$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b11f24e4-3099-4427-8c2f-03e7be17399b.roa File: b11f24e4-3099-4427-8c2f-03e7be17399b.roa (raw, json) Hash identifier: lQr2JKTLnK3WMSeqsnmxxPAG5UG8fLUMBjXPBzQwJFg= Subject key identifier: 20:16:3B:CA:A1:56:96:39:01:E4:67:0E:E4:BE:95:BE:46:57:8A:01 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6BAAFB09F7B9EF1A35336B8AB6A2B41D4EAA7301 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b11f24e4-3099-4427-8c2f-03e7be17399b.roa Signing time: Sun 19 Oct 2025 19:06:12 +0000 ROA not before: Sun 19 Oct 2025 19:06:12 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.33.114.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:aa:fb:09:f7:b9:ef:1a:35:33:6b:8a:b6:a2:b4:1d:4e:aa:73:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 19:06:12 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=f2bdebe352a8c28d7c7a02a731e386c7d0d3ef2c26f899cd3bbf975be0e52cd6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9b:54:11:bd:65:c6:fa:d6:0a:ab:7e:91:7d: db:8d:ba:50:b9:40:36:89:9c:b3:a8:85:f9:f0:0c: 51:c0:48:95:39:e6:22:46:46:81:c4:72:40:29:0f: f7:58:ad:60:5c:f7:53:5b:54:58:3f:83:15:cf:31: be:e6:7c:ae:d4:7f:fa:59:90:dd:03:6b:d2:a4:ac: 65:7d:b5:c8:8d:2a:73:ff:a5:a2:58:f1:69:ec:91: d4:78:6a:bc:d7:d2:3b:f0:d2:cb:78:4b:f6:91:9b: 10:00:d9:f7:b7:77:ad:1d:26:b9:36:6a:19:ee:8c: 37:be:4c:ce:5b:95:4d:50:7c:55:fc:32:48:e3:89: e9:5d:f5:fb:62:f5:7d:54:b3:a3:af:de:f2:cc:9d: c6:d5:2b:39:03:dc:bb:5a:c6:73:b1:56:0a:bf:37: 6e:b6:9d:4a:b7:20:fa:d9:0c:cb:7a:ec:bb:73:b7: fe:d5:c5:3b:c3:71:1c:5b:92:f7:20:c0:12:11:c0: 6b:cf:89:8a:f8:35:42:9d:7e:97:c2:0e:63:c8:e6: 5d:f3:c4:0b:20:e9:fc:92:91:08:2b:4f:ad:97:1d: 8b:ff:74:14:8f:b1:32:9c:d5:7f:f8:64:d6:d5:8b: fb:a7:d6:43:d8:27:da:94:1f:cd:2d:35:0c:58:96: c2:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:16:3B:CA:A1:56:96:39:01:E4:67:0E:E4:BE:95:BE:46:57:8A:01 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b11f24e4-3099-4427-8c2f-03e7be17399b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.33.114.0/23 Signature Algorithm: sha256WithRSAEncryption 8a:47:d3:4e:16:7f:6b:d5:68:58:7d:b6:8c:50:1e:0e:f8:1b: e0:83:58:51:7f:bf:35:ab:f8:c5:ef:d7:4f:66:09:e4:7f:e2: 0f:21:41:ba:2f:ff:80:28:00:97:fe:ff:1a:98:2f:2b:ab:9f: 5a:b1:93:2b:42:9c:92:c8:ed:78:e6:13:96:ef:dc:d9:07:f1: f8:0d:61:d4:da:6b:1d:9a:7a:b6:7e:dc:95:ae:82:35:69:56: bc:cc:ab:fe:59:39:4e:d6:19:a9:1d:ef:ef:aa:09:7d:93:33: 46:ee:9e:25:ca:70:f1:17:e4:45:80:60:7c:d0:f7:1b:7e:34: 8a:3a:93:d7:46:50:a0:4e:16:42:2e:59:22:8c:30:eb:bd:43: 4b:64:bd:2a:b9:87:30:87:7c:6c:39:44:3c:dd:dc:47:b1:8b: bb:16:f1:fc:83:44:7c:9c:41:f2:de:21:1e:22:ad:85:fd:6e: f5:59:40:2d:a4:20:05:cb:eb:a2:e8:ee:2d:bf:09:87:7f:91: 88:26:d5:bc:b5:31:d0:28:3b:6d:4a:49:82:4d:b5:7f:9c:2d: 0e:70:a8:62:94:13:96:d2:f1:bf:a7:5c:bb:50:e4:76:e9:7b: c1:ee:24:ef:c5:29:51:8a:46:1f:35:3a:53:d4:af:59:92:30: 31:2b:e1:e1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUa6r7Cfe57xo1M2uKtqK0HU6qcwEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTkwNjEyWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BmMmJkZWJlMzUyYThjMjhkN2M3YTAyYTczMWUzODZjN2Qw ZDNlZjJjMjZmODk5Y2QzYmJmOTc1YmUwZTUyY2Q2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8m1QRvWXG+tYKq36RfduNulC5QDaJnLOohfnwDFHASJU5 5iJGRoHEckApD/dYrWBc91NbVFg/gxXPMb7mfK7Uf/pZkN0Da9KkrGV9tciNKnP/ paJY8WnskdR4arzX0jvw0st4S/aRmxAA2fe3d60dJrk2ahnujDe+TM5blU1QfFX8 Mkjjield9fti9X1Us6Ov3vLMncbVKzkD3LtaxnOxVgq/N262nUq3IPrZDMt67Ltz t/7VxTvDcRxbkvcgwBIRwGvPiYr4NUKdfpfCDmPI5l3zxAsg6fySkQgrT62XHYv/ dBSPsTKc1X/4ZNbVi/un1kPYJ9qUH80tNQxYlsJfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUIBY7yqFWljkB5GcO5L6VvkZXigEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2IxMWYyNGU0LTMwOTktNDQyNy04YzJmLTAzZTdiZTE3Mzk5Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAENIXIwDQYJKoZIhvcNAQELBQADggEBAIpH004Wf2vVaFh9toxQHg74G+CD WFF/vzWr+MXv109mCeR/4g8hQbov/4AoAJf+/xqYLyurn1qxkytCnJLI7XjmE5bv 3NkH8fgNYdTaax2aerZ+3JWugjVpVrzMq/5ZOU7WGakd7++qCX2TM0buniXKcPEX 5EWAYHzQ9xt+NIo6k9dGUKBOFkIuWSKMMOu9Q0tkvSq5hzCHfGw5RDzd3Eexi7sW 8fyDRHycQfLeIR4irYX9bvVZQC2kIAXL66Lo7i2/CYd/kYgm1by1MdAoO21KSYJN tX+cLQ5wqGKUE5bS8b+nXLtQ5Hbpe8HuJO/FKVGKRh81OlPUr1mSMDEr4eE= -----END CERTIFICATE-----Generated at Mon Oct 20 05:16:55 2025 by rpki-client