$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a408ca79-57cf-44dd-85a6-797e9961d603.roa File: a408ca79-57cf-44dd-85a6-797e9961d603.roa (raw, json) Hash identifier: sJPnolIIegeBUJhMkgDIO+e+9DAorKr3HlzqyyCjdUo= Subject key identifier: BE:D9:0E:1E:A0:D3:90:0B:1E:FA:36:63:B2:57:12:B9:7D:63:51:ED Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 03B5459106475E292DC008DCBE0575C39C10B5D5 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a408ca79-57cf-44dd-85a6-797e9961d603.roa Signing time: Mon 22 Sep 2025 17:00:06 +0000 ROA not before: Mon 22 Sep 2025 17:00:06 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.249.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:b5:45:91:06:47:5e:29:2d:c0:08:dc:be:05:75:c3:9c:10:b5:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 17:00:06 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=601a48f739db92e367cbd0dd98c8eda578e3243af1a6ff5077b351128c86fa88, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:12:4a:77:a3:62:a4:99:b7:fc:55:22:71:6f: 68:09:57:d0:e5:c8:62:44:e8:6b:25:b6:cf:0d:b9: 71:27:67:41:22:4c:91:62:0f:d9:3c:c5:4f:a2:0d: 14:9f:0d:2b:48:ae:e5:6c:6f:6d:55:21:f3:59:b2: 9e:3e:f3:a8:c5:f4:99:a6:02:a0:ee:10:46:59:22: a8:8c:ee:51:66:60:ab:ab:4f:f7:bf:9f:fe:19:bd: cc:80:3b:f0:c9:4f:87:1f:77:0a:f0:a4:75:86:fd: a0:e6:f5:4f:37:2b:f3:d6:be:4b:78:d7:8f:76:70: 37:fa:03:8b:88:ea:95:e1:9d:f3:5d:86:80:7c:11: 7d:91:3c:f8:bd:0a:aa:2e:c6:fa:ea:4b:ea:b5:13: 56:73:c7:13:a7:62:c3:d8:ae:97:d6:d2:3e:6c:f5: 91:57:69:0b:dc:49:71:a0:bb:68:14:84:a4:e6:23: b3:a3:71:37:8b:98:37:0d:54:8f:35:e1:a4:9d:ab: e7:52:23:30:e2:7b:73:08:b3:34:98:72:a8:9d:72: e3:cd:8b:a9:0d:c8:c0:33:a8:89:11:ed:2f:13:22: c4:4b:36:b5:91:3f:71:2d:c0:ef:f1:61:24:70:dd: cb:d1:8a:1d:87:d4:06:b2:61:aa:d1:2a:eb:0c:32: 37:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:D9:0E:1E:A0:D3:90:0B:1E:FA:36:63:B2:57:12:B9:7D:63:51:ED X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a408ca79-57cf-44dd-85a6-797e9961d603.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.249.48.0/22 Signature Algorithm: sha256WithRSAEncryption 07:55:92:c4:d1:e0:b3:e2:11:de:fe:7a:9b:18:4b:d9:8e:ac: 96:ed:d3:70:d8:5a:1f:5f:4a:c6:2f:2d:eb:91:1b:f9:be:e2: d4:79:ef:fe:cf:d2:af:d1:2b:12:53:89:9a:61:20:99:25:e7: 14:fe:7b:e3:98:8a:b8:78:24:b8:40:04:f0:8e:54:a4:1f:42: 8f:b7:bc:d7:60:c3:f5:14:06:a4:a8:d3:45:6c:65:fb:32:6e: 8d:da:33:82:da:74:2b:42:2f:f1:af:24:26:c1:e7:cf:43:93: d5:e7:37:13:b8:45:0b:d7:3f:fb:e6:dd:4f:68:d3:bf:aa:43: cf:36:dd:44:04:a2:57:bb:d5:66:f4:90:8b:93:b5:d6:47:0d: 28:49:c0:30:d0:c6:fe:8c:08:fb:b5:50:f7:8b:12:1a:07:ee: f0:bd:59:e1:0e:ef:5c:1c:e5:3e:4c:06:3c:b9:8b:1f:a0:bd: e8:99:59:84:bd:fe:a9:4a:73:d8:04:0f:45:84:a1:cc:e7:83: 5c:ca:b5:9e:3d:3b:ff:5c:df:65:4c:c3:0c:3e:db:dc:3f:7d: 57:5b:68:1e:4c:04:92:f1:88:68:5c:fb:96:34:e9:1f:ad:fe: 96:a7:6d:6f:76:d7:36:c1:00:0f:53:a9:3f:1c:d4:1c:ad:aa: 49:4e:70:0c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUA7VFkQZHXiktwAjcvgV1w5wQtdUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTcwMDA2WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A2MDFhNDhmNzM5ZGI5MmUzNjdjYmQwZGQ5OGM4ZWRhNTc4 ZTMyNDNhZjFhNmZmNTA3N2IzNTExMjhjODZmYTg4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQChEkp3o2Kkmbf8VSJxb2gJV9DlyGJE6Gslts8NuXEnZ0Ei TJFiD9k8xU+iDRSfDStIruVsb21VIfNZsp4+86jF9JmmAqDuEEZZIqiM7lFmYKur T/e/n/4ZvcyAO/DJT4cfdwrwpHWG/aDm9U83K/PWvkt41492cDf6A4uI6pXhnfNd hoB8EX2RPPi9CqouxvrqS+q1E1ZzxxOnYsPYrpfW0j5s9ZFXaQvcSXGgu2gUhKTm I7OjcTeLmDcNVI814aSdq+dSIzDie3MIszSYcqidcuPNi6kNyMAzqIkR7S8TIsRL NrWRP3EtwO/xYSRw3cvRih2H1AayYarRKusMMjejAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUvtkOHqDTkAse+jZjslcSuX1jUe0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2E0MDhjYTc5LTU3Y2YtNDRkZC04NWE2LTc5N2U5OTYxZDYwMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIN+TAwDQYJKoZIhvcNAQELBQADggEBAAdVksTR4LPiEd7+epsYS9mOrJbt 03DYWh9fSsYvLeuRG/m+4tR57/7P0q/RKxJTiZphIJkl5xT+e+OYirh4JLhABPCO VKQfQo+3vNdgw/UUBqSo00VsZfsybo3aM4LadCtCL/GvJCbB589Dk9XnNxO4RQvX P/vm3U9o07+qQ8823UQEole71Wb0kIuTtdZHDShJwDDQxv6MCPu1UPeLEhoH7vC9 WeEO71wc5T5MBjy5ix+gveiZWYS9/qlKc9gED0WEoczng1zKtZ49O/9c32VMwww+ 29w/fVdbaB5MBJLxiGhc+5Y06R+t/panbW921zbBAA9TqT8c1BytqklOcAw= -----END CERTIFICATE-----Generated at Fri Oct 17 23:45:48 2025 by rpki-client