$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/51177817-543a-4c64-b3cf-3e73c28e07b5.roa File: 51177817-543a-4c64-b3cf-3e73c28e07b5.roa (raw, json) Hash identifier: KtIOnZMeQR51KSEpSdoLMVbV/oQNjXJ1YV2z58j3GFA= Subject key identifier: 97:6D:2C:37:79:1F:40:9B:86:D8:07:20:96:05:FD:81:38:78:C5:2F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 13CEBFD92FDB959F0DE05AAED3E21521501C32C1 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/51177817-543a-4c64-b3cf-3e73c28e07b5.roa Signing time: Wed 24 Sep 2025 17:46:56 +0000 ROA not before: Wed 24 Sep 2025 17:46:56 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.33.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:ce:bf:d9:2f:db:95:9f:0d:e0:5a:ae:d3:e2:15:21:50:1c:32:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 17:46:56 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=32853a9e4906a85fd8c68e31feec4ccee97be8a391af6558caa1af0fe25b7d72, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ae:e0:f1:91:81:da:23:f9:85:a3:27:cf:f1: 50:e0:d7:7a:a2:3f:e5:e5:ab:26:61:37:ad:24:c6: d7:97:af:64:08:d1:f4:99:cb:d9:78:7a:15:1e:ef: 20:4d:4e:4a:fe:f0:da:dc:89:40:69:91:85:19:78: 30:5a:50:d9:7f:a3:c6:00:94:7c:83:0b:2c:0e:ab: 42:c5:90:c2:73:cf:6b:83:bf:a3:55:d1:0b:a8:70: 2c:62:b9:35:ac:b0:7a:dc:cb:b2:44:20:13:57:24: 75:e2:6c:8c:47:f3:bb:7f:ab:aa:56:98:86:87:83: 17:22:65:29:f0:52:7e:f8:a8:35:21:96:8a:af:90: b3:a6:0b:bd:6d:91:d3:73:19:12:98:77:23:55:0b: 41:d1:a5:f1:c8:c5:fb:5b:b5:a9:46:23:dc:4a:80: f4:c4:55:2e:31:9a:32:34:89:51:2a:f6:30:be:7b: 85:e5:02:06:b5:fe:64:c2:09:a4:23:a8:63:7a:f8: fa:fa:8d:7f:ca:4d:80:ea:02:cf:e9:e3:a0:22:43: d1:b1:5e:be:bc:79:15:80:a4:79:d0:df:70:0d:6d: c7:e1:8b:9c:4b:03:ed:cf:3d:33:f4:e8:d6:04:2e: be:5a:49:01:90:50:d7:53:29:74:9a:bc:01:82:2a: 5d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:6D:2C:37:79:1F:40:9B:86:D8:07:20:96:05:FD:81:38:78:C5:2F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/51177817-543a-4c64-b3cf-3e73c28e07b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.33.51.0/24 Signature Algorithm: sha256WithRSAEncryption a8:aa:29:be:e0:8c:c3:83:b3:bc:6f:fc:c7:da:f7:a9:ce:c0: 68:fc:03:40:f7:fc:60:e3:60:09:22:c3:21:f6:9e:26:e1:f9: 0e:57:0f:8b:c4:e9:87:e9:78:8d:00:61:ec:b0:c3:13:4b:4e: 2a:1e:14:a1:91:63:f9:a2:3f:42:3a:a8:48:66:c0:45:38:ec: 8d:92:51:18:65:3f:19:02:e5:68:96:e5:05:ea:d8:3f:23:c8: d7:0e:bf:07:cc:a4:a4:77:27:5a:ab:19:e9:80:3e:0a:75:15: d5:1d:b4:47:1f:79:3d:bd:52:29:96:82:73:f0:8b:3e:dc:81: 43:17:62:4d:1d:88:4f:76:cc:13:93:8b:5c:af:96:ae:55:5f: 6f:77:cd:bf:a0:16:d1:cb:70:2d:38:8a:15:20:c0:db:a3:61: ff:09:6a:22:3d:ce:a4:76:d1:17:02:5c:6b:a8:a3:75:04:81: f8:b8:21:ca:d2:47:b9:79:dc:da:ab:09:80:f3:4a:e4:90:72: 53:af:4f:9a:bf:0e:b4:9f:95:be:eb:ef:f5:6f:b1:6b:42:f6: 25:66:75:7c:03:d9:70:1e:3f:d7:b5:3a:dd:01:21:2b:5b:4b: c6:09:c1:2a:8e:16:3c:17:63:09:fa:39:f3:d6:f4:28:19:e8: 3f:0b:1d:f6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUE86/2S/blZ8N4Fqu0+IVIVAcMsEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MTc0NjU2WhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0AzMjg1M2E5ZTQ5MDZhODVmZDhjNjhlMzFmZWVjNGNjZWU5 N2JlOGEzOTFhZjY1NThjYWExYWYwZmUyNWI3ZDcyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDIruDxkYHaI/mFoyfP8VDg13qiP+XlqyZhN60kxteXr2QI 0fSZy9l4ehUe7yBNTkr+8NrciUBpkYUZeDBaUNl/o8YAlHyDCywOq0LFkMJzz2uD v6NV0QuocCxiuTWssHrcy7JEIBNXJHXibIxH87t/q6pWmIaHgxciZSnwUn74qDUh loqvkLOmC71tkdNzGRKYdyNVC0HRpfHIxftbtalGI9xKgPTEVS4xmjI0iVEq9jC+ e4XlAga1/mTCCaQjqGN6+Pr6jX/KTYDqAs/p46AiQ9GxXr68eRWApHnQ33ANbcfh i5xLA+3PPTP06NYELr5aSQGQUNdTKXSavAGCKl2bAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUl20sN3kfQJuG2AcglgX9gTh4xS8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzUxMTc3ODE3LTU0M2EtNGM2NC1iM2NmLTNlNzNjMjhlMDdiNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAANITMwDQYJKoZIhvcNAQELBQADggEBAKiqKb7gjMODs7xv/Mfa96nOwGj8 A0D3/GDjYAkiwyH2nibh+Q5XD4vE6YfpeI0AYeywwxNLTioeFKGRY/miP0I6qEhm wEU47I2SURhlPxkC5WiW5QXq2D8jyNcOvwfMpKR3J1qrGemAPgp1FdUdtEcfeT29 UimWgnPwiz7cgUMXYk0diE92zBOTi1yvlq5VX293zb+gFtHLcC04ihUgwNujYf8J aiI9zqR20RcCXGuoo3UEgfi4IcrSR7l53NqrCYDzSuSQclOvT5q/DrSflb7r7/Vv sWtC9iVmdXwD2XAeP9e1Ot0BIStbS8YJwSqOFjwXYwn6OfPW9CgZ6D8LHfY= -----END CERTIFICATE-----Generated at Sat Oct 18 05:14:20 2025 by rpki-client