$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1e089567-b5ad-4466-bd3a-e7ad5fc45bf5.roa File: 1e089567-b5ad-4466-bd3a-e7ad5fc45bf5.roa (raw, json) Hash identifier: NwhQ6SKZlNXmJsBtH5KL2ROU9Cyz6rzd1TgEHUXhCDg= Subject key identifier: 85:11:4F:EA:F7:FC:E1:1D:AC:99:DD:23:84:E1:91:0E:B8:A0:35:9B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 39DE09189CB7C92C32B021F915B6DA38D8067A8B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1e089567-b5ad-4466-bd3a-e7ad5fc45bf5.roa Signing time: Sun 19 Oct 2025 20:20:10 +0000 ROA not before: Sun 19 Oct 2025 20:20:10 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.33.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:de:09:18:9c:b7:c9:2c:32:b0:21:f9:15:b6:da:38:d8:06:7a:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 20:20:10 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=2f35e67afdcc2618fbbaba4233a946596da195adf1b8f3b643429d80ae40d970, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:43:44:cd:6e:1e:33:6f:ee:07:54:96:5e:ff: 0b:c9:6a:a6:ea:bd:c5:3c:1d:7c:fa:8e:dd:44:2d: 9b:98:3c:9a:de:eb:5b:44:62:db:ea:f8:d0:0b:97: 96:64:81:aa:fa:ea:8c:7a:20:fb:67:e1:d3:5e:86: 96:40:f4:73:97:31:6f:ea:bf:6b:8f:40:eb:3b:a8: b9:be:95:9f:89:41:fe:b6:a9:bb:9f:57:fa:92:e3: 36:e5:51:80:bd:54:23:a4:51:d2:9f:54:1e:8f:6b: 18:67:ae:31:67:bd:28:fe:df:02:46:f6:79:bf:08: da:d6:c3:20:eb:6a:3c:48:24:1f:45:8b:cb:d0:64: 2b:f7:e3:d3:f8:4f:ad:8c:f1:87:66:7c:74:89:71: 5d:3b:68:84:cd:a8:ae:96:04:b9:84:4a:55:88:8f: 5a:c6:55:fe:0b:6f:5f:d3:f6:b0:84:43:02:6e:9d: 09:d2:e7:d9:19:16:cc:98:73:e3:77:2e:57:c0:68: 5a:61:7c:19:f9:56:81:92:f4:a9:98:70:46:a4:8f: ef:cf:a0:f3:bc:00:15:87:83:c2:f8:ec:c0:a3:3b: 89:f2:b9:a4:ea:e5:a3:4f:d5:67:48:27:f5:12:b8: 0b:c1:2c:44:27:92:52:a9:78:52:01:46:bb:a7:8f: e7:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:11:4F:EA:F7:FC:E1:1D:AC:99:DD:23:84:E1:91:0E:B8:A0:35:9B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1e089567-b5ad-4466-bd3a-e7ad5fc45bf5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.33.152.0/24 Signature Algorithm: sha256WithRSAEncryption 95:cb:f5:3c:60:d1:60:67:64:64:72:47:42:5e:57:cf:cc:bf: b0:d1:45:d7:aa:b2:be:8d:88:02:da:49:2f:55:f4:69:c5:17: db:66:83:35:57:94:73:31:cb:e2:73:bc:fb:36:6d:9b:17:4b: 04:83:94:83:2c:02:13:5b:0f:12:0f:0b:3c:65:b6:87:35:08: 03:14:67:d0:49:9f:e3:3c:74:e2:be:a3:6d:ff:bf:54:7a:43: 7e:bc:f8:6f:6a:53:1e:c7:81:52:cb:86:a6:16:b7:cf:f7:50: f5:d1:00:f9:c3:f7:10:93:15:b3:cb:b8:d8:88:75:6c:27:a7: e1:95:73:4b:a5:72:34:ab:8f:6e:00:4d:62:4c:36:c5:1a:ad: 2d:fc:6f:ff:cb:0b:16:f3:e6:f5:ae:af:f9:45:a2:d9:09:05: 8e:1f:b4:7e:dd:9f:81:e4:0b:70:b4:50:dd:35:89:3e:2d:e6: 75:77:1b:89:05:6a:39:5f:b0:cf:2f:1a:fd:b4:9d:dc:15:ae: df:a2:66:ac:30:44:8e:01:03:03:5e:ca:a7:6d:bc:dd:c9:89: fb:75:b9:3c:d0:c4:0e:cb:1f:49:2e:15:01:4d:98:e5:cb:e6: 90:65:ae:db:00:8d:ab:bd:70:12:ec:43:a6:44:c7:14:14:9c: 8f:ba:4d:ef -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOd4JGJy3ySwysCH5FbbaONgGeoswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MjAyMDEwWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AyZjM1ZTY3YWZkY2MyNjE4ZmJiYWJhNDIzM2E5NDY1OTZk YTE5NWFkZjFiOGYzYjY0MzQyOWQ4MGFlNDBkOTcwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7Q0TNbh4zb+4HVJZe/wvJaqbqvcU8HXz6jt1ELZuYPJre 61tEYtvq+NALl5Zkgar66ox6IPtn4dNehpZA9HOXMW/qv2uPQOs7qLm+lZ+JQf62 qbufV/qS4zblUYC9VCOkUdKfVB6PaxhnrjFnvSj+3wJG9nm/CNrWwyDrajxIJB9F i8vQZCv349P4T62M8YdmfHSJcV07aITNqK6WBLmESlWIj1rGVf4Lb1/T9rCEQwJu nQnS59kZFsyYc+N3LlfAaFphfBn5VoGS9KmYcEakj+/PoPO8ABWHg8L47MCjO4ny uaTq5aNP1WdIJ/USuAvBLEQnklKpeFIBRrunj+cXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhRFP6vf84R2smd0jhOGRDrigNZswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzFlMDg5NTY3LWI1YWQtNDQ2Ni1iZDNhLWU3YWQ1ZmM0NWJmNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAANIZgwDQYJKoZIhvcNAQELBQADggEBAJXL9Txg0WBnZGRyR0JeV8/Mv7DR Rdeqsr6NiALaSS9V9GnFF9tmgzVXlHMxy+JzvPs2bZsXSwSDlIMsAhNbDxIPCzxl toc1CAMUZ9BJn+M8dOK+o23/v1R6Q368+G9qUx7HgVLLhqYWt8/3UPXRAPnD9xCT FbPLuNiIdWwnp+GVc0ulcjSrj24ATWJMNsUarS38b//LCxbz5vWur/lFotkJBY4f tH7dn4HkC3C0UN01iT4t5nV3G4kFajlfsM8vGv20ndwVrt+iZqwwRI4BAwNeyqdt vN3Jift1uTzQxA7LH0kuFQFNmOXL5pBlrtsAjau9cBLsQ6ZExxQUnI+6Te8= -----END CERTIFICATE-----Generated at Mon Oct 20 09:49:06 2025 by rpki-client