$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d4e1935c-71b0-489d-9953-0e9cf964c660.roa File: d4e1935c-71b0-489d-9953-0e9cf964c660.roa (raw, json) Hash identifier: R91lQZ4JWPI/oMxDu87y3qnzgdQEXFjw9/L59veduzQ= Subject key identifier: F6:EC:40:99:F9:54:6D:E2:76:57:7B:C7:3F:22:B9:8D:05:8C:DF:36 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5007716D399387A0C2A2714B9B1909209C2C9B30 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d4e1935c-71b0-489d-9953-0e9cf964c660.roa Signing time: Sat 18 Oct 2025 21:50:06 +0000 ROA not before: Sat 18 Oct 2025 21:50:06 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.249.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:07:71:6d:39:93:87:a0:c2:a2:71:4b:9b:19:09:20:9c:2c:9b:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 21:50:06 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=0931bb7912249fc9015aa4b55f53720d01bb3cd8f53af6be9c3913e2d586ce6f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:ff:db:2b:68:e4:42:d1:dd:0c:0b:79:6a:b7: 63:fa:2a:ed:11:16:ad:18:04:13:73:a3:ea:2e:dd: a9:7e:69:fb:ed:53:b8:d6:4c:54:c3:85:1f:aa:42: 97:c8:d3:bd:1c:7d:92:7e:60:4d:cd:ea:3d:d2:a3: 73:12:0c:42:05:b5:fa:a1:45:82:4e:4b:0f:36:d4: aa:91:99:0c:10:5f:40:ad:10:08:3e:8e:79:00:ff: 88:38:2c:04:5b:68:10:87:80:6d:88:d6:f4:5d:85: 8b:ba:cf:2c:ff:37:f1:f9:f3:ce:9c:f1:a5:60:15: 2e:48:71:2e:b5:95:40:34:94:7a:d0:23:ed:9f:1c: 18:a4:6a:6c:27:91:51:21:75:59:0f:35:aa:14:5b: 95:9b:b0:c9:cb:33:9a:c9:b1:86:af:a0:78:f7:59: 49:d7:a2:48:0a:71:af:c5:43:b8:5c:73:08:a3:0c: a1:f7:79:a3:ce:ff:7a:30:39:2e:2b:91:fc:78:4e: e8:86:d3:80:5c:78:cc:5b:dd:ae:2d:58:4a:20:a6: d3:4c:6f:0a:87:83:a8:57:eb:4a:eb:29:2a:87:1e: b2:9d:2b:2a:88:99:e9:e5:4b:50:d1:cd:52:38:2c: 9f:27:42:5a:64:57:f7:84:82:8f:ec:98:44:00:fe: 13:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:EC:40:99:F9:54:6D:E2:76:57:7B:C7:3F:22:B9:8D:05:8C:DF:36 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d4e1935c-71b0-489d-9953-0e9cf964c660.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.249.52.0/22 Signature Algorithm: sha256WithRSAEncryption 1a:26:54:9c:11:73:c4:ed:2a:9a:13:6e:df:8f:bc:c8:f4:2b: d8:16:a8:72:48:6e:77:cf:e1:8d:74:ce:a1:90:dc:db:6f:bb: 52:74:c9:06:f3:9b:46:7a:97:34:b7:ab:57:8e:56:f9:3d:f1: 78:c4:6d:23:c2:88:ef:48:3e:a7:cb:7a:90:c6:30:cb:19:a0: e7:67:c1:b6:ff:4e:67:fb:f8:fa:32:69:89:06:88:36:8d:5c: ab:8d:ea:7c:5d:13:69:7d:66:8a:8f:87:ea:26:c2:af:7c:0f: a4:8b:a1:50:31:53:13:87:af:97:52:06:5c:5a:2c:b5:df:41: c3:e9:c1:d4:80:5f:0b:1f:a1:13:c8:56:b1:62:04:60:fb:01: 2a:53:31:f0:ab:42:6d:86:90:89:ca:52:82:d5:c3:dc:4e:be: 31:da:08:f7:9f:54:56:72:c9:d7:ff:0b:d0:cd:e4:84:e5:8b: 56:60:5f:3a:9a:84:ec:e5:cf:f7:0c:ec:32:0b:53:31:f9:68: c9:a6:6a:b7:d5:7e:56:34:58:d3:ea:42:dc:c0:54:46:32:32: 44:3c:b1:89:7b:8d:74:44:ef:cd:c4:3d:c1:ee:79:bc:1c:0d: 6c:8e:6b:03:8e:5b:ae:40:3f:77:19:aa:fd:b5:ef:22:c9:3c: ae:66:f8:22 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUAdxbTmTh6DConFLmxkJIJwsmzAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MjE1MDA2WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AwOTMxYmI3OTEyMjQ5ZmM5MDE1YWE0YjU1ZjUzNzIwZDAx YmIzY2Q4ZjUzYWY2YmU5YzM5MTNlMmQ1ODZjZTZmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDu/9sraORC0d0MC3lqt2P6Ku0RFq0YBBNzo+ou3al+afvt U7jWTFTDhR+qQpfI070cfZJ+YE3N6j3So3MSDEIFtfqhRYJOSw821KqRmQwQX0Ct EAg+jnkA/4g4LARbaBCHgG2I1vRdhYu6zyz/N/H5886c8aVgFS5IcS61lUA0lHrQ I+2fHBikamwnkVEhdVkPNaoUW5WbsMnLM5rJsYavoHj3WUnXokgKca/FQ7hccwij DKH3eaPO/3owOS4rkfx4TuiG04BceMxb3a4tWEogptNMbwqHg6hX60rrKSqHHrKd KyqImenlS1DRzVI4LJ8nQlpkV/eEgo/smEQA/hNJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU9uxAmflUbeJ2V3vHPyK5jQWM3zYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Q0ZTE5MzVjLTcxYjAtNDg5ZC05OTUzLTBlOWNmOTY0YzY2MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIN+TQwDQYJKoZIhvcNAQELBQADggEBABomVJwRc8TtKpoTbt+PvMj0K9gW qHJIbnfP4Y10zqGQ3Ntvu1J0yQbzm0Z6lzS3q1eOVvk98XjEbSPCiO9IPqfLepDG MMsZoOdnwbb/Tmf7+PoyaYkGiDaNXKuN6nxdE2l9ZoqPh+omwq98D6SLoVAxUxOH r5dSBlxaLLXfQcPpwdSAXwsfoRPIVrFiBGD7ASpTMfCrQm2GkInKUoLVw9xOvjHa CPefVFZyydf/C9DN5ITli1ZgXzqahOzlz/cM7DILUzH5aMmmarfVflY0WNPqQtzA VEYyMkQ8sYl7jXRE783EPcHuebwcDWyOawOOW65AP3cZqv217yLJPK5m+CI= -----END CERTIFICATE-----Generated at Mon Oct 20 11:01:38 2025 by rpki-client