$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1f30e476-0b09-4040-ad04-97a471e3ad7d.roa File: 1f30e476-0b09-4040-ad04-97a471e3ad7d.roa (raw, json) Hash identifier: 1cd0u4y7xZgKconGFw77w9/FYX7HCg2XgrpeUadlyi0= Subject key identifier: C4:7E:81:BA:A3:55:CC:04:B9:CC:F7:D2:97:07:68:6B:C8:E0:CA:50 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6AA0D735D30793184AEDE126EC4FD0D1BDFBEC63 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1f30e476-0b09-4040-ad04-97a471e3ad7d.roa Signing time: Mon 22 Sep 2025 16:37:26 +0000 ROA not before: Mon 22 Sep 2025 16:37:26 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.249.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:a0:d7:35:d3:07:93:18:4a:ed:e1:26:ec:4f:d0:d1:bd:fb:ec:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 16:37:26 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=b43a81c52b79b8e8e5bf9cf95ad6da1af6e15ff26930055b7c00be0e64af01b0, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:9c:fc:0f:5e:17:b6:e1:ab:be:9d:79:68:76: a5:37:78:08:63:7d:82:23:82:a4:4c:60:9e:6d:db: 53:d4:14:35:0c:9e:c6:bf:b6:7f:0a:79:96:12:7d: bd:9a:e5:be:16:39:75:d3:64:9d:20:16:38:2e:4a: 35:11:8d:f4:4e:59:b6:80:b0:5c:a3:24:e3:b9:11: cd:5a:5f:46:1e:f3:80:a8:5e:40:be:5f:2d:36:dd: b3:6b:fe:7d:86:41:95:d4:56:eb:c0:8e:c8:8f:58: 5f:b7:5c:f3:ba:7d:4c:84:10:bb:43:57:63:60:19: 3c:78:38:77:1f:76:16:83:e4:1b:41:d3:39:29:19: b4:b9:5d:6f:41:a5:69:b4:85:08:75:ad:0f:e3:bb: 55:04:20:b7:34:0e:d6:16:9a:ba:f1:73:ac:c7:2f: ad:cc:31:2c:3b:fa:d3:82:c8:49:ea:05:25:9b:40: 25:00:8c:cc:a2:ec:15:49:00:ff:33:c8:d0:01:d2: 45:5d:e5:1f:d3:12:c4:85:1e:13:23:ce:9f:c6:ea: 72:51:2e:72:e6:0c:ef:a7:eb:8d:0c:c8:6d:5d:a7: 68:78:4c:6b:e5:f9:d2:54:ec:a5:fe:c5:23:4d:4b: d1:99:b2:d1:4a:4a:2d:c3:6d:11:45:b6:23:e5:c4: 6b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:7E:81:BA:A3:55:CC:04:B9:CC:F7:D2:97:07:68:6B:C8:E0:CA:50 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1f30e476-0b09-4040-ad04-97a471e3ad7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.249.119.0/24 Signature Algorithm: sha256WithRSAEncryption 05:0a:dd:2d:37:f3:e9:c5:62:47:88:ed:d8:bb:5a:d0:32:0c: a3:cc:51:73:3f:f0:de:7f:c4:14:85:06:1d:7c:16:5c:d0:de: 0c:09:78:d9:55:55:c4:4f:9d:de:32:68:34:29:4c:0e:a3:b5: 33:a4:f6:86:16:16:f9:f2:ef:2d:cc:7a:51:9f:6d:68:ce:33: a8:60:b2:62:20:47:3d:37:7a:42:3a:87:7c:0f:6f:98:8d:63: 36:79:ce:f4:73:93:04:7e:4e:db:34:9d:0c:31:ee:f8:5d:0a: a7:07:cd:e5:c5:52:a0:0f:48:51:36:1a:a9:44:30:f3:96:e2: 39:35:7d:2e:e1:4f:e7:80:d4:19:f1:b4:3c:41:8b:dd:85:f9: 55:e7:18:ae:8a:86:91:31:44:17:f9:69:46:91:6d:f9:55:02: 39:87:19:7e:e2:28:58:4b:e8:51:46:aa:d6:d0:86:91:29:0d: 22:1c:54:4e:e2:53:e4:14:9b:a0:3e:bc:70:d2:de:f2:d6:13: ab:ad:4c:3e:20:56:2a:e9:26:20:e1:b8:73:dc:f0:3e:1f:83: 1b:b6:2d:7f:2c:51:a0:6d:d5:7d:c8:fa:3a:33:1a:66:c2:5a: 15:cf:4e:34:75:ed:c3:48:c6:4d:a8:12:85:13:43:2f:f6:dc: 2a:11:7f:9c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaqDXNdMHkxhK7eEm7E/Q0b377GMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTYzNzI2WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BiNDNhODFjNTJiNzliOGU4ZTViZjljZjk1YWQ2ZGExYWY2 ZTE1ZmYyNjkzMDA1NWI3YzAwYmUwZTY0YWYwMWIwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfnPwPXhe24au+nXlodqU3eAhjfYIjgqRMYJ5t21PUFDUM nsa/tn8KeZYSfb2a5b4WOXXTZJ0gFjguSjURjfROWbaAsFyjJOO5Ec1aX0Ye84Co XkC+Xy023bNr/n2GQZXUVuvAjsiPWF+3XPO6fUyEELtDV2NgGTx4OHcfdhaD5BtB 0zkpGbS5XW9BpWm0hQh1rQ/ju1UEILc0DtYWmrrxc6zHL63MMSw7+tOCyEnqBSWb QCUAjMyi7BVJAP8zyNAB0kVd5R/TEsSFHhMjzp/G6nJRLnLmDO+n640MyG1dp2h4 TGvl+dJU7KX+xSNNS9GZstFKSi3DbRFFtiPlxGvVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUxH6BuqNVzAS5zPfSlwdoa8jgylAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzFmMzBlNDc2LTBiMDktNDA0MC1hZDA0LTk3YTQ3MWUzYWQ3ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAN+XcwDQYJKoZIhvcNAQELBQADggEBAAUK3S038+nFYkeI7di7WtAyDKPM UXM/8N5/xBSFBh18FlzQ3gwJeNlVVcRPnd4yaDQpTA6jtTOk9oYWFvny7y3MelGf bWjOM6hgsmIgRz03ekI6h3wPb5iNYzZ5zvRzkwR+Tts0nQwx7vhdCqcHzeXFUqAP SFE2GqlEMPOW4jk1fS7hT+eA1BnxtDxBi92F+VXnGK6KhpExRBf5aUaRbflVAjmH GX7iKFhL6FFGqtbQhpEpDSIcVE7iU+QUm6A+vHDS3vLWE6utTD4gVirpJiDhuHPc 8D4fgxu2LX8sUaBt1X3I+jozGmbCWhXPTjR17cNIxk2oEoUTQy/23CoRf5w= -----END CERTIFICATE-----Generated at Fri Oct 17 23:57:46 2025 by rpki-client