$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3675094f-4a76-494a-a06d-d504c1702968.roa File: 3675094f-4a76-494a-a06d-d504c1702968.roa (raw, json) Hash identifier: 6+H2LjDqXc86urcQgIiM8TYPcGjrOYX5F3jL6wonpjw= Subject key identifier: A8:75:09:53:60:90:D4:96:0F:3F:D6:A0:D2:3C:56:3B:22:8C:F7:11 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 76B3C36AFDAF9C0F513BCE64427B54ACB494CE47 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3675094f-4a76-494a-a06d-d504c1702968.roa Signing time: Mon 22 Sep 2025 16:51:50 +0000 ROA not before: Mon 22 Sep 2025 16:51:50 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.249.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:b3:c3:6a:fd:af:9c:0f:51:3b:ce:64:42:7b:54:ac:b4:94:ce:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 16:51:50 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=270979a3ae73f067aa7f4eac35d3c4913a6d8f3ae244e0b7aac95038b6e6d4c7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a0:2c:a4:51:5e:b4:fb:31:3d:d6:a1:68:82: e0:78:21:51:c4:b4:c5:b4:06:a3:ca:66:e0:17:ee: bd:3f:5e:7c:a8:1b:c7:74:fe:3e:1c:5f:05:cb:3d: 31:a1:6b:68:2f:8f:3d:91:6f:25:96:6b:0b:9e:56: 09:d7:1d:cf:21:f9:d5:ce:23:a1:fd:e0:e6:61:d5: 5d:af:bc:ee:6c:3f:34:31:e4:46:41:1b:4f:c4:48: 6c:d4:18:83:d0:14:ac:2c:4a:3b:87:da:90:af:ac: c3:dc:d8:ee:81:19:d5:e0:d9:f9:ba:5b:f8:d4:41: d1:c6:cb:48:74:96:16:03:6b:ed:fa:3b:38:90:be: 2c:e0:7d:7a:30:61:5a:3d:75:58:f7:ec:13:72:67: f3:79:72:38:5d:fd:ba:19:7b:8d:37:95:56:5d:a4: 01:a6:fd:0f:09:b6:4a:c6:4c:33:ae:fe:de:5f:82: 6b:bd:08:4a:a2:73:d6:67:76:db:69:0e:31:aa:6e: 49:c4:0b:71:cd:3d:2d:d8:79:2d:9e:10:80:77:13: 7d:c1:e2:44:01:1a:2d:49:52:37:8e:b2:50:30:63: e5:68:9f:e1:cc:7a:e6:55:54:90:6c:e3:45:12:b2: d5:c9:74:8e:e8:fc:d3:1c:14:94:f4:38:f1:b4:f4: 67:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:75:09:53:60:90:D4:96:0F:3F:D6:A0:D2:3C:56:3B:22:8C:F7:11 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3675094f-4a76-494a-a06d-d504c1702968.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.249.118.0/23 Signature Algorithm: sha256WithRSAEncryption 8c:6d:b0:1b:0e:03:df:27:74:fd:bb:2c:0d:bd:c0:cf:87:8e: 0f:68:72:52:71:f8:92:de:ff:58:02:fd:a9:4e:68:a0:9d:9a: 17:aa:73:dd:d2:27:4b:87:7a:48:41:a5:64:eb:a5:64:71:87: 19:83:b8:65:75:2b:1a:d8:8c:fe:43:66:79:60:c7:7d:e6:83: d3:3e:bc:6d:be:f5:e6:41:42:89:13:ee:66:b7:01:31:2b:0f: ab:2f:a3:8f:92:0a:b0:63:4c:62:f9:5c:ca:d4:c7:81:b1:7a: 50:0d:85:54:0e:26:47:af:96:79:0d:0a:dd:67:f5:66:14:cc: 82:9d:e2:01:3e:d2:56:45:98:aa:51:d4:a1:88:63:f5:96:30: 75:bf:89:b5:18:9b:3f:83:4d:ec:5a:a7:8a:93:ee:17:f8:fe: 5a:59:27:6f:20:5a:1a:ee:90:f1:5f:89:11:61:b8:e0:41:e9: 70:bc:48:b2:f6:43:5e:f8:78:04:7e:a6:74:7e:50:af:85:0c: 45:92:2c:a5:36:09:1e:7f:25:53:ec:44:9e:a0:bb:37:f3:68: a1:88:89:81:c0:ac:fa:0f:f0:4e:68:83:8c:74:91:3d:f6:ac: ab:ec:b1:9d:54:0e:d1:c2:24:34:6e:46:84:84:26:f8:23:df: 90:e8:ef:70 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdrPDav2vnA9RO85kQntUrLSUzkcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTY1MTUwWhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AyNzA5NzlhM2FlNzNmMDY3YWE3ZjRlYWMzNWQzYzQ5MTNh NmQ4ZjNhZTI0NGUwYjdhYWM5NTAzOGI2ZTZkNGM3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCSoCykUV60+zE91qFoguB4IVHEtMW0BqPKZuAX7r0/Xnyo G8d0/j4cXwXLPTGha2gvjz2RbyWWawueVgnXHc8h+dXOI6H94OZh1V2vvO5sPzQx 5EZBG0/ESGzUGIPQFKwsSjuH2pCvrMPc2O6BGdXg2fm6W/jUQdHGy0h0lhYDa+36 OziQvizgfXowYVo9dVj37BNyZ/N5cjhd/boZe403lVZdpAGm/Q8JtkrGTDOu/t5f gmu9CEqic9ZndttpDjGqbknEC3HNPS3YeS2eEIB3E33B4kQBGi1JUjeOslAwY+Vo n+HMeuZVVJBs40USstXJdI7o/NMcFJT0OPG09GcBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUqHUJU2CQ1JYPP9ag0jxWOyKM9xEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzM2NzUwOTRmLTRhNzYtNDk0YS1hMDZkLWQ1MDRjMTcwMjk2OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEN+XYwDQYJKoZIhvcNAQELBQADggEBAIxtsBsOA98ndP27LA29wM+Hjg9o clJx+JLe/1gC/alOaKCdmheqc93SJ0uHekhBpWTrpWRxhxmDuGV1KxrYjP5DZnlg x33mg9M+vG2+9eZBQokT7ma3ATErD6svo4+SCrBjTGL5XMrUx4GxelANhVQOJkev lnkNCt1n9WYUzIKd4gE+0lZFmKpR1KGIY/WWMHW/ibUYmz+DTexap4qT7hf4/lpZ J28gWhrukPFfiRFhuOBB6XC8SLL2Q174eAR+pnR+UK+FDEWSLKU2CR5/JVPsRJ6g uzfzaKGIiYHArPoP8E5og4x0kT32rKvssZ1UDtHCJDRuRoSEJvgj35Do73A= -----END CERTIFICATE-----Generated at Sat Oct 18 02:36:47 2025 by rpki-client