$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2ac90a77-5a93-4665-988a-eb182020ff9f.roa File: 2ac90a77-5a93-4665-988a-eb182020ff9f.roa (raw, json) Hash identifier: 9nZG/R+gzoJt8m4MEm7hnBwsvEPSCUVwSCCZ/py6XFE= Subject key identifier: 17:13:09:9B:1A:37:70:CD:23:E0:3F:C3:94:F3:73:2D:A8:A6:F2:FD Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4EC4876B882207CEFCA21EE014FAF8C32AD796C3 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2ac90a77-5a93-4665-988a-eb182020ff9f.roa Signing time: Mon 22 Sep 2025 16:44:00 +0000 ROA not before: Mon 22 Sep 2025 16:44:00 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.249.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:c4:87:6b:88:22:07:ce:fc:a2:1e:e0:14:fa:f8:c3:2a:d7:96:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 16:44:00 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=8948d3169f657ec3dedec6a2851112da8d4274bc48a5702ad6525e35d70cddab, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:24:15:15:14:f4:2e:13:df:b1:5a:67:5f:b6: dc:5e:51:8c:f8:45:14:a8:b4:88:5b:42:e7:fc:d3: 22:70:25:fc:9f:21:a8:da:ef:e3:47:d2:14:0f:ac: 95:76:74:3f:23:be:ae:bd:e4:36:1d:90:3e:f7:a0: 4e:e3:6d:89:41:eb:df:4d:2d:4a:06:0b:6d:98:ea: 57:e5:9c:b6:8b:86:65:28:81:60:50:38:91:99:7d: d8:43:b7:21:c7:ca:a0:2b:1d:aa:3e:06:bb:bb:a6: fc:bc:2a:62:63:3b:b4:ec:6e:21:cf:e7:c5:83:61: 0d:19:c8:58:c9:23:4a:7c:bc:d9:cf:f9:00:f7:e0: c2:55:92:90:7e:ce:56:d3:9e:9d:18:79:54:dd:28: df:1c:8d:95:f2:2d:cb:36:cc:4a:84:ac:5b:80:55: 1a:1e:54:13:ba:22:1a:1e:f7:a4:c5:fa:4c:20:1b: c6:5b:cd:9d:ca:9b:2e:92:fb:ad:5f:2f:4d:ad:92: be:f7:b8:23:4a:95:0f:78:a0:ce:4b:1f:c2:48:78: aa:9a:32:72:e3:d7:db:44:90:c1:e2:14:e9:64:8d: 28:e1:ce:d1:da:c3:3c:df:ee:71:0f:b0:ff:ba:6d: 08:c5:1e:31:92:78:cc:9d:0a:db:e6:dd:c3:c8:be: 27:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:13:09:9B:1A:37:70:CD:23:E0:3F:C3:94:F3:73:2D:A8:A6:F2:FD X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2ac90a77-5a93-4665-988a-eb182020ff9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.249.246.0/24 Signature Algorithm: sha256WithRSAEncryption 66:39:d4:6a:89:00:e7:b9:b7:a3:37:4a:13:eb:3a:43:79:43: 30:9e:d4:dd:7c:55:27:01:6f:ba:d1:7c:22:74:bd:14:ba:87: eb:32:2f:32:4b:5d:92:79:83:b7:c8:78:36:f3:b0:19:fb:7b: 11:f5:12:99:e4:e7:e1:07:bf:a8:b8:1b:e1:e5:0f:bf:50:e5: 73:63:14:44:1e:da:c1:3e:60:f2:d2:2f:af:0c:0a:c5:eb:95: c4:9b:9f:11:42:68:cd:7a:54:70:63:11:72:d0:0a:cd:bb:82: 78:66:4a:a9:55:cc:a3:b5:1d:a0:1d:6a:86:94:ec:16:5c:69: 70:bb:b5:2c:ac:e7:ac:80:cf:68:b5:8f:17:b0:7a:7d:6e:12: ca:8f:de:d1:f2:e4:0c:a8:24:9e:6f:0a:1f:a5:81:79:34:f7: 00:fe:2d:55:4d:60:14:98:e5:bb:10:d9:54:fc:ef:35:6b:de: e6:91:be:bf:f5:62:14:47:29:1c:22:d5:90:3d:1f:4d:a1:b0: 6a:79:55:1e:c8:93:8a:9d:05:f2:91:fa:50:e7:2e:ca:a9:3e: cb:24:23:e2:dd:81:b4:3a:6e:87:7f:21:84:15:c9:cd:2e:07: 4f:c4:f8:30:59:b7:45:2a:da:9d:f3:32:55:32:ab:9c:dd:3d: 07:a5:cb:98 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTsSHa4giB878oh7gFPr4wyrXlsMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTY0NDAwWhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A4OTQ4ZDMxNjlmNjU3ZWMzZGVkZWM2YTI4NTExMTJkYThk NDI3NGJjNDhhNTcwMmFkNjUyNWUzNWQ3MGNkZGFiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtJBUVFPQuE9+xWmdfttxeUYz4RRSotIhbQuf80yJwJfyf Iaja7+NH0hQPrJV2dD8jvq695DYdkD73oE7jbYlB699NLUoGC22Y6lflnLaLhmUo gWBQOJGZfdhDtyHHyqArHao+Bru7pvy8KmJjO7TsbiHP58WDYQ0ZyFjJI0p8vNnP +QD34MJVkpB+zlbTnp0YeVTdKN8cjZXyLcs2zEqErFuAVRoeVBO6Ihoe96TF+kwg G8ZbzZ3Kmy6S+61fL02tkr73uCNKlQ94oM5LH8JIeKqaMnLj19tEkMHiFOlkjSjh ztHawzzf7nEPsP+6bQjFHjGSeMydCtvm3cPIvifdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUFxMJmxo3cM0j4D/DlPNzLaim8v0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzJhYzkwYTc3LTVhOTMtNDY2NS05ODhhLWViMTgyMDIwZmY5Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAN+fYwDQYJKoZIhvcNAQELBQADggEBAGY51GqJAOe5t6M3ShPrOkN5QzCe 1N18VScBb7rRfCJ0vRS6h+syLzJLXZJ5g7fIeDbzsBn7exH1Epnk5+EHv6i4G+Hl D79Q5XNjFEQe2sE+YPLSL68MCsXrlcSbnxFCaM16VHBjEXLQCs27gnhmSqlVzKO1 HaAdaoaU7BZcaXC7tSys56yAz2i1jxewen1uEsqP3tHy5AyoJJ5vCh+lgXk09wD+ LVVNYBSY5bsQ2VT87zVr3uaRvr/1YhRHKRwi1ZA9H02hsGp5VR7Ik4qdBfKR+lDn LsqpPsskI+LdgbQ6bod/IYQVyc0uB0/E+DBZt0Uq2p3zMlUyq5zdPQely5g= -----END CERTIFICATE-----Generated at Sat Oct 18 00:16:09 2025 by rpki-client