$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/94980d0c-bbb9-4720-9082-573f9aaf0ef7.roa File: 94980d0c-bbb9-4720-9082-573f9aaf0ef7.roa (raw, json) Hash identifier: pEQz+5OeBOfd5FTyS9rWhmlgKvKb8aRFwQe+TQebwuU= Subject key identifier: FB:8A:7F:D9:26:62:DE:1D:51:0B:37:E4:CD:E1:9E:E3:5B:D3:7C:12 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 33F10A80AEDE1C69727E7E836928B4F791CE28D4 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/94980d0c-bbb9-4720-9082-573f9aaf0ef7.roa Signing time: Wed 24 Sep 2025 18:23:37 +0000 ROA not before: Wed 24 Sep 2025 18:23:37 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.33.8.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:f1:0a:80:ae:de:1c:69:72:7e:7e:83:69:28:b4:f7:91:ce:28:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 18:23:37 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=1b4d7f77b7b9753e870f19e613f0d4bb276e0510064adf6d42e0f8ead0330cec, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c4:87:5e:cc:45:8c:14:d8:91:3c:5c:d8:12: 3d:40:73:eb:3c:0a:39:bc:24:4b:d8:72:5a:92:18: 67:5c:51:02:2e:cc:8d:51:2f:88:f6:7f:7c:e2:2e: 7d:2e:73:30:52:d6:4c:86:3b:c5:8a:48:d3:48:5b: b4:2d:15:4f:47:47:f9:62:db:3f:7e:48:ff:e6:a2: 94:b1:17:73:a7:bd:22:13:9e:1a:81:49:ae:71:fc: 72:de:8a:77:32:ee:40:2d:f4:db:4c:95:c3:ef:b7: 28:1a:4b:2f:a1:31:fe:57:68:82:c7:94:81:56:71: de:51:f9:0a:47:3b:b5:ec:b0:74:bb:5f:b6:25:2f: 1e:54:c5:4e:dc:6b:5a:9c:41:a5:97:e3:d1:76:e2: 09:ed:79:9b:a2:4f:27:83:3e:45:58:bd:98:f4:ec: 14:fa:5a:9d:c6:04:52:da:20:37:f3:7a:6b:04:c7: c2:bd:d0:ef:76:15:99:14:bc:d5:86:c5:32:2f:00: da:bf:03:90:09:db:93:c7:8a:2a:d1:c0:b5:4e:d9: 6a:9e:e9:e6:80:cc:f1:d3:60:2e:7d:15:40:ef:df: 33:55:75:b3:87:43:dd:fe:ca:7f:1c:32:13:3a:b2: 0c:d0:7a:80:80:ec:ce:0c:ca:99:0d:9f:71:7e:85: 57:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:8A:7F:D9:26:62:DE:1D:51:0B:37:E4:CD:E1:9E:E3:5B:D3:7C:12 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/94980d0c-bbb9-4720-9082-573f9aaf0ef7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.33.8.0/23 Signature Algorithm: sha256WithRSAEncryption a1:8a:08:80:29:43:b1:67:a3:73:1d:cf:9c:38:89:dc:63:dd: 39:cf:37:e1:57:cb:34:59:91:83:9e:21:92:0c:47:82:65:50: 2f:92:7d:84:c3:e7:71:99:27:5f:e9:06:7f:a7:80:22:db:39: 51:86:c0:3e:99:fc:78:e2:7b:da:00:1b:46:dc:f5:85:0f:44: 7c:b8:d6:51:bb:8e:dc:3f:5f:ff:4e:21:11:19:de:8e:24:49: 07:fe:9e:1d:80:1e:ff:23:2a:b4:e2:33:57:5e:d0:e0:7c:08: 65:df:bd:a3:9c:b1:82:b1:25:f2:4e:64:c9:2f:60:5b:b5:44: 44:c0:25:7f:15:fd:40:65:0f:d3:52:ac:cf:bb:d6:63:c4:3c: a2:c8:1d:f0:e2:83:78:e3:be:77:e5:05:16:77:cd:e2:34:30: 60:cc:13:90:32:a9:ee:e5:71:d2:5b:96:dd:db:2e:9a:31:18: 22:b4:63:82:fd:f6:97:4a:ae:04:7a:39:60:22:cb:bb:e3:99: ae:3d:2c:31:7d:90:ab:3f:71:4c:75:e7:af:55:a4:5f:91:cd: dc:87:88:25:c2:64:f8:d4:d9:a2:4d:b9:77:29:5f:06:d6:6f: 04:20:c1:3e:dc:f2:3f:71:8e:e9:d5:a4:ca:e4:38:f8:ec:34: 5b:8a:01:d3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUM/EKgK7eHGlyfn6DaSi095HOKNQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MTgyMzM3WhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0AxYjRkN2Y3N2I3Yjk3NTNlODcwZjE5ZTYxM2YwZDRiYjI3 NmUwNTEwMDY0YWRmNmQ0MmUwZjhlYWQwMzMwY2VjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6xIdezEWMFNiRPFzYEj1Ac+s8Cjm8JEvYclqSGGdcUQIu zI1RL4j2f3ziLn0uczBS1kyGO8WKSNNIW7QtFU9HR/li2z9+SP/mopSxF3OnvSIT nhqBSa5x/HLeincy7kAt9NtMlcPvtygaSy+hMf5XaILHlIFWcd5R+QpHO7XssHS7 X7YlLx5UxU7ca1qcQaWX49F24gnteZuiTyeDPkVYvZj07BT6Wp3GBFLaIDfzemsE x8K90O92FZkUvNWGxTIvANq/A5AJ25PHiirRwLVO2Wqe6eaAzPHTYC59FUDv3zNV dbOHQ93+yn8cMhM6sgzQeoCA7M4MypkNn3F+hVezAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU+4p/2SZi3h1RCzfkzeGe41vTfBIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzk0OTgwZDBjLWJiYjktNDcyMC05MDgyLTU3M2Y5YWFmMGVmNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAENIQgwDQYJKoZIhvcNAQELBQADggEBAKGKCIApQ7Fno3Mdz5w4idxj3TnP N+FXyzRZkYOeIZIMR4JlUC+SfYTD53GZJ1/pBn+ngCLbOVGGwD6Z/Hjie9oAG0bc 9YUPRHy41lG7jtw/X/9OIREZ3o4kSQf+nh2AHv8jKrTiM1de0OB8CGXfvaOcsYKx JfJOZMkvYFu1RETAJX8V/UBlD9NSrM+71mPEPKLIHfDig3jjvnflBRZ3zeI0MGDM E5Ayqe7lcdJblt3bLpoxGCK0Y4L99pdKrgR6OWAiy7vjma49LDF9kKs/cUx1569V pF+RzdyHiCXCZPjU2aJNuXcpXwbWbwQgwT7c8j9xjunVpMrkOPjsNFuKAdM= -----END CERTIFICATE-----Generated at Fri Oct 17 23:50:20 2025 by rpki-client