$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c2feee0e-e7ab-456f-9d86-fbc3722a5d13.roa File: c2feee0e-e7ab-456f-9d86-fbc3722a5d13.roa (raw, json) Hash identifier: woTHfsGAdbblozb4Kt7s0WFE8YkkvqyHp+Qnu0h4YLw= Subject key identifier: 21:30:43:32:88:0D:4C:BB:E4:3B:11:99:15:5B:79:7B:BA:05:02:37 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3E11478ABC0753C4C8327ED2C0FD7DC9F2147DD9 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c2feee0e-e7ab-456f-9d86-fbc3722a5d13.roa Signing time: Sun 19 Oct 2025 17:33:53 +0000 ROA not before: Sun 19 Oct 2025 17:33:53 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.33.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:11:47:8a:bc:07:53:c4:c8:32:7e:d2:c0:fd:7d:c9:f2:14:7d:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 17:33:53 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=6c0e642ed0d161eacc0b59e208a4c6d2159f3f62ec0c5887448665f9b302be79, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:80:7e:6a:a2:d8:ae:03:7a:7e:f7:9b:7e:6a: 65:cc:a9:3d:e4:e8:a7:5a:1a:41:cc:bb:2f:98:06: c1:94:6d:74:4c:46:9d:71:8a:37:3f:d1:43:d2:28: d4:25:e9:f0:99:c4:47:5e:0e:ab:ba:d3:09:3e:aa: 42:f6:44:70:89:28:32:b0:b1:2b:5c:88:99:07:9e: d6:80:dd:1f:e0:eb:60:9e:67:e1:95:92:58:36:98: 6f:5d:b9:2d:6b:d0:e3:f4:65:b2:39:0a:ab:c2:26: a3:0c:33:7c:5c:3a:14:5b:a0:a6:6d:0d:37:f0:3d: 55:df:db:ad:84:9e:12:0b:39:fd:62:e5:16:fc:84: 48:2e:8f:14:56:34:7a:d9:fe:49:6a:b2:f1:1e:f7: 7a:82:f2:36:9a:3b:60:13:42:c5:c6:6e:0d:7c:07: 5e:31:e1:4d:77:6e:a6:52:0f:d0:bc:69:3c:79:ad: 07:01:44:03:70:c5:3b:f7:4c:a8:41:2c:f1:d0:b6: 02:d6:f2:3e:e5:55:4c:fa:04:82:a5:47:35:70:0f: f3:26:9e:f7:8b:e4:b5:6f:3c:87:52:b2:95:eb:0e: 17:c4:58:b0:6c:1d:99:63:d1:13:0c:ee:61:e7:90: 6c:2b:39:c6:5f:53:2b:fd:1d:29:1e:7f:64:69:0a: b4:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:30:43:32:88:0D:4C:BB:E4:3B:11:99:15:5B:79:7B:BA:05:02:37 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c2feee0e-e7ab-456f-9d86-fbc3722a5d13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.33.195.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:82:68:17:d8:f7:21:4d:b5:d7:7b:d9:d0:16:71:b7:00:cd: b3:7b:2f:1f:a9:ca:83:5a:58:3c:21:49:52:f4:7c:0b:54:b8: b3:be:a8:a7:71:6e:39:97:cd:9c:2c:92:85:97:3c:da:9b:00: ba:4d:bd:44:93:20:92:f7:f9:ac:01:f0:db:5d:71:f9:bc:f6: 08:8a:47:d5:82:82:1e:c6:65:08:2b:1d:91:6a:b1:d5:7b:ae: d8:d3:b4:35:8b:19:84:eb:18:59:ca:6b:9f:7e:a4:1f:bd:b5: 90:ca:8c:04:5e:2c:30:44:13:ae:01:77:f8:fd:5b:cd:1e:e2: 0c:ca:cd:12:c2:c5:07:f8:72:00:f0:a9:10:c7:ff:1d:ae:15: 6f:15:ea:0b:cc:f0:1d:9f:0f:29:21:20:60:c9:f1:b7:34:76: e2:9e:b2:51:fe:68:e8:a2:ee:cf:1d:fb:0b:34:0e:b1:e3:51: f2:67:1c:19:d3:2f:37:45:5d:36:a8:a7:1d:2f:27:07:ce:68: 57:53:85:8c:de:2c:82:30:07:e8:2e:b2:a5:95:ed:0f:1a:83: d2:e3:fd:b0:0f:29:eb:d1:44:8b:06:d5:0f:b8:97:e0:05:27: 16:95:ce:e5:85:7c:9c:14:c9:6b:87:b5:62:b4:e9:9c:60:6f: d7:53:c7:2d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPhFHirwHU8TIMn7SwP19yfIUfdkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTczMzUzWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A2YzBlNjQyZWQwZDE2MWVhY2MwYjU5ZTIwOGE0YzZkMjE1 OWYzZjYyZWMwYzU4ODc0NDg2NjVmOWIzMDJiZTc5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDegH5qotiuA3p+95t+amXMqT3k6KdaGkHMuy+YBsGUbXRM Rp1xijc/0UPSKNQl6fCZxEdeDqu60wk+qkL2RHCJKDKwsStciJkHntaA3R/g62Ce Z+GVklg2mG9duS1r0OP0ZbI5CqvCJqMMM3xcOhRboKZtDTfwPVXf262EnhILOf1i 5Rb8hEgujxRWNHrZ/klqsvEe93qC8jaaO2ATQsXGbg18B14x4U13bqZSD9C8aTx5 rQcBRANwxTv3TKhBLPHQtgLW8j7lVUz6BIKlRzVwD/MmnveL5LVvPIdSspXrDhfE WLBsHZlj0RMM7mHnkGwrOcZfUyv9HSkef2RpCrRFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUITBDMogNTLvkOxGZFVt5e7oFAjcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2MyZmVlZTBlLWU3YWItNDU2Zi05ZDg2LWZiYzM3MjJhNWQxMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAANIcMwDQYJKoZIhvcNAQELBQADggEBAJ+CaBfY9yFNtdd72dAWcbcAzbN7 Lx+pyoNaWDwhSVL0fAtUuLO+qKdxbjmXzZwskoWXPNqbALpNvUSTIJL3+awB8Ntd cfm89giKR9WCgh7GZQgrHZFqsdV7rtjTtDWLGYTrGFnKa59+pB+9tZDKjAReLDBE E64Bd/j9W80e4gzKzRLCxQf4cgDwqRDH/x2uFW8V6gvM8B2fDykhIGDJ8bc0duKe slH+aOii7s8d+ws0DrHjUfJnHBnTLzdFXTaopx0vJwfOaFdThYzeLIIwB+gusqWV 7Q8ag9Lj/bAPKevRRIsG1Q+4l+AFJxaVzuWFfJwUyWuHtWK06Zxgb9dTxy0= -----END CERTIFICATE-----Generated at Mon Oct 20 08:29:33 2025 by rpki-client