$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ba9fa096-575a-4b5c-8756-bad05a388af3.roa File: ba9fa096-575a-4b5c-8756-bad05a388af3.roa (raw, json) Hash identifier: C3DesUjB5An/47J1f8a8PWImdEqfirdppb1HBmaKTNQ= Subject key identifier: C3:35:64:91:FF:0B:04:9A:3A:C2:24:90:DE:37:48:1E:F2:EE:F5:5F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7C60C8A288AC29B0AAD7F9785D00CB88F08CC1B4 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ba9fa096-575a-4b5c-8756-bad05a388af3.roa Signing time: Sun 19 Oct 2025 04:41:13 +0000 ROA not before: Sun 19 Oct 2025 04:41:13 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.249.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:60:c8:a2:88:ac:29:b0:aa:d7:f9:78:5d:00:cb:88:f0:8c:c1:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 04:41:13 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=9809ce18bd98ac7c8598bdae1c4fc0a2e5e364127a8ca13ce78f5682492c050d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:84:fd:92:3a:01:ab:06:c3:24:7e:c7:57:dd: 93:21:b4:ec:a5:aa:1e:df:df:c2:19:00:5a:04:15: 09:e2:a8:9d:53:be:5b:2e:21:97:c3:e1:a1:70:1e: 6c:f9:a7:72:bd:12:14:45:82:fe:cb:77:2c:9d:1b: 3c:d9:01:b4:53:21:50:14:24:75:5f:8e:b1:7f:d4: 41:39:63:2a:7f:f2:c1:d2:2f:92:d9:5f:0f:73:c5: b7:d0:ea:cd:46:51:e4:8b:80:96:5f:70:8e:1e:67: d1:d6:ac:69:fb:71:db:f7:7c:ab:f5:57:0c:4a:4b: 47:52:4c:a5:03:07:13:25:93:6f:4a:d3:95:b2:62: 36:7e:db:18:d7:3e:b9:2e:9c:80:64:83:b0:0e:51: 85:be:51:c1:0c:7f:f9:f7:9e:40:11:a1:4a:2a:c2: 09:b5:6f:82:93:45:aa:1c:26:25:9d:59:28:60:bb: fc:0a:c8:3f:95:e1:ff:09:6d:19:89:05:0f:ab:1c: a6:ca:2b:d9:9d:fe:9b:dd:88:77:31:c0:e6:11:50: e0:f8:7b:29:16:b0:42:ed:dd:df:3b:47:9a:ac:fb: eb:c1:4b:a7:65:bb:19:12:03:c5:01:21:52:5b:db: b4:3c:55:cb:10:fe:c5:7d:d5:ad:ea:f5:50:91:db: fe:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:35:64:91:FF:0B:04:9A:3A:C2:24:90:DE:37:48:1E:F2:EE:F5:5F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ba9fa096-575a-4b5c-8756-bad05a388af3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.249.240.0/22 Signature Algorithm: sha256WithRSAEncryption 12:31:66:a7:5c:8e:a3:9b:8b:17:4f:b8:d8:0a:52:ac:7d:d0: af:8a:aa:45:49:6d:74:70:90:6a:c1:2a:11:5b:50:76:22:29: f1:0e:94:c8:40:c4:12:32:25:b0:d4:2a:29:7b:c0:ea:29:45: e3:cd:80:b0:0b:fc:6f:fc:e7:f7:b0:de:2e:07:55:af:0a:32: 4b:30:30:18:18:c0:d4:f6:51:94:ca:5a:52:5f:60:d7:70:a5: 3e:84:89:53:81:10:53:43:de:cd:63:68:de:9b:47:ed:8b:0c: 07:51:7e:08:0f:70:31:6f:6c:f0:58:9e:53:d8:eb:01:de:17: 7b:e7:2c:11:25:ea:2a:fd:59:0e:1b:c3:92:b6:f2:d4:44:78: f7:09:5f:e8:d3:72:a8:17:1f:51:cd:6b:27:53:95:82:29:4c: 44:d7:9e:ab:24:ac:b5:a2:c4:33:4e:14:31:ad:aa:74:fa:23: 89:71:91:a5:68:19:6f:0b:95:5d:85:31:fe:e3:56:22:2f:52: b2:71:cd:12:f7:72:62:71:bd:65:92:1c:e0:c7:f6:03:f6:99: 4d:76:da:df:5b:6e:7f:80:81:0b:2c:8d:20:85:a4:55:e9:30: 59:53:6c:61:30:0a:66:db:66:9a:84:2f:8c:13:9f:1b:3c:b0: ee:0e:67:41 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfGDIooisKbCq1/l4XQDLiPCMwbQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MDQ0MTEzWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A5ODA5Y2UxOGJkOThhYzdjODU5OGJkYWUxYzRmYzBhMmU1 ZTM2NDEyN2E4Y2ExM2NlNzhmNTY4MjQ5MmMwNTBkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDOhP2SOgGrBsMkfsdX3ZMhtOylqh7f38IZAFoEFQniqJ1T vlsuIZfD4aFwHmz5p3K9EhRFgv7LdyydGzzZAbRTIVAUJHVfjrF/1EE5Yyp/8sHS L5LZXw9zxbfQ6s1GUeSLgJZfcI4eZ9HWrGn7cdv3fKv1VwxKS0dSTKUDBxMlk29K 05WyYjZ+2xjXPrkunIBkg7AOUYW+UcEMf/n3nkARoUoqwgm1b4KTRaocJiWdWShg u/wKyD+V4f8JbRmJBQ+rHKbKK9md/pvdiHcxwOYRUOD4eykWsELt3d87R5qs++vB S6dluxkSA8UBIVJb27Q8VcsQ/sV91a3q9VCR2/6rAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUwzVkkf8LBJo6wiSQ3jdIHvLu9V8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2JhOWZhMDk2LTU3NWEtNGI1Yy04NzU2LWJhZDA1YTM4OGFmMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIN+fAwDQYJKoZIhvcNAQELBQADggEBABIxZqdcjqObixdPuNgKUqx90K+K qkVJbXRwkGrBKhFbUHYiKfEOlMhAxBIyJbDUKil7wOopRePNgLAL/G/85/ew3i4H Va8KMkswMBgYwNT2UZTKWlJfYNdwpT6EiVOBEFND3s1jaN6bR+2LDAdRfggPcDFv bPBYnlPY6wHeF3vnLBEl6ir9WQ4bw5K28tREePcJX+jTcqgXH1HNaydTlYIpTETX nqskrLWixDNOFDGtqnT6I4lxkaVoGW8LlV2FMf7jViIvUrJxzRL3cmJxvWWSHODH 9gP2mU122t9bbn+AgQssjSCFpFXpMFlTbGEwCmbbZpqEL4wTnxs8sO4OZ0E= -----END CERTIFICATE-----Generated at Mon Oct 20 11:09:44 2025 by rpki-client