$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8bf3b82c-82cd-417d-b9d2-008a414cd505.roa File: 8bf3b82c-82cd-417d-b9d2-008a414cd505.roa (raw, json) Hash identifier: B+QRyaoN8lwnO3YovBX6vaFapfjdBwN2eDuCzDAQgtg= Subject key identifier: A4:09:66:42:06:FE:F8:1C:89:1E:9A:28:DC:CB:2B:28:3F:2A:9F:10 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0BEB468A9DD30205A38FF83D04472174F9EDF9DA Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8bf3b82c-82cd-417d-b9d2-008a414cd505.roa Signing time: Wed 24 Sep 2025 17:38:51 +0000 ROA not before: Wed 24 Sep 2025 17:38:51 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.33.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:eb:46:8a:9d:d3:02:05:a3:8f:f8:3d:04:47:21:74:f9:ed:f9:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 17:38:51 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=f52b81f1cc524e335ef6d437bd2d569ffe367a49d31904f1c5939f6856755b83, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:58:62:a8:f6:34:4c:0b:95:88:73:3b:3b:ab: 5b:af:47:41:76:84:3d:a9:eb:07:4d:84:1b:dd:6a: b0:de:6d:d1:09:bb:14:52:d7:c0:c8:10:b3:de:68: fb:73:8d:cc:0c:bc:cf:46:2f:10:20:dd:bb:2b:b6: e5:6b:17:26:e9:96:d6:1e:61:00:89:de:87:8f:a6: f4:3e:56:95:b1:06:cc:0c:3f:28:72:2b:81:02:e3: 38:32:7c:f4:5c:71:fc:3c:1f:a5:1f:41:b2:ae:0b: af:7f:ef:1f:9d:52:4a:68:ed:66:17:af:23:0b:a9: 90:f3:ce:1a:66:ba:6c:e0:41:61:b8:52:c7:db:7a: 6c:4b:89:a7:45:88:9a:72:19:3a:ee:a3:86:93:7f: 81:57:81:f4:cc:3a:64:9d:dd:ee:dd:4b:50:1a:1a: e0:d0:8d:a9:c3:d0:84:c6:61:78:32:f0:a5:dc:af: 2e:27:b3:01:01:81:5b:48:07:e9:a1:df:f9:a8:2f: 7c:47:e6:1f:02:82:82:63:e0:d3:0e:cd:84:50:0a: 88:38:23:05:ee:8b:0a:c6:80:2b:3b:e6:26:ab:8b: d2:4b:21:fa:17:d4:af:12:fc:08:f0:3d:e9:94:04: 6f:c5:87:34:9b:ff:0a:a9:13:fa:f5:56:3c:5b:45: 93:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:09:66:42:06:FE:F8:1C:89:1E:9A:28:DC:CB:2B:28:3F:2A:9F:10 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8bf3b82c-82cd-417d-b9d2-008a414cd505.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.33.142.0/24 Signature Algorithm: sha256WithRSAEncryption 95:22:34:53:ed:85:85:06:0a:2d:e7:07:b3:c1:39:ed:91:ef: de:1c:7c:04:f3:2e:68:02:35:04:76:cd:f2:9a:14:fa:90:2b: 3c:31:14:7d:e6:b6:6a:9c:d6:bf:cd:0f:69:e9:b3:ee:a2:dc: 6c:85:9f:24:a7:76:11:c8:c3:8a:7a:fc:fb:b6:91:da:bf:47: 8a:4e:6b:bc:70:29:81:97:c7:c3:a8:01:1b:68:2a:59:36:d5: f5:87:8e:30:92:01:23:33:f8:82:1f:60:64:73:f2:a2:86:62: f1:ea:1d:91:a6:ec:da:52:b5:17:71:97:a7:1b:86:00:7d:b1: 96:46:c3:29:c3:9f:86:d4:2d:30:11:06:ae:79:ad:88:d6:da: c2:95:b8:a0:b9:43:8c:8e:05:4b:10:f1:97:52:ed:f5:56:74: b8:aa:a3:00:42:95:bc:9d:cc:8a:99:8a:12:7a:8e:ae:42:1f: 6f:3f:66:6c:9b:fa:7b:77:d0:d2:da:90:ce:fa:54:50:7c:2d: 2d:34:b2:e1:1b:55:83:61:90:1d:a2:fa:a5:9f:fb:56:83:89: 21:85:46:7a:96:65:ec:89:8b:30:ed:b4:29:aa:f7:b1:f9:15: 14:5b:64:f0:2f:e9:60:49:72:cc:ec:84:91:10:19:8c:b3:ff: e7:5c:a8:ec -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUC+tGip3TAgWjj/g9BEchdPnt+dowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MTczODUxWhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BmNTJiODFmMWNjNTI0ZTMzNWVmNmQ0MzdiZDJkNTY5ZmZl MzY3YTQ5ZDMxOTA0ZjFjNTkzOWY2ODU2NzU1YjgzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDnWGKo9jRMC5WIczs7q1uvR0F2hD2p6wdNhBvdarDebdEJ uxRS18DIELPeaPtzjcwMvM9GLxAg3bsrtuVrFybpltYeYQCJ3oePpvQ+VpWxBswM PyhyK4EC4zgyfPRccfw8H6UfQbKuC69/7x+dUkpo7WYXryMLqZDzzhpmumzgQWG4 UsfbemxLiadFiJpyGTruo4aTf4FXgfTMOmSd3e7dS1AaGuDQjanD0ITGYXgy8KXc ry4nswEBgVtIB+mh3/moL3xH5h8CgoJj4NMOzYRQCog4IwXuiwrGgCs75iari9JL IfoX1K8S/AjwPemUBG/FhzSb/wqpE/r1VjxbRZNLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUpAlmQgb++ByJHpoo3MsrKD8qnxAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzhiZjNiODJjLTgyY2QtNDE3ZC1iOWQyLTAwOGE0MTRjZDUwNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAANIY4wDQYJKoZIhvcNAQELBQADggEBAJUiNFPthYUGCi3nB7PBOe2R794c fATzLmgCNQR2zfKaFPqQKzwxFH3mtmqc1r/ND2nps+6i3GyFnySndhHIw4p6/Pu2 kdq/R4pOa7xwKYGXx8OoARtoKlk21fWHjjCSASMz+IIfYGRz8qKGYvHqHZGm7NpS tRdxl6cbhgB9sZZGwynDn4bULTARBq55rYjW2sKVuKC5Q4yOBUsQ8ZdS7fVWdLiq owBClbydzIqZihJ6jq5CH28/Zmyb+nt30NLakM76VFB8LS00suEbVYNhkB2i+qWf +1aDiSGFRnqWZeyJizDttCmq97H5FRRbZPAv6WBJcszshJEQGYyz/+dcqOw= -----END CERTIFICATE-----Generated at Sat Oct 18 02:19:18 2025 by rpki-client