$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5ae44b10-e5e4-4be7-83d7-f3e1968cf820.roa File: 5ae44b10-e5e4-4be7-83d7-f3e1968cf820.roa (raw, json) Hash identifier: 6EHDb4V1QVlTH3UtZLO31//kh5udvEupZOUEhhf4VZs= Subject key identifier: 88:2C:A0:D6:BC:E6:B0:1D:8D:30:0C:A4:8E:F2:C5:80:23:96:E0:C7 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7A85D9F0052086F8947BD04EBD05BCBF5F8497F4 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5ae44b10-e5e4-4be7-83d7-f3e1968cf820.roa Signing time: Sun 19 Oct 2025 17:00:09 +0000 ROA not before: Sun 19 Oct 2025 17:00:09 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.33.94.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:85:d9:f0:05:20:86:f8:94:7b:d0:4e:bd:05:bc:bf:5f:84:97:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 17:00:09 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=e510666e716e38711900c0253dd7a7d2c7e414303218a11a17b1873f05674c71, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:19:78:97:13:77:69:49:31:58:83:74:21:9a: 4a:17:56:d3:01:c0:24:db:8b:c9:86:5a:18:1f:a3: 2e:6f:8e:2f:bc:83:ca:f5:cb:e9:5e:93:f8:e5:63: 89:2d:b9:da:22:65:a5:1f:30:b5:29:8e:f7:b1:15: f7:e7:02:82:e3:43:2e:df:71:e5:d0:41:bd:e7:d9: 26:2a:b9:c0:70:4f:3c:32:f8:4e:d1:06:e0:2c:10: 4c:a2:75:69:69:bd:3d:be:b3:54:cb:48:fc:71:e9: 25:6f:b0:8e:60:cd:31:56:ad:e3:54:32:cb:7a:ea: 90:3b:b9:b6:b8:90:ba:d6:42:a7:e6:02:d7:32:07: 01:68:21:bf:25:68:aa:a8:1b:e3:a9:24:1f:07:f8: ca:da:bf:04:b7:65:dd:f3:71:f9:a7:46:9b:17:26: 8e:51:84:a7:23:00:bd:28:3e:fc:e0:3c:8e:df:11: bb:f5:01:ee:2a:32:38:30:3a:da:3c:f1:4d:ab:af: d5:d7:65:42:c2:29:82:bc:9b:12:8d:cb:92:7e:5f: 16:11:15:9c:1e:d2:75:df:b7:b3:34:17:88:7a:a6: 9b:32:ff:ca:97:ac:7e:de:f5:72:18:4a:7a:90:62: 77:6a:33:2d:f5:b1:6e:f3:96:47:3f:e5:82:8b:9d: 2c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:2C:A0:D6:BC:E6:B0:1D:8D:30:0C:A4:8E:F2:C5:80:23:96:E0:C7 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5ae44b10-e5e4-4be7-83d7-f3e1968cf820.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.33.94.0/23 Signature Algorithm: sha256WithRSAEncryption 97:8f:96:08:fe:75:16:8c:c9:9a:87:9f:fc:5e:3f:f6:df:ff: d9:d7:b0:4b:e8:80:aa:9c:4b:44:2e:60:dd:03:6b:0b:84:2e: 1f:6a:92:51:74:99:64:ee:22:a7:0a:19:02:d7:fc:cb:8e:f5: 41:6a:f2:31:2f:b1:1f:85:6f:6e:97:55:0e:dd:7a:29:e1:cf: 1c:f5:bf:d2:6b:10:fc:4e:0e:c9:26:4d:81:46:f9:3a:5a:ec: ca:ca:4d:ab:2b:53:34:2a:90:9d:98:3e:25:29:c4:07:bb:24: 6c:62:e6:09:a3:91:0f:fd:91:d1:c4:35:b4:18:68:64:97:0f: 81:06:e8:dd:31:67:5b:ee:f9:60:bb:67:bd:c0:39:09:e1:47: 43:88:b1:46:18:c3:ae:31:7d:fe:15:53:2f:b0:c7:fc:df:ba: 0c:db:75:b9:c0:38:fa:26:6a:0c:df:9a:37:61:05:e1:51:c3: 6d:72:94:3c:fb:4e:fd:51:b6:8b:90:c1:b1:53:c5:fd:c9:00: bd:bc:fc:ac:21:53:69:29:9e:e5:25:b8:cc:1c:30:0d:b7:15: 61:92:41:0f:9d:0c:e5:39:78:4e:99:b8:4c:44:02:4d:44:94: 00:3f:dd:bb:7e:28:84:87:1a:06:9a:f4:dd:97:04:6f:69:69: 5d:ee:f4:ac -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUeoXZ8AUghviUe9BOvQW8v1+El/QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTcwMDA5WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BlNTEwNjY2ZTcxNmUzODcxMTkwMGMwMjUzZGQ3YTdkMmM3 ZTQxNDMwMzIxOGExMWExN2IxODczZjA1Njc0YzcxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCSGXiXE3dpSTFYg3QhmkoXVtMBwCTbi8mGWhgfoy5vji+8 g8r1y+lek/jlY4ktudoiZaUfMLUpjvexFffnAoLjQy7fceXQQb3n2SYqucBwTzwy +E7RBuAsEEyidWlpvT2+s1TLSPxx6SVvsI5gzTFWreNUMst66pA7uba4kLrWQqfm AtcyBwFoIb8laKqoG+OpJB8H+MravwS3Zd3zcfmnRpsXJo5RhKcjAL0oPvzgPI7f Ebv1Ae4qMjgwOto88U2rr9XXZULCKYK8mxKNy5J+XxYRFZwe0nXft7M0F4h6ppsy /8qXrH7e9XIYSnqQYndqMy31sW7zlkc/5YKLnSyJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUiCyg1rzmsB2NMAykjvLFgCOW4McwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzVhZTQ0YjEwLWU1ZTQtNGJlNy04M2Q3LWYzZTE5NjhjZjgyMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAENIV4wDQYJKoZIhvcNAQELBQADggEBAJePlgj+dRaMyZqHn/xeP/bf/9nX sEvogKqcS0QuYN0DawuELh9qklF0mWTuIqcKGQLX/MuO9UFq8jEvsR+Fb26XVQ7d einhzxz1v9JrEPxODskmTYFG+Tpa7MrKTasrUzQqkJ2YPiUpxAe7JGxi5gmjkQ/9 kdHENbQYaGSXD4EG6N0xZ1vu+WC7Z73AOQnhR0OIsUYYw64xff4VUy+wx/zfugzb dbnAOPomagzfmjdhBeFRw21ylDz7Tv1RtouQwbFTxf3JAL28/KwhU2kpnuUluMwc MA23FWGSQQ+dDOU5eE6ZuExEAk1ElAA/3bt+KISHGgaa9N2XBG9paV3u9Kw= -----END CERTIFICATE-----Generated at Mon Oct 20 18:12:38 2025 by rpki-client