$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9c96f701-1cb3-4712-9472-b4dfcb193472.roa File: 9c96f701-1cb3-4712-9472-b4dfcb193472.roa (raw, json) Hash identifier: yOwOaB37VrO7PhEPbtIZ9kJdJtawcrNe1uKqSP3wpvw= Subject key identifier: A6:0C:D7:AE:D0:AF:B4:FE:C9:EB:B6:A3:74:B6:3C:0D:A9:A8:FE:4E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6A89F91F71F574B827285980A8B4D816FD590D80 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9c96f701-1cb3-4712-9472-b4dfcb193472.roa Signing time: Sat 18 Oct 2025 17:52:25 +0000 ROA not before: Sat 18 Oct 2025 17:52:25 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.249.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:89:f9:1f:71:f5:74:b8:27:28:59:80:a8:b4:d8:16:fd:59:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 17:52:25 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=dc3eaeaf25c918c0f01be37b35cbf50b5ae5b134f1377c77112a649e94a5fb0d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:26:60:39:8e:1e:8a:8c:94:1c:7c:17:39:4b: 83:f2:10:0b:9f:51:a9:55:b0:c4:30:ed:9f:93:b5: 52:a3:c7:00:87:3c:e9:90:dd:f2:58:23:87:a8:aa: f0:9d:6f:9c:17:df:2c:c2:ee:8d:d9:64:9b:76:cb: 41:7f:a7:64:40:e2:fd:d2:89:79:18:cf:8d:72:b6: a3:b8:92:59:fd:f9:b6:e1:e8:65:8d:74:03:61:df: 21:7d:7b:91:d4:4c:83:2c:4a:80:c6:27:44:48:31: 0b:a5:66:65:f9:a4:db:94:63:c4:22:e8:f4:08:b3: 92:bd:22:6d:5e:66:bc:e6:ad:29:df:d7:2d:0d:5b: ea:86:2c:cf:08:1e:74:70:03:79:76:22:6e:83:4a: f0:1c:2b:24:83:2f:df:14:d2:39:76:fc:0a:3a:da: 7f:59:39:38:cb:2e:e4:7a:b7:38:2b:6f:86:e8:31: aa:9e:ca:ed:f1:a6:32:ec:f5:03:96:5b:7e:ba:c3: f5:26:f4:59:24:99:80:d6:11:bc:df:cd:0e:c6:12: 5a:c7:a5:f9:48:8b:fe:41:8c:7d:98:b8:4d:81:83: 37:59:00:5e:c0:e3:05:4a:bb:1f:7b:4d:69:47:79: 09:37:6d:26:f6:43:48:6c:94:c1:3d:dd:9d:29:7e: 4e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:0C:D7:AE:D0:AF:B4:FE:C9:EB:B6:A3:74:B6:3C:0D:A9:A8:FE:4E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9c96f701-1cb3-4712-9472-b4dfcb193472.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.249.132.0/22 Signature Algorithm: sha256WithRSAEncryption 4e:c4:ca:20:a6:af:39:6d:ea:87:b3:a4:c8:3e:52:bb:5c:7f: 84:fa:41:07:52:41:19:b8:1e:af:b4:c5:e2:b4:16:98:f1:92: 78:66:7c:79:15:85:30:bf:87:3c:65:cb:c5:e2:c6:ee:07:cc: 5e:d0:88:60:9a:54:73:0d:48:16:c8:d2:b8:1e:f7:4d:03:e5: 45:2f:3b:9c:1f:9b:c1:f6:14:03:35:5c:ba:ed:47:a9:00:e0: 32:c2:0e:bf:b1:56:e7:22:4e:39:c2:b6:92:e6:32:2b:6e:1f: bb:4a:68:4f:3e:c3:76:a2:b0:10:ed:96:83:d2:33:98:47:9a: d3:e0:76:dc:ef:64:76:96:fd:91:b4:4c:ac:f6:86:74:11:7b: f3:96:ef:ca:4b:cb:83:9a:33:1f:11:32:21:f0:11:0e:9a:93: 19:08:fe:5a:2e:4b:45:da:a4:70:34:b2:97:e9:65:2c:aa:4d: ac:21:5b:df:62:3a:af:e2:b3:52:dd:eb:e9:70:1e:9e:39:44: d2:8b:9a:0f:54:2d:d0:ab:44:ad:e3:79:26:2c:22:a4:f3:b5: d7:2d:72:f6:05:03:f3:d7:ea:5e:2e:eb:f0:fd:bb:64:02:c9: 9e:99:bf:fd:de:5a:29:4e:af:91:8a:1c:e1:42:4a:76:0f:19: 4c:83:a5:2f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaon5H3H1dLgnKFmAqLTYFv1ZDYAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTc1MjI1WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BkYzNlYWVhZjI1YzkxOGMwZjAxYmUzN2IzNWNiZjUwYjVh ZTViMTM0ZjEzNzdjNzcxMTJhNjQ5ZTk0YTVmYjBkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwJmA5jh6KjJQcfBc5S4PyEAufUalVsMQw7Z+TtVKjxwCH POmQ3fJYI4eoqvCdb5wX3yzC7o3ZZJt2y0F/p2RA4v3SiXkYz41ytqO4kln9+bbh 6GWNdANh3yF9e5HUTIMsSoDGJ0RIMQulZmX5pNuUY8Qi6PQIs5K9Im1eZrzmrSnf 1y0NW+qGLM8IHnRwA3l2Im6DSvAcKySDL98U0jl2/Ao62n9ZOTjLLuR6tzgrb4bo Maqeyu3xpjLs9QOWW366w/Um9FkkmYDWEbzfzQ7GElrHpflIi/5BjH2YuE2BgzdZ AF7A4wVKux97TWlHeQk3bSb2Q0hslME93Z0pfk6bAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUpgzXrtCvtP7J67ajdLY8Damo/k4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzljOTZmNzAxLTFjYjMtNDcxMi05NDcyLWI0ZGZjYjE5MzQ3Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIN+YQwDQYJKoZIhvcNAQELBQADggEBAE7EyiCmrzlt6oezpMg+Urtcf4T6 QQdSQRm4Hq+0xeK0FpjxknhmfHkVhTC/hzxly8Xixu4HzF7QiGCaVHMNSBbI0rge 900D5UUvO5wfm8H2FAM1XLrtR6kA4DLCDr+xVuciTjnCtpLmMituH7tKaE8+w3ai sBDtloPSM5hHmtPgdtzvZHaW/ZG0TKz2hnQRe/OW78pLy4OaMx8RMiHwEQ6akxkI /louS0XapHA0spfpZSyqTawhW99iOq/is1Ld6+lwHp45RNKLmg9ULdCrRK3jeSYs IqTztdctcvYFA/PX6l4u6/D9u2QCyZ6Zv/3eWilOr5GKHOFCSnYPGUyDpS8= -----END CERTIFICATE-----Generated at Mon Oct 20 03:01:01 2025 by rpki-client