$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/33315dd8-3545-45c2-b15e-4eb03f44b7b8.roa File: 33315dd8-3545-45c2-b15e-4eb03f44b7b8.roa (raw, json) Hash identifier: tMC38rl7DfAfb3ciXleUtvLrB4uFBxUdNgUsfYf39LE= Subject key identifier: 94:47:54:6B:CD:78:4E:7B:45:C2:B3:8D:B9:29:DD:06:47:82:28:3F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 624F54B07BC9A5FA862BA80B5F3D90FFEE2F7ADF Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/33315dd8-3545-45c2-b15e-4eb03f44b7b8.roa Signing time: Fri 26 Sep 2025 16:51:42 +0000 ROA not before: Fri 26 Sep 2025 16:51:42 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.152.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:4f:54:b0:7b:c9:a5:fa:86:2b:a8:0b:5f:3d:90:ff:ee:2f:7a:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 16:51:42 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=d9a410619daadcb23c9276cf85bccfbb1143222d75a29a1fbcdf3649db6d3c40, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:54:29:42:9e:74:ed:3f:fe:2e:65:48:c1:e8: 42:63:c2:6d:44:08:c0:d6:5d:8a:31:dc:b1:71:de: f1:09:38:8a:40:bc:f0:d9:b2:a8:fc:4f:34:cf:27: 0f:55:37:00:74:97:86:aa:a8:b3:cc:26:f7:bd:b2: 4d:08:35:cc:5a:3a:14:b6:f4:f5:66:f6:67:e9:fb: b7:53:c0:0b:f1:20:f9:39:d0:d6:7c:e8:7f:e5:63: 8a:28:77:6d:74:a5:36:93:0e:60:fc:d3:c6:ff:f2: cd:91:ae:a7:a2:69:ce:51:53:d6:22:71:cb:33:da: e0:c8:29:35:eb:0b:c5:58:4f:d1:bc:5b:45:7c:50: 87:47:92:f6:6b:32:18:ee:b7:f6:49:87:d1:a9:3f: 06:2c:ae:72:82:08:1d:9c:19:5c:f4:1f:d9:61:5c: 45:ca:fa:5b:81:04:25:ec:b1:0a:cf:fb:65:f2:b2: b2:53:d4:6d:09:97:07:13:c2:4c:a5:29:9c:64:1c: f7:5f:cf:8c:25:c6:42:3b:7a:a2:69:92:40:7f:ff: 70:b4:9c:49:d0:ed:c7:b7:4c:b6:f2:47:66:9b:30: 1e:b7:18:85:47:2a:6f:0f:bf:02:0c:ab:b4:37:a7: 9e:21:aa:df:21:ae:27:a7:e6:21:9a:15:09:0c:ee: 7e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:47:54:6B:CD:78:4E:7B:45:C2:B3:8D:B9:29:DD:06:47:82:28:3F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/33315dd8-3545-45c2-b15e-4eb03f44b7b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.152.128.0/17 Signature Algorithm: sha256WithRSAEncryption b1:2a:31:8f:c7:2d:6d:6e:c2:86:22:e1:21:f3:e8:01:66:fd: a0:f3:ec:d5:16:89:b3:09:16:ae:91:b8:6d:af:b3:62:95:c6: c6:2c:5f:53:87:16:1c:ea:30:51:3a:55:84:9e:b7:e3:da:87: dc:af:cd:c4:28:a5:57:67:c4:bd:05:3d:53:9e:53:c2:34:e1: 5d:fc:fa:bf:3a:aa:80:a6:64:b3:62:8c:a2:09:38:90:93:3e: 9c:53:e4:64:92:f1:6b:46:21:4c:bd:4f:43:0a:c8:86:6b:e7: 5a:cd:05:01:d6:dd:eb:f9:2d:12:3b:d9:c7:c4:be:2c:07:35: df:97:7b:53:0d:e7:7b:9f:32:ec:44:9c:1e:70:54:c0:b2:11: c9:6f:00:c8:51:64:31:90:2c:34:e4:c7:5f:e0:4d:a9:f4:29: 80:b7:2e:78:66:bc:df:01:bf:82:f9:c7:fb:7c:cb:a2:5f:5f: ce:7f:a2:22:14:9c:9f:fa:78:80:4e:89:f2:5f:a4:60:d0:3b: 30:51:a3:c9:2b:fa:d1:a1:0e:aa:e9:bb:cb:02:de:fc:e8:fc: 90:5e:44:7e:c8:15:59:bf:90:02:df:6f:af:29:c6:cc:f7:5b: ae:a3:c5:85:2c:d6:de:19:dc:60:a7:93:29:d4:43:46:38:48: 4f:91:c8:80 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYk9UsHvJpfqGK6gLXz2Q/+4vet8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MTY1MTQyWhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BkOWE0MTA2MTlkYWFkY2IyM2M5Mjc2Y2Y4NWJjY2ZiYjEx NDMyMjJkNzVhMjlhMWZiY2RmMzY0OWRiNmQzYzQwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCaVClCnnTtP/4uZUjB6EJjwm1ECMDWXYox3LFx3vEJOIpA vPDZsqj8TzTPJw9VNwB0l4aqqLPMJve9sk0INcxaOhS29PVm9mfp+7dTwAvxIPk5 0NZ86H/lY4ood210pTaTDmD808b/8s2Rrqeiac5RU9Yiccsz2uDIKTXrC8VYT9G8 W0V8UIdHkvZrMhjut/ZJh9GpPwYsrnKCCB2cGVz0H9lhXEXK+luBBCXssQrP+2Xy srJT1G0JlwcTwkylKZxkHPdfz4wlxkI7eqJpkkB//3C0nEnQ7ce3TLbyR2abMB63 GIVHKm8PvwIMq7Q3p54hqt8hrien5iGaFQkM7n7rAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUlEdUa814TntFwrONuSndBkeCKD8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzMzMzE1ZGQ4LTM1NDUtNDVjMi1iMTVlLTRlYjAzZjQ0YjdiOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcjmIAwDQYJKoZIhvcNAQELBQADggEBALEqMY/HLW1uwoYi4SHz6AFm/aDz 7NUWibMJFq6RuG2vs2KVxsYsX1OHFhzqMFE6VYSet+Pah9yvzcQopVdnxL0FPVOe U8I04V38+r86qoCmZLNijKIJOJCTPpxT5GSS8WtGIUy9T0MKyIZr51rNBQHW3ev5 LRI72cfEviwHNd+Xe1MN53ufMuxEnB5wVMCyEclvAMhRZDGQLDTkx1/gTan0KYC3 LnhmvN8Bv4L5x/t8y6JfX85/oiIUnJ/6eIBOifJfpGDQOzBRo8kr+tGhDqrpu8sC 3vzo/JBeRH7IFVm/kALfb68pxsz3W66jxYUs1t4Z3GCnkynUQ0Y4SE+RyIA= -----END CERTIFICATE-----Generated at Sat Oct 18 00:14:43 2025 by rpki-client