$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8d8909ff-e14e-4588-b109-6ef1cefcc004.roa File: 8d8909ff-e14e-4588-b109-6ef1cefcc004.roa (raw, json) Hash identifier: P8HRwLZELolHqvFLwmaDdiyIo4jZZp0fmIUTbPT2Ycg= Subject key identifier: 37:4D:0A:78:7B:43:FA:60:FF:A1:5E:B4:1A:6E:67:85:05:E7:0F:90 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 587EFC871AF331B05CCF153BC37E92250F0D63CA Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8d8909ff-e14e-4588-b109-6ef1cefcc004.roa Signing time: Sat 18 Oct 2025 10:40:05 +0000 ROA not before: Sat 18 Oct 2025 10:40:05 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.249.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:7e:fc:87:1a:f3:31:b0:5c:cf:15:3b:c3:7e:92:25:0f:0d:63:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 10:40:05 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=e82391d4ded797418459a5fd90dbd1ae086caaece1081a6a9af090a49a4de266, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:2d:7c:10:1f:72:46:eb:66:63:04:a8:a3:42: 4c:68:fe:dd:1a:8d:55:e6:54:2f:4f:17:90:20:60: 73:79:db:c5:23:4b:b0:7a:72:29:db:b6:03:eb:c1: c7:9a:0e:3f:e6:4f:33:cb:b7:08:08:96:82:22:5f: ee:73:f8:5c:d1:6f:c4:2f:57:3f:14:18:fd:43:05: 0f:7d:14:78:74:0c:ff:6c:1c:78:7a:a1:c3:c4:34: 26:f1:d9:a5:f6:6f:51:ce:75:68:4d:20:82:9f:c1: 2d:d4:40:0b:d2:05:ca:16:af:ab:35:c3:7a:73:6a: 4a:de:b6:54:92:c3:05:e1:0f:d8:d4:f9:46:5a:65: ee:25:53:01:85:00:ab:06:69:7c:1a:97:88:bd:7a: f8:da:33:1a:e8:e6:54:96:45:68:1b:7a:0f:f3:c3: df:09:83:18:6e:d7:10:52:28:e6:01:87:dc:09:be: 1e:a6:83:ea:3b:df:54:6e:b9:b2:6b:22:29:df:58: 44:87:70:36:49:ac:64:1b:9c:66:31:fd:56:a7:29: 60:00:08:d1:93:81:7c:63:47:9d:b5:9f:d2:90:ec: 05:21:4b:9d:d9:7c:39:d4:bb:2a:c8:40:f5:5c:b9: 3c:70:c1:cf:2b:48:11:24:cb:03:63:6d:fa:b2:67: bd:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:4D:0A:78:7B:43:FA:60:FF:A1:5E:B4:1A:6E:67:85:05:E7:0F:90 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8d8909ff-e14e-4588-b109-6ef1cefcc004.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.249.152.0/24 Signature Algorithm: sha256WithRSAEncryption a8:61:1e:8c:ee:d5:c1:2c:46:9b:a6:9f:6b:02:44:40:03:91: f6:e9:0b:62:59:c6:fd:61:91:bc:30:43:49:59:2b:75:75:db: 29:a0:36:fb:4d:9c:61:bd:17:36:7a:0b:29:90:82:d1:8c:a6: 0d:68:67:9b:c7:3f:02:ee:70:64:0f:df:34:64:ee:96:ea:a5: 5e:16:ea:fa:d3:cd:60:4d:85:9e:6c:7c:b0:40:aa:05:bf:d6: 80:79:5c:bd:c1:29:16:c6:c0:c7:fb:25:69:b9:c4:fa:01:7e: b1:81:5d:31:dc:f0:f9:96:9e:58:92:a3:d7:12:c5:17:0e:a0: 10:86:3a:df:c6:a2:d2:c6:46:98:ad:c9:cd:71:dd:98:3c:19: a4:f6:83:54:89:3f:82:15:7c:e7:02:55:33:f7:8b:b4:33:f2: 37:39:c0:5e:36:88:d3:82:8c:1f:e9:e3:79:4e:27:50:0c:56: 39:ce:b1:d0:3e:6c:7b:d3:a5:2f:9c:85:ef:16:dd:67:6d:ef: c9:45:4f:fb:03:a8:38:e6:c0:02:f4:5d:69:55:73:e9:1d:d6: de:0d:c8:9a:10:23:d9:f9:60:1a:4a:4e:72:bb:78:ab:65:38: f0:f1:97:d8:7c:40:b2:60:67:01:bd:04:90:43:5c:65:fc:21: 88:c1:3d:07 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWH78hxrzMbBczxU7w36SJQ8NY8owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTA0MDA1WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BlODIzOTFkNGRlZDc5NzQxODQ1OWE1ZmQ5MGRiZDFhZTA4 NmNhYWVjZTEwODFhNmE5YWYwOTBhNDlhNGRlMjY2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDgLXwQH3JG62ZjBKijQkxo/t0ajVXmVC9PF5AgYHN528Uj S7B6cinbtgPrwceaDj/mTzPLtwgIloIiX+5z+FzRb8QvVz8UGP1DBQ99FHh0DP9s HHh6ocPENCbx2aX2b1HOdWhNIIKfwS3UQAvSBcoWr6s1w3pzakretlSSwwXhD9jU +UZaZe4lUwGFAKsGaXwal4i9evjaMxro5lSWRWgbeg/zw98Jgxhu1xBSKOYBh9wJ vh6mg+o731RuubJrIinfWESHcDZJrGQbnGYx/VanKWAACNGTgXxjR521n9KQ7AUh S53ZfDnUuyrIQPVcuTxwwc8rSBEkywNjbfqyZ71HAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUN00KeHtD+mD/oV60Gm5nhQXnD5AwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzhkODkwOWZmLWUxNGUtNDU4OC1iMTA5LTZlZjFjZWZjYzAwNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAN+ZgwDQYJKoZIhvcNAQELBQADggEBAKhhHozu1cEsRpumn2sCREADkfbp C2JZxv1hkbwwQ0lZK3V12ymgNvtNnGG9FzZ6CymQgtGMpg1oZ5vHPwLucGQP3zRk 7pbqpV4W6vrTzWBNhZ5sfLBAqgW/1oB5XL3BKRbGwMf7JWm5xPoBfrGBXTHc8PmW nliSo9cSxRcOoBCGOt/GotLGRpityc1x3Zg8GaT2g1SJP4IVfOcCVTP3i7Qz8jc5 wF42iNOCjB/p43lOJ1AMVjnOsdA+bHvTpS+che8W3Wdt78lFT/sDqDjmwAL0XWlV c+kd1t4NyJoQI9n5YBpKTnK7eKtlOPDxl9h8QLJgZwG9BJBDXGX8IYjBPQc= -----END CERTIFICATE-----Generated at Mon Oct 20 06:35:03 2025 by rpki-client