$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5c74fec8-49db-48d5-a296-4b38c3a47506.roa File: 5c74fec8-49db-48d5-a296-4b38c3a47506.roa (raw, json) Hash identifier: EPd8HPPrnY0NkfFe+7ogit5yuTbw9cctVAN+vmToahs= Subject key identifier: 42:44:4D:D4:02:63:05:84:C4:3D:DA:30:7A:DE:BD:15:7A:39:C5:55 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1F2A48F24BD78D1F6D0D171085C4FC30B9FCF360 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5c74fec8-49db-48d5-a296-4b38c3a47506.roa Signing time: Sat 18 Oct 2025 06:30:18 +0000 ROA not before: Sat 18 Oct 2025 06:30:18 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.249.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:2a:48:f2:4b:d7:8d:1f:6d:0d:17:10:85:c4:fc:30:b9:fc:f3:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 06:30:18 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=0b60b5a26f14fb9833deb6e6e817c239a84cb2f21f9668ed23bcc70505aa1ad0, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a7:fc:09:92:4e:d1:49:c2:7a:0f:80:ef:0a: 47:71:b4:f8:45:78:af:13:ad:eb:47:9f:6a:4e:ce: f3:a7:4e:f7:b8:4a:f2:b2:89:54:f0:90:11:28:9f: 1b:35:f1:9a:47:79:e3:b8:58:f9:ac:13:0c:49:9f: 8b:13:5d:12:1c:62:7f:15:33:9e:2c:5e:eb:60:f1: b1:5a:6f:cb:fd:57:4a:90:11:21:82:67:6e:b3:b0: f6:c0:1a:d2:1a:20:29:5d:1d:41:cf:09:59:13:0c: 19:f0:a7:b6:0c:5b:8e:9d:f7:8f:15:9a:05:ab:a6: 8a:09:d2:aa:11:4a:ad:c2:19:92:82:05:9d:dc:0b: da:98:b7:a2:aa:61:a1:9b:9f:3c:b3:e0:03:f6:64: e3:1e:f4:97:fc:09:c6:24:7f:98:6d:fd:71:d1:7f: bb:6a:12:18:71:df:89:f7:9a:0a:f5:7d:f1:32:ca: ab:53:64:8e:c1:ea:d8:83:b6:12:87:94:c4:ae:29: d0:38:25:d2:64:19:ad:80:3a:39:24:f6:24:7f:0d: ef:da:fb:e6:30:8b:aa:fd:2f:55:5b:da:a9:8a:6c: be:e8:cd:de:4f:b4:d1:d5:22:30:21:3b:06:28:5c: a6:82:4a:49:42:bd:53:86:c6:52:07:9b:ff:8f:a0: 22:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:44:4D:D4:02:63:05:84:C4:3D:DA:30:7A:DE:BD:15:7A:39:C5:55 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5c74fec8-49db-48d5-a296-4b38c3a47506.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.249.16.0/22 Signature Algorithm: sha256WithRSAEncryption 89:79:3d:46:58:7d:c0:04:47:e5:d8:44:a7:f9:d3:b4:e7:4e: 48:31:dc:a0:bc:4a:bb:27:5b:3f:0b:7a:88:dc:da:2e:9b:b8: db:47:87:54:5b:0b:3d:36:fd:fd:c3:d1:d6:40:93:e0:5a:28: f6:e7:96:ac:de:c5:cd:49:f6:3d:50:91:ef:65:cf:0e:e8:89: b1:df:fa:99:69:59:7e:81:98:b9:37:ee:df:da:50:8e:9c:27: da:6f:c9:b7:b0:9b:49:38:22:b2:ed:69:c5:70:11:83:e6:56: 9d:52:62:66:01:08:7d:e2:7d:2a:e9:b4:58:64:71:89:1a:5d: c7:ec:4f:6f:9e:b2:ad:3d:a7:41:01:52:8f:38:04:50:55:84: db:cb:94:b2:87:cd:d5:81:0c:4e:3b:d8:08:15:c9:4d:2c:ad: 38:bc:b9:e8:0b:20:7f:dd:46:c9:ea:38:f0:8a:ed:7f:66:0d: 0e:b8:bc:78:c7:20:0e:cb:67:5b:15:b4:4a:a9:60:76:21:ad: 1d:51:08:47:98:62:16:4a:7a:2a:8e:6a:1b:ff:ac:78:87:74: 14:8b:6d:28:4d:89:4f:bd:76:07:2b:0b:4b:2b:19:4e:05:00: 52:a5:d0:cc:f2:68:f2:de:f7:c3:7d:08:2f:0a:74:56:f4:ac: 08:95:d0:c0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHypI8kvXjR9tDRcQhcT8MLn882AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MDYzMDE4WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AwYjYwYjVhMjZmMTRmYjk4MzNkZWI2ZTZlODE3YzIzOWE4 NGNiMmYyMWY5NjY4ZWQyM2JjYzcwNTA1YWExYWQwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCnp/wJkk7RScJ6D4DvCkdxtPhFeK8TretHn2pOzvOnTve4 SvKyiVTwkBEonxs18ZpHeeO4WPmsEwxJn4sTXRIcYn8VM54sXutg8bFab8v9V0qQ ESGCZ26zsPbAGtIaICldHUHPCVkTDBnwp7YMW46d948VmgWrpooJ0qoRSq3CGZKC BZ3cC9qYt6KqYaGbnzyz4AP2ZOMe9Jf8CcYkf5ht/XHRf7tqEhhx34n3mgr1ffEy yqtTZI7B6tiDthKHlMSuKdA4JdJkGa2AOjkk9iR/De/a++Ywi6r9L1Vb2qmKbL7o zd5PtNHVIjAhOwYoXKaCSklCvVOGxlIHm/+PoCJtAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUQkRN1AJjBYTEPdowet69FXo5xVUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzVjNzRmZWM4LTQ5ZGItNDhkNS1hMjk2LTRiMzhjM2E0NzUwNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIN+RAwDQYJKoZIhvcNAQELBQADggEBAIl5PUZYfcAER+XYRKf507TnTkgx 3KC8SrsnWz8Leojc2i6buNtHh1RbCz02/f3D0dZAk+BaKPbnlqzexc1J9j1Qke9l zw7oibHf+plpWX6BmLk37t/aUI6cJ9pvybewm0k4IrLtacVwEYPmVp1SYmYBCH3i fSrptFhkcYkaXcfsT2+esq09p0EBUo84BFBVhNvLlLKHzdWBDE472AgVyU0srTi8 uegLIH/dRsnqOPCK7X9mDQ64vHjHIA7LZ1sVtEqpYHYhrR1RCEeYYhZKeiqOahv/ rHiHdBSLbShNiU+9dgcrC0srGU4FAFKl0MzyaPLe98N9CC8KdFb0rAiV0MA= -----END CERTIFICATE-----Generated at Tue Oct 21 01:07:36 2025 by rpki-client