$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/de674203-94bb-49f4-ac0c-ae5d8b29e41b.roa File: de674203-94bb-49f4-ac0c-ae5d8b29e41b.roa (raw, json) Hash identifier: /k4GNOp4bxPouknwLrS8LUvUUfNqL8h5Qq97V7tLGvU= Subject key identifier: 15:19:90:9A:C9:DE:B8:05:31:24:18:36:C9:7B:67:4F:F9:F3:FB:C5 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5AA30B4D4F3E99284CCE6E867CDA9A66AD21F1D5 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/de674203-94bb-49f4-ac0c-ae5d8b29e41b.roa Signing time: Sun 19 Oct 2025 14:31:21 +0000 ROA not before: Sun 19 Oct 2025 14:31:21 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.33.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:a3:0b:4d:4f:3e:99:28:4c:ce:6e:86:7c:da:9a:66:ad:21:f1:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 14:31:21 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=eb69ff0d85255667c3131422e8fc5c81fd81e6959c6fe55ecdd29921cd6f0cf3, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c1:0f:6b:88:69:30:95:44:8b:f4:c9:b8:2d: f4:de:ff:43:1f:94:32:5b:c4:97:98:2a:92:66:42: 6a:92:92:ad:a2:b9:12:fa:e7:49:bd:95:93:32:4a: 57:ea:2a:63:43:fd:dc:e4:5a:51:76:fd:b3:c7:5e: f4:00:b7:d4:90:e6:75:68:a6:9d:af:c4:57:1e:70: 3d:3e:0f:be:bb:c7:99:09:fa:df:09:33:4e:c7:87: 6d:82:ea:ac:4b:02:34:55:9a:b9:27:20:88:39:1f: b2:14:a1:33:e9:87:ea:69:63:5a:d6:80:fe:2e:dc: fe:3c:8b:e2:96:d6:0f:3e:8e:ee:7a:08:23:5f:8d: b2:e4:c8:08:c7:fa:de:de:ce:90:8f:0a:a6:7b:33: ca:ea:48:fb:74:d9:64:14:7d:ca:8c:d2:72:57:64: 4e:f0:40:b8:84:ff:86:8f:79:99:d2:18:5a:a3:62: 86:dd:bf:4f:04:78:9e:ab:05:f7:59:4c:5e:57:60: 64:06:46:53:46:73:bd:49:63:25:fe:7c:85:30:6f: ab:1e:dc:c7:54:95:dc:4a:ea:f0:45:89:70:1c:e9: 3a:e9:65:fe:c6:39:e9:58:62:5d:6e:77:ac:d3:a6: f7:b6:be:c2:5c:36:ed:00:bb:a4:4a:d8:1a:87:e8: 9b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:19:90:9A:C9:DE:B8:05:31:24:18:36:C9:7B:67:4F:F9:F3:FB:C5 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/de674203-94bb-49f4-ac0c-ae5d8b29e41b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.33.248.0/23 Signature Algorithm: sha256WithRSAEncryption 10:b2:9e:fa:14:1a:a1:da:2a:98:2f:86:cd:06:5f:4e:bc:22: 42:5c:10:29:ad:44:b1:da:4a:72:6a:f6:5a:b7:83:a8:de:1d: a7:f9:41:6e:af:ed:f6:5c:85:7a:0f:8c:de:1a:42:5a:67:f1: c4:3d:7d:4e:e0:b3:81:36:69:e8:6e:24:17:2a:ca:39:07:0c: 43:e4:98:f9:63:25:f3:6b:09:ba:e4:d6:5b:8b:f7:04:e1:5c: 88:28:6e:4b:09:56:79:e3:48:2e:e9:74:f1:fe:19:72:6a:96: 67:91:55:8e:d3:fb:5f:6a:12:3b:7d:e3:e8:b7:9e:f1:36:47: b6:80:82:47:86:6c:65:d4:be:59:b6:b0:3d:72:76:ba:0c:a3: ba:4f:2b:15:cb:4c:3f:d7:13:c3:85:f1:e6:cf:8b:5c:89:68: 95:21:09:d4:12:ea:02:1d:6c:cf:30:d8:8f:df:9d:38:ee:a2: 77:d2:ef:11:77:16:a6:7d:5f:07:66:b4:b2:5d:9f:d2:bd:63: cb:01:18:09:51:68:96:ef:cb:35:bc:5d:84:5b:1d:b3:76:76: c0:f7:da:72:82:34:fd:d5:2d:8c:55:67:dd:e1:cd:df:83:74: 55:5b:77:39:1e:84:6a:42:c2:42:f2:91:3e:5e:d9:3f:b5:3a: 40:03:bc:89 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWqMLTU8+mShMzm6GfNqaZq0h8dUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTQzMTIxWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BlYjY5ZmYwZDg1MjU1NjY3YzMxMzE0MjJlOGZjNWM4MWZk ODFlNjk1OWM2ZmU1NWVjZGQyOTkyMWNkNmYwY2YzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCawQ9riGkwlUSL9Mm4LfTe/0MflDJbxJeYKpJmQmqSkq2i uRL650m9lZMySlfqKmND/dzkWlF2/bPHXvQAt9SQ5nVopp2vxFcecD0+D767x5kJ +t8JM07Hh22C6qxLAjRVmrknIIg5H7IUoTPph+ppY1rWgP4u3P48i+KW1g8+ju56 CCNfjbLkyAjH+t7ezpCPCqZ7M8rqSPt02WQUfcqM0nJXZE7wQLiE/4aPeZnSGFqj Yobdv08EeJ6rBfdZTF5XYGQGRlNGc71JYyX+fIUwb6se3MdUldxK6vBFiXAc6Trp Zf7GOelYYl1ud6zTpve2vsJcNu0Au6RK2BqH6Jt5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUFRmQmsneuAUxJBg2yXtnT/nz+8UwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2RlNjc0MjAzLTk0YmItNDlmNC1hYzBjLWFlNWQ4YjI5ZTQxYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAENIfgwDQYJKoZIhvcNAQELBQADggEBABCynvoUGqHaKpgvhs0GX068IkJc ECmtRLHaSnJq9lq3g6jeHaf5QW6v7fZchXoPjN4aQlpn8cQ9fU7gs4E2aehuJBcq yjkHDEPkmPljJfNrCbrk1luL9wThXIgobksJVnnjSC7pdPH+GXJqlmeRVY7T+19q Ejt94+i3nvE2R7aAgkeGbGXUvlm2sD1ydroMo7pPKxXLTD/XE8OF8ebPi1yJaJUh CdQS6gIdbM8w2I/fnTjuonfS7xF3FqZ9XwdmtLJdn9K9Y8sBGAlRaJbvyzW8XYRb HbN2dsD32nKCNP3VLYxVZ93hzd+DdFVbdzkehGpCwkLykT5e2T+1OkADvIk= -----END CERTIFICATE-----Generated at Mon Oct 20 06:07:23 2025 by rpki-client