$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8f96cc8e-ff89-40d6-9460-a1ac81a47401.roa File: 8f96cc8e-ff89-40d6-9460-a1ac81a47401.roa (raw, json) Hash identifier: nGkDdR+6sOSBiqWOMrWJNUc+Y1Ph+ryMiqrX0tBYPLM= Subject key identifier: A8:D6:A1:D4:CC:31:93:64:27:65:74:E5:70:C1:89:90:78:4A:0A:47 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 62DF30982866BCE4A554378AFF3548ED633DA706 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8f96cc8e-ff89-40d6-9460-a1ac81a47401.roa Signing time: Wed 24 Sep 2025 17:51:55 +0000 ROA not before: Wed 24 Sep 2025 17:51:55 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.33.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:df:30:98:28:66:bc:e4:a5:54:37:8a:ff:35:48:ed:63:3d:a7:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 17:51:55 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=0419c81f8246eaf2418f37a9c1f7e8acf8942a6dff42188279dacc0011c86a0c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f9:d3:eb:69:cb:75:09:0a:b5:98:85:80:b6: 78:4d:0e:9f:5b:7f:66:45:3e:6c:8b:1f:9a:22:74: cb:25:65:6e:23:8d:e3:31:e3:f5:c4:ae:16:ba:38: b6:ac:27:32:2d:5c:8f:8f:a9:00:7a:c0:6c:f0:20: 8d:c4:47:08:39:88:fb:2c:71:69:d7:ba:5d:29:c6: fc:cb:9c:17:5b:80:12:8f:8a:90:88:46:8b:78:13: fb:1e:45:2a:40:08:78:bc:b1:8e:33:6d:47:b0:f9: 49:a1:9c:dd:86:8b:8b:24:61:e2:98:dc:d1:bf:31: 29:c3:95:6d:23:e7:27:90:f5:ba:f6:8e:c2:51:77: d5:15:53:0a:64:dc:ab:29:63:df:bf:47:d6:64:84: 9e:47:f7:24:5f:f9:07:28:b1:88:7f:ff:91:b0:51: 54:24:fb:89:40:8a:92:20:55:ec:af:f9:eb:2c:75: 34:d9:53:58:24:c7:7e:c6:07:fe:7b:45:53:e8:fc: b9:18:b6:0b:59:44:ab:9c:f8:04:b2:5e:3f:fb:8f: b9:8e:10:12:67:72:2e:b2:3f:ff:2e:f5:9b:35:e5: b2:f7:aa:05:13:0a:30:55:82:70:48:7e:f9:50:60: c0:e5:f5:93:dc:37:14:db:95:40:5e:ee:95:bc:a6: 1c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:D6:A1:D4:CC:31:93:64:27:65:74:E5:70:C1:89:90:78:4A:0A:47 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8f96cc8e-ff89-40d6-9460-a1ac81a47401.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.33.96.0/24 Signature Algorithm: sha256WithRSAEncryption 97:c2:22:9f:a3:76:29:6b:1c:44:47:13:d5:c2:85:86:14:11: 46:ff:42:2d:89:a9:0b:42:18:06:ef:b6:b8:3d:d7:ff:7f:10: 6b:db:5f:36:20:dd:ca:1a:fe:1f:87:73:be:a6:a7:b2:18:e4: 0f:d0:00:06:67:ff:9a:59:97:a1:3f:31:fd:38:8c:86:71:99: b0:5f:06:fc:2e:7c:87:cf:22:db:27:07:e7:a1:fc:bb:a8:50: a8:81:39:60:73:d2:77:bc:83:2a:f8:c5:a9:d2:75:65:fc:1e: 55:dc:53:ce:7c:1f:dd:89:5e:4d:59:5a:18:77:36:c7:c8:a8: e1:64:b2:26:c4:22:16:54:24:20:04:13:fc:53:f3:35:c0:54: 61:cb:8d:ed:72:6b:43:35:5c:c1:29:55:24:60:63:97:31:02: 8f:7c:d9:bb:85:c2:62:7c:11:80:70:b9:11:44:1a:55:2e:35: 7b:cf:5d:2d:32:d8:f0:eb:60:cc:68:5d:63:6a:0a:4c:90:e5: 15:1a:11:b6:bd:3d:90:64:ef:3f:e1:fa:97:70:5a:18:c5:01: e2:a8:59:be:41:57:54:76:f4:56:b7:53:4e:54:15:cb:56:d0: e5:f2:46:2e:2e:d3:6e:ee:47:1d:34:2d:c1:13:44:89:b1:30: b1:e1:de:3c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYt8wmChmvOSlVDeK/zVI7WM9pwYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MTc1MTU1WhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0AwNDE5YzgxZjgyNDZlYWYyNDE4ZjM3YTljMWY3ZThhY2Y4 OTQyYTZkZmY0MjE4ODI3OWRhY2MwMDExYzg2YTBjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1+dPract1CQq1mIWAtnhNDp9bf2ZFPmyLH5oidMslZW4j jeMx4/XErha6OLasJzItXI+PqQB6wGzwII3ERwg5iPsscWnXul0pxvzLnBdbgBKP ipCIRot4E/seRSpACHi8sY4zbUew+UmhnN2Gi4skYeKY3NG/MSnDlW0j5yeQ9br2 jsJRd9UVUwpk3KspY9+/R9ZkhJ5H9yRf+QcosYh//5GwUVQk+4lAipIgVeyv+ess dTTZU1gkx37GB/57RVPo/LkYtgtZRKuc+ASyXj/7j7mOEBJnci6yP/8u9Zs15bL3 qgUTCjBVgnBIfvlQYMDl9ZPcNxTblUBe7pW8phwLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUqNah1Mwxk2QnZXTlcMGJkHhKCkcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzhmOTZjYzhlLWZmODktNDBkNi05NDYwLWExYWM4MWE0NzQwMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAANIWAwDQYJKoZIhvcNAQELBQADggEBAJfCIp+jdilrHERHE9XChYYUEUb/ Qi2JqQtCGAbvtrg91/9/EGvbXzYg3coa/h+Hc76mp7IY5A/QAAZn/5pZl6E/Mf04 jIZxmbBfBvwufIfPItsnB+eh/LuoUKiBOWBz0ne8gyr4xanSdWX8HlXcU858H92J Xk1ZWhh3NsfIqOFksibEIhZUJCAEE/xT8zXAVGHLje1ya0M1XMEpVSRgY5cxAo98 2buFwmJ8EYBwuRFEGlUuNXvPXS0y2PDrYMxoXWNqCkyQ5RUaEba9PZBk7z/h+pdw WhjFAeKoWb5BV1R29Fa3U05UFctW0OXyRi4u027uRx00LcETRImxMLHh3jw= -----END CERTIFICATE-----Generated at Fri Oct 17 23:47:55 2025 by rpki-client