$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/76686157-51a9-4fbd-941a-e1dd5447eada.roa File: 76686157-51a9-4fbd-941a-e1dd5447eada.roa (raw, json) Hash identifier: jwkXfVHXfJDsQ6rNQ6fmAPP37eMwPgXy/pEYeUKLBSA= Subject key identifier: 15:5C:8D:62:94:AB:E1:3F:FC:B3:6B:6C:FD:82:7E:D9:81:A9:A5:9C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 615F8BEA1281CB8F5C46C1761B2FACC7B4E21BA4 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/76686157-51a9-4fbd-941a-e1dd5447eada.roa Signing time: Sun 19 Oct 2025 12:18:06 +0000 ROA not before: Sun 19 Oct 2025 12:18:06 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.33.102.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:5f:8b:ea:12:81:cb:8f:5c:46:c1:76:1b:2f:ac:c7:b4:e2:1b:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 12:18:06 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=1a8a6982c320ecbdfd163b259cae1d4d8d452c642433dbbf2f1f480e5db63c99, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ee:c9:b9:03:1a:24:35:dc:b0:e9:f2:28:c9: be:f4:c8:8d:21:77:f2:ee:b6:14:c3:ff:8b:ba:00: d8:d4:ec:c0:2d:24:6c:2d:d7:80:cc:09:53:ad:7d: 1a:41:d3:d3:6b:e5:ce:f2:ad:d3:06:d3:25:c0:90: dd:0f:4d:56:45:72:48:67:64:ea:5b:21:24:3f:a5: 1e:64:12:ad:97:8d:f8:f4:f1:84:43:22:b3:07:b3: ca:a0:d6:66:8e:0f:de:a7:33:62:24:5b:2b:b2:6b: 2b:58:ff:7c:d1:ac:85:b7:b8:70:bf:d1:f9:c3:e0: ad:a5:fc:5f:d1:6f:40:de:3b:fb:4d:67:b0:c4:0e: d1:7b:92:1c:b3:e0:22:05:3b:1a:e2:1c:66:83:e2: 6d:97:3a:65:34:19:54:55:40:52:38:4d:d6:47:77: 11:8f:14:dd:3b:ea:ed:32:6f:d1:b0:62:fc:01:32: 28:67:f9:bd:cc:b8:01:84:92:7c:39:5e:4f:14:ce: 50:b6:dd:04:79:7c:a5:66:dc:00:86:31:5c:3e:8e: 61:4c:c6:9e:5e:e2:c1:68:d4:41:ad:f2:4a:f7:cb: b4:25:3a:88:00:93:96:f3:1c:12:79:d5:39:46:53: 38:4d:04:4c:65:92:d2:a4:22:b5:71:37:55:91:00: b5:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:5C:8D:62:94:AB:E1:3F:FC:B3:6B:6C:FD:82:7E:D9:81:A9:A5:9C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/76686157-51a9-4fbd-941a-e1dd5447eada.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.33.102.0/23 Signature Algorithm: sha256WithRSAEncryption 0e:a3:f1:21:ec:42:22:18:ed:7d:a5:5f:2d:96:bc:aa:14:86: 25:7f:f3:6b:4f:13:c1:98:5b:c6:4d:a3:ff:10:f9:8f:c3:42: a9:6a:6d:8d:6b:09:68:56:40:3f:f5:19:50:77:0c:ac:86:3b: c6:ea:0c:6b:00:a2:46:fb:73:56:6a:1b:e3:e0:a8:32:be:6a: 46:78:41:74:2c:bc:f9:a5:e2:c5:c3:e3:4f:71:40:69:e6:c9: 38:77:0b:34:38:68:0e:f2:25:e9:0f:42:2d:3b:8c:ae:0b:73: 99:97:fe:a4:d4:72:43:d6:45:ea:a6:33:84:fd:99:26:c0:29: a0:8f:9b:8f:70:c4:a9:94:3e:33:40:df:c7:f3:34:25:16:e2: e9:3f:92:d4:db:61:8e:d6:4a:36:ab:b3:93:c0:e0:f7:52:93: ff:29:d9:29:62:cb:27:4a:c3:81:7b:67:01:f4:f3:23:ba:eb: 52:e8:56:dd:fe:95:b0:78:9c:97:bc:22:94:b7:f6:b3:4a:f3: 35:bc:89:9e:34:43:87:24:40:59:b1:c5:b4:ba:f6:47:f7:d4: b8:25:56:cf:14:8d:f8:ce:a6:c7:21:cf:be:31:41:00:b5:65: 78:02:3d:0d:23:47:51:d6:02:a8:5e:6b:12:c8:bf:ec:ff:b3: 43:90:21:df -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYV+L6hKBy49cRsF2Gy+sx7TiG6QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTIxODA2WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AxYThhNjk4MmMzMjBlY2JkZmQxNjNiMjU5Y2FlMWQ0ZDhk NDUyYzY0MjQzM2RiYmYyZjFmNDgwZTVkYjYzYzk5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDV7sm5AxokNdyw6fIoyb70yI0hd/LuthTD/4u6ANjU7MAt JGwt14DMCVOtfRpB09Nr5c7yrdMG0yXAkN0PTVZFckhnZOpbISQ/pR5kEq2Xjfj0 8YRDIrMHs8qg1maOD96nM2IkWyuyaytY/3zRrIW3uHC/0fnD4K2l/F/Rb0DeO/tN Z7DEDtF7khyz4CIFOxriHGaD4m2XOmU0GVRVQFI4TdZHdxGPFN076u0yb9GwYvwB Mihn+b3MuAGEknw5Xk8UzlC23QR5fKVm3ACGMVw+jmFMxp5e4sFo1EGt8kr3y7Ql OogAk5bzHBJ51TlGUzhNBExlktKkIrVxN1WRALUlAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUFVyNYpSr4T/8s2ts/YJ+2YGppZwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzc2Njg2MTU3LTUxYTktNGZiZC05NDFhLWUxZGQ1NDQ3ZWFkYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAENIWYwDQYJKoZIhvcNAQELBQADggEBAA6j8SHsQiIY7X2lXy2WvKoUhiV/ 82tPE8GYW8ZNo/8Q+Y/DQqlqbY1rCWhWQD/1GVB3DKyGO8bqDGsAokb7c1ZqG+Pg qDK+akZ4QXQsvPml4sXD409xQGnmyTh3CzQ4aA7yJekPQi07jK4Lc5mX/qTUckPW ReqmM4T9mSbAKaCPm49wxKmUPjNA38fzNCUW4uk/ktTbYY7WSjars5PA4PdSk/8p 2SliyydKw4F7ZwH08yO661LoVt3+lbB4nJe8IpS39rNK8zW8iZ40Q4ckQFmxxbS6 9kf31LglVs8UjfjOpschz74xQQC1ZXgCPQ0jR1HWAqheaxLIv+z/s0OQId8= -----END CERTIFICATE-----Generated at Mon Oct 20 06:04:23 2025 by rpki-client