$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/439fcf63-c8b1-4ab8-b301-d2e450d12cc9.roa File: 439fcf63-c8b1-4ab8-b301-d2e450d12cc9.roa (raw, json) Hash identifier: HnvJPRQLCTK/mVVOePt56CgdH4jFsUylFEsQsxaxqf4= Subject key identifier: 10:36:1B:37:BB:4A:FB:59:69:BD:D5:6A:2A:93:42:EE:23:51:59:15 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 78C7ED0DF7C016EE31637B9F64D9CA85C40C0603 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/439fcf63-c8b1-4ab8-b301-d2e450d12cc9.roa Signing time: Sat 18 Oct 2025 22:33:50 +0000 ROA not before: Sat 18 Oct 2025 22:33:50 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.249.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:c7:ed:0d:f7:c0:16:ee:31:63:7b:9f:64:d9:ca:85:c4:0c:06:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 22:33:50 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=ffa419d46fb92de2355bfcc542f96e2b15d5836729ae0526bb7bb089db7294ee, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f6:55:56:8c:e7:5c:50:89:77:46:15:c4:7c: 38:3a:bf:9e:47:05:12:34:a6:55:24:87:73:11:3b: cf:da:51:e5:29:4b:88:a8:36:ac:ea:ad:a2:46:6b: f0:73:e8:bc:dc:21:aa:ec:e9:20:66:55:7c:0d:4e: cf:05:e1:dd:2b:e7:0f:b9:8b:0e:f7:60:1f:b3:1d: 84:49:ab:d9:c5:88:d6:56:10:c9:a6:ac:12:02:07: 37:91:20:28:b2:23:52:89:ca:50:3a:c7:2b:2e:a1: 16:39:23:77:e5:c7:47:91:d2:9a:c0:89:f1:e0:50: 6c:20:5d:35:e3:d2:62:20:d0:37:00:a7:58:c5:c8: a2:c8:37:6d:5f:87:a4:38:64:80:8b:ed:42:cc:0d: 00:34:50:0d:b6:69:1d:5b:0c:7c:dd:df:2c:0c:6f: be:20:cb:ae:c2:98:02:47:d7:3c:2a:3d:bb:1c:ee: 92:79:ab:98:04:26:e9:ed:b6:23:b8:f8:37:39:ed: 6c:d3:b3:42:aa:81:d5:a0:80:c7:7f:c4:2c:30:2a: 69:a7:57:de:b7:e0:ef:2a:6f:4f:5c:ea:a0:33:b8: 66:65:ed:d3:de:51:fa:66:44:77:ac:5f:41:fd:14: 24:ee:01:4a:2c:0d:3a:e6:34:f6:77:49:25:b4:bd: b9:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:36:1B:37:BB:4A:FB:59:69:BD:D5:6A:2A:93:42:EE:23:51:59:15 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/439fcf63-c8b1-4ab8-b301-d2e450d12cc9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.249.116.0/22 Signature Algorithm: sha256WithRSAEncryption 06:f0:c6:3c:47:65:7a:46:ac:ee:dd:7b:4c:c1:8a:c1:8d:03: 34:12:fe:69:36:9d:f4:b7:c8:bc:80:97:b1:68:88:67:83:3b: c9:fc:69:1f:f5:62:7e:64:77:72:c2:8d:ac:10:ce:0e:4e:8f: df:82:81:52:87:ef:f3:34:d1:f6:97:f0:06:cd:a3:de:a6:3d: 07:09:59:29:47:d8:9a:83:1e:b0:ca:75:aa:47:3e:3c:db:e9: 25:8f:5b:86:92:09:17:a2:a7:67:06:1b:ce:b4:08:9b:08:2d: 22:9e:e6:d6:ca:58:87:95:03:3f:e9:12:74:f2:84:53:58:37: 62:00:db:33:ee:4a:13:00:d6:f5:23:d1:28:c6:30:3c:2c:a7: dc:f8:a5:af:e5:7f:f4:03:6b:5e:d5:7a:32:c4:30:b1:80:48: e7:17:85:b1:d5:61:86:5f:51:df:d7:f7:4a:8e:c0:7a:d6:c6: 24:ac:44:21:0d:29:e3:9a:1d:31:4d:c2:3a:e9:bf:56:8e:97: 54:9e:13:ee:35:7f:87:c9:a9:d6:13:a7:f7:81:a0:95:66:47: 8c:53:68:6e:14:7b:d4:5e:99:b9:51:f5:1e:7a:0e:1f:fb:14: 59:84:e2:c1:b9:6b:7f:a7:7a:59:cc:d5:34:66:f1:0d:63:56: d7:0c:33:80 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUeMftDffAFu4xY3ufZNnKhcQMBgMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MjIzMzUwWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BmZmE0MTlkNDZmYjkyZGUyMzU1YmZjYzU0MmY5NmUyYjE1 ZDU4MzY3MjlhZTA1MjZiYjdiYjA4OWRiNzI5NGVlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC89lVWjOdcUIl3RhXEfDg6v55HBRI0plUkh3MRO8/aUeUp S4ioNqzqraJGa/Bz6LzcIars6SBmVXwNTs8F4d0r5w+5iw73YB+zHYRJq9nFiNZW EMmmrBICBzeRICiyI1KJylA6xysuoRY5I3flx0eR0prAifHgUGwgXTXj0mIg0DcA p1jFyKLIN21fh6Q4ZICL7ULMDQA0UA22aR1bDHzd3ywMb74gy67CmAJH1zwqPbsc 7pJ5q5gEJunttiO4+Dc57WzTs0KqgdWggMd/xCwwKmmnV9634O8qb09c6qAzuGZl 7dPeUfpmRHesX0H9FCTuAUosDTrmNPZ3SSW0vbkNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUEDYbN7tK+1lpvdVqKpNC7iNRWRUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQzOWZjZjYzLWM4YjEtNGFiOC1iMzAxLWQyZTQ1MGQxMmNjOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIN+XQwDQYJKoZIhvcNAQELBQADggEBAAbwxjxHZXpGrO7de0zBisGNAzQS /mk2nfS3yLyAl7FoiGeDO8n8aR/1Yn5kd3LCjawQzg5Oj9+CgVKH7/M00faX8AbN o96mPQcJWSlH2JqDHrDKdapHPjzb6SWPW4aSCReip2cGG860CJsILSKe5tbKWIeV Az/pEnTyhFNYN2IA2zPuShMA1vUj0SjGMDwsp9z4pa/lf/QDa17VejLEMLGASOcX hbHVYYZfUd/X90qOwHrWxiSsRCENKeOaHTFNwjrpv1aOl1SeE+41f4fJqdYTp/eB oJVmR4xTaG4Ue9RemblR9R56Dh/7FFmE4sG5a3+nelnM1TRm8Q1jVtcMM4A= -----END CERTIFICATE-----Generated at Mon Oct 20 11:02:03 2025 by rpki-client