$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6aefba88-029a-459a-b821-accad09bc2ca.roa File: 6aefba88-029a-459a-b821-accad09bc2ca.roa (raw, json) Hash identifier: BhPywcSMgqVTjJTNTOWLoSbQq0gp0yC3ScRzHq4kYuc= Subject key identifier: 1C:3C:57:29:F9:A6:04:6F:EE:02:CD:0E:DA:7A:C6:ED:E7:FD:28:BA Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 55A21F5AE7F88ED19D7468C37EF030D004E8C691 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6aefba88-029a-459a-b821-accad09bc2ca.roa Signing time: Sun 19 Oct 2025 13:56:56 +0000 ROA not before: Sun 19 Oct 2025 13:56:56 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.33.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:a2:1f:5a:e7:f8:8e:d1:9d:74:68:c3:7e:f0:30:d0:04:e8:c6:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 13:56:56 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=07641fc092eae537e6cf9eeab6766ade86131af34e06ebffd92d3dfc017f6394, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:04:e5:6f:43:79:b6:a7:39:1c:90:a0:c8:75: 69:87:fd:49:c5:f9:63:b4:a7:6c:0d:08:04:37:0d: 17:80:62:f3:b7:a2:49:b9:38:02:ee:68:ac:a3:55: 7c:87:18:41:13:f7:4b:b5:56:cf:1a:e1:5e:bf:20: bd:7b:b1:d7:8a:8f:9b:e8:8d:5f:17:86:8a:b7:21: 6a:a7:24:2a:2d:6c:eb:29:10:75:ab:c9:03:44:de: 6d:d2:22:45:2c:08:f8:36:20:6f:30:2c:71:6d:4e: 0c:b7:3c:7b:07:93:71:e8:87:f5:7c:1f:50:37:fc: 07:fc:eb:55:84:06:dd:d7:ea:aa:cd:6f:bb:3b:0a: d7:b2:05:eb:ed:b5:51:86:c0:97:e4:7e:3f:20:96: 1b:97:f3:43:d9:75:8d:13:2d:35:ac:b8:66:93:f3: 0b:84:b9:b1:3f:9a:14:c8:62:ad:00:fc:3c:f2:98: 43:e4:89:a2:69:5c:24:7c:a9:b4:60:d1:91:3d:9a: 4d:87:c6:22:91:aa:9e:c0:e7:dc:fd:5a:f9:67:59: a8:c4:b8:5e:16:f4:07:da:4c:cf:5d:65:e8:6c:32: 86:3b:59:8a:62:65:ac:51:6a:06:93:9d:da:31:83: 9c:57:69:67:10:a0:50:48:30:dc:66:36:34:d9:c5: b7:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:3C:57:29:F9:A6:04:6F:EE:02:CD:0E:DA:7A:C6:ED:E7:FD:28:BA X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6aefba88-029a-459a-b821-accad09bc2ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.33.138.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:77:c9:ce:50:42:d5:6d:d4:50:0f:d3:5e:f2:f8:1d:27:89: 83:00:ca:52:b7:2e:84:1a:c4:15:11:c2:7a:5e:48:b1:5c:d4: d7:22:01:6b:40:38:1a:4e:02:b0:49:76:c3:f5:89:b4:33:bd: d9:d4:99:e1:e6:c1:ee:7f:4c:5c:a7:c8:61:b1:a0:f2:d4:ef: e0:98:df:b0:5b:04:c5:c2:b0:ba:74:95:58:eb:e3:7a:e2:8f: 81:24:d1:81:a3:95:a7:0c:21:10:42:5d:aa:1c:19:90:ae:b6: bd:9a:3b:2f:11:f2:7c:d9:cb:28:84:86:9c:4e:19:cd:aa:a0: 9b:ca:dd:53:a5:1e:b8:8c:6a:4b:3c:9e:4f:78:30:d7:ec:d6: 16:16:e0:55:b7:78:df:ed:c3:f4:d1:00:9d:61:3a:d6:4b:85: f6:86:42:6f:6c:49:70:2e:57:bc:e1:f0:4f:7d:e7:aa:7c:31: 86:4c:5d:e9:fc:ff:e3:34:4a:43:9d:19:76:15:90:c5:c3:05: 83:db:09:fd:01:32:f5:95:52:b7:18:c6:ed:dc:91:cc:1f:12: 8e:4a:0b:6c:9a:d4:8c:33:1b:b6:21:36:b2:28:ad:aa:c8:aa: ba:4f:1f:16:da:ee:c5:2a:5f:68:0e:4e:30:05:4b:4f:5c:85: 96:5f:9d:06 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVaIfWuf4jtGddGjDfvAw0AToxpEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTM1NjU2WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AwNzY0MWZjMDkyZWFlNTM3ZTZjZjllZWFiNjc2NmFkZTg2 MTMxYWYzNGUwNmViZmZkOTJkM2RmYzAxN2Y2Mzk0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDjBOVvQ3m2pzkckKDIdWmH/UnF+WO0p2wNCAQ3DReAYvO3 okm5OALuaKyjVXyHGEET90u1Vs8a4V6/IL17sdeKj5vojV8Xhoq3IWqnJCotbOsp EHWryQNE3m3SIkUsCPg2IG8wLHFtTgy3PHsHk3Hoh/V8H1A3/Af861WEBt3X6qrN b7s7CteyBevttVGGwJfkfj8glhuX80PZdY0TLTWsuGaT8wuEubE/mhTIYq0A/Dzy mEPkiaJpXCR8qbRg0ZE9mk2HxiKRqp7A59z9WvlnWajEuF4W9AfaTM9dZehsMoY7 WYpiZaxRagaTndoxg5xXaWcQoFBIMNxmNjTZxbeTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUHDxXKfmmBG/uAs0O2nrG7ef9KLowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzZhZWZiYTg4LTAyOWEtNDU5YS1iODIxLWFjY2FkMDliYzJjYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAANIYowDQYJKoZIhvcNAQELBQADggEBAC53yc5QQtVt1FAP017y+B0niYMA ylK3LoQaxBURwnpeSLFc1NciAWtAOBpOArBJdsP1ibQzvdnUmeHmwe5/TFynyGGx oPLU7+CY37BbBMXCsLp0lVjr43rij4Ek0YGjlacMIRBCXaocGZCutr2aOy8R8nzZ yyiEhpxOGc2qoJvK3VOlHriMaks8nk94MNfs1hYW4FW3eN/tw/TRAJ1hOtZLhfaG Qm9sSXAuV7zh8E9956p8MYZMXen8/+M0SkOdGXYVkMXDBYPbCf0BMvWVUrcYxu3c kcwfEo5KC2ya1IwzG7YhNrIorarIqrpPHxba7sUqX2gOTjAFS09chZZfnQY= -----END CERTIFICATE-----Generated at Mon Oct 20 03:15:54 2025 by rpki-client