$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6196cb2f-e8f3-4418-ab7e-8f00c85ecb16.roa File: 6196cb2f-e8f3-4418-ab7e-8f00c85ecb16.roa (raw, json) Hash identifier: /m+cXj/RZg5x+Y2eLrj+M2nNOMBWTazy7RWx+9COmHs= Subject key identifier: 52:B9:F2:83:40:5E:37:DA:7D:F3:DB:56:4D:0E:53:22:2F:AD:82:3D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4B437F3A8201C0FF7D81BA3AAC3F152DEEA06023 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6196cb2f-e8f3-4418-ab7e-8f00c85ecb16.roa Signing time: Sun 19 Oct 2025 16:31:24 +0000 ROA not before: Sun 19 Oct 2025 16:31:24 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.33.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:43:7f:3a:82:01:c0:ff:7d:81:ba:3a:ac:3f:15:2d:ee:a0:60:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 16:31:24 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=ef03f6df1041a7761ef878e4ef57d8593c1c5e3598c9aaecbff4ca46a46868dd, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:16:6b:04:07:13:e3:8d:ec:e6:da:b3:2a:33: 73:0b:5f:4b:96:83:66:cf:c1:f8:e5:2c:c4:24:45: de:64:a9:42:72:f9:6a:3f:3d:b8:a1:e6:08:1f:e6: d8:77:84:88:7b:01:31:d8:3f:1f:53:d5:77:6f:ac: f6:f6:74:0e:d4:47:fa:eb:82:98:c6:10:c1:68:a5: 84:e8:4e:f3:da:03:c9:7e:9e:f2:9d:ce:87:2f:67: 4b:fa:a1:50:16:c3:9e:30:ba:ef:9b:61:2c:81:ae: 4a:b4:b5:4a:0d:a6:e8:11:72:de:f8:c3:be:e6:7b: 92:7e:e9:66:29:16:ba:c8:93:ff:0c:f6:67:d1:11: 78:e1:fc:0f:a5:08:59:19:de:fa:df:d4:a3:0d:f6: 64:bb:77:28:8c:2c:97:1e:04:29:d0:4b:d2:c4:18: 45:af:8f:6e:d3:63:a0:a7:3c:b2:b5:a0:5f:9e:dd: 78:87:c6:43:e4:7b:c9:4e:a9:fb:f9:44:a1:9d:ea: 02:44:ea:65:b1:5d:d9:05:bf:d4:c6:e2:fd:36:bc: 80:dc:d0:74:8e:41:4d:7f:c7:0f:42:70:69:fa:35: 43:86:18:cc:f7:ca:24:3b:60:51:85:07:00:41:ff: 04:00:73:72:c9:de:ac:75:f2:68:29:1f:4a:ac:5b: ad:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:B9:F2:83:40:5E:37:DA:7D:F3:DB:56:4D:0E:53:22:2F:AD:82:3D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6196cb2f-e8f3-4418-ab7e-8f00c85ecb16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.33.13.0/24 Signature Algorithm: sha256WithRSAEncryption 46:e1:c2:fd:e8:be:4f:b4:50:3a:20:1b:f4:fe:86:6d:f2:27: 31:4f:99:83:72:fb:12:4f:0f:44:ff:56:2e:a9:4d:72:65:c4: 46:34:14:ca:8f:7e:a6:3f:80:74:ec:f8:68:23:85:7a:e9:ad: a9:e9:05:4b:37:a5:90:b3:94:67:3d:2c:4e:b3:e3:72:c0:a7: 65:e3:4d:c4:b7:fe:d8:a2:ff:ec:74:8e:3d:27:cd:d0:0e:a7: 65:79:b8:6e:81:67:d9:20:39:c3:00:91:3f:80:cd:52:5d:36: 35:ae:05:a1:4c:12:9d:05:86:ca:a8:a3:75:54:9b:b2:13:3b: db:c7:2d:c3:9a:55:bc:f2:a1:83:15:09:6e:49:2e:0d:92:bc: 87:90:1b:b5:69:be:5b:ee:56:6e:94:31:28:f7:af:ca:69:7d: ff:1e:5a:90:38:10:5c:6e:1a:5d:95:05:23:c1:0d:04:59:a4: 8d:d4:a5:6b:35:f4:60:82:9a:73:e5:db:81:30:3a:ae:2e:51: 05:42:07:99:bb:53:43:f5:de:01:ee:f9:02:fa:72:bb:23:87: 15:71:f8:51:71:69:04:51:3f:c7:3e:d4:b6:c1:ed:3f:b7:46: 7f:f8:ed:c4:68:5c:bd:02:2a:54:81:5c:53:f5:ce:5f:68:08: be:1c:aa:b2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUS0N/OoIBwP99gbo6rD8VLe6gYCMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTYzMTI0WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BlZjAzZjZkZjEwNDFhNzc2MWVmODc4ZTRlZjU3ZDg1OTNj MWM1ZTM1OThjOWFhZWNiZmY0Y2E0NmE0Njg2OGRkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDIFmsEBxPjjezm2rMqM3MLX0uWg2bPwfjlLMQkRd5kqUJy +Wo/Pbih5ggf5th3hIh7ATHYPx9T1XdvrPb2dA7UR/rrgpjGEMFopYToTvPaA8l+ nvKdzocvZ0v6oVAWw54wuu+bYSyBrkq0tUoNpugRct74w77me5J+6WYpFrrIk/8M 9mfREXjh/A+lCFkZ3vrf1KMN9mS7dyiMLJceBCnQS9LEGEWvj27TY6CnPLK1oF+e 3XiHxkPke8lOqfv5RKGd6gJE6mWxXdkFv9TG4v02vIDc0HSOQU1/xw9CcGn6NUOG GMz3yiQ7YFGFBwBB/wQAc3LJ3qx18mgpH0qsW61HAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUUrnyg0BeN9p989tWTQ5TIi+tgj0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzYxOTZjYjJmLWU4ZjMtNDQxOC1hYjdlLThmMDBjODVlY2IxNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAANIQ0wDQYJKoZIhvcNAQELBQADggEBAEbhwv3ovk+0UDogG/T+hm3yJzFP mYNy+xJPD0T/Vi6pTXJlxEY0FMqPfqY/gHTs+GgjhXrpranpBUs3pZCzlGc9LE6z 43LAp2XjTcS3/tii/+x0jj0nzdAOp2V5uG6BZ9kgOcMAkT+AzVJdNjWuBaFMEp0F hsqoo3VUm7ITO9vHLcOaVbzyoYMVCW5JLg2SvIeQG7VpvlvuVm6UMSj3r8ppff8e WpA4EFxuGl2VBSPBDQRZpI3UpWs19GCCmnPl24EwOq4uUQVCB5m7U0P13gHu+QL6 crsjhxVx+FFxaQRRP8c+1LbB7T+3Rn/47cRoXL0CKlSBXFP1zl9oCL4cqrI= -----END CERTIFICATE-----Generated at Mon Oct 20 11:10:49 2025 by rpki-client