$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8351f8c3-df5a-4ff9-b683-3f1b919e2a83.roa File: 8351f8c3-df5a-4ff9-b683-3f1b919e2a83.roa (raw, json) Hash identifier: wnvM9AWp8nfK1D/beXQRe+vRgB4ewlMB3XOJRUoW5Z4= Subject key identifier: A0:C5:76:EE:EF:5D:68:B2:13:7F:62:0E:87:1A:65:8F:B6:7B:6D:25 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4F8259ECD6BB5641F6193FFEB879ABB0616DCAAB Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8351f8c3-df5a-4ff9-b683-3f1b919e2a83.roa Signing time: Sun 19 Oct 2025 09:41:20 +0000 ROA not before: Sun 19 Oct 2025 09:41:20 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.33.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:82:59:ec:d6:bb:56:41:f6:19:3f:fe:b8:79:ab:b0:61:6d:ca:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 09:41:20 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=e252298c8ecef565a0c25ef605cd953d4cce0f6fcc8e100f9d0c1516d1d01b6e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:53:52:30:42:ba:33:4d:33:c3:bc:aa:ad:02: e8:eb:6d:d3:5a:a8:74:c7:45:16:07:5f:7f:34:6b: 83:66:a7:45:61:f1:36:11:a6:be:85:3b:56:49:8f: ab:1c:d0:f1:22:62:ee:f6:28:55:96:36:f5:d5:a5: 4d:71:8f:43:e3:75:3c:b1:7b:17:33:c0:e2:41:0e: 24:90:19:05:7c:e7:2d:22:44:84:35:99:19:f7:b6: 13:13:67:51:c2:63:a5:87:31:d4:d0:0c:af:5f:82: 04:c0:28:cb:cd:4c:f1:d7:87:3f:f2:05:e5:f4:11: 76:8a:35:52:30:19:31:3b:1e:a2:a8:0b:c3:62:69: 28:e0:82:c9:3a:53:0b:ff:e7:af:b4:9f:91:78:4e: a1:f9:89:d7:af:15:f8:94:9f:50:7e:be:d8:08:45: 33:92:00:a8:c4:61:1f:b2:65:80:71:11:9c:fc:a2: d7:7d:4f:a9:f3:58:a4:42:ad:de:37:1e:8f:0f:6c: 9f:85:0f:43:a8:06:d3:59:e5:19:78:50:57:98:4b: a1:52:ef:af:d3:ae:e9:6f:1a:88:26:84:ac:20:6e: 65:ed:bc:67:c9:b8:ea:e9:6c:c3:fd:a6:7c:89:cf: d5:9a:76:3e:b4:1f:09:fd:e0:60:a9:fb:72:c4:72: 7e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:C5:76:EE:EF:5D:68:B2:13:7F:62:0E:87:1A:65:8F:B6:7B:6D:25 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8351f8c3-df5a-4ff9-b683-3f1b919e2a83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.33.119.0/24 Signature Algorithm: sha256WithRSAEncryption 23:86:83:26:5e:cb:9a:07:e5:95:4b:ee:09:88:77:ea:d7:98: 1d:45:87:1b:aa:fa:bf:ee:3f:83:4f:4b:4b:ee:d7:06:27:de: e3:e8:8d:ae:d1:e5:be:7d:aa:c5:c4:3b:b4:3d:bf:0e:2e:a1: cd:00:e0:bd:ed:49:f5:34:42:67:22:1c:69:25:b9:b2:77:07: 37:d8:c2:0d:bf:3a:e0:f2:6e:08:ea:94:44:cb:db:df:59:6d: e0:f0:b5:02:48:27:f5:3c:8d:b3:bb:c8:a0:23:9a:51:58:4b: a0:a8:cd:e4:2a:b1:1e:ed:89:fa:5a:37:da:8a:0b:5a:a8:cb: e4:26:5f:3a:54:56:55:76:49:22:c4:e6:df:b6:86:91:e1:17: e3:df:00:3f:7b:85:ae:24:c2:21:96:48:aa:2f:2d:1b:d9:22: b7:04:ff:f0:52:96:1a:15:d4:03:4c:81:69:97:19:79:25:9e: 20:36:52:fd:af:21:be:92:7f:0e:63:11:10:3f:9a:0b:25:4b: 66:45:a9:b3:e1:db:ef:0f:bc:5d:a0:4f:3a:83:eb:1f:73:71: 2f:69:28:7f:a1:e7:63:4b:2b:e0:67:a2:ea:17:7a:9d:ca:07: 3c:f4:67:cf:0c:7f:22:6c:7d:a6:b6:69:c7:1a:08:cb:40:e2: 3e:db:9f:8f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUT4JZ7Na7VkH2GT/+uHmrsGFtyqswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MDk0MTIwWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BlMjUyMjk4YzhlY2VmNTY1YTBjMjVlZjYwNWNkOTUzZDRj Y2UwZjZmY2M4ZTEwMGY5ZDBjMTUxNmQxZDAxYjZlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDIU1IwQrozTTPDvKqtAujrbdNaqHTHRRYHX380a4Nmp0Vh 8TYRpr6FO1ZJj6sc0PEiYu72KFWWNvXVpU1xj0PjdTyxexczwOJBDiSQGQV85y0i RIQ1mRn3thMTZ1HCY6WHMdTQDK9fggTAKMvNTPHXhz/yBeX0EXaKNVIwGTE7HqKo C8NiaSjggsk6Uwv/56+0n5F4TqH5idevFfiUn1B+vtgIRTOSAKjEYR+yZYBxEZz8 otd9T6nzWKRCrd43Ho8PbJ+FD0OoBtNZ5Rl4UFeYS6FS76/TrulvGogmhKwgbmXt vGfJuOrpbMP9pnyJz9Wadj60Hwn94GCp+3LEcn4FAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUoMV27u9daLITf2IOhxplj7Z7bSUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzgzNTFmOGMzLWRmNWEtNGZmOS1iNjgzLTNmMWI5MTllMmE4My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAANIXcwDQYJKoZIhvcNAQELBQADggEBACOGgyZey5oH5ZVL7gmId+rXmB1F hxuq+r/uP4NPS0vu1wYn3uPoja7R5b59qsXEO7Q9vw4uoc0A4L3tSfU0QmciHGkl ubJ3BzfYwg2/OuDybgjqlETL299ZbeDwtQJIJ/U8jbO7yKAjmlFYS6CozeQqsR7t ifpaN9qKC1qoy+QmXzpUVlV2SSLE5t+2hpHhF+PfAD97ha4kwiGWSKovLRvZIrcE //BSlhoV1ANMgWmXGXklniA2Uv2vIb6Sfw5jERA/mgslS2ZFqbPh2+8PvF2gTzqD 6x9zcS9pKH+h52NLK+BnouoXep3KBzz0Z88MfyJsfaa2accaCMtA4j7bn48= -----END CERTIFICATE-----Generated at Mon Oct 20 05:18:01 2025 by rpki-client