$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/189b020e-d0f3-40c6-8325-3dc2810df982.roa File: 189b020e-d0f3-40c6-8325-3dc2810df982.roa (raw, json) Hash identifier: ixLAAOkmhXihMTORWIFHjjWkEv8azFncEYyeWlrr0Bg= Subject key identifier: C6:CF:46:6F:D4:06:14:78:08:7B:27:42:AC:EB:B4:98:C7:3E:12:02 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 78ED2B2CEC8CE9343CECAEFA9CE610D9431A711D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/189b020e-d0f3-40c6-8325-3dc2810df982.roa Signing time: Sun 19 Oct 2025 18:30:18 +0000 ROA not before: Sun 19 Oct 2025 18:30:18 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.33.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:ed:2b:2c:ec:8c:e9:34:3c:ec:ae:fa:9c:e6:10:d9:43:1a:71:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 18:30:18 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=7dd74405688692e2d86e8aafd96168b1fea5ad1408ab9a61e870c04e6267c530, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:46:67:1c:92:85:34:80:99:ce:1d:1f:d1:06: 56:02:31:47:61:b3:2d:71:a9:d5:43:af:5f:81:23: b6:e6:9d:15:47:52:ff:14:58:ae:b5:9c:d5:3d:62: 93:e9:e8:bf:80:9f:26:aa:9f:b0:fc:4b:e2:db:ef: 49:00:a6:54:2a:3d:8d:b6:01:b2:b5:4f:67:be:c4: b7:b9:a1:06:e6:2e:14:80:06:63:ae:39:af:a0:8e: ec:53:89:d4:15:12:c3:b6:a3:19:3d:13:ee:1a:66: 84:fc:bd:3d:16:59:4b:bf:4c:4a:34:17:da:1b:1d: 2f:45:2b:cc:13:e1:4c:82:16:0e:7f:59:3e:d8:e4: db:cc:cd:01:66:c6:68:19:22:33:7b:f8:d6:ae:95: 69:46:87:f6:fc:d9:39:11:28:09:9b:c0:56:f7:e4: 48:76:c9:a7:7f:53:5c:31:60:32:3e:50:42:6a:3f: d1:d8:f9:38:8b:0d:93:31:29:fc:85:ed:be:be:92: 1a:81:9b:94:7f:7b:64:bf:37:e7:da:83:71:70:c9: 7a:a0:3c:ff:81:1c:6a:fa:e1:b3:c7:7b:a2:0a:d2: 36:07:3c:fb:cd:85:b7:9d:d4:4f:28:41:89:b8:e2: 9b:9d:56:d2:b0:9f:33:f9:77:78:15:94:a6:fb:6e: 71:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:CF:46:6F:D4:06:14:78:08:7B:27:42:AC:EB:B4:98:C7:3E:12:02 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/189b020e-d0f3-40c6-8325-3dc2810df982.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.33.232.0/22 Signature Algorithm: sha256WithRSAEncryption 8b:37:ac:bf:60:21:45:a3:37:d7:99:eb:61:5e:61:12:9d:c7: ce:c8:a9:d9:2f:f1:df:e6:2c:40:89:c1:51:f6:0d:2b:aa:e0: 29:7e:dc:3a:2c:29:d0:64:27:4d:36:fe:d4:e9:96:47:c2:c3: 69:9f:a4:fd:6f:bc:e9:fe:90:5b:8d:54:de:8f:01:1f:78:2d: db:75:74:c3:e6:1d:b1:f0:53:95:50:bb:c1:7e:82:6b:7d:5a: 68:e1:fc:56:3c:19:44:5f:e1:ae:3f:96:40:af:f3:b8:65:d0: c4:51:cd:61:35:b8:63:09:d4:9a:d9:b4:de:74:dd:81:cf:89: 54:d0:76:7d:73:5f:fd:e5:7c:e7:58:1b:cd:4f:f3:da:e8:c2: 6e:07:f9:49:58:df:36:e4:7c:f4:95:34:32:00:e7:a7:1a:86: fe:b5:b5:b4:08:95:e6:ec:b2:74:04:e9:69:bc:66:49:08:38: b1:ef:57:71:c5:3b:23:62:02:d7:76:e4:5d:64:f5:fb:52:0d: fb:6b:0a:29:9f:8d:0a:9b:89:33:f1:88:03:3a:6e:42:d1:dd: 2c:f0:4f:13:08:5f:ed:f7:8a:e9:03:92:15:07:c3:58:a5:9c: 96:1e:60:99:c9:3b:be:87:de:56:8d:f8:ff:a8:46:17:5f:d1: 84:d0:47:38 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUeO0rLOyM6TQ87K76nOYQ2UMacR0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTgzMDE4WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZGQ3NDQwNTY4ODY5MmUyZDg2ZThhYWZkOTYxNjhiMWZl YTVhZDE0MDhhYjlhNjFlODcwYzA0ZTYyNjdjNTMwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCTRmcckoU0gJnOHR/RBlYCMUdhsy1xqdVDr1+BI7bmnRVH Uv8UWK61nNU9YpPp6L+Anyaqn7D8S+Lb70kAplQqPY22AbK1T2e+xLe5oQbmLhSA BmOuOa+gjuxTidQVEsO2oxk9E+4aZoT8vT0WWUu/TEo0F9obHS9FK8wT4UyCFg5/ WT7Y5NvMzQFmxmgZIjN7+NaulWlGh/b82TkRKAmbwFb35Eh2yad/U1wxYDI+UEJq P9HY+TiLDZMxKfyF7b6+khqBm5R/e2S/N+fag3FwyXqgPP+BHGr64bPHe6IK0jYH PPvNhbed1E8oQYm44pudVtKwnzP5d3gVlKb7bnHJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUxs9Gb9QGFHgIeydCrOu0mMc+EgIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzE4OWIwMjBlLWQwZjMtNDBjNi04MzI1LTNkYzI4MTBkZjk4Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAINIegwDQYJKoZIhvcNAQELBQADggEBAIs3rL9gIUWjN9eZ62FeYRKdx87I qdkv8d/mLECJwVH2DSuq4Cl+3DosKdBkJ002/tTplkfCw2mfpP1vvOn+kFuNVN6P AR94Ldt1dMPmHbHwU5VQu8F+gmt9Wmjh/FY8GURf4a4/lkCv87hl0MRRzWE1uGMJ 1JrZtN503YHPiVTQdn1zX/3lfOdYG81P89rowm4H+UlY3zbkfPSVNDIA56cahv61 tbQIlebssnQE6Wm8ZkkIOLHvV3HFOyNiAtd25F1k9ftSDftrCimfjQqbiTPxiAM6 bkLR3SzwTxMIX+33iukDkhUHw1ilnJYeYJnJO76H3laN+P+oRhdf0YTQRzg= -----END CERTIFICATE-----Generated at Mon Oct 20 21:12:25 2025 by rpki-client