$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a9029aec-0690-4aa7-b71f-4513691d30c2.roa File: a9029aec-0690-4aa7-b71f-4513691d30c2.roa (raw, json) Hash identifier: S4Vz2CM6Ef3vA2/CJo8zM1r+lnuUg8UGO9XcGFKXDKs= Subject key identifier: 1F:BE:55:16:4A:5A:A0:3E:4E:84:59:07:EB:8F:96:86:D0:A4:7D:E7 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6FA361ECF5E30510CAE9C1CAE7C8ED2B98CEB280 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a9029aec-0690-4aa7-b71f-4513691d30c2.roa Signing time: Mon 22 Sep 2025 16:40:47 +0000 ROA not before: Mon 22 Sep 2025 16:40:47 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.249.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:a3:61:ec:f5:e3:05:10:ca:e9:c1:ca:e7:c8:ed:2b:98:ce:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 16:40:47 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=d273ceb78a85b8644a46728958d4ab23590ed8b6fb5f99056bb3cf1ea394479e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:a5:52:85:e6:a7:79:22:8b:79:e3:05:1c:22: 5e:af:8b:7a:42:90:fb:c0:a5:dd:39:b1:84:43:6d: 1d:68:f2:45:52:e0:ff:9d:1e:05:2b:e2:44:cf:86: 52:2c:1d:77:aa:f4:7e:30:b5:72:e9:26:3c:13:0e: fb:70:31:bf:1f:4f:68:62:72:11:76:46:33:49:0a: 34:8a:91:fa:6d:36:fb:68:3d:2a:c2:d2:8b:88:55: 71:0c:40:bd:48:5c:76:41:61:84:9e:4e:44:07:5d: f1:9d:99:f2:06:0a:75:64:48:8e:b6:28:8e:60:aa: 73:06:1a:66:2d:ad:fe:27:eb:eb:b7:8e:1c:72:c4: 93:b1:27:b6:19:49:d4:ee:b8:f7:d0:99:48:8a:41: bf:04:52:75:eb:95:dc:5e:9c:8d:c2:4d:02:de:5d: d3:37:df:89:11:98:e0:f3:74:f4:36:d3:22:69:29: c6:24:35:f9:46:46:ef:72:6d:f0:ff:20:68:7b:37: 0d:1c:9b:f5:f2:5f:c9:cd:7e:4d:cf:c1:8f:2b:bc: 01:e1:4e:97:9a:68:3b:c1:19:f7:ca:a6:c5:86:73: 19:2b:f3:81:fe:6e:23:ac:65:bf:67:61:9a:7c:a7: 60:11:5c:10:72:ef:d9:d6:e3:73:a3:e1:03:ee:06: 83:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:BE:55:16:4A:5A:A0:3E:4E:84:59:07:EB:8F:96:86:D0:A4:7D:E7 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a9029aec-0690-4aa7-b71f-4513691d30c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.249.197.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:e1:eb:41:a1:51:60:57:0b:aa:3d:4c:ce:1e:ed:8f:fd:ce: 75:f8:5a:1d:b9:96:ce:3d:a0:9d:c8:93:dd:00:8a:0f:25:d4: f8:11:6e:5d:4e:b9:62:80:be:9d:12:8d:b2:01:48:d9:ad:99: d2:3a:86:2b:88:4e:68:a8:95:1a:3f:17:d7:ab:35:a2:d3:b4: e7:19:b2:24:91:97:f3:1e:a2:19:0b:98:fe:b9:bc:99:9a:c2: 72:e5:3e:9f:65:d1:12:31:ba:4f:41:bf:35:a7:ec:f5:42:39: e5:f4:ec:09:10:dc:07:30:97:32:e7:66:43:6b:cb:3a:4f:56: be:5b:56:70:17:80:dc:58:d2:c5:5e:8c:30:da:0b:a2:e6:a8: a7:32:3a:ef:1a:e3:b5:d4:dc:f9:70:32:7e:67:27:de:81:11: 50:cf:b7:4e:13:e6:02:c1:ae:68:0d:d4:2c:ed:22:83:ac:8e: 1e:1c:20:0b:9b:0d:37:b3:dc:2f:cc:e5:77:c4:d2:b6:cc:60: 85:38:dd:91:8f:9a:b2:a2:53:89:ab:d5:66:d8:a0:c6:32:da: 29:cd:dc:18:c7:57:72:6d:ec:65:09:6d:00:ac:02:0d:31:93: 42:89:8e:b1:32:1f:c5:62:20:fc:4e:20:61:83:5b:ae:1d:83: 54:31:54:79 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUb6Nh7PXjBRDK6cHK58jtK5jOsoAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTY0MDQ3WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMjczY2ViNzhhODViODY0NGE0NjcyODk1OGQ0YWIyMzU5 MGVkOGI2ZmI1Zjk5MDU2YmIzY2YxZWEzOTQ0NzllMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCMpVKF5qd5Iot54wUcIl6vi3pCkPvApd05sYRDbR1o8kVS 4P+dHgUr4kTPhlIsHXeq9H4wtXLpJjwTDvtwMb8fT2hichF2RjNJCjSKkfptNvto PSrC0ouIVXEMQL1IXHZBYYSeTkQHXfGdmfIGCnVkSI62KI5gqnMGGmYtrf4n6+u3 jhxyxJOxJ7YZSdTuuPfQmUiKQb8EUnXrldxenI3CTQLeXdM334kRmODzdPQ20yJp KcYkNflGRu9ybfD/IGh7Nw0cm/XyX8nNfk3PwY8rvAHhTpeaaDvBGffKpsWGcxkr 84H+biOsZb9nYZp8p2ARXBBy79nW43Oj4QPuBoPTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUH75VFkpaoD5OhFkH64+WhtCkfecwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2E5MDI5YWVjLTA2OTAtNGFhNy1iNzFmLTQ1MTM2OTFkMzBjMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAN+cUwDQYJKoZIhvcNAQELBQADggEBAJzh60GhUWBXC6o9TM4e7Y/9znX4 Wh25ls49oJ3Ik90Aig8l1PgRbl1OuWKAvp0SjbIBSNmtmdI6hiuITmiolRo/F9er NaLTtOcZsiSRl/MeohkLmP65vJmawnLlPp9l0RIxuk9BvzWn7PVCOeX07AkQ3Acw lzLnZkNryzpPVr5bVnAXgNxY0sVejDDaC6LmqKcyOu8a47XU3PlwMn5nJ96BEVDP t04T5gLBrmgN1CztIoOsjh4cIAubDTez3C/M5XfE0rbMYIU43ZGPmrKiU4mr1WbY oMYy2inN3BjHV3Jt7GUJbQCsAg0xk0KJjrEyH8ViIPxOIGGDW64dg1QxVHk= -----END CERTIFICATE-----Generated at Fri Oct 17 22:02:07 2025 by rpki-client