$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/38708456-ffc4-4256-b51d-5a34026396b2.roa File: 38708456-ffc4-4256-b51d-5a34026396b2.roa (raw, json) Hash identifier: 86IYallLMmgMCJXh3I3VJx6fpeAj3Eg5Xgl0mZRllJY= Subject key identifier: BC:C8:F9:27:58:28:36:EC:19:55:3E:B4:07:AF:4B:3B:39:68:C8:B4 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 38F78F15FB784D6D512EE9FF8E3303424CF78906 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/38708456-ffc4-4256-b51d-5a34026396b2.roa Signing time: Sun 19 Oct 2025 16:30:17 +0000 ROA not before: Sun 19 Oct 2025 16:30:17 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.33.146.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:f7:8f:15:fb:78:4d:6d:51:2e:e9:ff:8e:33:03:42:4c:f7:89:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 16:30:17 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=1bd15f10b9ab497b028e9867866b3d25ead3bd15247e7dfbb7b1933e136ae967, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0d:5e:5c:9c:94:a5:6d:fa:37:bd:5e:55:f6: cb:a0:3e:d8:4a:3c:9a:b2:f4:89:28:87:6a:44:32: 21:04:c8:ff:ec:78:48:b8:ad:a3:0d:66:4a:c5:1a: df:98:fd:ee:13:ab:5a:0d:dd:d1:85:4b:b8:04:ad: 50:b1:4b:fb:1b:5b:0e:23:b2:be:d4:b9:d3:9f:08: 00:c6:cc:eb:05:64:dc:50:e8:86:cc:b0:b2:93:47: 0d:4d:08:ac:4b:54:4c:bd:24:72:ea:2a:ed:0b:16: a4:ca:0e:8b:a3:bf:35:72:6e:27:dd:d9:14:85:9a: ac:a1:40:41:c4:7b:cb:d1:51:cb:a1:ec:8a:50:ea: fd:69:ee:6f:d4:f0:d1:8a:a0:5d:04:ba:ff:62:37: d0:a1:a9:bd:cc:6a:bf:71:55:5a:62:a9:a2:21:97: 41:15:19:47:e3:df:a7:25:fd:47:8a:63:e1:42:4c: 01:0f:9d:aa:8d:e5:91:f9:6d:75:06:d3:ee:a3:df: 9b:05:06:a9:76:03:ff:10:7d:69:51:49:b8:13:88: d0:bd:e5:ec:d4:e4:da:ea:a6:e4:1e:ce:f3:46:dc: 82:9c:5a:2b:e1:1c:91:bc:90:38:e7:6f:1c:95:27: c4:0b:c5:89:a9:5c:84:69:96:7b:0d:9b:90:89:b0: 62:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:C8:F9:27:58:28:36:EC:19:55:3E:B4:07:AF:4B:3B:39:68:C8:B4 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/38708456-ffc4-4256-b51d-5a34026396b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.33.146.0/23 Signature Algorithm: sha256WithRSAEncryption 53:6c:66:9e:1f:2f:82:42:3e:39:78:9f:2e:71:8c:1a:49:d8: 13:25:2b:65:86:42:01:9e:68:1c:49:3f:30:90:a9:5b:7d:68: 58:03:48:55:d7:a4:1b:ff:94:5d:dc:d3:de:39:6c:f7:d6:2e: 46:8f:66:36:2b:d4:db:36:32:9d:47:d3:ed:5b:31:9e:e9:91: 20:6e:40:80:f4:8b:87:2d:cc:c4:39:7f:2e:8b:d4:46:4e:e5: e3:f2:93:cf:84:b3:70:f3:06:40:d1:8c:cf:f0:ce:08:61:d8: 6a:66:9d:aa:43:b6:d5:0a:62:95:df:c1:ea:fe:e1:ad:5d:36: 7c:eb:57:96:c9:8a:d3:4d:70:91:a6:87:48:55:df:65:fe:a4: ef:3a:44:0b:b6:46:70:69:22:33:87:10:19:a2:fb:57:12:f6: d0:8c:91:50:59:d8:d5:f4:64:e1:83:80:32:4a:8c:ba:36:b2: 68:8c:e7:f3:97:ab:99:e4:20:48:dd:09:51:de:f6:ce:51:de: b8:32:c3:64:fa:2e:4c:07:e6:32:48:53:92:71:4c:59:ba:ec: 47:9b:2d:3b:d5:cf:49:e9:94:85:48:d8:ed:38:67:b7:06:f3: a2:e3:74:7a:26:2a:03:6f:b6:26:46:45:84:36:40:db:1f:c3: 76:d1:9c:f9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOPePFft4TW1RLun/jjMDQkz3iQYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTYzMDE3WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AxYmQxNWYxMGI5YWI0OTdiMDI4ZTk4Njc4NjZiM2QyNWVh ZDNiZDE1MjQ3ZTdkZmJiN2IxOTMzZTEzNmFlOTY3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBDV5cnJSlbfo3vV5V9sugPthKPJqy9Ikoh2pEMiEEyP/s eEi4raMNZkrFGt+Y/e4Tq1oN3dGFS7gErVCxS/sbWw4jsr7UudOfCADGzOsFZNxQ 6IbMsLKTRw1NCKxLVEy9JHLqKu0LFqTKDoujvzVybifd2RSFmqyhQEHEe8vRUcuh 7IpQ6v1p7m/U8NGKoF0Euv9iN9Chqb3Mar9xVVpiqaIhl0EVGUfj36cl/UeKY+FC TAEPnaqN5ZH5bXUG0+6j35sFBql2A/8QfWlRSbgTiNC95ezU5NrqpuQezvNG3IKc WivhHJG8kDjnbxyVJ8QLxYmpXIRplnsNm5CJsGKvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUvMj5J1goNuwZVT60B69LOzloyLQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzM4NzA4NDU2LWZmYzQtNDI1Ni1iNTFkLTVhMzQwMjYzOTZiMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAENIZIwDQYJKoZIhvcNAQELBQADggEBAFNsZp4fL4JCPjl4ny5xjBpJ2BMl K2WGQgGeaBxJPzCQqVt9aFgDSFXXpBv/lF3c0945bPfWLkaPZjYr1Ns2Mp1H0+1b MZ7pkSBuQID0i4ctzMQ5fy6L1EZO5ePyk8+Es3DzBkDRjM/wzghh2GpmnapDttUK YpXfwer+4a1dNnzrV5bJitNNcJGmh0hV32X+pO86RAu2RnBpIjOHEBmi+1cS9tCM kVBZ2NX0ZOGDgDJKjLo2smiM5/OXq5nkIEjdCVHe9s5R3rgyw2T6LkwH5jJIU5Jx TFm67EebLTvVz0nplIVI2O04Z7cG86LjdHomKgNvtiZGRYQ2QNsfw3bRnPk= -----END CERTIFICATE-----Generated at Mon Oct 20 02:57:01 2025 by rpki-client