$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/00ccd3ce-a327-49b5-95e2-828d5045d116.roa File: 00ccd3ce-a327-49b5-95e2-828d5045d116.roa (raw, json) Hash identifier: MIs2GLNwO51TmUXAxNKmWIhl3C+6xE0bvXu2ChHBojg= Subject key identifier: 35:5B:B8:1E:7F:99:67:88:24:BE:B0:DB:2B:DC:1D:74:B1:B6:D4:35 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 495C29AAAA33F32AD44830CD2E154793545EB9D4 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/00ccd3ce-a327-49b5-95e2-828d5045d116.roa Signing time: Sat 18 Oct 2025 12:32:31 +0000 ROA not before: Sat 18 Oct 2025 12:32:31 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.249.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:5c:29:aa:aa:33:f3:2a:d4:48:30:cd:2e:15:47:93:54:5e:b9:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 12:32:31 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=15da4c35cb5375d52e4da3b4db52a032f9605673dedfbd5adc674328aa9911d9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:48:a7:ce:e6:d4:27:5a:bb:f1:27:bc:a2:a0: e8:74:9c:4e:bf:78:6a:c2:2f:2f:d9:6e:e4:dc:6b: 28:af:18:b4:41:c5:b7:10:da:79:cf:3d:7d:48:f4: 77:a9:a4:df:bd:64:ba:29:6f:98:be:6d:98:44:89: e2:c7:ee:95:a4:84:ae:b3:0a:78:b0:c4:79:c2:da: 58:da:af:fa:66:f8:09:a5:ef:54:88:e0:52:d0:c7: 7d:ae:b3:0d:76:bf:90:84:a7:64:59:24:7d:80:61: ea:ff:0f:5b:d1:77:3a:4e:66:8e:13:ef:5b:7a:f8: d5:55:46:8b:12:65:57:c9:d6:21:b3:11:54:e4:a1: 56:95:a9:1b:bc:cf:99:45:2b:32:0e:fa:e2:93:17: 89:e1:f6:20:35:81:15:29:b6:2e:e8:17:11:01:fe: e8:39:a6:c8:bf:a4:18:d8:e7:cf:aa:da:e1:3d:40: 2a:86:3c:46:2f:6f:53:d4:eb:c6:1f:88:2c:2e:03: 22:10:7e:3c:c7:4d:6e:a9:44:52:3b:51:9c:d0:94: d4:2f:81:78:da:86:06:de:45:ab:8c:19:dc:4c:b5: 47:ab:fc:b3:1a:3d:5c:ee:f7:14:c3:fa:8e:27:a2: 03:24:e9:b3:44:12:18:48:10:9a:da:5e:67:a4:9b: d9:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:5B:B8:1E:7F:99:67:88:24:BE:B0:DB:2B:DC:1D:74:B1:B6:D4:35 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/00ccd3ce-a327-49b5-95e2-828d5045d116.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.249.101.0/24 Signature Algorithm: sha256WithRSAEncryption 83:f7:ac:5a:02:fb:46:26:85:37:1d:e4:a2:1f:3c:73:b3:40: ff:62:d1:09:8c:e7:53:13:19:a8:d2:c0:24:1e:6a:eb:31:00: b7:a9:18:19:d5:58:8c:8a:fb:e8:88:29:29:d9:ba:1d:e3:12: fd:2a:ef:7d:05:bf:20:fb:36:02:01:43:1a:25:cf:72:d1:fe: ef:31:2a:5b:04:28:f3:02:12:3e:5a:15:31:59:de:17:4c:30: 3c:81:dc:fa:b2:04:05:29:d8:98:44:a0:7f:30:22:9f:76:3a: ed:b6:72:ee:73:9e:5d:a2:8b:dc:89:66:c4:5e:94:3b:d0:76: 30:63:28:32:6b:c6:a3:07:fc:d4:07:19:e5:70:24:be:78:14: 03:3c:47:48:87:c6:2c:a4:0f:8a:f8:48:46:d6:f7:a6:14:07: 13:78:75:b1:5e:f7:77:84:bd:69:6e:25:9c:24:68:d0:ae:e2: 7f:d4:d7:f7:7e:54:f4:37:88:bd:62:16:47:dc:15:a3:bb:9c: c8:42:41:df:5b:d8:ab:98:7d:4e:0c:77:4b:f6:59:39:72:83: f6:d1:cf:8f:2d:9b:4d:95:c3:93:91:dc:12:77:8f:1e:74:6c: 6d:4a:ee:69:d2:95:47:5a:73:61:c9:f8:80:45:cb:e5:fb:32: 40:46:e3:4e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSVwpqqoz8yrUSDDNLhVHk1ReudQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTIzMjMxWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AxNWRhNGMzNWNiNTM3NWQ1MmU0ZGEzYjRkYjUyYTAzMmY5 NjA1NjczZGVkZmJkNWFkYzY3NDMyOGFhOTkxMWQ5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/SKfO5tQnWrvxJ7yioOh0nE6/eGrCLy/ZbuTcayivGLRB xbcQ2nnPPX1I9HeppN+9ZLopb5i+bZhEieLH7pWkhK6zCniwxHnC2ljar/pm+Aml 71SI4FLQx32usw12v5CEp2RZJH2AYer/D1vRdzpOZo4T71t6+NVVRosSZVfJ1iGz EVTkoVaVqRu8z5lFKzIO+uKTF4nh9iA1gRUpti7oFxEB/ug5psi/pBjY58+q2uE9 QCqGPEYvb1PU68YfiCwuAyIQfjzHTW6pRFI7UZzQlNQvgXjahgbeRauMGdxMtUer /LMaPVzu9xTD+o4nogMk6bNEEhhIEJraXmekm9lNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUNVu4Hn+ZZ4gkvrDbK9wddLG21DUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzAwY2NkM2NlLWEzMjctNDliNS05NWUyLTgyOGQ1MDQ1ZDExNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAN+WUwDQYJKoZIhvcNAQELBQADggEBAIP3rFoC+0YmhTcd5KIfPHOzQP9i 0QmM51MTGajSwCQeausxALepGBnVWIyK++iIKSnZuh3jEv0q730FvyD7NgIBQxol z3LR/u8xKlsEKPMCEj5aFTFZ3hdMMDyB3PqyBAUp2JhEoH8wIp92Ou22cu5znl2i i9yJZsRelDvQdjBjKDJrxqMH/NQHGeVwJL54FAM8R0iHxiykD4r4SEbW96YUBxN4 dbFe93eEvWluJZwkaNCu4n/U1/d+VPQ3iL1iFkfcFaO7nMhCQd9b2KuYfU4Md0v2 WTlyg/bRz48tm02Vw5OR3BJ3jx50bG1K7mnSlUdac2HJ+IBFy+X7MkBG404= -----END CERTIFICATE-----Generated at Mon Oct 20 11:01:54 2025 by rpki-client