:f9:9c:04:1c:94:28:e8:c0:51: f0:1f:89:6d:2a:35:a9:84:1d:6d:b1:78:bb:09:b2:46:d3:ab: fb:7b:c1:de:d8:56:33:02:7b:3f:fd:9e:92:aa:30:a6:0b:6f: 5b:02:a9:83 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBJS/aUdojDHo7ZsTNNpnNmu6dcEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MTc1MzMzWhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BmNjQxYjMwNDZkZDgzYWQxNzY0OTI4NmJkYjI5NjNkNDk4 OTE2NWU2MzBiYjg2NzFiNDc3MjE2MjA4YTJiOTFlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDatmtzNrvirjTnZS0Ad9ALr4QF84cZdfSLFkqbXuqshOdt +qYY54liSKfSgvf4kvHgo+ZRd6od61+j+Twx6gfHTGXXycte7nSv1MGLyf4mhVai Qy+QdaTZ88oZai3aKZhyR4JHbcTRWe0VdFOSCLbSUKLrKBxpe+99tzdjG0KtlXTU Htt12eUZ1XHH9ED7WO5D8uB976KhURpCQuew0TN4xdLc054kROqgow+vwxhw45ux dCNbAQit3gG7/H02r/CnhLVw8/szhpqlz26yXu5CbIf5/4+37uD52Xb30jdy7Sbn b3SPntXp0FdJHG2nwvYDwjmVJ978+jXVMFyAqGlFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUq6gIopflLrkxQPHg2L0f3ECtCMAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2E0ZDljNGZiLTdlZWUtNDJkYS05Yzk5LWU2M2QxZTAyYTgzOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAANI2wwDQYJKoZIhvcNAQELBQADggEBAJIsIO2fx4dh933RkL7jGWpX3YuM PToCEwbdB1ox0lDf7wd1lqwY3J4iHS0abE6oeNZe7aO6nVTyZuW0zR54Dal7b5l3 DmHAxt+PV0/bvj7TCZj21Bijl4m6tQ9LUmJwLVPI3G5V52ePEnPh88QIss0IZxaQ DGvbqxMWe7OkY4sz+9nOpKcSPfxDnidGNSDA6uetvslEn5cMG/Y6H8S7AYrfDctv q25tKmkqtUPyIOHuZeNpBn2S2jT7KfdIdHOSwdoijSld8mWaeP6kS73tLvmcBByU KOjAUfAfiW0qNamEHW2xeLsJskbTq/t7wd7YVjMCez/9npKqMKYLb1sCqYM= -----END CERTIFICATE-----Generated at Fri Oct 17 23:41:36 2025 by rpki-client