$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/84c95445-4356-48ad-8746-aec9d9306a5b.roa File: 84c95445-4356-48ad-8746-aec9d9306a5b.roa (raw, json) Hash identifier: JaR8szUpwObixF3NEWxCwzG+LygsV3pe2/Tjit5/FeI= Subject key identifier: 58:09:05:83:53:A3:80:1C:D9:F5:B6:65:65:AF:38:5E:E0:B5:37:C9 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 159040B01FDAE0DF242F7559B2C3DA84CD77955D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/84c95445-4356-48ad-8746-aec9d9306a5b.roa Signing time: Wed 24 Sep 2025 18:14:57 +0000 ROA not before: Wed 24 Sep 2025 18:14:57 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.33.110.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:90:40:b0:1f:da:e0:df:24:2f:75:59:b2:c3:da:84:cd:77:95:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 18:14:57 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=35255473991102cd1da991bd64d86a3eb85e7f4c4c85575033930df7644e1890, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:02:bb:27:73:a6:65:32:96:3a:bf:d5:96:96: 10:c7:b4:51:56:f6:93:ee:66:b7:cf:47:93:4d:5c: b9:a4:a4:c4:09:57:d8:cd:d5:4d:4e:41:2e:05:5b: e7:2c:fc:6e:22:6b:38:c6:12:f5:73:82:f4:88:64: 9a:28:45:a6:9e:b7:5d:3a:2d:76:78:a0:d2:d3:7c: b2:14:40:95:32:6e:a3:6a:57:67:df:7b:49:c9:63: 63:fc:55:d9:d8:49:14:8c:bd:89:15:4d:9b:10:e7: 76:88:eb:60:e3:e6:d1:de:6c:63:c8:88:61:8a:44: 8e:1b:81:3f:df:18:ae:e2:65:e2:f8:43:9a:b9:b3: 51:9e:0f:a0:ab:9e:3c:15:9c:86:c6:36:27:91:cf: 38:2b:69:b5:67:30:82:e0:ee:5a:14:a8:bb:70:66: b1:df:85:67:05:27:64:a0:3c:78:93:96:18:bf:4f: 88:57:91:62:1f:72:79:04:aa:bc:f2:54:88:dc:46: c3:49:f5:e9:ce:49:ca:c8:20:3a:7d:09:d4:39:b4: 39:67:97:ed:4b:2a:c3:ae:7f:87:fd:2d:2e:01:f5: 6b:06:be:9e:e0:cf:da:1a:78:70:48:61:fe:bf:87: 8b:ab:4f:d5:8f:8c:39:1a:95:b1:44:73:d2:aa:d7: c4:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:09:05:83:53:A3:80:1C:D9:F5:B6:65:65:AF:38:5E:E0:B5:37:C9 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/84c95445-4356-48ad-8746-aec9d9306a5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.33.110.0/23 Signature Algorithm: sha256WithRSAEncryption 65:b7:8e:22:55:af:df:0c:15:cc:7b:42:6d:a5:ab:70:02:f8: f8:09:20:83:a4:06:33:b4:7c:8b:18:2d:ad:29:c8:9e:08:94: 9f:d8:ed:c4:33:47:22:7c:78:53:f9:dc:24:50:68:f2:31:3c: 78:d7:74:92:c5:bd:26:b3:cb:07:22:1b:e8:b9:ce:28:8e:da: c0:68:17:56:e5:ba:1b:30:d3:7b:3c:a7:63:89:fa:03:5e:f7: 0f:b2:d4:8c:36:1f:4b:36:3e:02:d2:93:58:5b:be:76:3a:f6: e9:e5:1a:4d:db:20:34:49:06:eb:06:fd:d1:a3:39:dc:01:78: eb:19:c8:6a:99:4a:88:3d:84:a8:1e:af:4f:87:e5:8e:18:08: 54:af:43:ee:f9:e7:73:d1:e3:df:c6:93:d6:75:f0:fa:1f:9a: f3:08:cf:8d:81:a7:8b:21:12:03:17:a0:02:78:9f:48:6d:93: c3:c9:64:47:a6:75:e0:f5:a1:86:7e:42:b5:6b:de:cf:18:06: fa:dd:08:12:02:ff:00:0f:1b:f0:3a:43:a4:75:fd:98:1e:17: 7c:20:da:47:e7:01:72:6b:95:8a:d9:ff:05:cf:fc:1d:c9:5d: 58:f2:60:9e:18:4b:c3:7e:3a:6f:2e:6d:fc:8c:dd:be:bf:35: f8:16:39:e4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFZBAsB/a4N8kL3VZssPahM13lV0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MTgxNDU3WhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0AzNTI1NTQ3Mzk5MTEwMmNkMWRhOTkxYmQ2NGQ4NmEzZWI4 NWU3ZjRjNGM4NTU3NTAzMzkzMGRmNzY0NGUxODkwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDYArsnc6ZlMpY6v9WWlhDHtFFW9pPuZrfPR5NNXLmkpMQJ V9jN1U1OQS4FW+cs/G4iazjGEvVzgvSIZJooRaaet106LXZ4oNLTfLIUQJUybqNq V2ffe0nJY2P8VdnYSRSMvYkVTZsQ53aI62Dj5tHebGPIiGGKRI4bgT/fGK7iZeL4 Q5q5s1GeD6CrnjwVnIbGNieRzzgrabVnMILg7loUqLtwZrHfhWcFJ2SgPHiTlhi/ T4hXkWIfcnkEqrzyVIjcRsNJ9enOScrIIDp9CdQ5tDlnl+1LKsOuf4f9LS4B9WsG vp7gz9oaeHBIYf6/h4urT9WPjDkalbFEc9Kq18Q9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUWAkFg1OjgBzZ9bZlZa84XuC1N8kwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg0Yzk1NDQ1LTQzNTYtNDhhZC04NzQ2LWFlYzlkOTMwNmE1Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAENIW4wDQYJKoZIhvcNAQELBQADggEBAGW3jiJVr98MFcx7Qm2lq3AC+PgJ IIOkBjO0fIsYLa0pyJ4IlJ/Y7cQzRyJ8eFP53CRQaPIxPHjXdJLFvSazywciG+i5 ziiO2sBoF1bluhsw03s8p2OJ+gNe9w+y1Iw2H0s2PgLSk1hbvnY69unlGk3bIDRJ BusG/dGjOdwBeOsZyGqZSog9hKger0+H5Y4YCFSvQ+7553PR49/Gk9Z18PofmvMI z42Bp4shEgMXoAJ4n0htk8PJZEemdeD1oYZ+QrVr3s8YBvrdCBIC/wAPG/A6Q6R1 /ZgeF3wg2kfnAXJrlYrZ/wXP/B3JXVjyYJ4YS8N+Om8ubfyM3b6/NfgWOeQ= -----END CERTIFICATE-----Generated at Fri Oct 17 23:54:16 2025 by rpki-client