$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2f84dbc1-8e48-4763-88df-7fd6c1f91b74.roa File: 2f84dbc1-8e48-4763-88df-7fd6c1f91b74.roa (raw, json) Hash identifier: X7zyawH4iIqdzhAasabgnGYjtOBHMwVKT/MMBFGJgHo= Subject key identifier: 5B:63:36:35:3F:23:6D:5A:83:B4:ED:3F:5E:B2:B7:35:BF:34:A3:B7 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4FD2ADC4223FF7FFB29BA10D76D0927D00601351 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2f84dbc1-8e48-4763-88df-7fd6c1f91b74.roa Signing time: Sun 19 Oct 2025 14:02:19 +0000 ROA not before: Sun 19 Oct 2025 14:02:19 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.33.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:d2:ad:c4:22:3f:f7:ff:b2:9b:a1:0d:76:d0:92:7d:00:60:13:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 14:02:19 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=ac360775c6cfd92cba5b04a03d3f0732696cc74426088fc36ba1cce03996934e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a1:29:47:29:5b:45:d6:59:78:e2:80:dc:87: 31:23:ff:9b:9e:89:e5:cc:14:cf:8b:78:74:12:0b: 4f:f6:0f:a1:6e:21:3a:64:a1:50:6d:c4:78:70:a4: 74:b2:84:8c:79:0a:49:2a:0b:6b:a6:a0:d2:e0:8d: 5b:2b:11:cd:29:ae:91:a0:9d:72:97:23:ca:ca:03: 73:14:8b:d4:bd:50:ce:60:5e:b5:e3:4c:3c:b8:6b: 8f:57:57:89:df:e0:89:00:db:86:3e:6c:65:2d:c2: b0:db:67:2e:e7:2f:f6:73:25:af:d8:29:49:be:2f: 8f:ac:f7:1d:dd:99:8a:66:bd:0f:7c:4b:f1:ac:a4: b4:5d:79:8c:33:1b:64:8e:7d:dc:61:2c:d0:a5:9c: b7:42:47:9a:da:79:50:d9:30:78:a8:e6:f4:4a:90: 70:49:8e:0a:7b:6d:79:ae:e9:06:a3:66:74:59:e0: 10:de:0c:87:88:78:ef:0c:5a:60:d7:db:72:98:13: f4:af:93:5c:7b:75:1f:64:aa:fc:cb:88:8e:7e:47: 27:2b:31:b9:a6:12:9a:77:06:af:8b:05:81:9d:af: fa:4b:e8:66:8f:d9:ff:84:75:21:2e:44:cb:92:73: 5e:1e:ec:2d:21:f2:65:a1:22:00:f1:fa:f9:b8:79: 60:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:63:36:35:3F:23:6D:5A:83:B4:ED:3F:5E:B2:B7:35:BF:34:A3:B7 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2f84dbc1-8e48-4763-88df-7fd6c1f91b74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.33.152.0/22 Signature Algorithm: sha256WithRSAEncryption 02:c4:b8:80:52:1e:d7:74:aa:26:c2:c7:3c:e4:c1:17:51:b3: 55:4f:0a:90:fa:fe:c3:a0:12:3d:f8:82:25:50:f1:0e:c2:a6: db:5a:45:40:d4:e1:14:3c:e6:72:1e:4d:a5:c4:f4:2a:28:3a: a4:f1:4c:ff:40:ab:da:74:f7:00:34:c4:b6:8d:24:09:7a:49: e1:d7:5b:0a:c4:34:7e:80:5e:fa:41:77:9e:99:c6:f2:cb:16: 85:f5:e9:a9:01:32:a9:34:68:02:ae:14:70:9c:36:5a:e3:06: 94:2b:2d:b7:eb:22:07:22:31:17:f3:15:ea:cd:9b:53:d6:f8: 2b:6a:5e:94:87:ab:a4:d4:c5:c1:f3:b9:aa:c3:63:82:a4:87: 36:95:8a:d0:c5:d9:ee:3e:30:ec:e8:88:6d:d0:53:e0:83:1e: 7f:d3:3c:0b:df:69:0f:38:5d:6d:e2:e6:02:5e:1c:5c:a7:42: 87:8c:c4:d2:1d:06:71:29:a1:32:f8:42:5c:a8:37:4a:e2:4c: b8:c7:84:06:5f:6c:2f:f9:8e:7d:59:ff:c4:c9:31:18:07:5d: d4:12:d1:9c:01:98:18:d7:0e:00:a3:54:a2:c6:b4:0d:f4:1f: 16:4a:b0:ca:c5:10:9d:42:0f:4d:73:33:00:09:1b:ea:29:cf: bc:17:0c:36 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUT9KtxCI/9/+ym6ENdtCSfQBgE1EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTQwMjE5WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BhYzM2MDc3NWM2Y2ZkOTJjYmE1YjA0YTAzZDNmMDczMjY5 NmNjNzQ0MjYwODhmYzM2YmExY2NlMDM5OTY5MzRlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCloSlHKVtF1ll44oDchzEj/5ueieXMFM+LeHQSC0/2D6Fu ITpkoVBtxHhwpHSyhIx5CkkqC2umoNLgjVsrEc0prpGgnXKXI8rKA3MUi9S9UM5g XrXjTDy4a49XV4nf4IkA24Y+bGUtwrDbZy7nL/ZzJa/YKUm+L4+s9x3dmYpmvQ98 S/GspLRdeYwzG2SOfdxhLNClnLdCR5raeVDZMHio5vRKkHBJjgp7bXmu6QajZnRZ 4BDeDIeIeO8MWmDX23KYE/Svk1x7dR9kqvzLiI5+RycrMbmmEpp3Bq+LBYGdr/pL 6GaP2f+EdSEuRMuSc14e7C0h8mWhIgDx+vm4eWDvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUW2M2NT8jbVqDtO0/XrK3Nb80o7cwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzJmODRkYmMxLThlNDgtNDc2My04OGRmLTdmZDZjMWY5MWI3NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAINIZgwDQYJKoZIhvcNAQELBQADggEBAALEuIBSHtd0qibCxzzkwRdRs1VP CpD6/sOgEj34giVQ8Q7CpttaRUDU4RQ85nIeTaXE9CooOqTxTP9Aq9p09wA0xLaN JAl6SeHXWwrENH6AXvpBd56ZxvLLFoX16akBMqk0aAKuFHCcNlrjBpQrLbfrIgci MRfzFerNm1PW+CtqXpSHq6TUxcHzuarDY4KkhzaVitDF2e4+MOzoiG3QU+CDHn/T PAvfaQ84XW3i5gJeHFynQoeMxNIdBnEpoTL4QlyoN0riTLjHhAZfbC/5jn1Z/8TJ MRgHXdQS0ZwBmBjXDgCjVKLGtA30HxZKsMrFEJ1CD01zMwAJG+opz7wXDDY= -----END CERTIFICATE-----Generated at Mon Oct 20 02:56:42 2025 by rpki-client