$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9472c3d9-be9e-408f-ad74-33fdf30480f4.roa File: 9472c3d9-be9e-408f-ad74-33fdf30480f4.roa (raw, json) Hash identifier: Q3P2/ek9B4Ic/m5KOO/wQwC8Jf/x+h0u3Zu1uuXCB9Q= Subject key identifier: AB:0A:75:41:56:DB:E8:BA:63:84:CD:35:07:F6:57:E3:E0:86:04:68 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4F45BF0803FEAF485C51E8A78980821CBAB3878C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9472c3d9-be9e-408f-ad74-33fdf30480f4.roa Signing time: Sun 19 Oct 2025 19:12:33 +0000 ROA not before: Sun 19 Oct 2025 19:12:33 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.33.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:45:bf:08:03:fe:af:48:5c:51:e8:a7:89:80:82:1c:ba:b3:87:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 19:12:33 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=4c12af350ed1990a28a8fe80d7a64198107e0aae1dc14843dce9b47a469c236d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:9f:39:16:ae:34:0a:01:78:e5:1b:dc:ac:1e: de:6b:71:19:85:b4:9d:30:1b:a7:81:a8:c7:77:06: ea:ac:93:b9:72:05:3d:99:d6:64:5b:9d:34:61:74: 98:89:7c:f5:e0:f8:90:25:50:68:3a:a3:e4:bc:6d: cd:eb:5d:66:fb:52:8f:47:35:86:c4:f3:25:5b:ac: 63:dc:f1:57:5d:d2:f0:72:07:1a:f2:61:21:8d:67: c0:2c:04:af:de:b6:82:1a:cb:d8:8b:22:31:8e:3b: b4:dd:7d:ac:bf:6d:18:a2:18:ff:b8:56:a9:07:58: 0d:20:e0:50:4c:bd:0d:06:7f:cd:72:d7:89:32:52: de:7f:15:70:13:e0:8c:5d:b4:a2:f1:e6:2d:e3:16: 92:db:b6:0f:40:78:84:ea:55:70:7d:7f:e8:e7:8c: 16:2a:4c:ad:73:c3:ce:20:37:e7:de:b1:4b:14:84: ff:30:9a:06:9e:bb:7b:c1:77:4f:98:b7:eb:29:61: b2:c7:6a:a5:6f:f6:9c:18:f1:47:15:45:7e:36:b0: f6:e3:8a:9b:c7:b4:69:d3:95:4d:bd:34:96:a4:2f: 60:06:46:6c:e9:9d:b1:5b:28:a6:b2:c7:3c:e3:d1: fa:9e:1c:f1:25:8f:11:1d:70:ec:81:99:fd:12:fe: cb:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:0A:75:41:56:DB:E8:BA:63:84:CD:35:07:F6:57:E3:E0:86:04:68 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9472c3d9-be9e-408f-ad74-33fdf30480f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.33.88.0/24 Signature Algorithm: sha256WithRSAEncryption 05:8a:f0:c9:c2:52:80:7b:68:ae:f9:55:9a:0a:37:f0:b6:14: 56:e7:e5:7a:30:f2:4b:03:b1:4b:d2:2b:a9:38:0f:aa:a8:fd: 56:f0:ae:72:fa:34:09:5d:77:92:77:26:74:2b:1c:d2:99:4f: 33:fd:a4:73:cf:a2:6b:6a:dc:be:0e:bc:63:16:d9:76:3c:64: 23:f2:f1:74:3f:09:2a:4c:7e:98:ee:da:10:6d:f5:5a:0c:60: b5:3f:ed:f6:aa:46:dc:46:f9:1f:23:5a:06:a6:fa:ce:99:a6: 53:d7:da:53:d5:9c:eb:3f:e9:f1:17:80:6a:76:17:79:ca:43: 6e:70:ae:d2:ed:a5:36:84:75:80:05:3b:10:ce:b3:44:a5:39: 51:6c:cb:38:5c:d0:78:c4:f5:98:50:96:f2:b0:5f:53:5d:8d: 04:fb:bb:16:88:c9:d8:49:92:f1:06:5d:18:cc:7f:73:da:86: c7:b1:f3:c5:95:86:c6:9e:b4:3d:71:14:0c:d6:cb:5c:18:d8: 84:64:ac:b0:35:e1:f2:0f:f4:b7:79:38:7c:d6:cd:49:8f:46: a3:81:89:27:a6:02:7b:b1:6d:d1:1c:66:cd:27:c1:32:65:b6: 3d:89:2a:9c:d9:89:17:8b:cc:b1:8e:f5:26:04:ba:2f:ab:21: e2:69:46:c0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUT0W/CAP+r0hcUeiniYCCHLqzh4wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTkxMjMzWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A0YzEyYWYzNTBlZDE5OTBhMjhhOGZlODBkN2E2NDE5ODEw N2UwYWFlMWRjMTQ4NDNkY2U5YjQ3YTQ2OWMyMzZkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDonzkWrjQKAXjlG9ysHt5rcRmFtJ0wG6eBqMd3Buqsk7ly BT2Z1mRbnTRhdJiJfPXg+JAlUGg6o+S8bc3rXWb7Uo9HNYbE8yVbrGPc8Vdd0vBy BxryYSGNZ8AsBK/etoIay9iLIjGOO7Tdfay/bRiiGP+4VqkHWA0g4FBMvQ0Gf81y 14kyUt5/FXAT4IxdtKLx5i3jFpLbtg9AeITqVXB9f+jnjBYqTK1zw84gN+fesUsU hP8wmgaeu3vBd0+Yt+spYbLHaqVv9pwY8UcVRX42sPbjipvHtGnTlU29NJakL2AG RmzpnbFbKKayxzzj0fqeHPEljxEdcOyBmf0S/ssNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUqwp1QVbb6LpjhM01B/ZX4+CGBGgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzk0NzJjM2Q5LWJlOWUtNDA4Zi1hZDc0LTMzZmRmMzA0ODBmNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAANIVgwDQYJKoZIhvcNAQELBQADggEBAAWK8MnCUoB7aK75VZoKN/C2FFbn 5Xow8ksDsUvSK6k4D6qo/VbwrnL6NAldd5J3JnQrHNKZTzP9pHPPomtq3L4OvGMW 2XY8ZCPy8XQ/CSpMfpju2hBt9VoMYLU/7faqRtxG+R8jWgam+s6ZplPX2lPVnOs/ 6fEXgGp2F3nKQ25wrtLtpTaEdYAFOxDOs0SlOVFsyzhc0HjE9ZhQlvKwX1NdjQT7 uxaIydhJkvEGXRjMf3Pahsex88WVhsaetD1xFAzWy1wY2IRkrLA14fIP9Ld5OHzW zUmPRqOBiSemAnuxbdEcZs0nwTJltj2JKpzZiReLzLGO9SYEui+rIeJpRsA= -----END CERTIFICATE-----Generated at Mon Oct 20 21:12:24 2025 by rpki-client