$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1047be79-9283-43ad-8ab4-d1facf3a29e3.roa File: 1047be79-9283-43ad-8ab4-d1facf3a29e3.roa (raw, json) Hash identifier: yf3llcuLZWGQzaLkC8H17wwZje59COSGYedbkJDIfcw= Subject key identifier: D5:08:21:44:3F:3A:4A:3D:A4:D6:46:5F:E6:6F:A0:58:08:4F:66:78 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 11A39025D6E0361CF996B3727FAA63C9E5DE0BD3 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1047be79-9283-43ad-8ab4-d1facf3a29e3.roa Signing time: Wed 24 Sep 2025 18:48:25 +0000 ROA not before: Wed 24 Sep 2025 18:48:25 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.33.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:a3:90:25:d6:e0:36:1c:f9:96:b3:72:7f:aa:63:c9:e5:de:0b:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 18:48:25 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=210c027ea7f50d313da66b97cb07ef2f29d1a8b8c3972abbb75ce383339cd9aa, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:80:89:2a:51:03:9f:7e:c8:d1:bb:cf:28:6b: db:c2:16:82:d6:71:af:18:99:1e:7a:01:8a:71:01: 5e:0e:77:dd:62:07:a8:da:c1:0d:86:0a:24:7f:83: 4d:43:02:a7:8f:27:cf:0e:33:c9:82:82:db:04:ac: 52:a9:5d:35:de:79:9d:63:00:a6:17:95:99:41:b8: e7:20:71:0b:65:fe:62:b8:73:8a:68:c0:ca:0b:6d: d3:f6:43:99:ac:f2:f1:28:1d:28:b3:3d:b6:a5:7d: 32:50:f0:13:06:dd:c3:4c:2b:e2:cc:7a:92:cd:3c: 43:86:df:01:66:20:dd:57:3e:cf:89:1c:f3:26:ec: 65:72:ce:6e:0c:8b:69:c8:02:c6:54:8f:1f:b7:9c: 48:7f:f8:42:4d:ab:2e:8c:d3:5e:d8:5d:0d:ef:ab: 95:c8:60:5b:5c:fd:7e:8a:6b:fd:25:3e:2e:77:a3: 23:ad:9f:a0:d0:5c:ea:ea:f5:d0:3f:4a:35:5b:d9: b7:4f:72:e6:94:8d:61:9a:7d:50:42:68:e0:bb:17: 33:5b:b2:e4:6c:9a:1c:64:84:c2:4a:5e:b0:c1:20: dd:cc:87:36:5d:60:94:d8:80:1b:ac:6e:9a:aa:0f: 42:f3:91:ea:d5:ae:d9:3c:07:93:66:6f:7c:30:06: 5e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:08:21:44:3F:3A:4A:3D:A4:D6:46:5F:E6:6F:A0:58:08:4F:66:78 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1047be79-9283-43ad-8ab4-d1facf3a29e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.33.88.0/21 Signature Algorithm: sha256WithRSAEncryption 84:2f:4e:2e:00:fe:bc:7a:9d:4a:7f:2d:24:33:af:72:0b:10: f7:97:ba:80:2f:fa:4d:3e:00:84:f3:d7:ae:19:dc:85:a8:19: 88:24:80:ac:91:5f:e1:da:4a:f3:40:c8:91:f4:e5:c8:9b:53: 9b:0c:47:53:d3:f4:94:53:76:e1:ac:a4:2b:4c:75:26:dd:79: 1c:f4:1a:a8:16:a7:ba:c3:21:6e:b6:69:3a:33:23:0b:42:a8: 5c:27:21:5c:b1:4f:fd:86:b3:8c:ed:28:39:91:d5:5b:c2:67: 94:3c:8c:ef:2c:f3:38:ac:89:b4:b9:1e:1e:2c:c6:6f:89:b5: a6:9c:fb:0f:cf:04:b6:f9:b9:96:f6:aa:ce:d4:b7:f6:d1:21: ca:99:66:c8:4e:b6:eb:57:99:c7:b7:94:79:03:86:f0:dd:b7: 02:71:a8:bc:24:6d:80:f6:f0:5d:5c:5a:4b:e7:6c:d1:32:a9: 68:ad:ec:4a:e5:45:ff:7b:6f:d4:a0:da:50:9b:b2:4c:9e:db: 00:ae:ac:b8:78:b3:9c:38:23:ee:04:ce:1b:3a:33:a8:8b:b7: f9:3a:56:3e:46:28:36:ca:06:e2:6b:62:f5:a9:fb:69:ec:5e: 12:41:af:67:5e:4a:5b:57:a5:37:5f:3f:c2:c8:d0:3b:5c:89: 0b:a9:74:01 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEaOQJdbgNhz5lrNyf6pjyeXeC9MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MTg0ODI1WhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0AyMTBjMDI3ZWE3ZjUwZDMxM2RhNjZiOTdjYjA3ZWYyZjI5 ZDFhOGI4YzM5NzJhYmJiNzVjZTM4MzMzOWNkOWFhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCWgIkqUQOffsjRu88oa9vCFoLWca8YmR56AYpxAV4Od91i B6jawQ2GCiR/g01DAqePJ88OM8mCgtsErFKpXTXeeZ1jAKYXlZlBuOcgcQtl/mK4 c4powMoLbdP2Q5ms8vEoHSizPbalfTJQ8BMG3cNMK+LMepLNPEOG3wFmIN1XPs+J HPMm7GVyzm4Mi2nIAsZUjx+3nEh/+EJNqy6M017YXQ3vq5XIYFtc/X6Ka/0lPi53 oyOtn6DQXOrq9dA/SjVb2bdPcuaUjWGafVBCaOC7FzNbsuRsmhxkhMJKXrDBIN3M hzZdYJTYgBusbpqqD0LzkerVrtk8B5Nmb3wwBl5rAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU1QghRD86Sj2k1kZf5m+gWAhPZngwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzEwNDdiZTc5LTkyODMtNDNhZC04YWI0LWQxZmFjZjNhMjllMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMNIVgwDQYJKoZIhvcNAQELBQADggEBAIQvTi4A/rx6nUp/LSQzr3ILEPeX uoAv+k0+AITz164Z3IWoGYgkgKyRX+HaSvNAyJH05cibU5sMR1PT9JRTduGspCtM dSbdeRz0GqgWp7rDIW62aTozIwtCqFwnIVyxT/2Gs4ztKDmR1VvCZ5Q8jO8s8zis ibS5Hh4sxm+Jtaac+w/PBLb5uZb2qs7Ut/bRIcqZZshOtutXmce3lHkDhvDdtwJx qLwkbYD28F1cWkvnbNEyqWit7ErlRf97b9Sg2lCbskye2wCurLh4s5w4I+4Ezhs6 M6iLt/k6Vj5GKDbKBuJrYvWp+2nsXhJBr2deSltXpTdfP8LI0DtciQupdAE= -----END CERTIFICATE-----Generated at Fri Oct 17 22:17:56 2025 by rpki-client