$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ae450643-6894-4699-9840-5f59ad62a03a.roa File: ae450643-6894-4699-9840-5f59ad62a03a.roa (raw, json) Hash identifier: 0bHl3q2xxAiyoHRg7VyxlCzJcXtQYKvCn5AE4y97ERg= Subject key identifier: 40:13:F5:5F:8D:50:9C:82:46:64:76:17:99:D3:27:53:7A:4E:83:60 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 331DD691D03A408E41237C88243D628A700D5241 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ae450643-6894-4699-9840-5f59ad62a03a.roa Signing time: Wed 24 Sep 2025 17:26:44 +0000 ROA not before: Wed 24 Sep 2025 17:26:44 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.32.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:1d:d6:91:d0:3a:40:8e:41:23:7c:88:24:3d:62:8a:70:0d:52:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 17:26:44 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=dd5f0003345081d630ca39bd68b51b66563ccea36fcca5b8f58956782f8b5af8, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ea:0f:28:01:4f:11:4e:75:84:de:86:b9:06: b6:1c:b4:d3:e0:27:3c:08:f7:02:4c:97:ce:75:4f: 06:86:2c:00:f9:e2:80:97:e7:23:26:27:10:67:80: 24:b8:fd:68:15:ac:88:8e:36:41:47:8e:81:b6:9c: 40:2f:cf:b9:d3:d4:4b:1d:b3:b0:f8:98:03:fb:87: a6:3e:76:96:3a:2c:98:a1:a7:f9:2b:fe:16:18:71: 42:f4:c5:cc:e1:e0:3f:4d:dc:27:e9:2b:e5:c5:89: 9c:cd:67:d6:e2:af:38:56:04:4f:15:ec:b0:5e:48: f9:2b:26:46:6c:bd:86:96:14:73:57:7e:29:8d:38: b0:51:66:43:68:dd:80:e0:61:7a:fb:73:91:7e:6c: a2:fd:32:2c:b6:83:f9:6b:1c:24:5a:6f:4e:d7:c6: 21:c1:d7:c5:ee:5f:d8:87:4e:9c:79:ba:b5:2d:5d: fa:cc:d1:bc:13:a1:3f:e6:79:99:5d:84:95:52:4e: c9:d6:2e:24:a5:97:43:14:3f:35:18:72:eb:f8:81: a4:ac:57:cc:9c:11:aa:42:91:32:ad:4f:e2:88:aa: d7:d4:f0:15:cd:40:ee:55:12:4b:92:90:d9:40:73: 9b:ae:9c:46:db:06:52:0b:56:a9:8b:04:90:11:6d: 6c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:13:F5:5F:8D:50:9C:82:46:64:76:17:99:D3:27:53:7A:4E:83:60 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ae450643-6894-4699-9840-5f59ad62a03a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.32.191.0/24 Signature Algorithm: sha256WithRSAEncryption 51:f2:ae:0f:f0:4a:71:96:0e:d3:51:a5:ce:70:f4:18:50:39: 81:bd:c8:61:af:b2:a6:7b:04:71:48:00:17:90:48:02:a9:bf: 63:9b:ce:56:47:8f:85:c4:1f:6e:d3:da:40:bb:5d:f7:59:16: 27:6a:d8:39:fc:c8:a4:35:d3:00:c1:7c:69:58:94:29:74:ab: 5d:32:47:09:f3:f7:22:3d:ae:ca:9b:b3:12:1c:f8:ef:5d:d4: 55:22:c3:08:e4:4d:cb:0c:1d:ec:67:76:f7:7e:7c:58:1d:f6: 9e:3e:2f:a7:30:c0:78:6f:06:1d:23:93:26:19:9e:1b:0c:ae: dc:1c:01:ec:f9:7f:46:e9:b5:4d:9c:f5:62:3e:6f:cf:9b:e2: cc:d3:22:d9:96:2c:ea:0a:38:1b:63:dd:1b:54:e2:2a:c2:14: e5:65:ef:b3:67:bb:fb:79:c4:45:c7:01:0c:5a:38:fa:95:04: 42:8d:cd:e3:5e:93:b8:63:34:df:73:2e:84:c5:51:ca:65:f5: 1a:7b:ea:bb:6c:f7:91:ca:1b:78:3b:33:8e:cb:1a:c2:14:b3: 31:d5:f1:2c:ef:d0:63:12:52:62:ba:e3:e8:45:91:42:c7:01: 62:7e:26:f7:58:c8:6b:3a:6f:17:39:53:5f:02:e9:4b:69:bd: 0e:bf:7b:2f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMx3WkdA6QI5BI3yIJD1iinANUkEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MTcyNjQ0WhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BkZDVmMDAwMzM0NTA4MWQ2MzBjYTM5YmQ2OGI1MWI2NjU2 M2NjZWEzNmZjY2E1YjhmNTg5NTY3ODJmOGI1YWY4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDc6g8oAU8RTnWE3oa5BrYctNPgJzwI9wJMl851TwaGLAD5 4oCX5yMmJxBngCS4/WgVrIiONkFHjoG2nEAvz7nT1Esds7D4mAP7h6Y+dpY6LJih p/kr/hYYcUL0xczh4D9N3CfpK+XFiZzNZ9birzhWBE8V7LBeSPkrJkZsvYaWFHNX fimNOLBRZkNo3YDgYXr7c5F+bKL9Miy2g/lrHCRab07XxiHB18XuX9iHTpx5urUt XfrM0bwToT/meZldhJVSTsnWLiSll0MUPzUYcuv4gaSsV8ycEapCkTKtT+KIqtfU 8BXNQO5VEkuSkNlAc5uunEbbBlILVqmLBJARbWx3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUQBP1X41QnIJGZHYXmdMnU3pOg2AwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2FlNDUwNjQzLTY4OTQtNDY5OS05ODQwLTVmNTlhZDYyYTAzYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAANIL8wDQYJKoZIhvcNAQELBQADggEBAFHyrg/wSnGWDtNRpc5w9BhQOYG9 yGGvsqZ7BHFIABeQSAKpv2ObzlZHj4XEH27T2kC7XfdZFidq2Dn8yKQ10wDBfGlY lCl0q10yRwnz9yI9rsqbsxIc+O9d1FUiwwjkTcsMHexndvd+fFgd9p4+L6cwwHhv Bh0jkyYZnhsMrtwcAez5f0bptU2c9WI+b8+b4szTItmWLOoKOBtj3RtU4irCFOVl 77Nnu/t5xEXHAQxaOPqVBEKNzeNek7hjNN9zLoTFUcpl9Rp76rts95HKG3g7M47L GsIUszHV8Szv0GMSUmK64+hFkULHAWJ+JvdYyGs6bxc5U18C6UtpvQ6/ey8= -----END CERTIFICATE-----Generated at Fri Oct 17 23:54:14 2025 by rpki-client