$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3bb82f12-dba0-495c-80bc-4e10ecd88248.roa File: 3bb82f12-dba0-495c-80bc-4e10ecd88248.roa (raw, json) Hash identifier: S8eClo0R9DORrDEx27wW4V7Rv1QLd/c6YKfRVlu8xAI= Subject key identifier: CE:7E:6B:9B:F3:38:F6:83:50:8A:7C:B1:38:18:1B:B1:AE:1B:FB:F8 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 20A8709872ECC5212EFEEFC98612599E2BF9EEF3 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3bb82f12-dba0-495c-80bc-4e10ecd88248.roa Signing time: Sat 18 Oct 2025 22:02:27 +0000 ROA not before: Sat 18 Oct 2025 22:02:27 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.249.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:a8:70:98:72:ec:c5:21:2e:fe:ef:c9:86:12:59:9e:2b:f9:ee:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 22:02:27 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=a16df35dc2c846d2560b972a84a832c1a3c9122c464e66d061765accb7ed7c9d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b8:23:a4:8e:1b:3d:4a:40:d4:05:e1:df:8e: ed:eb:bd:56:82:1c:7a:54:68:d9:de:1b:10:d9:5d: e4:47:37:47:c2:dc:be:43:ad:9d:6a:83:51:b4:7c: 52:f9:99:fc:f3:fb:be:52:33:7c:ae:06:72:6f:8c: e7:a0:67:bc:7a:69:61:86:0e:34:f3:c6:1c:c4:74: 01:bf:c0:4f:c1:df:4e:26:e6:20:cc:d4:32:50:95: 70:6f:ef:5b:04:39:00:15:91:17:04:19:d1:d2:c6: ec:5f:80:b5:39:3f:99:c5:e9:2c:ed:ad:03:ea:a1: 6c:81:53:14:28:9c:fb:5b:61:7d:93:d9:51:ab:4a: 0b:fa:9b:59:74:ff:ad:05:e8:82:6b:05:32:09:4d: 5e:19:a0:ca:09:98:64:f0:5e:b7:86:0a:e2:7c:2a: cc:a0:e1:8d:7f:21:64:a4:a3:22:32:1b:7f:72:02: 29:8b:58:b9:ca:a6:cb:38:21:ea:3c:57:01:b6:91: f4:ac:e3:e5:ac:1e:75:53:23:c6:5a:43:05:01:33: 83:88:8b:0c:ef:12:d9:c7:f8:c6:33:71:7e:c6:a7: c2:d1:8e:38:b8:b2:c2:79:e5:e4:dd:d0:dc:ce:d8: 92:ec:ff:b9:b6:1b:6e:6b:c6:6a:3b:45:88:0e:3f: 9b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:7E:6B:9B:F3:38:F6:83:50:8A:7C:B1:38:18:1B:B1:AE:1B:FB:F8 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3bb82f12-dba0-495c-80bc-4e10ecd88248.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.249.31.0/24 Signature Algorithm: sha256WithRSAEncryption 91:66:b4:67:a9:77:d6:f0:53:17:ba:e1:cf:17:a2:45:35:37: 56:77:b3:3a:c8:58:25:10:ba:4b:c1:e6:5c:98:23:df:78:ca: 42:57:e3:54:b9:cb:0a:bc:32:30:ef:05:a5:96:9a:79:d9:08: 17:33:d5:be:56:db:b8:4c:5a:59:1c:8a:b2:ca:0a:c2:c4:c2: c8:a2:89:d3:24:91:29:ad:24:1f:2f:3a:66:10:37:1b:87:1c: 83:4b:e6:f0:3a:41:54:6c:d8:ce:3a:b5:aa:41:c0:cc:66:32: 1d:b0:cc:77:98:ef:82:50:82:5d:37:d6:68:3f:2b:24:be:3c: 3d:49:41:af:90:b1:a4:19:6b:ac:91:9c:6b:50:7f:c8:b0:38: c3:e6:1b:de:7e:92:87:9d:4b:9b:40:e5:dc:61:54:17:68:23: 43:44:3c:61:6f:c7:cd:d4:0f:69:18:65:7e:98:53:15:91:6f: c0:f2:42:36:f0:03:ed:09:c9:7a:16:b0:ac:3d:10:72:38:04: 79:56:6c:d0:f6:40:49:78:d1:a4:5b:ae:09:d1:ef:d6:b8:a2: f1:d1:8b:8a:d1:e6:03:71:5f:f9:3c:92:ea:1c:32:38:b1:54: 0f:0d:b6:2a:d2:9b:8e:98:0c:cb:34:15:50:7e:44:e5:c3:43: 35:5c:78:49 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIKhwmHLsxSEu/u/JhhJZniv57vMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MjIwMjI3WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BhMTZkZjM1ZGMyYzg0NmQyNTYwYjk3MmE4NGE4MzJjMWEz YzkxMjJjNDY0ZTY2ZDA2MTc2NWFjY2I3ZWQ3YzlkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzuCOkjhs9SkDUBeHfju3rvVaCHHpUaNneGxDZXeRHN0fC 3L5DrZ1qg1G0fFL5mfzz+75SM3yuBnJvjOegZ7x6aWGGDjTzxhzEdAG/wE/B304m 5iDM1DJQlXBv71sEOQAVkRcEGdHSxuxfgLU5P5nF6SztrQPqoWyBUxQonPtbYX2T 2VGrSgv6m1l0/60F6IJrBTIJTV4ZoMoJmGTwXreGCuJ8Ksyg4Y1/IWSkoyIyG39y AimLWLnKpss4Ieo8VwG2kfSs4+WsHnVTI8ZaQwUBM4OIiwzvEtnH+MYzcX7Gp8LR jji4ssJ55eTd0NzO2JLs/7m2G25rxmo7RYgOP5v/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUzn5rm/M49oNQinyxOBgbsa4b+/gwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzNiYjgyZjEyLWRiYTAtNDk1Yy04MGJjLTRlMTBlY2Q4ODI0OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAN+R8wDQYJKoZIhvcNAQELBQADggEBAJFmtGepd9bwUxe64c8XokU1N1Z3 szrIWCUQukvB5lyYI994ykJX41S5ywq8MjDvBaWWmnnZCBcz1b5W27hMWlkcirLK CsLEwsiiidMkkSmtJB8vOmYQNxuHHINL5vA6QVRs2M46tapBwMxmMh2wzHeY74JQ gl031mg/KyS+PD1JQa+QsaQZa6yRnGtQf8iwOMPmG95+koedS5tA5dxhVBdoI0NE PGFvx83UD2kYZX6YUxWRb8DyQjbwA+0JyXoWsKw9EHI4BHlWbND2QEl40aRbrgnR 79a4ovHRi4rR5gNxX/k8kuocMjixVA8NtirSm46YDMs0FVB+ROXDQzVceEk= -----END CERTIFICATE-----Generated at Mon Oct 20 02:57:15 2025 by rpki-client