$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c0b47fdd-ba54-4e99-a716-3266956276b2.roa File: c0b47fdd-ba54-4e99-a716-3266956276b2.roa (raw, json) Hash identifier: RJRan4QeBXtefry2w9w2ZgerEzPAMOBSqCnzltK3Fi4= Subject key identifier: E6:3C:56:62:8E:4D:85:4A:3C:72:3F:3C:2B:31:DB:73:90:53:E7:56 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 37DD8063BB4E913C5C04E2170B4C3F6C617A6243 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c0b47fdd-ba54-4e99-a716-3266956276b2.roa Signing time: Sun 19 Oct 2025 14:30:17 +0000 ROA not before: Sun 19 Oct 2025 14:30:17 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.33.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:dd:80:63:bb:4e:91:3c:5c:04:e2:17:0b:4c:3f:6c:61:7a:62:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 14:30:17 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=2843b561954e71701da66524d0ea8d2e76a0a66a1b47963d3670bfe7bab848e5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ef:ec:46:84:be:04:a7:e1:6d:09:3a:17:af: 87:83:07:f2:73:c5:f3:de:78:4d:91:77:37:f7:8a: a0:48:b7:e0:11:41:b2:5e:3c:6a:ff:06:e0:95:6e: e5:1a:ee:af:d6:14:0e:65:5e:07:ab:21:3d:b1:be: e6:7b:02:0a:77:48:c6:bc:0d:b9:3d:70:5e:86:48: 61:5c:cd:28:90:cd:a2:c1:f7:6c:6e:45:19:69:da: ee:d2:7f:83:3f:a4:b1:fa:9f:1c:88:92:b6:b8:1c: 5b:e7:40:ae:0e:19:d5:74:ef:91:1c:f4:33:1e:be: 66:a0:2d:07:ff:67:31:ac:4f:92:82:45:05:6e:5c: 96:13:af:32:99:da:1a:72:cf:e4:5e:2f:78:df:fc: c9:ee:bd:d3:63:5c:ce:c0:98:91:27:ca:a6:21:15: 89:ab:b2:09:be:a6:2f:69:de:98:67:95:0e:6a:35: 89:19:e8:95:9d:28:bb:f3:fa:0c:72:15:cc:54:7d: 8b:71:5f:6a:d7:26:66:14:0b:bd:5f:d8:2b:1c:27: 29:08:52:00:82:9d:6c:83:c9:0a:95:fd:e7:cf:43: 66:76:d0:71:29:39:b8:aa:70:5f:06:5e:6f:ef:1c: 50:a1:f8:8b:45:4d:59:2c:5f:e0:d4:48:f7:6c:72: 3f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:3C:56:62:8E:4D:85:4A:3C:72:3F:3C:2B:31:DB:73:90:53:E7:56 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c0b47fdd-ba54-4e99-a716-3266956276b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.33.18.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:12:a4:c4:73:7e:99:d7:fd:1c:95:c8:ac:23:b2:76:5b:79: ab:3e:71:0d:d8:b8:13:2f:e8:83:08:b1:fd:09:e2:e8:93:37: 75:cc:36:aa:08:0c:a6:54:93:1d:cb:2e:82:72:5c:c7:13:66: 67:32:f4:78:a2:e9:2d:bc:e3:16:5d:df:bd:3a:28:72:4b:7e: d3:fa:de:1d:c2:69:53:58:a3:9a:dd:bc:3b:09:72:cc:bc:17: e8:76:e9:58:34:10:45:3b:71:91:d8:ce:90:ac:13:78:e7:eb: 65:bc:94:5e:f8:18:5c:90:62:0d:83:a6:b7:c9:20:91:bd:61: 83:c6:a7:e7:21:7a:86:49:4b:a6:62:ad:8b:f6:48:3b:b1:82: 29:54:38:bb:ca:c7:ae:22:81:67:e7:97:e8:e4:92:15:97:4c: b8:dc:f8:7c:60:a0:bb:0c:b4:c6:1f:51:99:fb:94:11:df:18: 48:8e:9a:58:f7:51:09:9f:cf:63:d9:5e:bf:16:f6:17:9f:97: b8:a9:47:4a:ca:3e:c6:8c:c9:06:d2:72:39:a6:ff:30:4b:a3: b7:7a:f7:fb:5f:7c:ae:82:73:5f:c3:76:6b:3d:22:07:68:79: de:05:dd:7d:61:e9:8a:31:10:d7:15:3b:8c:4f:26:3d:c9:49: 12:d9:57:f4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUN92AY7tOkTxcBOIXC0w/bGF6YkMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTQzMDE3WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AyODQzYjU2MTk1NGU3MTcwMWRhNjY1MjRkMGVhOGQyZTc2 YTBhNjZhMWI0Nzk2M2QzNjcwYmZlN2JhYjg0OGU1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCt7+xGhL4Ep+FtCToXr4eDB/JzxfPeeE2Rdzf3iqBIt+AR QbJePGr/BuCVbuUa7q/WFA5lXgerIT2xvuZ7Agp3SMa8Dbk9cF6GSGFczSiQzaLB 92xuRRlp2u7Sf4M/pLH6nxyIkra4HFvnQK4OGdV075Ec9DMevmagLQf/ZzGsT5KC RQVuXJYTrzKZ2hpyz+ReL3jf/MnuvdNjXM7AmJEnyqYhFYmrsgm+pi9p3phnlQ5q NYkZ6JWdKLvz+gxyFcxUfYtxX2rXJmYUC71f2CscJykIUgCCnWyDyQqV/efPQ2Z2 0HEpObiqcF8GXm/vHFCh+ItFTVksX+DUSPdscj9FAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5jxWYo5NhUo8cj88KzHbc5BT51YwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2MwYjQ3ZmRkLWJhNTQtNGU5OS1hNzE2LTMyNjY5NTYyNzZiMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAANIRIwDQYJKoZIhvcNAQELBQADggEBAG8SpMRzfpnX/RyVyKwjsnZbeas+ cQ3YuBMv6IMIsf0J4uiTN3XMNqoIDKZUkx3LLoJyXMcTZmcy9Hii6S284xZd3706 KHJLftP63h3CaVNYo5rdvDsJcsy8F+h26Vg0EEU7cZHYzpCsE3jn62W8lF74GFyQ Yg2DprfJIJG9YYPGp+cheoZJS6ZirYv2SDuxgilUOLvKx64igWfnl+jkkhWXTLjc +HxgoLsMtMYfUZn7lBHfGEiOmlj3UQmfz2PZXr8W9hefl7ipR0rKPsaMyQbScjmm /zBLo7d69/tffK6Cc1/Ddms9Igdoed4F3X1h6YoxENcVO4xPJj3JSRLZV/Q= -----END CERTIFICATE-----Generated at Mon Oct 20 03:07:46 2025 by rpki-client