$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7c3f0d4d-770f-421d-bd13-aabdbff2d5aa.roa File: 7c3f0d4d-770f-421d-bd13-aabdbff2d5aa.roa (raw, json) Hash identifier: vXi1UezW88hJhBa0w7eVukoFJ9RPcrQ90r/ZZV7jWYc= Subject key identifier: 32:43:93:BF:00:A5:F4:61:E8:9F:C7:04:D0:29:83:52:E4:12:C9:68 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4C16F7DF380B5509C46043242226EB9C7B704C58 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7c3f0d4d-770f-421d-bd13-aabdbff2d5aa.roa Signing time: Sat 18 Oct 2025 08:10:07 +0000 ROA not before: Sat 18 Oct 2025 08:10:07 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.249.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:16:f7:df:38:0b:55:09:c4:60:43:24:22:26:eb:9c:7b:70:4c:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 08:10:07 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=830efc5b36bcadc48f4d836a16c0dd07d2177c806cfa83feb6f3dc02876900da, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ea:c5:12:fd:0e:36:59:7e:6a:30:1f:f1:75: 36:3d:1b:67:25:46:0c:11:b1:78:32:e3:7b:e0:b7: 63:26:ec:e7:ef:a7:ab:85:48:13:38:ea:87:25:c3: a0:c2:9f:26:13:e1:f1:84:42:51:a9:b8:19:70:f9: 6c:f9:5e:09:63:56:c9:de:f5:c4:7f:2d:db:4b:1f: fc:7e:c2:2c:b8:09:d9:1e:ce:a3:cc:9a:49:67:30: e3:81:f7:28:44:5f:d6:b9:59:9e:36:ab:e6:8d:da: bb:90:bc:47:ec:12:b4:a0:3b:05:ea:61:fe:f0:aa: 9c:10:f3:a5:71:bf:5a:70:e3:42:f7:ca:a9:96:20: ab:9c:72:f5:ee:1b:fc:18:76:4e:c4:52:aa:c9:81: 1b:3b:f2:ed:3c:7c:0a:8e:14:fb:31:15:aa:60:62: bb:42:dd:51:30:69:73:27:f7:8a:d9:c0:5a:3e:a8: 4a:bc:e3:3f:ad:66:36:82:d2:74:63:b0:c1:24:12: ac:4e:eb:13:28:34:3b:d0:33:c0:71:e9:72:f1:c3: 3e:e5:37:76:34:6a:d9:78:70:f0:91:75:48:cb:ac: 66:01:e9:4c:e9:fd:a2:bb:89:bf:42:0a:71:20:50: fe:67:3a:15:eb:4e:e3:80:58:f3:c0:f1:0c:cb:04: 6b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:43:93:BF:00:A5:F4:61:E8:9F:C7:04:D0:29:83:52:E4:12:C9:68 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7c3f0d4d-770f-421d-bd13-aabdbff2d5aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.249.98.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:5f:12:94:c5:30:c3:35:59:4f:58:e6:36:43:bb:72:7e:00: 79:cb:75:7e:05:53:66:d6:04:86:3a:77:3d:56:08:91:9d:62: f9:d9:b6:a4:51:cc:dc:43:2e:61:59:f2:68:66:09:88:19:b9: f5:1e:8e:0c:9c:9e:6b:0b:5d:b9:06:41:27:2d:c9:27:2c:c0: cd:d6:80:54:5c:45:ba:71:20:46:b8:9f:54:36:6a:63:9c:77: f3:55:ff:a9:3f:1e:02:d8:e5:e2:a7:e9:aa:31:2b:9f:fd:94: 75:e9:66:13:cd:0b:bd:f1:c9:de:fa:01:7a:c0:a5:24:c8:27: f8:87:4b:c0:4b:bb:fc:44:e7:77:16:5f:d4:f3:0c:43:94:e2: ea:06:08:7e:ad:46:a7:43:37:78:75:fd:5f:9a:fc:f0:2f:9b: 0a:8e:39:a2:09:5a:44:a7:c8:ce:7c:f7:7c:13:73:b4:c9:ae: 37:2d:52:1c:2c:a2:45:a5:15:27:e1:61:77:46:7e:f1:52:b5: cc:6a:95:aa:0c:c8:b2:84:1f:de:8e:00:d3:8a:f2:80:bb:fd: d5:04:3e:37:ae:b1:fb:d4:64:78:dc:a3:5b:84:3f:d2:4a:80: f0:82:82:b8:01:02:1e:db:67:6b:a4:d2:40:23:a5:05:17:f9: ac:ec:82:92 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTBb33zgLVQnEYEMkIibrnHtwTFgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MDgxMDA3WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A4MzBlZmM1YjM2YmNhZGM0OGY0ZDgzNmExNmMwZGQwN2Qy MTc3YzgwNmNmYTgzZmViNmYzZGMwMjg3NjkwMGRhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDC6sUS/Q42WX5qMB/xdTY9G2clRgwRsXgy43vgt2Mm7Ofv p6uFSBM46oclw6DCnyYT4fGEQlGpuBlw+Wz5XgljVsne9cR/LdtLH/x+wiy4Cdke zqPMmklnMOOB9yhEX9a5WZ42q+aN2ruQvEfsErSgOwXqYf7wqpwQ86Vxv1pw40L3 yqmWIKuccvXuG/wYdk7EUqrJgRs78u08fAqOFPsxFapgYrtC3VEwaXMn94rZwFo+ qEq84z+tZjaC0nRjsMEkEqxO6xMoNDvQM8Bx6XLxwz7lN3Y0atl4cPCRdUjLrGYB 6Uzp/aK7ib9CCnEgUP5nOhXrTuOAWPPA8QzLBGsLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUMkOTvwCl9GHon8cE0CmDUuQSyWgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzdjM2YwZDRkLTc3MGYtNDIxZC1iZDEzLWFhYmRiZmYyZDVhYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAN+WIwDQYJKoZIhvcNAQELBQADggEBAHpfEpTFMMM1WU9Y5jZDu3J+AHnL dX4FU2bWBIY6dz1WCJGdYvnZtqRRzNxDLmFZ8mhmCYgZufUejgycnmsLXbkGQSct yScswM3WgFRcRbpxIEa4n1Q2amOcd/NV/6k/HgLY5eKn6aoxK5/9lHXpZhPNC73x yd76AXrApSTIJ/iHS8BLu/xE53cWX9TzDEOU4uoGCH6tRqdDN3h1/V+a/PAvmwqO OaIJWkSnyM5893wTc7TJrjctUhwsokWlFSfhYXdGfvFStcxqlaoMyLKEH96OANOK 8oC7/dUEPjeusfvUZHjco1uEP9JKgPCCgrgBAh7bZ2uk0kAjpQUX+azsgpI= -----END CERTIFICATE-----Generated at Mon Oct 20 08:30:31 2025 by rpki-client