$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3b2f45cd-42df-419e-b6e7-c58b1d03c3b5.roa File: 3b2f45cd-42df-419e-b6e7-c58b1d03c3b5.roa (raw, json) Hash identifier: DrTCjsV/HYdcz+XXGrGm+lLkLmQcrSC28e9S4BKGfKI= Subject key identifier: C6:07:EA:A8:A3:B2:A6:50:5F:9B:4F:94:25:3F:08:BE:99:72:30:D0 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5CE34530585C46596C15271F31F305BA4C157615 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3b2f45cd-42df-419e-b6e7-c58b1d03c3b5.roa Signing time: Sun 19 Oct 2025 04:34:01 +0000 ROA not before: Sun 19 Oct 2025 04:34:01 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.249.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:e3:45:30:58:5c:46:59:6c:15:27:1f:31:f3:05:ba:4c:15:76:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 04:34:01 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=6d4422af669dd3d3a18e6b031ff97f1a0427ccb03a751c25e788a949dc7f2ef7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:18:25:a7:8f:21:b4:09:51:72:c0:9b:3c:60: 7d:e0:83:04:fd:69:9d:a3:c2:2e:3c:da:89:66:94: 37:86:3d:78:6e:43:83:dc:2d:20:4f:6f:83:4e:b8: b9:ee:21:42:ce:08:4a:f6:77:fa:d9:e4:ae:5c:b8: 4c:b4:f4:3b:92:ff:5d:f2:f8:89:2d:99:dc:14:64: 32:b2:57:16:54:ae:7b:5d:e9:17:7d:45:9b:39:7b: d8:41:8e:c9:8f:93:39:f8:36:79:45:2e:da:38:30: 28:84:d4:a8:73:0b:07:d6:b0:fa:1a:d3:da:d5:b8: 6b:4a:08:8d:e6:ad:61:b1:4e:4b:e4:63:12:40:b8: 1d:eb:0b:05:d4:1e:6f:a3:e8:62:bd:44:53:95:32: e7:c4:61:fb:68:57:7d:67:ca:cb:b3:6d:3f:f7:78: 3e:92:c9:4e:06:d7:52:96:37:24:18:df:28:67:53: 31:8f:f4:22:50:ec:16:e4:0c:8d:3a:3c:dc:45:29: 0f:52:c7:4d:cc:60:63:e5:29:98:8b:00:b0:ad:75: 11:34:75:04:96:f0:15:a7:f1:d8:ec:b0:39:a0:5a: 93:6e:b3:24:0e:da:59:75:6f:0f:41:79:0e:78:ca: c3:c1:a5:4b:ea:40:2a:42:21:41:c7:bc:17:e8:51: 38:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:07:EA:A8:A3:B2:A6:50:5F:9B:4F:94:25:3F:08:BE:99:72:30:D0 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3b2f45cd-42df-419e-b6e7-c58b1d03c3b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.249.206.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:b1:76:3a:62:01:46:e5:c7:d2:0b:bc:19:9b:38:1f:4d:f0: 76:5a:38:df:a4:d1:a0:85:a4:76:2b:b8:19:af:79:18:e5:33: 40:d7:58:d3:5c:c3:ed:74:76:63:8d:77:24:85:b4:43:f1:2e: 97:4d:f2:93:ea:26:4b:89:a8:ed:a4:7b:f5:72:62:bc:5d:26: 2f:83:ae:a7:36:43:b0:ef:7f:6c:e1:df:4b:62:4e:ad:b1:05: 68:bd:db:c8:23:6f:11:a1:d7:91:cb:18:a0:74:69:dc:c8:d2: 85:b3:4e:64:c0:13:83:64:d2:33:e9:19:01:11:c9:2b:0d:29: 65:47:0b:c7:ee:c1:13:2a:53:17:e4:09:be:02:72:5e:d1:38: 2e:03:53:78:cf:8f:0d:52:f7:55:d6:82:73:f1:23:e3:9f:11: 0a:eb:0e:12:e9:4e:c3:38:a2:9d:18:40:68:2a:80:61:7b:2c: 25:6d:f2:d8:a0:19:18:20:60:7d:cc:96:83:a0:95:fe:ed:18: 16:30:df:4f:4d:2f:8f:ef:e8:75:99:30:29:1c:81:72:dd:20: 47:8a:5b:18:bb:51:d5:80:09:74:11:4b:a0:91:6f:4e:f3:c6: c6:84:e6:5b:6d:1b:da:23:d4:cd:bb:0f:b1:e9:9d:92:ee:01: 19:27:34:6b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXONFMFhcRllsFScfMfMFukwVdhUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MDQzNDAxWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZDQ0MjJhZjY2OWRkM2QzYTE4ZTZiMDMxZmY5N2YxYTA0 MjdjY2IwM2E3NTFjMjVlNzg4YTk0OWRjN2YyZWY3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJGCWnjyG0CVFywJs8YH3ggwT9aZ2jwi482olmlDeGPXhu Q4PcLSBPb4NOuLnuIULOCEr2d/rZ5K5cuEy09DuS/13y+IktmdwUZDKyVxZUrntd 6Rd9RZs5e9hBjsmPkzn4NnlFLto4MCiE1KhzCwfWsPoa09rVuGtKCI3mrWGxTkvk YxJAuB3rCwXUHm+j6GK9RFOVMufEYftoV31nysuzbT/3eD6SyU4G11KWNyQY3yhn UzGP9CJQ7BbkDI06PNxFKQ9Sx03MYGPlKZiLALCtdRE0dQSW8BWn8djssDmgWpNu syQO2ll1bw9BeQ54ysPBpUvqQCpCIUHHvBfoUTgpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUxgfqqKOyplBfm0+UJT8IvplyMNAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzNiMmY0NWNkLTQyZGYtNDE5ZS1iNmU3LWM1OGIxZDAzYzNiNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAN+c4wDQYJKoZIhvcNAQELBQADggEBAHqxdjpiAUblx9ILvBmbOB9N8HZa ON+k0aCFpHYruBmveRjlM0DXWNNcw+10dmONdySFtEPxLpdN8pPqJkuJqO2ke/Vy YrxdJi+Drqc2Q7Dvf2zh30tiTq2xBWi928gjbxGh15HLGKB0adzI0oWzTmTAE4Nk 0jPpGQERySsNKWVHC8fuwRMqUxfkCb4Ccl7ROC4DU3jPjw1S91XWgnPxI+OfEQrr DhLpTsM4op0YQGgqgGF7LCVt8tigGRggYH3MloOglf7tGBYw309NL4/v6HWZMCkc gXLdIEeKWxi7UdWACXQRS6CRb07zxsaE5lttG9oj1M27D7HpnZLuARknNGs= -----END CERTIFICATE-----Generated at Mon Oct 20 17:29:34 2025 by rpki-client