$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e6693766-6434-4ae5-bacd-874a250d2e45.roa File: e6693766-6434-4ae5-bacd-874a250d2e45.roa (raw, json) Hash identifier: n1burdMA4QD5UDecPeDSBYiIHwLFTSBTNl0Jezm8pGc= Subject key identifier: 70:1A:63:7A:96:C9:86:0B:05:21:5F:FE:CB:F1:87:F9:F7:A0:8A:90 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 607991D2E3ADD55C7C29D328BE6323D9EAF3CAD8 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e6693766-6434-4ae5-bacd-874a250d2e45.roa Signing time: Fri 31 Oct 2025 20:07:07 +0000 ROA not before: Fri 31 Oct 2025 20:07:07 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.33.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:79:91:d2:e3:ad:d5:5c:7c:29:d3:28:be:63:23:d9:ea:f3:ca:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 31 20:07:07 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=4d529a77451b2f6329800ff1b7c684f1fed43031ae57fbf6f70ea21f83bb7fe2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2d:e1:6c:1e:75:ff:ee:71:4c:a0:6c:5c:1f: 34:35:6c:c1:e0:40:03:25:f0:73:6c:c7:28:2d:99: a9:98:99:18:06:f8:d7:fa:f5:fd:e3:6e:6c:e0:bb: f8:7f:eb:8e:29:db:fb:88:24:3e:c3:37:22:4d:55: 29:84:15:4d:81:05:13:fc:d8:a2:10:3f:c1:ce:50: 10:51:1e:ce:5c:73:c2:ea:ca:82:57:fa:18:07:ca: a2:e2:0d:ad:0c:2b:cc:c8:9a:a9:6e:83:d9:88:d6: e6:3e:42:ce:eb:df:85:42:6f:e4:1e:e2:1c:5f:80: a3:e4:d9:f3:bf:b4:f8:95:00:e7:4a:9c:3c:b4:07: e7:08:d5:e2:34:98:eb:e0:bd:0f:f7:4d:6f:a4:48: 17:cd:ff:39:37:7a:66:8e:12:e8:bf:e0:0e:0c:78: ec:7f:8f:9e:1a:4f:65:cd:3c:8b:86:63:0b:16:8f: 7a:77:13:cd:07:3b:11:11:8f:eb:85:14:51:b1:1a: e2:39:b6:ce:11:8f:ee:e6:2c:a2:e6:91:51:1c:dd: d8:8a:ac:f0:b7:e1:52:96:b5:88:83:33:d4:d7:8b: db:3b:94:11:04:08:ac:c3:f0:bc:28:54:20:a7:ae: e7:83:49:9e:4f:b9:5b:9e:25:db:41:18:ad:9b:e3: c0:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:1A:63:7A:96:C9:86:0B:05:21:5F:FE:CB:F1:87:F9:F7:A0:8A:90 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e6693766-6434-4ae5-bacd-874a250d2e45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.33.128.0/20 Signature Algorithm: sha256WithRSAEncryption 95:ed:eb:71:1b:52:e7:f9:b5:4d:ce:9a:b0:22:f5:69:24:af: a2:6a:8c:42:61:5a:44:e7:7e:b6:36:f8:02:39:dc:3f:22:10: 07:f6:93:ad:fe:6c:5e:4d:b1:b4:10:91:37:4e:7f:cc:04:1a: 07:1a:92:dd:b4:72:c5:95:af:37:a6:39:97:17:10:71:20:3c: 7b:72:27:c6:0d:20:0c:7f:c8:66:ab:3e:ed:7d:14:3b:8c:b1: 7a:fd:59:45:06:02:5b:21:52:db:69:ec:4e:57:62:20:e5:68: e8:d1:f4:5b:7e:9a:77:bc:ab:83:70:1f:68:c9:f5:92:5e:05: b9:68:d2:cb:78:4b:3a:f2:3f:c8:bf:ae:50:a6:7a:0c:69:6b: b9:51:85:26:45:08:b0:a3:16:f1:80:53:31:f6:59:9b:74:c3: da:0c:23:f0:db:97:d5:af:b6:ea:7f:fa:12:df:f6:55:0d:ca: be:98:f0:68:6d:2d:75:de:30:34:24:c1:21:bc:2b:cd:6d:b2: 95:6b:0c:4f:df:82:c7:1a:c4:51:13:7a:72:d5:5a:79:9c:1c: 2c:0c:ca:ed:8f:8b:cc:d1:20:23:63:03:cf:a3:c8:83:e8:19: d4:17:0c:41:18:3b:cc:de:34:bf:93:f8:e3:dd:e1:78:7c:a2: 4a:f7:22:ae -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYHmR0uOt1Vx8KdMovmMj2erzytgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDMxMjAwNzA3WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZDUyOWE3NzQ1MWIyZjYzMjk4MDBmZjFiN2M2ODRmMWZl ZDQzMDMxYWU1N2ZiZjZmNzBlYTIxZjgzYmI3ZmUyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0LeFsHnX/7nFMoGxcHzQ1bMHgQAMl8HNsxygtmamYmRgG +Nf69f3jbmzgu/h/644p2/uIJD7DNyJNVSmEFU2BBRP82KIQP8HOUBBRHs5cc8Lq yoJX+hgHyqLiDa0MK8zImqlug9mI1uY+Qs7r34VCb+Qe4hxfgKPk2fO/tPiVAOdK nDy0B+cI1eI0mOvgvQ/3TW+kSBfN/zk3emaOEui/4A4MeOx/j54aT2XNPIuGYwsW j3p3E80HOxERj+uFFFGxGuI5ts4Rj+7mLKLmkVEc3diKrPC34VKWtYiDM9TXi9s7 lBEECKzD8LwoVCCnrueDSZ5PuVueJdtBGK2b48DTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUcBpjepbJhgsFIV/+y/GH+fegipAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2U2NjkzNzY2LTY0MzQtNGFlNS1iYWNkLTg3NGEyNTBkMmU0NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQDIYAwDQYJKoZIhvcNAQELBQADggEBAJXt63EbUuf5tU3OmrAi9Wkkr6Jq jEJhWkTnfrY2+AI53D8iEAf2k63+bF5NsbQQkTdOf8wEGgcakt20csWVrzemOZcX EHEgPHtyJ8YNIAx/yGarPu19FDuMsXr9WUUGAlshUttp7E5XYiDlaOjR9Ft+mne8 q4NwH2jJ9ZJeBblo0st4SzryP8i/rlCmegxpa7lRhSZFCLCjFvGAUzH2WZt0w9oM I/Dbl9Wvtup/+hLf9lUNyr6Y8GhtLXXeMDQkwSG8K81tspVrDE/fgscaxFETenLV WnmcHCwMyu2Pi8zRICNjA8+jyIPoGdQXDEEYO8zeNL+T+OPd4Xh8okr3Iq4= -----END CERTIFICATE-----Generated at Wed Nov 5 15:20:17 2025 by rpki-client