$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ac71920e-a185-4317-80aa-6b5c1740b41e.roa File: ac71920e-a185-4317-80aa-6b5c1740b41e.roa (raw, json) Hash identifier: oYPrbf5suwpGjcqmjdWR2BdCSwV7HOy5jdt3wrIN8Kg= Subject key identifier: AD:0C:00:AB:04:5E:59:8C:CA:24:80:E2:3A:F4:7C:52:4B:75:FC:F7 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7135B4902BCE62D5DA309E731A681BD394037BE2 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ac71920e-a185-4317-80aa-6b5c1740b41e.roa Signing time: Wed 24 Sep 2025 18:10:36 +0000 ROA not before: Wed 24 Sep 2025 18:10:36 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.32.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:35:b4:90:2b:ce:62:d5:da:30:9e:73:1a:68:1b:d3:94:03:7b:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 18:10:36 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=dcf7eae80cd66da263af4725a746bc085d6625cae4988bf970afac83db18ae5b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:1d:da:3c:d1:12:73:31:66:bc:d9:86:b0:65: 3f:40:50:74:d6:57:57:b2:d2:70:b8:ca:fc:d7:3e: 80:44:83:d4:84:f7:dd:cb:cf:be:1f:be:0e:67:92: a2:db:fa:82:6c:a2:7b:24:f1:d5:00:5c:69:a1:be: 11:56:82:65:77:03:b3:e8:a0:e1:91:6a:fd:b3:d2: 3e:0e:0a:7e:8f:40:1b:cd:9d:53:ce:db:77:58:9d: c5:44:46:22:2e:bc:aa:20:53:e9:ae:81:7e:f3:ba: 46:d6:50:58:ce:76:9b:bc:88:f1:ad:b9:86:98:38: be:ce:50:6f:ee:66:bc:95:82:40:ef:b0:52:02:c1: c2:a7:14:e0:03:fd:7d:5a:db:2f:72:ad:c2:e5:7f: 16:de:86:6b:e5:b7:f2:6d:e2:de:79:16:71:3e:32: fb:6f:d3:b1:7b:b1:d4:43:cb:86:20:03:a2:87:1a: 29:5c:34:3a:a1:06:54:33:3c:24:2e:41:2f:a3:cc: 21:e4:a3:82:bc:d2:e5:21:5e:00:23:88:d4:4f:59: a8:4b:f4:b5:4e:ba:6f:96:33:5f:de:b7:6c:93:6a: 5e:99:16:32:01:ae:88:a8:a4:24:a2:0d:c4:eb:66: cc:f9:05:de:a2:3c:da:d3:cb:6c:16:ac:2e:34:54: 22:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:0C:00:AB:04:5E:59:8C:CA:24:80:E2:3A:F4:7C:52:4B:75:FC:F7 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ac71920e-a185-4317-80aa-6b5c1740b41e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.32.168.0/23 Signature Algorithm: sha256WithRSAEncryption 54:21:a5:42:79:16:16:4e:22:df:80:ff:af:24:81:fa:5f:52: da:f4:d5:2b:07:d2:d3:fa:cd:e9:c8:cd:a3:4f:bf:9e:f4:3e: b2:fc:8b:20:27:9e:78:d6:a0:45:21:b9:c2:6d:4a:eb:d3:69: 4f:f1:f9:6f:f8:79:b0:f2:7f:ff:d6:db:5a:2b:59:57:05:f0: 18:e9:5c:f0:c7:3e:b4:82:58:b8:d8:30:8a:e2:ea:b3:55:cb: 40:e7:cf:2b:d8:d4:45:5f:9a:c0:d5:31:c5:a8:66:bb:87:53: 23:79:42:4c:fe:3a:10:96:fa:23:ae:48:8d:8c:e1:54:48:0d: c4:cb:07:56:5b:1b:b0:39:dd:91:a0:f3:1c:10:2c:53:44:28: 1f:e9:c2:75:06:21:10:35:a6:32:75:62:f9:94:aa:ef:56:f9: 8a:fe:09:b3:91:a9:88:7a:fe:66:44:b3:5d:bd:0d:ec:13:01: 65:4f:30:1e:9c:a3:8b:bb:59:4e:0a:16:c5:92:92:7e:88:6e: 0e:01:43:67:f7:84:10:48:e6:c7:23:cb:70:f5:8f:89:59:e8: 0b:9e:ba:43:27:c7:0d:63:85:70:af:51:7f:72:13:17:a2:51: a6:e2:25:2e:64:1d:a1:68:49:e9:14:3e:84:ee:f5:97:fd:72: c7:73:79:c2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcTW0kCvOYtXaMJ5zGmgb05QDe+IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MTgxMDM2WhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BkY2Y3ZWFlODBjZDY2ZGEyNjNhZjQ3MjVhNzQ2YmMwODVk NjYyNWNhZTQ5ODhiZjk3MGFmYWM4M2RiMThhZTViMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDhHdo80RJzMWa82YawZT9AUHTWV1ey0nC4yvzXPoBEg9SE 993Lz74fvg5nkqLb+oJsonsk8dUAXGmhvhFWgmV3A7PooOGRav2z0j4OCn6PQBvN nVPO23dYncVERiIuvKogU+mugX7zukbWUFjOdpu8iPGtuYaYOL7OUG/uZryVgkDv sFICwcKnFOAD/X1a2y9yrcLlfxbehmvlt/Jt4t55FnE+Mvtv07F7sdRDy4YgA6KH GilcNDqhBlQzPCQuQS+jzCHko4K80uUhXgAjiNRPWahL9LVOum+WM1/et2yTal6Z FjIBroiopCSiDcTrZsz5Bd6iPNrTy2wWrC40VCIlAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUrQwAqwReWYzKJIDiOvR8Ukt1/PcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2FjNzE5MjBlLWExODUtNDMxNy04MGFhLTZiNWMxNzQwYjQxZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAENIKgwDQYJKoZIhvcNAQELBQADggEBAFQhpUJ5FhZOIt+A/68kgfpfUtr0 1SsH0tP6zenIzaNPv570PrL8iyAnnnjWoEUhucJtSuvTaU/x+W/4ebDyf//W21or WVcF8BjpXPDHPrSCWLjYMIri6rNVy0DnzyvY1EVfmsDVMcWoZruHUyN5Qkz+OhCW +iOuSI2M4VRIDcTLB1ZbG7A53ZGg8xwQLFNEKB/pwnUGIRA1pjJ1YvmUqu9W+Yr+ CbORqYh6/mZEs129DewTAWVPMB6co4u7WU4KFsWSkn6Ibg4BQ2f3hBBI5scjy3D1 j4lZ6AueukMnxw1jhXCvUX9yExeiUabiJS5kHaFoSekUPoTu9Zf9csdzecI= -----END CERTIFICATE-----Generated at Fri Oct 17 21:57:06 2025 by rpki-client