$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dd5f9780-c5fb-497a-a212-e273eecd7ecc.roa File: dd5f9780-c5fb-497a-a212-e273eecd7ecc.roa (raw, json) Hash identifier: JzvCXdPSPudteiYQfDE0+SIQ6R1oeT+w3TXxL/WOr88= Subject key identifier: F4:CD:5D:76:7C:AD:97:C4:FF:83:E4:86:14:97:93:AD:9E:96:EE:BD Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4B06D6A5D27EA12536F665C77090E2BA986ED0E7 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dd5f9780-c5fb-497a-a212-e273eecd7ecc.roa Signing time: Sat 18 Oct 2025 17:27:58 +0000 ROA not before: Sat 18 Oct 2025 17:27:58 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.249.164.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:06:d6:a5:d2:7e:a1:25:36:f6:65:c7:70:90:e2:ba:98:6e:d0:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 17:27:58 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=f9493f9b0e3537c10f628455b318e3343488299d93f8a7a8a67ef5d80923d686, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ef:71:e4:71:d1:e6:65:81:10:50:80:7b:01: 0a:0c:d9:cb:85:9c:05:9e:5b:55:29:1d:82:46:cd: bd:bb:fb:09:de:86:e5:94:f1:99:94:33:75:a5:59: 00:78:10:21:72:43:a5:83:45:55:42:0e:0a:d6:e4: 10:49:7c:72:ef:62:fb:39:da:d3:79:8d:d0:8b:48: 3e:10:5d:c1:9d:cc:d7:13:02:e8:61:32:16:78:06: b7:e1:03:9f:25:cb:41:19:aa:95:da:2d:eb:9b:60: 0d:19:1f:17:e7:67:59:78:f6:67:66:ee:b0:31:30: 42:d5:fe:af:5b:49:b7:4d:69:7d:79:5e:5b:9f:64: 55:e7:9e:2f:ca:be:ef:9e:22:f1:f6:b0:38:81:33: 14:d8:58:cd:2c:79:1c:2a:37:e0:76:7f:92:7d:dd: 0d:d6:5e:10:dd:79:a6:ea:f6:1a:6f:93:27:55:d0: 19:d6:00:80:e7:14:3f:55:ee:70:8b:ad:f0:89:1f: ab:2a:bd:ee:53:2f:84:79:ff:3e:05:0d:b2:12:89: 8c:f0:85:4a:81:e7:82:e7:40:81:97:8e:3c:55:dd: 05:20:7f:35:c0:b6:51:ae:3c:13:f1:c1:a8:87:98: 2c:f9:27:d7:2a:5f:33:3c:04:3c:26:c0:c2:76:53: e6:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:CD:5D:76:7C:AD:97:C4:FF:83:E4:86:14:97:93:AD:9E:96:EE:BD X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dd5f9780-c5fb-497a-a212-e273eecd7ecc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.249.164.0/23 Signature Algorithm: sha256WithRSAEncryption 90:39:44:e6:f1:65:2a:9c:cd:48:c4:38:8e:d0:4d:f3:7a:4b: 40:dc:f8:3e:68:ef:d0:bb:ae:08:95:3f:c0:ac:e4:25:4c:f8: a5:9c:b0:3d:f2:2e:aa:3b:80:f2:89:fc:92:e8:ea:1c:e3:b1: 5f:06:3d:d9:b8:05:30:d2:c6:86:82:86:02:0c:5c:c8:e3:70: 17:3f:e5:76:2f:c1:39:3f:f1:eb:61:8c:82:f7:13:2a:0b:5b: fe:6c:8e:65:1e:27:1b:b1:03:e6:34:00:49:ba:cb:76:af:a9: 97:e7:3a:ea:05:83:e8:d9:1d:97:8f:ee:75:c3:41:44:2c:94: 24:d3:94:11:95:48:79:53:96:8a:1d:ef:7c:17:41:36:74:53: cf:a1:3b:2b:34:1d:c7:21:48:6f:b7:82:24:f7:d8:07:f0:58: 85:be:99:ab:13:cc:28:69:ff:8c:22:16:d2:be:ed:cd:b5:83: dd:a1:8d:cc:39:de:74:2a:78:d5:2b:7f:8c:0a:15:5a:0e:ff: 42:6f:56:6d:ff:b6:23:19:62:8d:45:5e:fe:21:aa:ce:14:41: 05:8d:12:53:e0:da:93:82:24:68:5f:a1:3a:8f:d6:b6:64:2a: 48:72:7a:0e:3d:5a:4b:85:0d:63:8b:58:62:c2:4e:e5:a9:ec: 82:1e:a7:05 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSwbWpdJ+oSU29mXHcJDiuphu0OcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTcyNzU4WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BmOTQ5M2Y5YjBlMzUzN2MxMGY2Mjg0NTViMzE4ZTMzNDM0 ODgyOTlkOTNmOGE3YThhNjdlZjVkODA5MjNkNjg2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCT73HkcdHmZYEQUIB7AQoM2cuFnAWeW1UpHYJGzb27+wne huWU8ZmUM3WlWQB4ECFyQ6WDRVVCDgrW5BBJfHLvYvs52tN5jdCLSD4QXcGdzNcT AuhhMhZ4BrfhA58ly0EZqpXaLeubYA0ZHxfnZ1l49mdm7rAxMELV/q9bSbdNaX15 XlufZFXnni/Kvu+eIvH2sDiBMxTYWM0seRwqN+B2f5J93Q3WXhDdeabq9hpvkydV 0BnWAIDnFD9V7nCLrfCJH6sqve5TL4R5/z4FDbISiYzwhUqB54LnQIGXjjxV3QUg fzXAtlGuPBPxwaiHmCz5J9cqXzM8BDwmwMJ2U+Y7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU9M1ddnytl8T/g+SGFJeTrZ6W7r0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2RkNWY5NzgwLWM1ZmItNDk3YS1hMjEyLWUyNzNlZWNkN2VjYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEN+aQwDQYJKoZIhvcNAQELBQADggEBAJA5RObxZSqczUjEOI7QTfN6S0Dc +D5o79C7rgiVP8Cs5CVM+KWcsD3yLqo7gPKJ/JLo6hzjsV8GPdm4BTDSxoaChgIM XMjjcBc/5XYvwTk/8ethjIL3EyoLW/5sjmUeJxuxA+Y0AEm6y3avqZfnOuoFg+jZ HZeP7nXDQUQslCTTlBGVSHlTlood73wXQTZ0U8+hOys0HcchSG+3giT32AfwWIW+ masTzChp/4wiFtK+7c21g92hjcw53nQqeNUrf4wKFVoO/0JvVm3/tiMZYo1FXv4h qs4UQQWNElPg2pOCJGhfoTqP1rZkKkhyeg49WkuFDWOLWGLCTuWp7IIepwU= -----END CERTIFICATE-----Generated at Mon Oct 20 17:29:38 2025 by rpki-client