$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/46c9f850-3a9f-42fd-943f-8aedbb4de433.roa File: 46c9f850-3a9f-42fd-943f-8aedbb4de433.roa (raw, json) Hash identifier: CI/lsMk9wjuos6tYXOjkDbTgoXLby+cldyVmAoG861Q= Subject key identifier: F2:95:10:0B:E3:DF:CB:7A:24:6E:D8:A9:98:09:DD:C4:1D:5C:74:82 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1B157C2F43CD958ECD399F0A511F36BC70CCC03A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/46c9f850-3a9f-42fd-943f-8aedbb4de433.roa Signing time: Wed 24 Sep 2025 18:39:36 +0000 ROA not before: Wed 24 Sep 2025 18:39:36 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.33.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:15:7c:2f:43:cd:95:8e:cd:39:9f:0a:51:1f:36:bc:70:cc:c0:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 18:39:36 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=d23dcd74c58a176381140f53868e497d7d51e7a71997cfecd53c5c2f9d6c9931, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:94:aa:d3:cc:82:ca:d4:c6:d2:a6:40:7a:7b: d4:31:1e:d2:44:c9:0d:c6:4e:9c:9e:77:3c:52:66: 15:de:86:ad:d1:08:97:b9:31:18:e9:cb:a3:95:0e: 7e:b0:2b:33:be:f3:05:3a:dc:9e:f1:86:6f:74:c2: b5:c1:bc:5a:c3:03:c2:20:0b:fe:05:ab:33:e8:99: ea:d2:fe:32:02:ca:3e:e8:39:ec:79:b7:22:51:85: 03:74:f9:b6:1b:e4:79:ab:da:fc:e3:36:6a:aa:11: 97:3d:23:f3:51:d9:46:60:ea:aa:33:e4:91:b5:02: 0f:35:fa:0f:38:73:42:1c:2a:2d:bf:d8:a6:42:d3: 4e:fb:8d:72:a1:47:d2:5b:2e:7e:42:8e:2e:1a:32: f5:d9:43:05:a6:d2:db:5a:67:f8:c5:98:ab:a4:3c: eb:57:9b:fa:68:d5:dd:9e:a6:f3:81:ff:b7:36:82: d4:09:13:7f:f0:3b:82:dd:56:b3:e1:11:04:40:e0: 2a:85:d0:e1:29:0e:d3:bf:2e:6d:c5:73:96:2d:21: 8e:7e:2f:cb:98:74:e8:9c:2c:ba:49:bd:ba:68:a4: 19:51:b3:42:67:67:df:07:4d:20:33:d8:24:8c:dd: b1:53:08:c1:5f:73:d8:86:a9:fb:5e:e8:a7:c3:78: 17:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:95:10:0B:E3:DF:CB:7A:24:6E:D8:A9:98:09:DD:C4:1D:5C:74:82 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/46c9f850-3a9f-42fd-943f-8aedbb4de433.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.33.204.0/22 Signature Algorithm: sha256WithRSAEncryption 52:92:0f:8c:aa:92:82:fb:c0:41:95:78:14:3c:64:90:de:b0: 85:c0:a7:89:a9:e0:6d:ae:9f:18:0f:b3:ae:f4:d3:55:72:76: 73:dd:25:7d:ca:5d:91:49:28:dd:a7:a8:2e:f2:f1:dd:48:20: 29:32:4b:50:7b:45:3c:24:52:13:c1:aa:bd:c8:8a:72:17:b3: 32:7f:bc:bd:e7:0b:89:90:d5:cd:cf:c8:f4:9e:b9:60:ca:39: 5a:63:f6:78:02:0e:f6:d6:f9:a5:48:e1:78:0e:1d:13:7c:7d: 42:a4:a3:2f:d8:90:7b:79:cd:69:91:ca:b2:b3:5e:36:15:cb: 41:3e:1a:e8:e2:ed:c1:b8:94:72:f5:08:19:8f:b1:98:c6:a6: aa:f3:b4:2a:0a:4a:2d:42:89:35:dc:66:cf:aa:c1:ec:9e:af: bc:99:b5:fb:c5:8b:ab:08:94:bf:e9:c4:60:06:1e:ac:60:dc: ac:0a:a2:49:4d:8e:6b:91:e3:d1:39:61:2a:28:91:21:60:41: 3b:99:aa:22:11:35:f1:a9:ee:70:7a:c6:b0:34:1a:20:e2:a0: 57:51:2d:4a:cb:ca:21:fe:74:dd:74:bb:16:bc:4a:82:eb:91: ff:5e:c7:0d:0e:8e:93:2d:ae:f9:eb:c0:59:1f:b4:95:eb:da: 77:7a:2c:a8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGxV8L0PNlY7NOZ8KUR82vHDMwDowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MTgzOTM2WhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMjNkY2Q3NGM1OGExNzYzODExNDBmNTM4NjhlNDk3ZDdk NTFlN2E3MTk5N2NmZWNkNTNjNWMyZjlkNmM5OTMxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZlKrTzILK1MbSpkB6e9QxHtJEyQ3GTpyedzxSZhXehq3R CJe5MRjpy6OVDn6wKzO+8wU63J7xhm90wrXBvFrDA8IgC/4FqzPomerS/jICyj7o Oex5tyJRhQN0+bYb5Hmr2vzjNmqqEZc9I/NR2UZg6qoz5JG1Ag81+g84c0IcKi2/ 2KZC0077jXKhR9JbLn5Cji4aMvXZQwWm0ttaZ/jFmKukPOtXm/po1d2epvOB/7c2 gtQJE3/wO4LdVrPhEQRA4CqF0OEpDtO/Lm3Fc5YtIY5+L8uYdOicLLpJvbpopBlR s0JnZ98HTSAz2CSM3bFTCMFfc9iGqfte6KfDeBeNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU8pUQC+Pfy3okbtipmAndxB1cdIIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQ2YzlmODUwLTNhOWYtNDJmZC05NDNmLThhZWRiYjRkZTQzMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAINIcwwDQYJKoZIhvcNAQELBQADggEBAFKSD4yqkoL7wEGVeBQ8ZJDesIXA p4mp4G2unxgPs67001VydnPdJX3KXZFJKN2nqC7y8d1IICkyS1B7RTwkUhPBqr3I inIXszJ/vL3nC4mQ1c3PyPSeuWDKOVpj9ngCDvbW+aVI4XgOHRN8fUKkoy/YkHt5 zWmRyrKzXjYVy0E+Guji7cG4lHL1CBmPsZjGpqrztCoKSi1CiTXcZs+qweyer7yZ tfvFi6sIlL/pxGAGHqxg3KwKoklNjmuR49E5YSookSFgQTuZqiIRNfGp7nB6xrA0 GiDioFdRLUrLyiH+dN10uxa8SoLrkf9exw0OjpMtrvnrwFkftJXr2nd6LKg= -----END CERTIFICATE-----Generated at Fri Oct 17 23:58:22 2025 by rpki-client