$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/376c4c51-3503-48c1-97af-0028bebf2cda.roa File: 376c4c51-3503-48c1-97af-0028bebf2cda.roa (raw, json) Hash identifier: FvrvAmlWTdE9JtsquJ03EuoCTWuAEd1PCRWuF7uYna4= Subject key identifier: C7:81:86:99:6E:23:55:7A:D4:94:79:02:6F:B7:D5:B4:02:9F:E3:99 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1D0500C3D28D04539B465075880430EA72515CF2 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/376c4c51-3503-48c1-97af-0028bebf2cda.roa Signing time: Sat 18 Oct 2025 09:11:14 +0000 ROA not before: Sat 18 Oct 2025 09:11:14 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.249.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:05:00:c3:d2:8d:04:53:9b:46:50:75:88:04:30:ea:72:51:5c:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 09:11:14 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=d69178c1d8797a9a581fd91e2fe79e8285c38e1349f4ca94fab47bed5e057184, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:81:2a:86:49:20:0e:af:b2:65:7a:a0:f2:48: 26:88:a2:65:a7:a6:a9:eb:9e:8d:9f:57:31:0a:17: 2b:2d:42:3b:02:36:09:3b:25:41:98:ea:49:63:31: a6:37:ee:43:5b:c5:75:54:87:21:24:20:c7:30:94: 47:82:e6:a6:37:53:b7:24:b8:9f:d9:db:ec:55:ae: 17:cc:2a:f5:f4:6d:07:88:4d:54:8b:71:96:73:c3: 05:77:10:77:24:5c:b4:b6:d1:12:a4:b8:88:e7:b2: 19:76:34:4e:0d:e0:b0:60:93:e3:3f:8e:cf:c0:01: 51:48:8b:78:be:a7:17:36:00:7a:6a:27:b3:de:b2: 59:70:bf:8d:f1:4a:1f:a7:42:77:f3:e5:5f:d0:46: 58:48:ab:e9:c1:b3:ca:a2:7b:3e:1f:67:35:06:61: fa:d1:86:16:ea:47:1c:e5:6b:ed:f5:8b:7c:b2:9d: 91:74:71:b6:07:ec:dc:c8:da:6e:46:88:7f:91:fd: 80:9d:b0:da:53:1c:ed:c6:b4:ca:a2:a9:c0:6b:dc: 14:82:23:1c:c3:53:e3:04:28:12:7c:71:84:f4:f8: ce:11:2a:d0:ae:0e:65:66:b7:a2:52:7f:12:e5:35: 25:a9:bd:3e:36:e2:82:ee:11:f6:41:6c:49:59:d8: 70:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:81:86:99:6E:23:55:7A:D4:94:79:02:6F:B7:D5:B4:02:9F:E3:99 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/376c4c51-3503-48c1-97af-0028bebf2cda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.249.218.0/24 Signature Algorithm: sha256WithRSAEncryption 30:b6:fd:96:b6:5b:ef:99:5e:a0:48:3c:2a:ff:a7:fc:ae:b6: 53:80:30:ae:30:c9:5f:d0:fb:6d:3a:de:59:f9:2c:89:9c:38: 2a:80:83:8c:57:9f:56:65:1c:48:63:79:f9:24:ac:97:24:37: 2f:46:37:34:d3:2f:cc:84:ea:30:0e:c0:f2:82:27:57:a1:d7: 29:52:6a:99:f5:fb:38:66:d7:59:fe:7f:d1:78:6c:97:80:06: 9a:85:8c:03:69:fd:fe:fd:4f:9b:bd:d8:3c:81:b3:19:a1:78: a0:15:bd:17:3e:ba:d2:fc:76:81:e1:c2:b7:55:43:86:8f:a2: 6d:55:8f:5e:f4:fc:1d:b9:62:91:3c:48:f2:87:2a:3e:42:27: cd:70:29:71:94:89:95:77:94:1d:bf:84:1d:43:fe:9c:40:97: 1b:e4:32:f7:ff:c7:7b:0c:50:95:43:6f:d3:4d:db:a1:89:0f: 22:df:12:b0:fc:ee:77:fd:d2:20:65:6d:e9:21:db:21:dd:75: e7:ca:d0:59:ac:ab:aa:ca:56:03:fc:18:78:cd:01:dc:7b:df: cc:f0:d7:ee:5c:93:23:a3:54:7b:f9:7a:54:a1:d5:48:bb:66: 60:af:ee:81:21:d8:b8:35:01:55:cc:8e:c3:f2:7e:af:60:7c: 6e:a3:47:a7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHQUAw9KNBFObRlB1iAQw6nJRXPIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MDkxMTE0WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BkNjkxNzhjMWQ4Nzk3YTlhNTgxZmQ5MWUyZmU3OWU4Mjg1 YzM4ZTEzNDlmNGNhOTRmYWI0N2JlZDVlMDU3MTg0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCOgSqGSSAOr7JleqDySCaIomWnpqnrno2fVzEKFystQjsC Ngk7JUGY6kljMaY37kNbxXVUhyEkIMcwlEeC5qY3U7ckuJ/Z2+xVrhfMKvX0bQeI TVSLcZZzwwV3EHckXLS20RKkuIjnshl2NE4N4LBgk+M/js/AAVFIi3i+pxc2AHpq J7Pesllwv43xSh+nQnfz5V/QRlhIq+nBs8qiez4fZzUGYfrRhhbqRxzla+31i3yy nZF0cbYH7NzI2m5GiH+R/YCdsNpTHO3GtMqiqcBr3BSCIxzDU+MEKBJ8cYT0+M4R KtCuDmVmt6JSfxLlNSWpvT424oLuEfZBbElZ2HCdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUx4GGmW4jVXrUlHkCb7fVtAKf45kwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzM3NmM0YzUxLTM1MDMtNDhjMS05N2FmLTAwMjhiZWJmMmNkYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAN+dowDQYJKoZIhvcNAQELBQADggEBADC2/Za2W++ZXqBIPCr/p/yutlOA MK4wyV/Q+2063ln5LImcOCqAg4xXn1ZlHEhjefkkrJckNy9GNzTTL8yE6jAOwPKC J1eh1ylSapn1+zhm11n+f9F4bJeABpqFjANp/f79T5u92DyBsxmheKAVvRc+utL8 doHhwrdVQ4aPom1Vj170/B25YpE8SPKHKj5CJ81wKXGUiZV3lB2/hB1D/pxAlxvk Mvf/x3sMUJVDb9NN26GJDyLfErD87nf90iBlbekh2yHddefK0Fmsq6rKVgP8GHjN Adx738zw1+5ckyOjVHv5elSh1Ui7ZmCv7oEh2Lg1AVXMjsPyfq9gfG6jR6c= -----END CERTIFICATE-----Generated at Mon Oct 20 08:43:58 2025 by rpki-client