$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ab1ac244-5123-4254-a993-cbca4d6fd03b.roa File: ab1ac244-5123-4254-a993-cbca4d6fd03b.roa (raw, json) Hash identifier: p9Hx9D2VsQvEMME45WchHjKRfr3M6gi1D0X7f8cS4b4= Subject key identifier: CE:16:50:00:A4:5B:C7:CB:B4:D6:F8:0C:D8:08:ED:F8:A1:54:4A:7E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 26DC307224E03F9D01762CBFAE6C0CABFA1CEF96 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ab1ac244-5123-4254-a993-cbca4d6fd03b.roa Signing time: Mon 22 Sep 2025 16:41:54 +0000 ROA not before: Mon 22 Sep 2025 16:41:54 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.249.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:dc:30:72:24:e0:3f:9d:01:76:2c:bf:ae:6c:0c:ab:fa:1c:ef:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 16:41:54 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=20ab1d1e48218efda3c88d9b1097edfd5d2a4126d1088cad4d74bd90483c7ade, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:89:d9:1f:87:96:90:ea:a0:5a:00:06:13:0d: 1c:3d:5c:d6:0f:6b:87:6d:60:e0:38:6f:53:4d:74: e9:01:d3:03:97:d9:96:71:e0:0e:94:0d:9d:9c:c4: 44:e0:e6:ea:66:ac:f0:bb:2d:85:55:65:71:16:aa: 3e:fe:d1:a4:3e:c9:2d:9c:74:3a:ee:89:57:78:12: 72:87:17:c5:48:9d:ec:47:3e:eb:e4:cb:e7:f0:64: 13:2e:37:4f:6e:9a:ee:cf:2a:f0:d0:f3:c6:da:c9: 1d:be:00:86:60:f9:ca:a6:60:49:22:13:37:1f:16: 02:5d:82:0f:96:c0:84:c8:8a:3e:30:86:b2:93:da: 78:1e:4e:4d:e2:d0:83:d3:d9:7f:ef:51:ff:ce:ea: 4b:59:1a:7f:7d:71:f5:3d:f5:f8:13:32:3d:95:07: 8a:f6:2c:e2:ea:bf:7c:a4:14:fb:af:cd:81:e9:08: 7f:7d:6a:89:fa:4e:47:47:57:3b:f4:ca:37:9f:89: e5:e3:51:dc:58:fe:3d:92:c1:be:0d:3c:81:e5:05: 14:20:28:4d:5c:6c:9f:27:7c:8d:42:92:cf:30:3a: ba:96:26:09:02:30:35:64:c5:ef:72:d8:d6:0a:30: 24:a5:08:62:2c:00:09:98:10:ee:51:0f:ce:90:9f: 81:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:16:50:00:A4:5B:C7:CB:B4:D6:F8:0C:D8:08:ED:F8:A1:54:4A:7E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ab1ac244-5123-4254-a993-cbca4d6fd03b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.249.21.0/24 Signature Algorithm: sha256WithRSAEncryption 12:c3:ea:6e:4e:06:27:40:4d:e6:63:3e:69:7c:52:38:f0:06: ad:1c:b3:91:40:15:e7:ad:3f:15:98:c2:5d:06:bd:37:bb:69: 3f:0f:aa:37:82:f7:ad:a9:8e:0a:89:ad:66:79:ca:8c:03:98: f4:c1:34:6d:c4:2e:c6:ff:e5:d1:d7:86:a1:d5:b7:74:86:98: ad:c7:3d:21:7c:04:1d:85:1e:62:0e:c0:49:b4:0d:c3:eb:03: 5a:a7:a3:1f:e7:42:04:c0:f9:a1:d0:30:22:c2:06:ef:6e:05: a2:0f:33:d1:67:59:fe:47:76:51:3f:0e:ab:b9:da:9a:9e:ed: 0e:67:75:85:0c:60:e0:4e:dd:4c:1d:c1:39:a7:85:0d:a8:9d: 5a:0e:78:bb:c1:3d:de:b9:8d:90:71:79:22:7e:50:4e:15:38: 31:a8:63:f9:6a:3d:76:dc:7d:60:d1:cd:09:51:3f:7b:a7:f4: 7e:0f:ae:ad:f8:ad:7f:b3:b2:1b:87:97:d2:c1:53:4e:ad:71: 43:b5:e7:f2:47:df:56:d8:dd:ce:57:a4:d1:9e:e3:e5:90:f6: 24:9b:7c:32:41:ad:19:ab:51:2a:a3:cc:89:5d:ef:88:ec:93: d2:10:27:f6:9e:65:1c:c1:63:60:33:cb:c1:2b:9f:37:a9:67: 9a:45:3f:32 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJtwwciTgP50Bdiy/rmwMq/oc75YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTY0MTU0WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AyMGFiMWQxZTQ4MjE4ZWZkYTNjODhkOWIxMDk3ZWRmZDVk MmE0MTI2ZDEwODhjYWQ0ZDc0YmQ5MDQ4M2M3YWRlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDuidkfh5aQ6qBaAAYTDRw9XNYPa4dtYOA4b1NNdOkB0wOX 2ZZx4A6UDZ2cxETg5upmrPC7LYVVZXEWqj7+0aQ+yS2cdDruiVd4EnKHF8VInexH Puvky+fwZBMuN09umu7PKvDQ88bayR2+AIZg+cqmYEkiEzcfFgJdgg+WwITIij4w hrKT2ngeTk3i0IPT2X/vUf/O6ktZGn99cfU99fgTMj2VB4r2LOLqv3ykFPuvzYHp CH99aon6TkdHVzv0yjefieXjUdxY/j2Swb4NPIHlBRQgKE1cbJ8nfI1Cks8wOrqW JgkCMDVkxe9y2NYKMCSlCGIsAAmYEO5RD86Qn4GDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUzhZQAKRbx8u01vgM2Ajt+KFUSn4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2FiMWFjMjQ0LTUxMjMtNDI1NC1hOTkzLWNiY2E0ZDZmZDAzYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAN+RUwDQYJKoZIhvcNAQELBQADggEBABLD6m5OBidATeZjPml8UjjwBq0c s5FAFeetPxWYwl0GvTe7aT8PqjeC962pjgqJrWZ5yowDmPTBNG3ELsb/5dHXhqHV t3SGmK3HPSF8BB2FHmIOwEm0DcPrA1qnox/nQgTA+aHQMCLCBu9uBaIPM9FnWf5H dlE/Dqu52pqe7Q5ndYUMYOBO3UwdwTmnhQ2onVoOeLvBPd65jZBxeSJ+UE4VODGo Y/lqPXbcfWDRzQlRP3un9H4Prq34rX+zshuHl9LBU06tcUO15/JH31bY3c5XpNGe 4+WQ9iSbfDJBrRmrUSqjzIld74jsk9IQJ/aeZRzBY2Azy8ErnzepZ5pFPzI= -----END CERTIFICATE-----Generated at Fri Oct 17 21:59:30 2025 by rpki-client