$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2449f5d0-f78e-4167-a19e-8a2a9e78a106.roa File: 2449f5d0-f78e-4167-a19e-8a2a9e78a106.roa (raw, json) Hash identifier: WrhS9S25gbVCgEYtgOMBKS+KlPDB5+c7IojVQNE6tf4= Subject key identifier: 4B:79:1C:D1:C5:B5:C4:D2:16:05:5C:C4:6B:9F:6E:A7:8C:D4:1A:39 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2E31539AE020247092E625B7248B34C14C8A621B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2449f5d0-f78e-4167-a19e-8a2a9e78a106.roa Signing time: Sun 19 Oct 2025 23:23:38 +0000 ROA not before: Sun 19 Oct 2025 23:23:38 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.33.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:31:53:9a:e0:20:24:70:92:e6:25:b7:24:8b:34:c1:4c:8a:62:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 23:23:38 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=471e8345c7b720bf20b361fae8576d925901a8fa8e572067e7f8b326c52f05b6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:9f:51:5b:71:3b:85:c7:20:a3:68:47:ca:56: 8b:7c:aa:75:40:5e:7e:e3:47:c1:1e:8d:5a:3f:92: 93:7c:1f:38:e8:85:64:cb:9b:b5:c3:ef:76:94:77: 49:c9:d7:60:6b:52:14:a5:a2:95:02:17:11:19:e4: 31:58:45:7f:e4:71:58:c6:2d:8f:5f:35:4e:af:d3: 17:30:b5:e5:28:33:89:e2:38:b0:9e:14:e4:b1:7f: c7:e5:e5:53:d4:7d:7b:07:0c:6c:76:db:b8:5d:7a: 15:dd:a9:36:ce:29:5a:fc:9b:c4:21:38:79:ce:3f: 50:50:75:23:a1:62:cf:2a:dd:9a:86:83:3c:8e:c9: 9c:7e:40:93:b4:20:b7:3a:28:41:c9:ba:78:ea:f3: e1:06:42:01:85:ef:f9:ea:9e:75:1d:d1:4c:ed:7f: ab:b2:5a:3f:ca:4e:5a:7c:a1:15:ba:82:83:c1:d1: 75:0f:f5:e1:b0:c6:05:73:e9:18:2d:8b:02:cc:e0: 04:8b:54:86:da:d2:7f:dd:00:74:9a:f7:25:59:0a: 55:23:9c:0d:84:20:79:45:86:c8:ba:81:cd:10:ca: e3:c8:27:3b:c5:23:29:7f:cb:49:87:ee:1a:60:4d: ac:67:10:cb:70:b8:52:a7:88:8a:59:ce:e6:82:ac: 5d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:79:1C:D1:C5:B5:C4:D2:16:05:5C:C4:6B:9F:6E:A7:8C:D4:1A:39 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2449f5d0-f78e-4167-a19e-8a2a9e78a106.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.33.239.0/24 Signature Algorithm: sha256WithRSAEncryption 68:39:4e:06:f2:9c:12:01:f7:32:3b:6f:15:13:95:ed:c4:08: c2:d8:e8:99:e6:cc:4e:d6:e9:64:67:95:35:c7:7f:b2:fb:22: c5:f5:fd:44:34:44:bb:7f:03:db:81:e7:ff:8b:13:29:54:86: e2:ec:f8:45:e2:cd:2b:4f:10:43:cb:a4:97:a4:78:dc:ed:8d: 35:8d:3b:ad:0e:af:e4:d6:e7:43:aa:25:d5:d6:41:6b:a7:f8: cd:cf:88:98:f5:ab:0e:11:b0:f8:91:19:a0:c3:08:ea:47:fc: 97:f9:92:94:0b:b8:be:73:7e:7f:55:76:6a:32:c7:1f:a8:23: c8:ac:1c:39:55:02:a3:29:b1:70:c3:2c:b4:2f:d9:ed:6f:c4: 39:81:48:e7:6e:99:dc:53:75:61:4f:2a:3b:89:f3:07:43:39: e7:f5:c4:02:6d:f7:e7:b8:5a:4e:16:4f:d9:88:51:e8:6c:58: 80:4e:c9:d3:71:9c:f7:48:dd:e0:8c:d6:65:aa:66:13:08:15: 2d:1c:81:4c:ff:b4:83:40:60:ab:d8:7a:78:0f:46:c2:59:60: cc:a6:7d:99:dd:70:e1:5d:eb:3d:e8:d1:65:1c:8d:b0:0c:2b: 63:e1:91:90:ac:72:ec:cc:cd:d0:12:a0:62:29:28:94:eb:dc: 00:ca:3b:47 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULjFTmuAgJHCS5iW3JIs0wUyKYhswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MjMyMzM4WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A0NzFlODM0NWM3YjcyMGJmMjBiMzYxZmFlODU3NmQ5MjU5 MDFhOGZhOGU1NzIwNjdlN2Y4YjMyNmM1MmYwNWI2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDyn1FbcTuFxyCjaEfKVot8qnVAXn7jR8EejVo/kpN8Hzjo hWTLm7XD73aUd0nJ12BrUhSlopUCFxEZ5DFYRX/kcVjGLY9fNU6v0xcwteUoM4ni OLCeFOSxf8fl5VPUfXsHDGx227hdehXdqTbOKVr8m8QhOHnOP1BQdSOhYs8q3ZqG gzyOyZx+QJO0ILc6KEHJunjq8+EGQgGF7/nqnnUd0Uztf6uyWj/KTlp8oRW6goPB 0XUP9eGwxgVz6RgtiwLM4ASLVIba0n/dAHSa9yVZClUjnA2EIHlFhsi6gc0QyuPI JzvFIyl/y0mH7hpgTaxnEMtwuFKniIpZzuaCrF0/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUS3kc0cW1xNIWBVzEa59up4zUGjkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzI0NDlmNWQwLWY3OGUtNDE2Ny1hMTllLThhMmE5ZTc4YTEwNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAANIe8wDQYJKoZIhvcNAQELBQADggEBAGg5TgbynBIB9zI7bxUTle3ECMLY 6JnmzE7W6WRnlTXHf7L7IsX1/UQ0RLt/A9uB5/+LEylUhuLs+EXizStPEEPLpJek eNztjTWNO60Or+TW50OqJdXWQWun+M3PiJj1qw4RsPiRGaDDCOpH/Jf5kpQLuL5z fn9Vdmoyxx+oI8isHDlVAqMpsXDDLLQv2e1vxDmBSOdumdxTdWFPKjuJ8wdDOef1 xAJt9+e4Wk4WT9mIUehsWIBOydNxnPdI3eCM1mWqZhMIFS0cgUz/tINAYKvYengP RsJZYMymfZndcOFd6z3o0WUcjbAMK2PhkZCscuzMzdASoGIpKJTr3ADKO0c= -----END CERTIFICATE-----Generated at Mon Oct 20 15:48:11 2025 by rpki-client