$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/560f7e00-1ef7-4d39-a3f8-f2cf2ec398a3.roa File: 560f7e00-1ef7-4d39-a3f8-f2cf2ec398a3.roa (raw, json) Hash identifier: uhdHTm+OFbSeB4ahGnL4E0zY7jAFlAaW2K7LbBVilNM= Subject key identifier: 0E:E2:BE:FC:89:B3:3A:0D:B9:B9:A4:4F:19:86:83:D8:D0:0E:CF:99 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 20D12D16E5165467892BE35545518E25A061D076 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/560f7e00-1ef7-4d39-a3f8-f2cf2ec398a3.roa Signing time: Wed 24 Sep 2025 18:46:27 +0000 ROA not before: Wed 24 Sep 2025 18:46:27 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.33.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:d1:2d:16:e5:16:54:67:89:2b:e3:55:45:51:8e:25:a0:61:d0:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 18:46:27 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=81b1fa6942b8488aff3e8c3cba3d4337d4deaec162167c6ccdbdfe85da726a4c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ef:5b:3d:1c:12:cd:4b:5e:0f:f4:0a:c6:a9: 26:09:2e:69:01:80:86:26:49:28:70:9c:c6:6e:fe: c5:3c:03:e0:38:e1:06:46:d1:6d:dc:48:81:a3:0c: 97:99:1a:f8:d2:e9:41:ef:80:5a:7e:1e:0a:d8:8a: e0:d8:d3:0c:27:08:45:43:2a:cc:ab:bf:2f:40:9b: 97:be:5d:73:3b:bf:13:66:a0:91:0e:8d:04:00:ae: d0:ff:d6:ac:c5:96:30:5c:e9:74:45:a1:10:92:e4: d9:b0:93:a9:10:df:f8:06:8f:6a:14:cc:c5:86:33: f6:5c:92:ac:71:11:db:49:37:ff:c8:8b:84:94:e0: b3:38:42:f0:6d:fb:6f:b6:7b:c1:b7:4f:f2:34:33: 7b:e2:cb:e7:0f:d6:8f:f3:1d:2d:08:d2:e9:37:cd: 92:13:49:c6:12:b5:f0:12:4b:45:3c:47:dd:bb:a5: a6:79:06:03:99:1b:b5:7b:49:8c:5c:0a:d8:0c:39: 27:a0:fb:c5:59:1a:f1:5b:cd:22:91:75:b2:60:86: 9d:42:03:ed:dd:91:52:06:e7:3f:6f:8f:14:d2:cc: e5:03:aa:34:ff:9c:fb:27:4e:46:f6:a4:a7:cf:d1: 69:42:06:4d:df:b8:36:82:fa:e5:f5:fd:7d:55:58: 08:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:E2:BE:FC:89:B3:3A:0D:B9:B9:A4:4F:19:86:83:D8:D0:0E:CF:99 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/560f7e00-1ef7-4d39-a3f8-f2cf2ec398a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.33.120.0/21 Signature Algorithm: sha256WithRSAEncryption 2e:c6:8e:7f:3a:a2:eb:8f:cd:16:7f:8a:c1:c6:27:fc:c3:80: ab:70:ae:37:de:c9:4e:c4:7f:0e:c0:02:ac:03:1c:27:42:75: 5e:b1:7d:16:12:ac:fa:eb:8e:e6:f9:75:43:b7:e4:44:06:ff: 4c:b0:dd:8b:e3:bb:b3:96:5d:34:d2:5a:f1:5c:cf:67:83:36: d8:73:51:e0:29:7d:13:02:67:bc:fc:23:aa:3c:15:54:e7:c6: 14:49:ff:bc:ed:a2:9b:bd:d0:b3:22:d7:51:6b:8f:8e:20:52: bc:33:6c:a2:24:54:19:84:73:73:d1:e0:3d:8c:81:f2:94:9c: 7d:42:51:1d:0c:ec:f7:b6:fd:ca:d5:21:9f:d2:ff:e3:ea:5c: 03:b7:78:de:84:9d:b7:9c:99:32:2d:1c:aa:dc:52:eb:05:8f: 28:2a:e3:58:a2:74:1c:60:96:f6:9d:3a:df:5e:58:e2:44:01: ae:d6:0c:bc:db:d4:f3:2d:49:f5:83:bc:59:72:8c:5b:54:fe: 98:0b:19:53:15:f8:0f:7d:c6:d8:ac:79:ab:a7:46:90:4c:af: cb:a3:50:94:10:0d:ec:bd:74:a1:d2:03:77:35:17:0b:bf:c4: c9:17:aa:29:18:2b:d6:11:c6:44:fa:a2:68:f2:9d:56:66:55: 4a:e1:c7:28 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUINEtFuUWVGeJK+NVRVGOJaBh0HYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MTg0NjI3WhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A4MWIxZmE2OTQyYjg0ODhhZmYzZThjM2NiYTNkNDMzN2Q0 ZGVhZWMxNjIxNjdjNmNjZGJkZmU4NWRhNzI2YTRjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDc71s9HBLNS14P9ArGqSYJLmkBgIYmSShwnMZu/sU8A+A4 4QZG0W3cSIGjDJeZGvjS6UHvgFp+HgrYiuDY0wwnCEVDKsyrvy9Am5e+XXM7vxNm oJEOjQQArtD/1qzFljBc6XRFoRCS5Nmwk6kQ3/gGj2oUzMWGM/ZckqxxEdtJN//I i4SU4LM4QvBt+2+2e8G3T/I0M3viy+cP1o/zHS0I0uk3zZITScYStfASS0U8R927 paZ5BgOZG7V7SYxcCtgMOSeg+8VZGvFbzSKRdbJghp1CA+3dkVIG5z9vjxTSzOUD qjT/nPsnTkb2pKfP0WlCBk3fuDaC+uX1/X1VWAjZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUDuK+/ImzOg25uaRPGYaD2NAOz5kwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzU2MGY3ZTAwLTFlZjctNGQzOS1hM2Y4LWYyY2YyZWMzOThhMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMNIXgwDQYJKoZIhvcNAQELBQADggEBAC7Gjn86ouuPzRZ/isHGJ/zDgKtw rjfeyU7Efw7AAqwDHCdCdV6xfRYSrPrrjub5dUO35EQG/0yw3Yvju7OWXTTSWvFc z2eDNthzUeApfRMCZ7z8I6o8FVTnxhRJ/7ztopu90LMi11Frj44gUrwzbKIkVBmE c3PR4D2MgfKUnH1CUR0M7Pe2/crVIZ/S/+PqXAO3eN6EnbecmTItHKrcUusFjygq 41iidBxglvadOt9eWOJEAa7WDLzb1PMtSfWDvFlyjFtU/pgLGVMV+A99xtiseaun RpBMr8ujUJQQDey9dKHSA3c1Fwu/xMkXqikYK9YRxkT6omjynVZmVUrhxyg= -----END CERTIFICATE-----Generated at Fri Oct 17 22:02:00 2025 by rpki-client