$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/494e6e33-d124-466b-899b-1d0475da4314.roa File: 494e6e33-d124-466b-899b-1d0475da4314.roa (raw, json) Hash identifier: vW1+FrLSvyJPltGXtS6CMv+ZDC+gz9y092tuEbaV3PI= Subject key identifier: EE:25:E2:C1:B8:E8:85:89:7C:CF:F8:03:F9:E8:2E:85:F0:9E:51:E7 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0C554FD0CA81F20D34E6F768469DE96A18CCBCC6 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/494e6e33-d124-466b-899b-1d0475da4314.roa Signing time: Sat 18 Oct 2025 21:30:14 +0000 ROA not before: Sat 18 Oct 2025 21:30:14 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.249.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:55:4f:d0:ca:81:f2:0d:34:e6:f7:68:46:9d:e9:6a:18:cc:bc:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 21:30:14 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=1d5dff05c7f86193c8e2162ccebd7183ac0bfef0bbd5c2c7a6f58c93b3c829af, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6d:d6:eb:7a:19:e0:81:74:2c:89:82:e2:56: 59:71:d4:77:2a:cd:6d:e1:d2:93:54:0b:93:be:90: 9f:90:5a:e1:60:80:1a:af:11:36:92:cb:d0:e3:a2: ec:3e:8f:70:8d:1d:3a:fb:3e:09:88:af:68:31:b0: 4b:43:80:ac:42:5b:a6:6c:16:8c:0c:66:ae:c5:b8: 5b:87:93:9c:75:d0:e5:60:08:7f:5c:4d:25:6c:bd: 24:ab:6d:65:ae:75:38:12:6c:9c:43:52:69:ac:e0: 6e:1a:c6:3f:e5:e9:03:e9:66:37:50:aa:34:63:da: a2:2e:a6:58:75:4c:d2:6e:2a:72:30:5c:57:e7:a0: f4:93:e3:3c:8a:3b:5b:17:f5:13:17:93:fb:a4:4a: 39:bf:56:7c:bf:48:74:08:cf:b9:10:86:70:c1:14: ab:3e:04:c7:96:e9:28:bf:30:c8:73:f0:b2:45:16: 6a:d6:fd:78:05:4b:54:6d:41:0e:4c:a6:9b:2e:cb: a8:d1:3a:3f:d2:47:3c:18:f0:21:e5:fb:00:48:7b: 81:a1:58:81:d7:d8:97:77:73:38:db:48:fe:97:26: e2:4b:5b:18:3c:bc:72:07:72:1d:19:a0:09:34:8f: db:38:65:d8:1f:11:87:19:12:8b:dd:08:b0:b9:4a: e6:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:25:E2:C1:B8:E8:85:89:7C:CF:F8:03:F9:E8:2E:85:F0:9E:51:E7 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/494e6e33-d124-466b-899b-1d0475da4314.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.249.100.0/22 Signature Algorithm: sha256WithRSAEncryption 96:f6:6a:4d:75:7e:26:ba:23:bc:b4:66:8d:9b:f6:6a:4a:a8: e0:67:f9:37:a2:43:55:7e:76:48:6b:23:1b:e6:2f:fe:78:ed: c4:02:1b:17:5b:9e:d6:76:ff:85:50:84:c0:af:11:79:b8:53: e0:90:9f:2c:fe:3c:6d:07:33:12:d3:0a:ed:74:29:c5:6d:80: ec:73:f7:c4:c6:3f:d5:59:27:c3:8b:c3:1d:eb:74:27:97:55: b4:ef:21:f8:79:0d:0d:93:18:cf:90:f7:44:34:7b:d3:c5:a3: dc:87:3a:76:81:a7:c9:85:cf:3f:e6:0b:d1:9f:f6:7f:d7:1c: 6d:ca:19:3f:6c:2b:02:19:43:bc:7d:79:a1:cb:c3:73:7e:bb: c6:f3:7c:99:ab:8d:6d:9d:10:d7:1f:c3:e7:27:70:0f:99:6e: 6b:96:4d:46:cd:ab:08:9f:d6:18:a0:c4:84:b8:dc:58:98:35: f9:00:e5:c7:bd:d2:4d:26:6d:0b:e3:ed:96:f8:4d:d3:09:e5: 87:6c:5b:d4:a8:27:41:2f:d8:97:79:d0:d1:85:9b:7f:af:4d: 03:5e:2c:99:fd:90:dd:9f:1a:c9:e9:40:c7:c7:eb:23:94:5c: 35:52:e3:97:76:18:c1:05:f6:c7:67:87:d0:cb:c8:77:38:a3: 76:34:57:54 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDFVP0MqB8g005vdoRp3pahjMvMYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MjEzMDE0WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AxZDVkZmYwNWM3Zjg2MTkzYzhlMjE2MmNjZWJkNzE4M2Fj MGJmZWYwYmJkNWMyYzdhNmY1OGM5M2IzYzgyOWFmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1bdbrehnggXQsiYLiVllx1HcqzW3h0pNUC5O+kJ+QWuFg gBqvETaSy9Djouw+j3CNHTr7PgmIr2gxsEtDgKxCW6ZsFowMZq7FuFuHk5x10OVg CH9cTSVsvSSrbWWudTgSbJxDUmms4G4axj/l6QPpZjdQqjRj2qIuplh1TNJuKnIw XFfnoPST4zyKO1sX9RMXk/ukSjm/Vny/SHQIz7kQhnDBFKs+BMeW6Si/MMhz8LJF FmrW/XgFS1RtQQ5Mppsuy6jROj/SRzwY8CHl+wBIe4GhWIHX2Jd3czjbSP6XJuJL Wxg8vHIHch0ZoAk0j9s4ZdgfEYcZEovdCLC5SuaTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU7iXiwbjohYl8z/gD+eguhfCeUecwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQ5NGU2ZTMzLWQxMjQtNDY2Yi04OTliLTFkMDQ3NWRhNDMxNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIN+WQwDQYJKoZIhvcNAQELBQADggEBAJb2ak11fia6I7y0Zo2b9mpKqOBn +TeiQ1V+dkhrIxvmL/547cQCGxdbntZ2/4VQhMCvEXm4U+CQnyz+PG0HMxLTCu10 KcVtgOxz98TGP9VZJ8OLwx3rdCeXVbTvIfh5DQ2TGM+Q90Q0e9PFo9yHOnaBp8mF zz/mC9Gf9n/XHG3KGT9sKwIZQ7x9eaHLw3N+u8bzfJmrjW2dENcfw+cncA+ZbmuW TUbNqwif1higxIS43FiYNfkA5ce90k0mbQvj7Zb4TdMJ5YdsW9SoJ0Ev2Jd50NGF m3+vTQNeLJn9kN2fGsnpQMfH6yOUXDVS45d2GMEF9sdnh9DLyHc4o3Y0V1Q= -----END CERTIFICATE-----Generated at Mon Oct 20 06:07:45 2025 by rpki-client