$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a7a171c3-0119-4b01-8ea7-6f8bcddfa002.roa File: a7a171c3-0119-4b01-8ea7-6f8bcddfa002.roa (raw, json) Hash identifier: zBuuQJm3m6JDOS1ws6DaTSDCrY/ue3QLtfeAl6uSsqY= Subject key identifier: A4:DA:67:93:14:FC:59:90:EA:10:C3:2F:FB:3D:A8:12:A9:4B:48:B4 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 10CC38BC06E50479BB7E84B7BF7B364D885DC572 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a7a171c3-0119-4b01-8ea7-6f8bcddfa002.roa Signing time: Mon 22 Sep 2025 16:46:07 +0000 ROA not before: Mon 22 Sep 2025 16:46:07 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.249.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:cc:38:bc:06:e5:04:79:bb:7e:84:b7:bf:7b:36:4d:88:5d:c5:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 16:46:07 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=0a497840510ef2c50331cc8f6c514f1841ffc8ac1a57396056abaeb802909726, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:bb:4c:43:d2:e3:ef:0a:3f:96:e3:18:fe:32: 3c:90:9b:76:73:9e:50:0e:e7:d5:4a:4d:9e:21:7c: f0:e0:04:6b:ef:cc:7c:1e:3d:7c:6d:48:e3:c0:2d: 52:bc:8b:6a:77:53:16:ac:08:57:c2:a1:3b:a4:70: df:81:8e:66:5f:78:75:ea:a0:6e:93:28:39:f3:00: ad:79:d6:d0:5f:db:e5:a5:cb:cc:77:a0:0f:aa:d0: 89:91:2b:05:77:3d:5e:95:42:05:87:98:c9:42:76: 6b:0e:e4:0e:ec:4c:67:23:04:47:07:74:0d:5c:f7: f1:57:95:da:d9:35:e8:03:0c:ab:7c:f3:16:c5:7f: 66:f3:0b:2d:8c:77:b8:6b:70:ec:21:bb:e9:72:37: b3:50:5c:30:f4:81:83:9b:9e:04:5c:8c:75:53:ae: af:32:48:da:ac:99:e6:84:ca:c6:28:72:8c:29:5b: 72:87:a2:27:84:0b:11:6d:86:12:1f:03:69:8d:2f: 68:21:3e:26:9e:98:66:b1:7b:d3:b0:77:c2:f8:17: 12:bb:fb:e3:d0:65:89:b1:26:7c:69:dd:53:fb:19: 27:59:30:08:a2:f6:96:fc:0b:d9:f7:15:1d:97:26: 8a:41:ca:75:80:df:46:fc:3b:a9:d3:dd:3a:ce:0e: 4e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:DA:67:93:14:FC:59:90:EA:10:C3:2F:FB:3D:A8:12:A9:4B:48:B4 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a7a171c3-0119-4b01-8ea7-6f8bcddfa002.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.249.49.0/24 Signature Algorithm: sha256WithRSAEncryption 30:e7:7a:10:28:58:27:0f:8a:49:3d:7f:d4:6c:b0:be:40:33: 93:9b:ac:47:53:98:a8:5f:08:63:fc:26:ae:bb:19:a4:66:85: 8c:13:c3:aa:0b:69:37:17:74:6d:23:05:ab:ed:7b:e0:d8:f0: 1b:0e:21:f9:e9:af:5a:0f:aa:f0:66:97:a7:96:d1:a4:f8:61: 19:22:02:07:01:49:fd:44:3a:e0:a9:f2:09:65:52:0d:30:7b: b0:63:0a:c3:8b:f5:49:72:0d:33:fc:98:b9:b4:7f:3e:07:bc: b2:39:e6:60:71:ce:bf:90:c8:64:88:d9:6d:9d:0e:49:d3:60: fa:46:cb:46:a2:b6:17:c8:4e:99:f1:33:a0:7a:e3:f4:88:55: ec:2e:d9:4a:40:fa:85:2b:0d:fa:93:da:99:ee:50:de:08:6f: f2:d2:c9:49:b6:5b:a6:f7:6a:08:9f:ce:58:5b:0b:b5:01:74: 70:52:83:01:8d:ae:69:ba:9a:83:b9:3d:95:1d:c6:f1:4d:e5: f5:be:da:41:ab:93:2a:e8:b9:14:8f:96:7b:c5:96:d2:33:9e: 9d:28:05:c0:23:ca:46:85:96:71:0c:35:ad:41:f0:26:27:87: 5c:bd:db:bf:dd:3a:aa:84:76:e2:f8:87:ee:79:99:50:4d:ed: bb:98:7c:aa -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEMw4vAblBHm7foS3v3s2TYhdxXIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTY0NjA3WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AwYTQ5Nzg0MDUxMGVmMmM1MDMzMWNjOGY2YzUxNGYxODQx ZmZjOGFjMWE1NzM5NjA1NmFiYWViODAyOTA5NzI2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfu0xD0uPvCj+W4xj+MjyQm3ZznlAO59VKTZ4hfPDgBGvv zHwePXxtSOPALVK8i2p3UxasCFfCoTukcN+BjmZfeHXqoG6TKDnzAK151tBf2+Wl y8x3oA+q0ImRKwV3PV6VQgWHmMlCdmsO5A7sTGcjBEcHdA1c9/FXldrZNegDDKt8 8xbFf2bzCy2Md7hrcOwhu+lyN7NQXDD0gYObngRcjHVTrq8ySNqsmeaEysYocowp W3KHoieECxFthhIfA2mNL2ghPiaemGaxe9Owd8L4FxK7++PQZYmxJnxp3VP7GSdZ MAii9pb8C9n3FR2XJopBynWA30b8O6nT3TrODk6RAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUpNpnkxT8WZDqEMMv+z2oEqlLSLQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2E3YTE3MWMzLTAxMTktNGIwMS04ZWE3LTZmOGJjZGRmYTAwMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAN+TEwDQYJKoZIhvcNAQELBQADggEBADDnehAoWCcPikk9f9RssL5AM5Ob rEdTmKhfCGP8Jq67GaRmhYwTw6oLaTcXdG0jBavte+DY8BsOIfnpr1oPqvBml6eW 0aT4YRkiAgcBSf1EOuCp8gllUg0we7BjCsOL9UlyDTP8mLm0fz4HvLI55mBxzr+Q yGSI2W2dDknTYPpGy0aithfITpnxM6B64/SIVewu2UpA+oUrDfqT2pnuUN4Ib/LS yUm2W6b3agifzlhbC7UBdHBSgwGNrmm6moO5PZUdxvFN5fW+2kGrkyrouRSPlnvF ltIznp0oBcAjykaFlnEMNa1B8CYnh1y927/dOqqEduL4h+55mVBN7buYfKo= -----END CERTIFICATE-----Generated at Fri Oct 17 22:03:29 2025 by rpki-client