$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/42f040c9-a4dd-441d-bd20-f1f21248799b.roa File: 42f040c9-a4dd-441d-bd20-f1f21248799b.roa (raw, json) Hash identifier: K28pn620vrotiokJM3YmTp24u2DfaB74r8l526+bHcE= Subject key identifier: FD:E0:5B:74:1B:86:5F:D0:DD:DF:AE:95:C6:64:2E:81:62:78:DE:3A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 66B17A86615DB60D008BC90DB0D3676F6452825F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/42f040c9-a4dd-441d-bd20-f1f21248799b.roa Signing time: Mon 22 Sep 2025 16:55:38 +0000 ROA not before: Mon 22 Sep 2025 16:55:38 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.249.234.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:b1:7a:86:61:5d:b6:0d:00:8b:c9:0d:b0:d3:67:6f:64:52:82:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 16:55:38 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=1c2e463f1e1f559c3d154178132726abfca528ac95f473d7ebbc8f3c2d46543a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ac:06:b3:6b:9d:e5:81:52:fb:c1:8c:bd:5e: 3b:79:70:dd:96:1d:39:3a:2c:70:46:e9:a2:93:24: c4:3e:22:17:6c:a2:b5:f1:9d:13:a8:74:55:3c:d6: 8f:fe:80:67:00:72:b1:13:aa:fd:6a:47:3b:70:43: 27:2f:88:84:04:e0:14:b2:0f:44:3a:bf:b5:8a:29: 60:7c:cc:ef:c3:05:2d:d0:59:6f:3f:48:62:0b:c1: b4:9e:fc:45:85:85:c3:64:d4:24:36:cf:fa:51:c5: 09:20:7d:35:22:53:02:33:a0:ed:14:6f:52:7c:cd: ec:e4:be:82:82:a0:86:90:a5:9c:49:a3:d0:23:15: b0:57:e6:47:45:6b:74:c4:0b:61:d7:38:38:fe:e3: f1:50:a8:a0:06:fd:2e:89:e8:69:36:d1:cd:fc:80: 9b:df:2b:15:11:6a:8a:77:e0:0e:e0:ed:ad:b7:e1: 21:22:0a:ae:ab:e1:5b:3b:b1:7f:ac:4c:cb:38:b9: 33:15:8b:3d:ee:92:3e:08:e6:7b:15:54:7d:13:c2: 55:ad:f8:ee:bd:1c:f3:78:c9:fd:b8:7f:2b:96:f4: a9:46:b8:50:87:dd:82:9d:1b:65:fe:3d:24:b5:fc: 78:b0:42:ea:db:50:a2:81:b5:f0:be:98:6a:4b:52: 01:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:E0:5B:74:1B:86:5F:D0:DD:DF:AE:95:C6:64:2E:81:62:78:DE:3A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/42f040c9-a4dd-441d-bd20-f1f21248799b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.249.234.0/23 Signature Algorithm: sha256WithRSAEncryption 0d:53:3b:99:f8:50:a4:63:99:dc:78:73:01:50:ba:8d:97:4b: c8:8e:67:30:e7:a4:a5:5b:68:f5:98:8c:00:f9:37:fd:99:bd: fd:62:22:7a:57:f5:e0:a4:0b:a9:e6:58:60:3d:22:d6:c6:d0: 12:62:dd:c0:f7:32:9f:8d:26:3e:a4:66:24:0e:da:b4:15:65: b4:4c:50:73:1a:3d:25:2b:44:78:10:41:3e:68:e6:82:f0:f7: ec:49:1e:54:f6:de:7c:9a:82:a5:29:cf:49:a9:0e:1a:e8:90: 8b:25:db:cb:5a:67:86:a7:89:f0:8c:b0:96:dc:09:f3:e4:fe: 1b:8c:c1:79:0a:39:1f:40:b4:4f:22:06:86:82:9c:35:93:30: f2:ba:03:33:22:86:31:30:ac:7d:3e:40:0a:6d:45:e0:7b:0b: 61:88:75:53:ec:54:ed:a7:25:43:54:d3:83:a0:e0:42:15:13: 5a:51:34:60:44:8d:3e:8e:83:93:d2:0d:b3:1d:86:c9:d3:a4: c7:9e:08:24:19:93:e9:26:73:9d:ee:17:33:2a:5c:5f:dc:3e: 08:28:73:07:c8:b8:d0:4b:d4:fa:c4:7e:d2:3f:7d:15:32:22: e1:0e:a7:9e:ab:fd:d6:74:f5:5e:04:cb:20:5b:28:a5:d3:69: fb:04:a5:17 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZrF6hmFdtg0Ai8kNsNNnb2RSgl8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTY1NTM4WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AxYzJlNDYzZjFlMWY1NTljM2QxNTQxNzgxMzI3MjZhYmZj YTUyOGFjOTVmNDczZDdlYmJjOGYzYzJkNDY1NDNhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxrAaza53lgVL7wYy9Xjt5cN2WHTk6LHBG6aKTJMQ+Ihds orXxnROodFU81o/+gGcAcrETqv1qRztwQycviIQE4BSyD0Q6v7WKKWB8zO/DBS3Q WW8/SGILwbSe/EWFhcNk1CQ2z/pRxQkgfTUiUwIzoO0Ub1J8zezkvoKCoIaQpZxJ o9AjFbBX5kdFa3TEC2HXODj+4/FQqKAG/S6J6Gk20c38gJvfKxURaop34A7g7a23 4SEiCq6r4Vs7sX+sTMs4uTMViz3ukj4I5nsVVH0TwlWt+O69HPN4yf24fyuW9KlG uFCH3YKdG2X+PSS1/HiwQurbUKKBtfC+mGpLUgHXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU/eBbdBuGX9Dd366VxmQugWJ43jowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQyZjA0MGM5LWE0ZGQtNDQxZC1iZDIwLWYxZjIxMjQ4Nzk5Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEN+eowDQYJKoZIhvcNAQELBQADggEBAA1TO5n4UKRjmdx4cwFQuo2XS8iO ZzDnpKVbaPWYjAD5N/2Zvf1iInpX9eCkC6nmWGA9ItbG0BJi3cD3Mp+NJj6kZiQO 2rQVZbRMUHMaPSUrRHgQQT5o5oLw9+xJHlT23nyagqUpz0mpDhrokIsl28taZ4an ifCMsJbcCfPk/huMwXkKOR9AtE8iBoaCnDWTMPK6AzMihjEwrH0+QAptReB7C2GI dVPsVO2nJUNU04Og4EIVE1pRNGBEjT6Og5PSDbMdhsnTpMeeCCQZk+kmc53uFzMq XF/cPggocwfIuNBL1PrEftI/fRUyIuEOp56r/dZ09V4EyyBbKKXTafsEpRc= -----END CERTIFICATE-----Generated at Fri Oct 17 23:58:30 2025 by rpki-client