$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0b1af166-d12b-4f82-a2be-9c978a28a997.roa File: 0b1af166-d12b-4f82-a2be-9c978a28a997.roa (raw, json) Hash identifier: jkRBmvI5bcXx6ZqsU7n4N1aJ91C98Ox2dNqkdbQ7Sng= Subject key identifier: 93:36:DE:B4:08:06:EB:02:F6:2B:F5:BD:DD:A8:78:FC:12:09:48:BF Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: F96FB873320F423BE9380E91FDAD1E45919FA8 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0b1af166-d12b-4f82-a2be-9c978a28a997.roa Signing time: Sat 18 Oct 2025 12:23:39 +0000 ROA not before: Sat 18 Oct 2025 12:23:39 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.249.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: f9:6f:b8:73:32:0f:42:3b:e9:38:0e:91:fd:ad:1e:45:91:9f:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 12:23:39 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=d114c625c2aa105015f25f9a5e8a09c983e1330c15d73e9cd3de759e28da3a17, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d9:6a:84:d1:92:45:58:f3:89:9b:07:b6:2d: c9:f8:fe:bd:94:ed:7f:54:4a:f1:66:1a:39:0a:bd: 5b:b5:57:a7:b1:26:a0:06:dc:46:75:d3:90:00:51: ae:bb:a2:8b:d2:29:40:67:ad:39:4f:cb:da:a5:61: 92:02:98:89:fe:89:b5:71:b6:5b:8e:13:e7:9d:67: 10:d8:a3:0f:ea:19:46:14:a6:01:b4:63:1d:4a:bd: f6:cb:ac:59:6f:c7:72:35:42:0e:b8:47:6e:79:34: 52:4e:3c:5c:eb:89:26:05:74:b7:51:50:31:76:b0: b5:db:bb:6e:19:82:e1:3d:a7:24:22:d8:48:00:2c: d7:35:e5:30:8a:b4:75:bb:b6:16:51:a4:7b:6e:62: b8:4e:f1:53:77:b7:ed:28:80:16:2a:80:dd:c0:18: 16:9f:65:ee:c5:7a:2c:52:5b:b6:c3:85:a7:2c:a9: 93:93:ca:12:6e:ab:d8:25:0b:f4:4d:86:07:a6:86: 8b:06:4b:15:e7:1c:0f:45:af:7d:d7:ed:f5:1f:0c: 06:b7:f3:f0:9d:9d:d2:23:4e:e1:a7:92:f8:1d:e9: b0:93:1a:de:68:3c:9b:25:f7:9f:4c:34:e6:5b:58: 65:6c:1f:70:b7:8e:d5:eb:6b:ad:a1:79:4d:0a:8f: 3f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:36:DE:B4:08:06:EB:02:F6:2B:F5:BD:DD:A8:78:FC:12:09:48:BF X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0b1af166-d12b-4f82-a2be-9c978a28a997.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.249.87.0/24 Signature Algorithm: sha256WithRSAEncryption 12:be:4d:8c:b7:66:72:ec:a2:36:be:75:12:2f:4a:a4:34:1f: bf:cc:d3:1b:1f:a6:fb:1d:ab:02:17:ba:f7:5a:bf:41:0f:72: c3:73:f7:48:ae:19:46:a7:53:28:d4:3f:23:7b:14:c2:b7:3c: 46:1c:eb:48:f0:8d:90:ad:60:6c:28:8d:17:a6:88:51:a5:6e: 03:f9:26:97:85:d2:58:24:f1:2a:f7:9b:ea:7e:d5:fb:99:cb: b2:97:2c:48:49:bb:78:ad:31:61:89:37:8d:58:7d:60:d6:35: ce:60:83:08:58:c6:53:8f:13:bd:22:42:0e:4e:89:a2:be:dc: 83:ff:0b:4f:08:95:01:00:4a:1f:c1:63:17:20:8c:d2:bd:7f: 8d:59:c6:27:ac:b1:38:ec:f9:4a:ea:d2:1e:45:c8:57:b9:e1: cd:96:69:4e:2f:a9:90:03:0b:2d:b8:65:b8:a1:97:ba:a9:c9: d5:69:04:92:a1:76:a0:49:db:85:52:43:f7:16:07:99:ff:8c: 17:7b:af:71:44:52:2e:bb:0f:40:51:07:e8:fe:15:83:45:0b: bb:75:94:30:4c:e8:8b:37:6a:e7:27:e0:00:95:79:eb:7d:cb: 5c:24:23:89:94:8f:b9:ae:c6:9d:50:9c:32:b0:9e:aa:8b:9f: ca:ea:50:12 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAPlvuHMyD0I76TgOkf2tHkWRn6gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTIyMzM5WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BkMTE0YzYyNWMyYWExMDUwMTVmMjVmOWE1ZThhMDljOTgz ZTEzMzBjMTVkNzNlOWNkM2RlNzU5ZTI4ZGEzYTE3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQ2WqE0ZJFWPOJmwe2Lcn4/r2U7X9USvFmGjkKvVu1V6ex JqAG3EZ105AAUa67oovSKUBnrTlPy9qlYZICmIn+ibVxtluOE+edZxDYow/qGUYU pgG0Yx1KvfbLrFlvx3I1Qg64R255NFJOPFzriSYFdLdRUDF2sLXbu24ZguE9pyQi 2EgALNc15TCKtHW7thZRpHtuYrhO8VN3t+0ogBYqgN3AGBafZe7FeixSW7bDhacs qZOTyhJuq9glC/RNhgemhosGSxXnHA9Fr33X7fUfDAa38/CdndIjTuGnkvgd6bCT Gt5oPJsl959MNOZbWGVsH3C3jtXra62heU0Kjz9LAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUkzbetAgG6wL2K/W93ah4/BIJSL8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzBiMWFmMTY2LWQxMmItNGY4Mi1hMmJlLTljOTc4YTI4YTk5Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAN+VcwDQYJKoZIhvcNAQELBQADggEBABK+TYy3ZnLsoja+dRIvSqQ0H7/M 0xsfpvsdqwIXuvdav0EPcsNz90iuGUanUyjUPyN7FMK3PEYc60jwjZCtYGwojRem iFGlbgP5JpeF0lgk8Sr3m+p+1fuZy7KXLEhJu3itMWGJN41YfWDWNc5ggwhYxlOP E70iQg5OiaK+3IP/C08IlQEASh/BYxcgjNK9f41ZxiessTjs+Urq0h5FyFe54c2W aU4vqZADCy24Zbihl7qpydVpBJKhdqBJ24VSQ/cWB5n/jBd7r3FEUi67D0BRB+j+ FYNFC7t1lDBM6Is3aucn4ACVeet9y1wkI4mUj7muxp1QnDKwnqqLn8rqUBI= -----END CERTIFICATE-----Generated at Mon Oct 20 05:17:01 2025 by rpki-client