$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/39849317-e904-4087-bf2f-3c5a988c5274.roa File: 39849317-e904-4087-bf2f-3c5a988c5274.roa (raw, json) Hash identifier: nMZhMfYM4JI8E58hIn1VyJhpYkMhjoRGHkz4lyyEKFM= Subject key identifier: 92:D3:1C:83:A3:76:B8:F1:B1:93:BD:24:A7:24:FF:5B:4A:24:62:5B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1A6A4B499AF97C2E89C7CAE16BBC0DEC57E9AC64 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/39849317-e904-4087-bf2f-3c5a988c5274.roa Signing time: Wed 24 Sep 2025 18:48:21 +0000 ROA not before: Wed 24 Sep 2025 18:48:21 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.33.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:6a:4b:49:9a:f9:7c:2e:89:c7:ca:e1:6b:bc:0d:ec:57:e9:ac:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 18:48:21 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=aedf2520c8703c0f6a0325451062dc0bb1d16d9e0376556c204b519e7c3cb9bc, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:6b:d6:39:20:62:81:0c:c6:77:e7:f8:fb:1d: 54:31:29:d0:57:ff:00:0f:83:16:d9:ba:be:a3:ea: 55:3b:48:6a:4f:8c:63:d9:f6:7b:14:9c:ba:91:5c: d8:42:a2:25:24:9c:28:d5:37:1d:d2:ec:2e:dd:76: d5:40:66:bc:8c:2b:26:79:cb:36:e9:d5:a5:8c:4c: 70:d8:d6:bc:28:34:df:4c:78:10:e6:49:bd:4f:93: eb:d3:88:a6:20:6c:98:9c:68:3c:87:99:20:2b:1c: 76:0e:fe:99:06:63:a7:48:d2:c6:8e:37:76:2e:ab: a8:4b:e1:dd:7a:ac:da:9d:83:b8:84:eb:c9:a6:5f: dc:cc:c9:6c:9a:1f:ca:2e:df:3a:81:0a:fc:b1:15: 5c:0f:15:7b:0c:cb:71:fb:61:75:7a:68:47:f6:96: 54:b2:8a:e5:fb:59:fa:65:0d:08:67:35:62:a3:ee: 3b:1f:24:88:6a:43:d5:ba:75:25:85:8f:55:90:ad: 57:94:65:1e:36:07:7c:0a:95:5a:6e:60:a8:0d:9b: 60:e7:4c:5a:c5:ff:12:db:db:c1:84:0e:2b:08:71: 08:5d:bf:84:5d:8c:99:8a:88:fd:f8:6e:38:5b:34: ff:88:da:9a:34:42:f3:33:d3:07:5d:9e:71:03:eb: 80:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:D3:1C:83:A3:76:B8:F1:B1:93:BD:24:A7:24:FF:5B:4A:24:62:5B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/39849317-e904-4087-bf2f-3c5a988c5274.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.33.72.0/21 Signature Algorithm: sha256WithRSAEncryption 89:f8:68:80:96:27:64:ba:62:a2:af:e4:e3:03:79:18:2f:2b: 6a:33:0b:33:40:41:b4:7b:a9:8f:5e:f9:ec:fb:78:25:ec:ea: 72:8d:51:9f:60:e4:27:a0:a7:81:f9:8a:de:15:ed:72:c7:5d: 54:7f:58:05:27:d0:39:a5:81:1b:8a:68:1f:88:d0:fe:b6:1e: f4:18:cb:cd:31:4f:87:5e:f1:b6:ca:5f:80:84:2e:3c:67:75: 71:b1:1c:19:3a:89:f3:80:5f:08:4d:a8:63:48:2e:3a:d5:10: e6:16:a1:04:3d:53:43:86:b5:4f:b8:84:31:e1:43:5f:06:d2: 6b:ed:5d:ac:72:2e:01:a0:09:3a:30:5e:3b:ba:b8:cf:eb:c4: 8f:71:de:b1:a6:d5:cb:ca:45:a0:81:57:cc:10:b4:a3:3a:54: 2d:ea:d8:6b:08:a6:ba:86:fe:e8:73:a5:8e:38:68:00:72:ea: 52:ef:fd:a8:ed:38:9d:fe:24:0b:83:8d:05:11:9d:18:a4:c0: dc:fd:a8:ae:86:97:2f:b5:b9:e6:c1:29:6f:51:ec:28:fc:83: 39:36:ae:20:0c:3a:a9:e8:7c:c4:12:5b:33:d7:c4:20:18:ad: 02:88:58:d7:42:5f:dd:2a:7c:21:1c:09:79:3c:52:81:0b:2c: 5a:73:0a:8f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGmpLSZr5fC6Jx8rha7wN7FfprGQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MTg0ODIxWhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BhZWRmMjUyMGM4NzAzYzBmNmEwMzI1NDUxMDYyZGMwYmIx ZDE2ZDllMDM3NjU1NmMyMDRiNTE5ZTdjM2NiOWJjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGa9Y5IGKBDMZ35/j7HVQxKdBX/wAPgxbZur6j6lU7SGpP jGPZ9nsUnLqRXNhCoiUknCjVNx3S7C7ddtVAZryMKyZ5yzbp1aWMTHDY1rwoNN9M eBDmSb1Pk+vTiKYgbJicaDyHmSArHHYO/pkGY6dI0saON3Yuq6hL4d16rNqdg7iE 68mmX9zMyWyaH8ou3zqBCvyxFVwPFXsMy3H7YXV6aEf2llSyiuX7WfplDQhnNWKj 7jsfJIhqQ9W6dSWFj1WQrVeUZR42B3wKlVpuYKgNm2DnTFrF/xLb28GEDisIcQhd v4RdjJmKiP34bjhbNP+I2po0QvMz0wddnnED64AjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUktMcg6N2uPGxk70kpyT/W0okYlswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzM5ODQ5MzE3LWU5MDQtNDA4Ny1iZjJmLTNjNWE5ODhjNTI3NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMNIUgwDQYJKoZIhvcNAQELBQADggEBAIn4aICWJ2S6YqKv5OMDeRgvK2oz CzNAQbR7qY9e+ez7eCXs6nKNUZ9g5Cegp4H5it4V7XLHXVR/WAUn0DmlgRuKaB+I 0P62HvQYy80xT4de8bbKX4CELjxndXGxHBk6ifOAXwhNqGNILjrVEOYWoQQ9U0OG tU+4hDHhQ18G0mvtXaxyLgGgCTowXju6uM/rxI9x3rGm1cvKRaCBV8wQtKM6VC3q 2GsIprqG/uhzpY44aABy6lLv/ajtOJ3+JAuDjQURnRikwNz9qK6Gly+1uebBKW9R 7Cj8gzk2riAMOqnofMQSWzPXxCAYrQKIWNdCX90qfCEcCXk8UoELLFpzCo8= -----END CERTIFICATE-----Generated at Sat Oct 18 00:13:12 2025 by rpki-client