$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2a96c097-3899-4a58-93b1-6e400be0ca23.roa File: 2a96c097-3899-4a58-93b1-6e400be0ca23.roa (raw, json) Hash identifier: h5l+d0rqIRi9ysmUGTv1Z/28qVESte0+pAjW1rUj9uc= Subject key identifier: 1F:AB:ED:79:EF:F3:8E:17:DC:47:5F:B9:DE:56:CF:08:94:2B:A1:10 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3E9C3BFCFB7E65C74533B4CCD995DACA1A9F09EB Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2a96c097-3899-4a58-93b1-6e400be0ca23.roa Signing time: Tue 07 Oct 2025 15:12:44 +0000 ROA not before: Tue 07 Oct 2025 15:12:44 +0000 ROA not after: Tue 11 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.50.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:9c:3b:fc:fb:7e:65:c7:45:33:b4:cc:d9:95:da:ca:1a:9f:09:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 7 15:12:44 2025 GMT Not After : Nov 11 23:59:59 2025 GMT Subject: serialNumber=31379efbfa73761136bf15c00e320a55e0aa09b5af4320b83e239c9ea7b57c81, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b3:48:06:bc:01:f3:24:18:af:c1:12:5a:c7: 9f:c9:21:e2:00:94:ba:73:52:08:89:59:99:3a:e4: 0d:6d:fb:99:83:de:e7:a6:39:64:cd:89:04:a0:63: e6:bf:63:8c:ae:d5:05:05:53:21:51:ea:f9:45:00: c3:ea:5f:f7:43:99:e9:df:59:a6:a0:71:15:f8:15: 69:6f:ff:23:9c:36:7f:ec:6e:d9:11:55:57:96:ad: f3:03:1c:f3:34:5d:f5:40:4f:66:17:75:ac:a7:68: 7d:33:86:5f:98:0d:60:66:dd:c4:db:ca:af:49:9c: 93:1d:4a:25:25:71:69:0f:5d:52:4e:72:72:d1:74: 00:7f:37:74:03:62:99:63:b8:6f:f7:6f:50:2a:74: 23:91:51:d7:8b:da:43:46:bd:ba:2b:de:40:b9:09: ca:a4:10:db:c1:cb:46:49:39:99:ef:61:94:56:b2: b5:88:6c:78:f8:20:a1:2f:0d:77:1a:6a:19:4b:cf: 29:94:b7:02:5f:c9:f2:2d:67:d3:35:fb:0c:f2:7a: 6d:cf:08:0e:71:60:d0:aa:a8:0a:62:7a:5a:81:b0: 01:df:3e:f8:c4:30:b2:af:3a:b5:17:61:06:6f:a4: 4e:40:95:e6:84:ac:8b:4a:57:5f:00:f7:7a:28:d5: 25:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:AB:ED:79:EF:F3:8E:17:DC:47:5F:B9:DE:56:CF:08:94:2B:A1:10 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2a96c097-3899-4a58-93b1-6e400be0ca23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.50.0.0/16 Signature Algorithm: sha256WithRSAEncryption 67:c4:e2:55:c9:48:d3:b3:cc:bd:da:4a:08:e8:2c:77:51:4c: 6e:b8:27:4d:3e:ae:69:4f:58:6a:cf:34:4d:cc:39:da:3b:90: 11:3d:a8:fc:c5:ea:4c:3e:9e:09:f6:24:f4:57:59:d3:72:96: a0:7b:2e:d3:6b:b2:04:76:7b:ce:95:4f:81:aa:e8:f3:d1:97: 05:5a:54:6a:9c:0a:5d:6b:7a:00:dc:04:e8:be:d1:d2:d0:e7: 93:77:2e:54:e3:9e:53:7f:89:a4:6c:8f:60:f8:89:f8:ea:16: 1a:05:9d:84:5c:ea:90:c5:16:a1:46:c0:45:69:c2:26:07:3b: ba:58:b4:d1:5c:0f:e2:b8:d4:15:91:6a:e2:6d:f2:6c:4b:d4: ec:a7:4f:6a:8e:e0:85:75:7f:5e:7d:f8:98:16:d9:8c:d4:42: f9:9a:16:59:07:a3:83:5d:7b:7a:95:76:32:78:59:a4:4d:3e: da:46:d4:84:17:b7:3c:cb:6e:86:5a:7b:4e:a8:49:ae:fb:60: 25:24:2f:0b:cc:d2:ee:d9:18:12:de:0c:86:65:ad:8f:4e:43: 93:2f:7f:44:ce:3d:59:7e:60:43:34:08:d8:67:e6:f8:a5:5d: 29:bb:7b:90:2f:16:7c:89:1e:f6:e8:b0:8c:2f:72:10:15:0e: 99:6c:33:93 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUPpw7/Pt+ZcdFM7TM2ZXayhqfCeswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDA3MTUxMjQ0WhcNMjUxMTExMjM1OTU5 WjB6MUkwRwYDVQQFE0AzMTM3OWVmYmZhNzM3NjExMzZiZjE1YzAwZTMyMGE1NWUw YWEwOWI1YWY0MzIwYjgzZTIzOWM5ZWE3YjU3YzgxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxs0gGvAHzJBivwRJax5/JIeIAlLpzUgiJWZk65A1t+5mD 3uemOWTNiQSgY+a/Y4yu1QUFUyFR6vlFAMPqX/dDmenfWaagcRX4FWlv/yOcNn/s btkRVVeWrfMDHPM0XfVAT2YXdaynaH0zhl+YDWBm3cTbyq9JnJMdSiUlcWkPXVJO cnLRdAB/N3QDYpljuG/3b1AqdCORUdeL2kNGvbor3kC5CcqkENvBy0ZJOZnvYZRW srWIbHj4IKEvDXcaahlLzymUtwJfyfItZ9M1+wzyem3PCA5xYNCqqApielqBsAHf PvjEMLKvOrUXYQZvpE5AleaErItKV18A93oo1SX3AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUH6vtee/zjhfcR1+53lbPCJQroRAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzJhOTZjMDk3LTM4OTktNGE1OC05M2IxLTZlNDAwYmUwY2EyMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwANMjANBgkqhkiG9w0BAQsFAAOCAQEAZ8TiVclI07PMvdpKCOgsd1FMbrgn TT6uaU9Yas80Tcw52juQET2o/MXqTD6eCfYk9FdZ03KWoHsu02uyBHZ7zpVPgaro 89GXBVpUapwKXWt6ANwE6L7R0tDnk3cuVOOeU3+JpGyPYPiJ+OoWGgWdhFzqkMUW oUbARWnCJgc7uli00VwP4rjUFZFq4m3ybEvU7KdPao7ghXV/Xn34mBbZjNRC+ZoW WQejg117epV2MnhZpE0+2kbUhBe3PMtuhlp7TqhJrvtgJSQvC8zS7tkYEt4MhmWt j05Dky9/RM49WX5gQzQI2Gfm+KVdKbt7kC8WfIke9uiwjC9yEBUOmWwzkw== -----END CERTIFICATE-----Generated at Sat Oct 18 00:18:22 2025 by rpki-client