$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a88fe76c-2317-4a11-878a-4268247d3429.roa File: a88fe76c-2317-4a11-878a-4268247d3429.roa (raw, json) Hash identifier: K1KM6FCIhML0Tbyng2iG3E2Uxtva6WUMTFBJwQgLmnM= Subject key identifier: 2B:75:A3:47:8A:84:A0:55:E2:47:87:5E:DA:5C:F7:CF:12:45:51:D1 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 286A2E43D8624E1FCFF3E11FDA1917DA96AAB20A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a88fe76c-2317-4a11-878a-4268247d3429.roa Signing time: Wed 24 Sep 2025 17:51:30 +0000 ROA not before: Wed 24 Sep 2025 17:51:30 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.33.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:6a:2e:43:d8:62:4e:1f:cf:f3:e1:1f:da:19:17:da:96:aa:b2:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 17:51:30 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=80189a6b39c9214b91dab7a857cf5b35780bff4844688a9716370204e0beb22a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7b:2c:48:d2:c6:1e:57:e7:ab:92:33:1c:fb: 33:46:ff:62:ee:a9:de:04:c9:fc:b9:36:08:65:e7: 7e:dd:31:4b:74:6a:0b:ad:eb:c7:7f:8b:a2:e7:c0: 6a:2b:76:8b:ca:ff:f0:84:9b:27:e0:ed:89:07:85: 6d:3f:b7:09:c8:80:fa:67:34:8a:18:54:0b:97:21: 8d:20:00:91:7c:5a:ca:a8:87:0c:0a:31:98:bb:f1: 33:2a:c9:ea:45:8a:2e:4f:fb:4e:2a:e5:6c:58:7f: b3:dc:f6:e3:82:66:8d:68:b5:f5:81:1b:71:ff:42: e2:92:1b:3f:38:b2:b0:ed:e6:be:79:d4:fe:90:45: f5:6f:84:97:32:5f:57:97:bf:62:db:c5:28:97:56: a2:a6:27:71:e1:c8:5f:7d:a9:45:83:ac:85:09:ed: 77:0b:c9:1c:12:ad:76:e4:f5:99:f7:9e:67:c9:bb: e8:13:e0:47:ec:02:31:3c:4a:ab:3b:36:57:5b:14: f1:5b:6b:2b:b3:b2:4d:96:db:10:8d:ad:a1:9c:ea: 28:7b:f9:a4:c5:1a:b7:b8:18:ad:1a:13:1c:1d:18: 9a:f8:1d:93:d6:81:fa:35:44:39:44:68:2f:e9:68: 08:34:88:1b:d9:63:bb:50:30:6f:a1:93:0f:bd:fc: 97:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:75:A3:47:8A:84:A0:55:E2:47:87:5E:DA:5C:F7:CF:12:45:51:D1 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a88fe76c-2317-4a11-878a-4268247d3429.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.33.76.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:a9:89:e4:df:2a:84:35:3f:5f:73:f9:e3:a4:b7:29:d3:e0: d1:38:05:6f:2e:8c:cf:2b:5f:7d:35:98:d5:29:87:1e:dd:3e: ac:7d:0e:0b:21:43:15:ee:ca:76:59:21:b3:b4:c5:7f:69:4a: 23:5b:ca:90:5b:39:bf:ea:dc:05:2f:05:98:34:ac:2f:ea:d9: 48:73:b0:5b:21:38:54:e0:44:c8:62:13:3e:4f:a4:77:e4:a5: cc:85:91:fb:ef:42:ff:c5:63:4e:9a:af:2b:73:35:cf:b4:7e: 02:f2:5b:ef:2c:fc:8d:e5:0a:40:63:94:dc:4d:46:86:e8:5c: 17:42:3e:44:1e:95:8c:a6:4a:6f:08:03:1c:ba:78:14:7c:80: c0:04:0e:1e:e0:f7:98:ef:be:3c:9d:a9:ae:aa:3c:c7:91:17: 1c:7b:85:18:a3:57:71:29:e0:55:fd:34:ae:6d:e4:c4:27:4d: 9b:b2:39:48:2a:1b:4c:38:4d:d9:a5:67:45:23:f0:c9:92:06: de:c4:d5:09:19:38:3d:e8:1f:5b:fc:d8:23:f7:a6:f4:af:72: 33:ce:d8:9d:f8:6d:1b:e8:1f:d3:91:a6:cb:19:46:a6:8a:6a: c8:52:75:f8:c0:f0:c8:4e:d2:3d:40:f4:5d:cd:9c:2e:e8:37: d6:c8:e9:b5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKGouQ9hiTh/P8+Ef2hkX2paqsgowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MTc1MTMwWhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A4MDE4OWE2YjM5YzkyMTRiOTFkYWI3YTg1N2NmNWIzNTc4 MGJmZjQ4NDQ2ODhhOTcxNjM3MDIwNGUwYmViMjJhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqeyxI0sYeV+erkjMc+zNG/2Luqd4Eyfy5Nghl537dMUt0 agut68d/i6LnwGordovK//CEmyfg7YkHhW0/twnIgPpnNIoYVAuXIY0gAJF8Wsqo hwwKMZi78TMqyepFii5P+04q5WxYf7Pc9uOCZo1otfWBG3H/QuKSGz84srDt5r55 1P6QRfVvhJcyX1eXv2LbxSiXVqKmJ3HhyF99qUWDrIUJ7XcLyRwSrXbk9Zn3nmfJ u+gT4EfsAjE8Sqs7NldbFPFbayuzsk2W2xCNraGc6ih7+aTFGre4GK0aExwdGJr4 HZPWgfo1RDlEaC/paAg0iBvZY7tQMG+hkw+9/Jd5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUK3WjR4qEoFXiR4de2lz3zxJFUdEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2E4OGZlNzZjLTIzMTctNGExMS04NzhhLTQyNjgyNDdkMzQyOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAANIUwwDQYJKoZIhvcNAQELBQADggEBAEupieTfKoQ1P19z+eOktynT4NE4 BW8ujM8rX301mNUphx7dPqx9DgshQxXuynZZIbO0xX9pSiNbypBbOb/q3AUvBZg0 rC/q2UhzsFshOFTgRMhiEz5PpHfkpcyFkfvvQv/FY06arytzNc+0fgLyW+8s/I3l CkBjlNxNRoboXBdCPkQelYymSm8IAxy6eBR8gMAEDh7g95jvvjydqa6qPMeRFxx7 hRijV3Ep4FX9NK5t5MQnTZuyOUgqG0w4TdmlZ0Uj8MmSBt7E1QkZOD3oH1v82CP3 pvSvcjPO2J34bRvoH9ORpssZRqaKashSdfjA8MhO0j1A9F3NnC7oN9bI6bU= -----END CERTIFICATE-----Generated at Fri Oct 17 22:02:15 2025 by rpki-client