$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6897304f-338e-40d6-90ca-164ea51fba9b.roa File: 6897304f-338e-40d6-90ca-164ea51fba9b.roa (raw, json) Hash identifier: dTByeLQdKdpE3Hlq9X9BOUjsCMgCTDzgn6LhCOal0Tw= Subject key identifier: CE:B2:61:4E:E0:D5:73:C2:01:77:4B:9F:C2:8B:E4:49:E3:8B:82:34 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5275A50CE7D14DE2776C2A223D65E29D0B506A2D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6897304f-338e-40d6-90ca-164ea51fba9b.roa Signing time: Sun 19 Oct 2025 22:52:24 +0000 ROA not before: Sun 19 Oct 2025 22:52:24 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.33.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:75:a5:0c:e7:d1:4d:e2:77:6c:2a:22:3d:65:e2:9d:0b:50:6a:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 22:52:24 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=8c4d29b5338b77a894b7f94d2e7e0c17dea6bda965f958140fac9ba3d14cf169, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:8c:12:07:8e:92:f4:eb:c6:94:fd:f9:06:a8: 8b:f7:d9:0f:ac:3c:cc:55:87:19:b1:77:42:46:28: 2a:16:05:ec:97:1f:ff:d6:5d:a4:75:42:43:6c:c3: 0d:c4:ec:67:8d:60:5d:72:fb:47:79:76:ab:31:87: 25:2e:6b:7e:1b:8b:b8:ae:c7:3f:d5:1f:e7:e9:4f: d0:82:ff:cb:1b:e2:33:43:e1:0b:1b:8a:70:9a:31: 1f:1f:e3:1f:1f:83:a8:b3:a6:b3:32:76:4c:dc:5d: b0:82:6e:c9:83:b2:f5:09:0d:b0:d7:d2:99:1c:fa: 94:40:e4:b8:14:c0:c9:72:63:de:75:49:8f:a8:09: 16:12:2f:76:ef:dc:25:38:fd:64:a5:a0:ca:09:b5: b7:e0:b4:d5:91:f7:ec:b7:3c:93:66:e5:fe:84:8c: 76:2e:16:0c:64:1c:ce:f0:2b:58:41:a7:b3:d7:33: 43:26:d7:06:42:58:c9:b0:f7:50:74:75:94:73:c8: 76:09:3e:3f:de:7f:a1:aa:a4:f4:3a:6b:74:b9:5f: e8:c9:32:10:2c:eb:f9:37:12:a5:51:12:cf:39:fa: 33:9d:c7:53:91:89:5c:02:9b:5e:63:25:1e:05:c5: b4:ce:3d:7b:c5:72:a5:87:46:98:f5:e1:17:66:26: 15:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:B2:61:4E:E0:D5:73:C2:01:77:4B:9F:C2:8B:E4:49:E3:8B:82:34 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6897304f-338e-40d6-90ca-164ea51fba9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.33.4.0/24 Signature Algorithm: sha256WithRSAEncryption 02:9f:90:80:58:f5:ac:f0:60:1a:f2:64:09:40:0c:0a:f6:85: 6e:01:f3:06:20:7d:cc:b2:12:c6:55:ac:ca:7b:94:ee:ed:06: 38:f0:0d:19:55:34:fe:be:7b:57:f0:27:7f:52:e7:86:e5:58: 52:01:f9:73:9e:22:5e:d0:5b:4f:0d:88:a4:c8:4d:68:07:e4: e2:11:51:2a:be:69:57:21:b0:fd:a0:06:c0:19:79:fc:01:3f: 3b:69:13:8f:e1:cc:3c:7e:f5:59:b6:b4:4d:52:6f:34:00:48: 8b:0b:24:cc:00:94:57:bb:25:b5:65:fc:28:17:20:15:d0:ba: d0:92:03:8b:03:1e:ed:e9:cd:5e:f5:3e:c1:94:01:17:ec:a3: 57:29:18:91:89:c8:42:e9:c6:c5:0c:c8:c1:c5:7f:ba:6d:99: ff:c9:3f:e9:df:f0:5c:1b:3e:52:ad:ef:d1:d2:56:a2:f7:e3: a9:c6:28:97:04:98:ee:18:61:bb:02:ec:1e:6b:22:1c:17:7d: f9:e0:fa:2c:f7:0e:9f:2c:e8:df:18:20:e9:bf:e0:bb:08:a6: ca:69:dd:9d:78:ad:c5:06:1f:0d:f6:34:f5:93:06:05:74:c4: fa:71:eb:18:83:f0:46:53:8a:5f:38:4d:c1:6a:86:26:c8:00: 3d:57:db:60 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUnWlDOfRTeJ3bCoiPWXinQtQai0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MjI1MjI0WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4YzRkMjliNTMzOGI3N2E4OTRiN2Y5NGQyZTdlMGMxN2Rl YTZiZGE5NjVmOTU4MTQwZmFjOWJhM2QxNGNmMTY5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQChjBIHjpL068aU/fkGqIv32Q+sPMxVhxmxd0JGKCoWBeyX H//WXaR1QkNsww3E7GeNYF1y+0d5dqsxhyUua34bi7iuxz/VH+fpT9CC/8sb4jND 4QsbinCaMR8f4x8fg6izprMydkzcXbCCbsmDsvUJDbDX0pkc+pRA5LgUwMlyY951 SY+oCRYSL3bv3CU4/WSloMoJtbfgtNWR9+y3PJNm5f6EjHYuFgxkHM7wK1hBp7PX M0Mm1wZCWMmw91B0dZRzyHYJPj/ef6GqpPQ6a3S5X+jJMhAs6/k3EqVREs85+jOd x1ORiVwCm15jJR4FxbTOPXvFcqWHRpj14RdmJhWjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUzrJhTuDVc8IBd0ufwovkSeOLgjQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzY4OTczMDRmLTMzOGUtNDBkNi05MGNhLTE2NGVhNTFmYmE5Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAANIQQwDQYJKoZIhvcNAQELBQADggEBAAKfkIBY9azwYBryZAlADAr2hW4B 8wYgfcyyEsZVrMp7lO7tBjjwDRlVNP6+e1fwJ39S54blWFIB+XOeIl7QW08NiKTI TWgH5OIRUSq+aVchsP2gBsAZefwBPztpE4/hzDx+9Vm2tE1SbzQASIsLJMwAlFe7 JbVl/CgXIBXQutCSA4sDHu3pzV71PsGUARfso1cpGJGJyELpxsUMyMHFf7ptmf/J P+nf8FwbPlKt79HSVqL346nGKJcEmO4YYbsC7B5rIhwXffng+iz3Dp8s6N8YIOm/ 4LsIpspp3Z14rcUGHw32NPWTBgV0xPpx6xiD8EZTil84TcFqhibIAD1X22A= -----END CERTIFICATE-----Generated at Mon Oct 20 06:08:54 2025 by rpki-client