$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8d8909ff-e14e-4588-b109-6ef1cefcc004.roa File: 8d8909ff-e14e-4588-b109-6ef1cefcc004.roa (raw, json) Hash identifier: nzjp75k1WEMR2wx8m5x9l4tTWVNnYQ9sie4G1quG0y4= Subject key identifier: DB:CD:6C:EA:FF:38:4A:23:96:1B:A2:51:AA:E3:F2:E7:2D:6F:EA:E4 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3670D91396EB581046BA1CF0D28101165989A15B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8d8909ff-e14e-4588-b109-6ef1cefcc004.roa Signing time: Mon 22 Sep 2025 16:39:00 +0000 ROA not before: Mon 22 Sep 2025 16:39:00 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.249.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:70:d9:13:96:eb:58:10:46:ba:1c:f0:d2:81:01:16:59:89:a1:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 16:39:00 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=2ef0c28e86a0c3538bbc2f6575464b9753fac3fdf3fdcb63d6c8d4466cd0958e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:f4:be:5e:0c:28:53:b7:2b:03:e8:b1:0b:4e: f6:64:1c:4c:b6:b8:3c:29:a6:b6:76:32:9d:c7:2a: 0a:89:e1:b7:fc:ba:90:57:50:28:cb:14:8f:b2:d3: d6:f0:1b:7e:78:8b:12:e9:51:54:8e:8a:b5:db:de: 71:1d:aa:38:62:23:0d:c7:db:66:4f:87:d8:32:93: e0:e6:26:3f:e5:d3:71:33:fc:7f:81:02:6c:38:6f: 44:38:cb:04:c2:78:ab:b5:55:79:a3:fd:e1:1a:73: 53:63:42:3f:57:c7:2d:59:c1:0c:fb:00:0d:ae:6b: 0f:48:6b:ce:40:36:f8:e5:70:dd:92:9e:41:b0:68: af:3d:ec:3a:51:56:eb:ba:68:70:63:a5:1f:d4:34: ae:77:fc:62:5e:46:17:a9:9a:a0:f2:fc:92:95:7a: e0:36:7e:34:e8:0f:e3:a3:8f:10:1e:bb:01:2d:3f: f6:38:1d:12:74:65:7d:9d:08:e0:96:f1:4f:13:38: ac:d3:54:9d:d6:7b:fd:79:f6:c2:72:c2:e5:a2:44: 94:78:d7:76:2a:cf:d6:ee:0f:ba:48:89:98:c9:4f: 0e:78:25:bc:ed:0a:55:0a:c6:c2:5f:2f:a6:ef:dc: c7:70:00:07:da:58:ac:ef:9c:e2:71:f3:32:e8:0b: 96:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:CD:6C:EA:FF:38:4A:23:96:1B:A2:51:AA:E3:F2:E7:2D:6F:EA:E4 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8d8909ff-e14e-4588-b109-6ef1cefcc004.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.249.152.0/24 Signature Algorithm: sha256WithRSAEncryption 72:e6:90:b4:b1:e9:86:48:28:79:0f:1e:d7:81:81:51:64:33: 21:cd:d4:57:37:71:26:0d:25:ba:c4:45:ce:8c:e8:7b:69:7e: 06:74:ef:94:5d:1c:d5:fa:98:b5:bd:9d:47:64:29:f8:d3:7e: a3:5d:d5:05:a5:eb:dd:84:be:e6:ef:dd:bd:cb:72:0b:54:b4: df:33:73:2b:e0:11:ca:27:29:49:6d:b2:29:f1:d0:60:31:d9: f1:3c:38:67:be:ae:6f:bf:2a:3c:00:9c:fd:43:b4:cd:d5:fb: 18:95:f6:2f:fb:cc:de:bb:6a:ee:fb:cd:f7:b7:a3:bf:25:dc: 5f:6c:d3:f4:32:48:b5:44:9d:97:f9:8c:96:ef:ec:d9:ef:a2: 84:83:c3:50:90:e7:44:e8:3b:b7:53:3f:ff:82:d7:53:40:2c: 6c:c8:04:4a:00:c4:6b:bb:ee:c5:8e:e5:d6:36:04:1c:8b:b9: 43:93:2f:c4:95:60:57:f6:07:24:a3:b5:df:23:d1:e8:49:30: 49:5f:3a:77:20:f8:25:fb:b1:b3:cf:e4:4c:37:41:9c:89:48: b6:fb:ab:2c:96:b1:c9:1c:93:5a:ae:c0:0a:92:b8:68:ba:b3: 74:2e:f6:4a:47:44:e1:a3:e1:80:06:9e:b6:ee:1a:dd:b8:01: bb:a3:84:88 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNnDZE5brWBBGuhzw0oEBFlmJoVswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTYzOTAwWhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AyZWYwYzI4ZTg2YTBjMzUzOGJiYzJmNjU3NTQ2NGI5NzUz ZmFjM2ZkZjNmZGNiNjNkNmM4ZDQ0NjZjZDA5NThlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD29L5eDChTtysD6LELTvZkHEy2uDwpprZ2Mp3HKgqJ4bf8 upBXUCjLFI+y09bwG354ixLpUVSOirXb3nEdqjhiIw3H22ZPh9gyk+DmJj/l03Ez /H+BAmw4b0Q4ywTCeKu1VXmj/eEac1NjQj9Xxy1ZwQz7AA2uaw9Ia85ANvjlcN2S nkGwaK897DpRVuu6aHBjpR/UNK53/GJeRhepmqDy/JKVeuA2fjToD+OjjxAeuwEt P/Y4HRJ0ZX2dCOCW8U8TOKzTVJ3We/159sJywuWiRJR413Yqz9buD7pIiZjJTw54 JbztClUKxsJfL6bv3MdwAAfaWKzvnOJx8zLoC5Y1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU281s6v84SiOWG6JRquPy5y1v6uQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzhkODkwOWZmLWUxNGUtNDU4OC1iMTA5LTZlZjFjZWZjYzAwNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAN+ZgwDQYJKoZIhvcNAQELBQADggEBAHLmkLSx6YZIKHkPHteBgVFkMyHN 1Fc3cSYNJbrERc6M6HtpfgZ075RdHNX6mLW9nUdkKfjTfqNd1QWl692Evubv3b3L cgtUtN8zcyvgEconKUltsinx0GAx2fE8OGe+rm+/KjwAnP1DtM3V+xiV9i/7zN67 au77zfe3o78l3F9s0/QySLVEnZf5jJbv7NnvooSDw1CQ50ToO7dTP/+C11NALGzI BEoAxGu77sWO5dY2BByLuUOTL8SVYFf2BySjtd8j0ehJMElfOncg+CX7sbPP5Ew3 QZyJSLb7qyyWsckck1quwAqSuGi6s3Qu9kpHROGj4YAGnrbuGt24AbujhIg= -----END CERTIFICATE-----Generated at Fri Oct 17 22:04:33 2025 by rpki-client