$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ff27b95c-13b5-4766-b28d-a1aacb2c6686.roa File: ff27b95c-13b5-4766-b28d-a1aacb2c6686.roa (raw, json) Hash identifier: KC2NTZW0FXLMOx3KtcAqIS0AA3A7acP3pbEcze81zWA= Subject key identifier: 77:C8:94:35:DC:5F:D3:D6:05:72:04:FD:74:14:DC:EA:6F:0A:D7:3A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 06436712A8EAB26F0B86BA2E2B48E0E4221FAFC6 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ff27b95c-13b5-4766-b28d-a1aacb2c6686.roa Signing time: Sun 19 Oct 2025 13:44:50 +0000 ROA not before: Sun 19 Oct 2025 13:44:50 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.33.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:43:67:12:a8:ea:b2:6f:0b:86:ba:2e:2b:48:e0:e4:22:1f:af:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 13:44:50 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=4308536e5a462f226523eabf943ebae4f57d8d071a37f632f6c2f59fafa59242, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7b:57:41:9e:7c:cb:da:17:40:8e:78:ad:f2: 60:c8:57:63:b6:fd:c6:33:f6:21:18:91:b1:d7:ff: a1:52:76:8f:2f:bf:1d:e6:b2:e3:e5:42:7e:d8:5e: 79:5d:38:2c:e5:c3:a8:a9:21:c7:ce:c4:bf:4b:47: 13:4f:d8:c8:ac:e0:d9:87:f7:a7:39:7e:f4:57:88: 67:a0:29:42:f5:fe:ea:15:1b:19:26:96:1e:78:8a: 81:9f:7a:52:9f:ea:6a:95:a1:52:bc:92:24:3c:0e: ff:ee:5e:4d:6c:b7:9d:6b:5a:cd:7c:70:3b:3d:9b: ad:78:e9:8c:a2:d2:1f:ff:95:6f:50:d0:5d:3d:89: 8e:e5:81:61:bd:ef:86:6b:ae:97:78:bc:34:46:22: 53:76:50:21:04:f3:b5:10:e3:dc:77:59:19:b9:73: 16:c1:d1:38:7c:a8:61:5c:ae:01:d6:8d:6e:fe:b5: 1e:bb:a1:74:cc:d8:f8:5a:97:b0:60:d3:e0:34:19: 82:7b:6b:fe:24:69:bc:c4:10:6f:15:06:ba:5e:dd: 0f:12:e2:ba:56:16:b8:cf:26:22:40:b5:ad:db:22: a2:6f:f3:d7:cb:dd:06:56:84:57:c9:1b:f7:12:f3: 10:ed:35:d0:66:e3:a5:00:49:12:05:31:b6:9d:b4: 5b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:C8:94:35:DC:5F:D3:D6:05:72:04:FD:74:14:DC:EA:6F:0A:D7:3A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ff27b95c-13b5-4766-b28d-a1aacb2c6686.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.33.104.0/21 Signature Algorithm: sha256WithRSAEncryption a0:02:7f:5e:5f:9f:52:bd:07:c3:00:36:9f:58:aa:40:a4:b2: 5c:49:fd:9f:5f:56:58:9d:f9:f4:e0:63:39:f5:c8:3c:e9:71: 67:9c:fd:1e:7f:9f:8c:6f:07:24:0e:3a:b4:b8:f6:9a:bb:b6: 66:1d:3a:1d:41:2f:d5:67:d5:06:17:f7:4e:6f:1e:f8:4a:c5: 69:1f:3e:cd:5b:a9:95:5a:9c:9f:54:9d:c4:c1:6d:b6:0f:e4: 2c:a5:e6:93:cc:69:b7:d0:c2:61:d2:49:84:16:05:28:1b:a8: f7:8f:39:e1:dd:95:26:f8:bc:17:cf:fe:57:f5:eb:dc:d4:64: b1:6b:b5:83:00:87:6d:f6:d5:c9:d7:5e:a1:45:9f:ec:a5:d2: d1:ff:0a:93:7d:4f:04:53:a1:46:39:07:25:e4:f4:ce:f5:1e: b2:7a:58:1a:e8:b5:73:82:e0:63:35:4f:af:32:d5:e8:95:58: 15:55:01:95:36:2f:8b:9d:a7:58:f9:ea:5d:f4:bf:a2:bd:48: 87:76:18:2e:2b:af:ff:f8:8e:e9:33:e4:84:4b:13:75:05:81: 01:50:c1:12:f8:50:53:b5:97:ca:08:ab:77:5c:be:2b:c6:9f: e2:08:3e:3b:f8:cc:b9:40:7b:97:8e:68:2b:93:83:45:2b:b7: 42:a7:15:24 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBkNnEqjqsm8LhrouK0jg5CIfr8YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTM0NDUwWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A0MzA4NTM2ZTVhNDYyZjIyNjUyM2VhYmY5NDNlYmFlNGY1 N2Q4ZDA3MWEzN2Y2MzJmNmMyZjU5ZmFmYTU5MjQyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCue1dBnnzL2hdAjnit8mDIV2O2/cYz9iEYkbHX/6FSdo8v vx3msuPlQn7YXnldOCzlw6ipIcfOxL9LRxNP2Mis4NmH96c5fvRXiGegKUL1/uoV Gxkmlh54ioGfelKf6mqVoVK8kiQ8Dv/uXk1st51rWs18cDs9m6146Yyi0h//lW9Q 0F09iY7lgWG974Zrrpd4vDRGIlN2UCEE87UQ49x3WRm5cxbB0Th8qGFcrgHWjW7+ tR67oXTM2Phal7Bg0+A0GYJ7a/4kabzEEG8VBrpe3Q8S4rpWFrjPJiJAta3bIqJv 89fL3QZWhFfJG/cS8xDtNdBm46UASRIFMbadtFufAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUd8iUNdxf09YFcgT9dBTc6m8K1zowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2ZmMjdiOTVjLTEzYjUtNDc2Ni1iMjhkLWExYWFjYjJjNjY4Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMNIWgwDQYJKoZIhvcNAQELBQADggEBAKACf15fn1K9B8MANp9YqkCkslxJ /Z9fVlid+fTgYzn1yDzpcWec/R5/n4xvByQOOrS49pq7tmYdOh1BL9Vn1QYX905v HvhKxWkfPs1bqZVanJ9UncTBbbYP5Cyl5pPMabfQwmHSSYQWBSgbqPePOeHdlSb4 vBfP/lf169zUZLFrtYMAh2321cnXXqFFn+yl0tH/CpN9TwRToUY5ByXk9M71HrJ6 WBrotXOC4GM1T68y1eiVWBVVAZU2L4udp1j56l30v6K9SId2GC4rr//4jukz5IRL E3UFgQFQwRL4UFO1l8oIq3dcvivGn+IIPjv4zLlAe5eOaCuTg0Urt0KnFSQ= -----END CERTIFICATE-----Generated at Mon Oct 20 11:01:48 2025 by rpki-client