$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5f531c77-8557-4b0a-9365-dea1606e777e.roa File: 5f531c77-8557-4b0a-9365-dea1606e777e.roa (raw, json) Hash identifier: hiK9u3MgnYFl6ijno3qD7AYIqGzEah3g8jOEOifGklw= Subject key identifier: 9C:1E:38:F7:F6:6B:CB:3F:33:22:47:04:95:5B:76:D7:BC:C5:84:E9 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6DFEDBE0EA1F14868F970F45317E1892760E125B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5f531c77-8557-4b0a-9365-dea1606e777e.roa Signing time: Mon 22 Sep 2025 16:51:35 +0000 ROA not before: Mon 22 Sep 2025 16:51:35 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.249.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:fe:db:e0:ea:1f:14:86:8f:97:0f:45:31:7e:18:92:76:0e:12:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 16:51:35 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=6529fffaaf76ff57c18779a0c0446c0bbf37c4e538e3e9aa5c813ca7a3f07bf5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:47:49:11:55:8f:bc:98:7f:19:f6:48:f8:52: 8c:17:39:28:20:fc:22:ec:24:17:7a:e9:cf:70:99: 88:c8:09:eb:13:08:ab:1b:4b:92:f8:38:d3:b6:49: 30:1c:a1:e9:6a:bd:79:2b:86:22:a0:b7:3b:f1:44: 54:cf:d4:8b:7b:9a:02:42:a2:c9:42:29:cc:65:24: 7e:af:12:55:92:f0:4a:82:33:d4:12:24:6c:8d:37: d2:6b:24:1c:e8:6a:0f:8e:bb:52:a0:38:b0:37:ca: 3b:9c:f0:2f:c0:57:14:a7:66:f3:ed:1b:b2:a4:a4: f2:7b:e2:eb:d0:09:0c:59:84:17:57:08:7a:ad:b7: 42:43:91:f6:1e:98:f0:a5:8d:3c:a8:8c:37:fd:74: 81:ff:90:e8:a8:6d:f1:ad:8b:03:ee:0f:97:7e:15: 8d:54:09:17:a3:81:1d:81:93:9a:b5:79:13:c5:9b: 94:b6:2e:4f:0f:e5:8e:6e:dd:36:26:a3:7b:7e:c1: 50:24:4b:51:38:03:59:78:3d:af:de:84:d5:e3:eb: b0:90:ef:47:43:e7:3a:61:96:ca:cd:4d:c3:c5:d2: 43:2c:9c:87:4b:aa:6a:45:6c:f8:ef:50:f7:90:31: 72:8a:71:ec:5d:32:3c:60:80:8c:a2:59:71:ef:bd: a2:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:1E:38:F7:F6:6B:CB:3F:33:22:47:04:95:5B:76:D7:BC:C5:84:E9 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5f531c77-8557-4b0a-9365-dea1606e777e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.249.97.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:28:23:b3:0a:85:35:4d:6d:02:d6:64:1b:c3:6d:cf:b1:07: f0:5d:09:f9:09:37:1c:b6:1a:b9:c1:84:14:e9:d2:d1:00:a5: ff:90:8e:06:28:05:6c:6b:42:ee:86:da:f5:15:69:fb:a4:ac: c1:ab:40:ca:b9:e2:b8:4f:81:48:58:f0:e0:93:b8:f2:55:87: ee:41:1e:8b:e8:a2:11:a1:fe:bb:77:84:07:81:6a:6c:c9:75: d5:14:b1:14:5d:7a:30:fc:9f:46:b3:94:32:4c:c8:2f:c6:48: cd:bf:52:ce:13:96:60:88:e2:91:ab:da:70:d7:24:9e:b6:61: 6b:2e:81:a1:6f:be:95:01:14:03:02:5a:2f:a8:ac:7e:aa:80: 87:14:ba:7b:01:1a:1e:33:81:e0:2f:0e:aa:ea:80:cc:09:04: c0:b1:e7:3a:4f:b1:f0:e5:d7:39:7c:f8:bb:ca:68:ad:b1:4e: 0c:ce:e4:7b:e9:c3:92:c5:6a:8d:65:6f:1b:21:42:41:dd:0b: 98:d3:3d:dc:30:82:f9:2b:27:f5:59:8d:b9:9e:1d:8c:e5:67: 39:0a:eb:9e:67:f6:89:41:61:7e:6a:70:f9:f1:9f:96:38:59: 66:00:9b:92:e6:eb:33:24:b5:45:4c:09:ab:e6:2a:20:2c:41: 3e:b6:96:7e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbf7b4OofFIaPlw9FMX4YknYOElswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTY1MTM1WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A2NTI5ZmZmYWFmNzZmZjU3YzE4Nzc5YTBjMDQ0NmMwYmJm MzdjNGU1MzhlM2U5YWE1YzgxM2NhN2EzZjA3YmY1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1R0kRVY+8mH8Z9kj4UowXOSgg/CLsJBd66c9wmYjICesT CKsbS5L4ONO2STAcoelqvXkrhiKgtzvxRFTP1It7mgJCoslCKcxlJH6vElWS8EqC M9QSJGyNN9JrJBzoag+Ou1KgOLA3yjuc8C/AVxSnZvPtG7KkpPJ74uvQCQxZhBdX CHqtt0JDkfYemPCljTyojDf9dIH/kOiobfGtiwPuD5d+FY1UCRejgR2Bk5q1eRPF m5S2Lk8P5Y5u3TYmo3t+wVAkS1E4A1l4Pa/ehNXj67CQ70dD5zphlsrNTcPF0kMs nIdLqmpFbPjvUPeQMXKKcexdMjxggIyiWXHvvaLdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUnB449/Zryz8zIkcElVt217zFhOkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzVmNTMxYzc3LTg1NTctNGIwYS05MzY1LWRlYTE2MDZlNzc3ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAN+WEwDQYJKoZIhvcNAQELBQADggEBAJ4oI7MKhTVNbQLWZBvDbc+xB/Bd CfkJNxy2GrnBhBTp0tEApf+QjgYoBWxrQu6G2vUVafukrMGrQMq54rhPgUhY8OCT uPJVh+5BHovoohGh/rt3hAeBamzJddUUsRRdejD8n0azlDJMyC/GSM2/Us4TlmCI 4pGr2nDXJJ62YWsugaFvvpUBFAMCWi+orH6qgIcUunsBGh4zgeAvDqrqgMwJBMCx 5zpPsfDl1zl8+LvKaK2xTgzO5Hvpw5LFao1lbxshQkHdC5jTPdwwgvkrJ/VZjbme HYzlZzkK655n9olBYX5qcPnxn5Y4WWYAm5Lm6zMktUVMCavmKiAsQT62ln4= -----END CERTIFICATE-----Generated at Fri Oct 17 22:04:09 2025 by rpki-client