$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/40c2a0a2-ca08-4a01-9c1a-725a15334455.roa File: 40c2a0a2-ca08-4a01-9c1a-725a15334455.roa (raw, json) Hash identifier: MSFwMsV3VFAzfTEnFdvV1CA8c9crlZvgMFv2U1A8XF0= Subject key identifier: B7:8B:BA:01:F0:98:EA:FA:E3:D5:4D:6F:EF:B3:E9:52:8F:B1:63:6C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4605C19AE928AD8B07FB9728612E52F997AA6173 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/40c2a0a2-ca08-4a01-9c1a-725a15334455.roa Signing time: Sun 19 Oct 2025 08:44:03 +0000 ROA not before: Sun 19 Oct 2025 08:44:03 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.33.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:05:c1:9a:e9:28:ad:8b:07:fb:97:28:61:2e:52:f9:97:aa:61:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 08:44:03 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=b6871765f23e346c970c8e1319c119f886f5edc356a4b53398090fd44b9ff268, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b0:61:55:8a:ca:0c:fb:61:41:5e:ef:91:17: d8:9c:06:81:71:70:db:38:6b:ee:b2:86:ca:65:3d: eb:e7:5a:7b:7f:38:d9:ca:c0:55:8e:a3:2b:43:1f: 8c:66:12:ed:06:f6:2c:b1:81:a5:32:6f:25:52:69: 9a:a7:e1:ee:10:2f:3f:9a:32:27:a9:ec:ca:a5:d9: 6a:f3:ad:4d:20:7a:41:97:9e:47:e6:b7:d2:d7:8e: d5:f8:e6:11:f5:82:76:24:73:e6:85:23:8a:01:16: 63:93:23:bc:3c:0a:74:de:7a:4e:1e:ed:8e:65:ea: 03:50:e0:16:26:de:1a:37:c6:b5:04:83:4c:d2:e3: a0:ba:21:f7:dc:5b:13:b3:df:0c:95:33:05:60:eb: 02:44:ff:c0:80:86:af:34:a1:d6:20:52:b8:f0:27: c4:6a:ae:22:92:c5:1f:33:89:85:8a:a1:a1:23:38: 38:c0:8c:08:88:ed:6c:fc:3a:f6:ac:54:86:21:4f: 07:c9:d2:d6:c5:fc:b5:03:00:8c:8d:80:f7:a8:88: 92:e8:08:97:9a:2b:60:27:ff:82:47:2f:bc:70:3d: 8e:8f:dc:23:42:f8:af:0b:62:68:ee:7c:ab:db:8f: f5:9d:a9:fb:f8:bb:8b:6a:73:dc:bf:ae:23:fa:f9: 83:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:8B:BA:01:F0:98:EA:FA:E3:D5:4D:6F:EF:B3:E9:52:8F:B1:63:6C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/40c2a0a2-ca08-4a01-9c1a-725a15334455.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.33.252.0/22 Signature Algorithm: sha256WithRSAEncryption af:1e:c0:8d:7e:a1:70:ee:21:78:02:86:2c:f9:b8:7f:9d:4c: 1c:ac:d4:74:b1:14:93:38:22:ba:d1:1a:75:69:81:9d:06:36: c8:7c:3b:5d:e1:21:3d:e1:7d:ed:83:fc:b8:1e:ce:18:3f:f7: 2e:e5:10:0c:3d:24:96:f8:fb:1f:80:15:50:27:1c:42:87:40: 17:6c:d3:cf:f9:51:2e:1c:ef:4b:0d:f1:5c:68:ea:ed:67:79: b9:19:95:ff:43:50:8c:bd:d0:aa:8b:6f:61:6b:bf:8d:15:d7: 9f:51:d9:e9:20:4d:76:bc:7a:dc:60:cc:04:c9:a8:9b:4f:82: 21:59:93:b8:a8:eb:18:24:da:22:e8:1d:de:7b:85:9a:ca:82: 59:08:bb:c3:8e:7d:ea:d4:db:85:17:13:8f:ee:28:e8:e5:12: af:05:58:d8:f0:63:0f:9d:82:73:ba:7a:9a:30:a6:db:45:1e: aa:2c:bf:c1:78:79:d3:5c:6f:c7:dd:25:d9:fb:c4:7f:e1:5a: b3:df:24:5b:bd:d5:7a:b0:67:04:cc:9a:2a:6a:06:cf:10:c6: 7f:1a:19:b6:ab:11:9f:47:cb:80:ad:4a:51:d8:e7:83:74:8a: 5e:c4:00:7d:ac:ac:a9:1c:60:48:f2:f1:fe:a5:c9:6a:7a:c1: 09:77:f9:99 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURgXBmukorYsH+5coYS5S+ZeqYXMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MDg0NDAzWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BiNjg3MTc2NWYyM2UzNDZjOTcwYzhlMTMxOWMxMTlmODg2 ZjVlZGMzNTZhNGI1MzM5ODA5MGZkNDRiOWZmMjY4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrsGFVisoM+2FBXu+RF9icBoFxcNs4a+6yhsplPevnWnt/ ONnKwFWOoytDH4xmEu0G9iyxgaUybyVSaZqn4e4QLz+aMiep7Mql2WrzrU0gekGX nkfmt9LXjtX45hH1gnYkc+aFI4oBFmOTI7w8CnTeek4e7Y5l6gNQ4BYm3ho3xrUE g0zS46C6IffcWxOz3wyVMwVg6wJE/8CAhq80odYgUrjwJ8RqriKSxR8ziYWKoaEj ODjAjAiI7Wz8OvasVIYhTwfJ0tbF/LUDAIyNgPeoiJLoCJeaK2An/4JHL7xwPY6P 3CNC+K8LYmjufKvbj/Wdqfv4u4tqc9y/riP6+YM9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUt4u6AfCY6vrj1U1v77PpUo+xY2wwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQwYzJhMGEyLWNhMDgtNGEwMS05YzFhLTcyNWExNTMzNDQ1NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAINIfwwDQYJKoZIhvcNAQELBQADggEBAK8ewI1+oXDuIXgChiz5uH+dTBys 1HSxFJM4IrrRGnVpgZ0GNsh8O13hIT3hfe2D/Lgezhg/9y7lEAw9JJb4+x+AFVAn HEKHQBds08/5US4c70sN8Vxo6u1nebkZlf9DUIy90KqLb2Frv40V159R2ekgTXa8 etxgzATJqJtPgiFZk7io6xgk2iLoHd57hZrKglkIu8OOferU24UXE4/uKOjlEq8F WNjwYw+dgnO6epowpttFHqosv8F4edNcb8fdJdn7xH/hWrPfJFu91XqwZwTMmipq Bs8Qxn8aGbarEZ9Hy4CtSlHY54N0il7EAH2srKkcYEjy8f6lyWp6wQl3+Zk= -----END CERTIFICATE-----Generated at Mon Oct 20 06:03:43 2025 by rpki-client