$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/57614fe4-8662-4b32-a356-6dbe9d832374.roa File: 57614fe4-8662-4b32-a356-6dbe9d832374.roa (raw, json) Hash identifier: 7LFQZWAvzb3sD8fvEwB4fTfvRSHdwp7xdGzjK8in0AI= Subject key identifier: 6F:A7:CE:91:72:86:44:A2:5F:C0:C8:AD:AF:F2:6A:B0:ED:19:A0:1E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 319732B20F98EED61E594A534378C525874136EC Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/57614fe4-8662-4b32-a356-6dbe9d832374.roa Signing time: Sun 19 Oct 2025 12:43:55 +0000 ROA not before: Sun 19 Oct 2025 12:43:55 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.33.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:97:32:b2:0f:98:ee:d6:1e:59:4a:53:43:78:c5:25:87:41:36:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 12:43:55 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=dfb4611429c55a8fce42b08e96b97e7bf4f7615fc3037a9cd378907f91304315, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:96:a5:51:8b:55:79:38:1d:1a:09:c9:77:ef: 6b:56:e0:06:e3:0f:44:fb:1d:5e:63:dd:78:5e:9a: 83:e6:2b:2d:11:6a:47:8c:e8:f5:a5:0b:c5:5c:d6: b7:20:67:a8:1f:85:8c:e5:fd:98:15:c3:79:17:87: 11:94:6c:9e:98:b6:a1:85:56:8a:27:bc:db:aa:93: 5b:4f:27:2f:ec:ee:43:b6:8f:87:25:fb:3e:17:4b: be:09:b6:4b:c0:ae:dd:79:c1:b1:9a:38:da:16:c6: b3:94:ed:83:7d:49:18:3f:d7:57:63:4d:8f:40:99: a2:d3:fe:97:d3:b0:0c:b6:98:f8:33:56:cb:96:e1: 08:44:f6:d2:c6:20:0b:37:ea:4d:6b:3d:cc:8c:5a: 33:78:f0:10:c1:46:35:64:f8:60:9e:99:8c:ed:b3: 38:fb:99:5e:c5:5b:04:32:d6:b2:e2:6b:c1:af:d0: c3:27:7f:af:31:7f:18:78:b9:7f:96:05:dc:d2:ea: 5f:90:11:4a:43:71:54:63:ef:db:85:7a:6f:bb:a2: 27:19:c1:1c:77:a8:40:0c:6e:d0:8b:9e:e6:0a:d6: 79:09:0d:29:97:33:f7:63:70:b8:08:0c:28:18:86: df:da:be:89:f8:ca:3c:d7:d4:6d:76:f2:22:d7:d4: c0:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:A7:CE:91:72:86:44:A2:5F:C0:C8:AD:AF:F2:6A:B0:ED:19:A0:1E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/57614fe4-8662-4b32-a356-6dbe9d832374.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.33.147.0/24 Signature Algorithm: sha256WithRSAEncryption 63:12:42:56:a4:ad:69:00:04:a5:00:9c:a1:c9:e5:7e:57:4d: f9:33:4a:58:74:44:a6:fd:96:cd:88:5a:e9:98:f2:3f:9e:49: 7a:a1:18:25:54:da:64:b8:f4:3e:39:c5:bf:91:69:e5:56:7e: 53:e6:1c:60:61:e6:dc:c2:d9:44:ff:da:0a:52:51:2e:41:6c: 92:59:81:0e:d0:bc:5b:9a:9a:dd:41:0a:ae:ef:4b:23:5f:12: 7e:db:59:f5:9c:7c:4f:68:e3:6d:2d:40:91:7b:80:12:0d:1d: 94:e2:e9:6d:57:47:93:f8:aa:db:b4:0e:51:28:db:5b:ac:3b: 8f:5b:0c:97:b2:51:eb:06:27:94:ad:37:cf:24:ed:e8:ba:39: 1a:bd:f5:10:d7:d7:bd:08:6e:e3:3d:e1:9d:65:ce:e0:b0:0e: fb:45:d6:31:97:11:af:03:ce:2b:45:e5:38:fc:49:e2:9e:67: 00:fc:a3:04:64:31:d4:fd:60:b8:bd:88:95:9c:5a:f8:66:58: 01:2a:b0:99:00:3d:af:14:37:6c:14:01:5b:63:07:3f:b4:91: d8:1d:10:58:76:b0:ed:c7:13:9e:f0:4e:eb:80:83:b7:11:e1: 42:88:e9:3b:f4:c0:b0:43:f9:2a:ac:24:b4:e5:56:2c:25:64: 14:d5:5c:d5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMZcysg+Y7tYeWUpTQ3jFJYdBNuwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTI0MzU1WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BkZmI0NjExNDI5YzU1YThmY2U0MmIwOGU5NmI5N2U3YmY0 Zjc2MTVmYzMwMzdhOWNkMzc4OTA3ZjkxMzA0MzE1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCulqVRi1V5OB0aCcl372tW4AbjD0T7HV5j3XhemoPmKy0R akeM6PWlC8Vc1rcgZ6gfhYzl/ZgVw3kXhxGUbJ6YtqGFVoonvNuqk1tPJy/s7kO2 j4cl+z4XS74JtkvArt15wbGaONoWxrOU7YN9SRg/11djTY9AmaLT/pfTsAy2mPgz VsuW4QhE9tLGIAs36k1rPcyMWjN48BDBRjVk+GCemYztszj7mV7FWwQy1rLia8Gv 0MMnf68xfxh4uX+WBdzS6l+QEUpDcVRj79uFem+7oicZwRx3qEAMbtCLnuYK1nkJ DSmXM/djcLgIDCgYht/avon4yjzX1G128iLX1MD/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUb6fOkXKGRKJfwMitr/JqsO0ZoB4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzU3NjE0ZmU0LTg2NjItNGIzMi1hMzU2LTZkYmU5ZDgzMjM3NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAANIZMwDQYJKoZIhvcNAQELBQADggEBAGMSQlakrWkABKUAnKHJ5X5XTfkz Slh0RKb9ls2IWumY8j+eSXqhGCVU2mS49D45xb+RaeVWflPmHGBh5tzC2UT/2gpS US5BbJJZgQ7QvFuamt1BCq7vSyNfEn7bWfWcfE9o420tQJF7gBINHZTi6W1XR5P4 qtu0DlEo21usO49bDJeyUesGJ5StN88k7ei6ORq99RDX170IbuM94Z1lzuCwDvtF 1jGXEa8DzitF5Tj8SeKeZwD8owRkMdT9YLi9iJWcWvhmWAEqsJkAPa8UN2wUAVtj Bz+0kdgdEFh2sO3HE57wTuuAg7cR4UKI6Tv0wLBD+SqsJLTlViwlZBTVXNU= -----END CERTIFICATE-----Generated at Mon Oct 20 21:11:27 2025 by rpki-client