$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/25766d73-78d4-42ee-80cd-79bd72118aa2.roa File: 25766d73-78d4-42ee-80cd-79bd72118aa2.roa (raw, json) Hash identifier: NIel/nnT+U3cMi2n83f7X8HSFPAuER+IGUOR7UuJkGA= Subject key identifier: 97:C8:CD:BD:47:5B:5F:96:F7:CB:48:C0:DA:22:A0:27:10:39:04:19 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 07753291313222DEF0CEDB7C3EC7D97B5B38D931 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/25766d73-78d4-42ee-80cd-79bd72118aa2.roa Signing time: Fri 31 Oct 2025 20:10:27 +0000 ROA not before: Fri 31 Oct 2025 20:10:27 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.248.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:75:32:91:31:32:22:de:f0:ce:db:7c:3e:c7:d9:7b:5b:38:d9:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 31 20:10:27 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=25c2ed1de5c6cba4fa951bfbcd5adf87454f3c2bb3a74b39ab6d701b7c63ca66, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9c:18:85:c2:05:cf:66:fb:75:01:1d:6d:43: ff:13:53:9f:6f:cb:60:4a:33:54:56:a7:09:72:88: 41:e2:82:7e:81:aa:a2:8e:36:db:5d:25:67:88:b3: 7b:63:02:70:74:93:1d:bd:4b:16:ef:3c:05:ad:0b: ca:d8:d0:b2:74:61:9c:36:3f:94:4b:9d:8f:eb:40: e5:0a:5a:c7:20:48:99:9c:df:c4:74:51:85:b7:c6: 2a:c9:34:97:d9:a3:cb:20:44:db:87:ca:3b:5d:78: 1c:d3:29:27:94:71:ce:9f:30:d6:8d:3a:8e:3a:5d: 02:9e:7d:08:ff:d1:e5:7c:79:f4:91:15:13:29:01: af:2e:58:4b:49:26:c9:3b:d0:f4:58:94:99:e7:69: 68:b3:c3:fd:aa:6b:ec:73:d6:f5:11:d8:46:97:bf: 5e:de:cf:56:8a:8f:b2:14:a2:68:9f:fa:3c:57:3b: b7:53:86:45:46:b7:16:4b:37:9e:51:74:9a:78:c4: 28:07:59:96:1b:90:50:fe:b4:29:ff:5e:9a:a4:59: b6:d5:c9:7f:52:e9:2f:d7:bb:0d:d7:5f:c3:ef:2c: dd:e7:b2:5f:96:5f:e0:df:ca:da:91:b1:a2:6d:10: 17:1f:58:7a:80:d7:48:35:8e:fa:19:97:69:23:30: 85:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:C8:CD:BD:47:5B:5F:96:F7:CB:48:C0:DA:22:A0:27:10:39:04:19 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/25766d73-78d4-42ee-80cd-79bd72118aa2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.248.225.0/24 Signature Algorithm: sha256WithRSAEncryption 28:72:cc:bb:1f:de:8b:0f:db:fe:6f:85:1f:c0:9a:48:be:a6: 9d:37:01:63:97:f7:7f:93:d0:f1:d4:4d:f1:fe:c4:14:52:f8: 4b:67:37:d2:dd:dd:84:c5:32:54:6d:a7:d8:f5:30:f5:3e:32: 59:24:6b:b7:97:28:72:91:6d:48:f3:cb:78:c3:d7:b1:9f:96: ea:5e:91:06:62:e1:a6:69:82:7e:46:f9:9f:6d:bf:3f:00:2a: 6b:7a:5a:74:59:86:bc:3c:26:7e:45:07:37:39:ce:0e:fa:e2: 7e:15:85:8f:ad:57:95:81:2f:a9:c2:d2:0c:e0:36:60:e1:e3: f7:73:b1:c7:e5:77:53:82:24:40:80:c6:79:59:f9:a9:26:0e: e4:a4:c1:39:3e:cc:97:d5:34:73:07:ef:ae:ea:22:4d:d8:cf: a8:95:a5:3b:27:e6:e6:bb:13:5b:fb:b4:38:e4:b9:08:ff:a6: 16:f9:d3:8a:e0:1d:25:7d:fb:af:9f:51:9a:12:b3:d7:1c:6d: 88:37:27:e3:7d:04:6c:f8:a9:eb:e0:91:d2:ed:2c:4f:4c:2c: fa:f9:23:97:23:ac:5c:0f:19:c7:ba:52:89:e6:e3:83:ad:70: ab:a9:87:cd:d3:59:f0:4c:8f:9c:1b:98:84:1f:c9:7d:68:94: 0b:43:3f:19 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUB3UykTEyIt7wztt8PsfZe1s42TEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDMxMjAxMDI3WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AyNWMyZWQxZGU1YzZjYmE0ZmE5NTFiZmJjZDVhZGY4NzQ1 NGYzYzJiYjNhNzRiMzlhYjZkNzAxYjdjNjNjYTY2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDEnBiFwgXPZvt1AR1tQ/8TU59vy2BKM1RWpwlyiEHign6B qqKONttdJWeIs3tjAnB0kx29SxbvPAWtC8rY0LJ0YZw2P5RLnY/rQOUKWscgSJmc 38R0UYW3xirJNJfZo8sgRNuHyjtdeBzTKSeUcc6fMNaNOo46XQKefQj/0eV8efSR FRMpAa8uWEtJJsk70PRYlJnnaWizw/2qa+xz1vUR2EaXv17ez1aKj7IUomif+jxX O7dThkVGtxZLN55RdJp4xCgHWZYbkFD+tCn/XpqkWbbVyX9S6S/Xuw3XX8PvLN3n sl+WX+DfytqRsaJtEBcfWHqA10g1jvoZl2kjMIXbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUl8jNvUdbX5b3y0jA2iKgJxA5BBkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzI1NzY2ZDczLTc4ZDQtNDJlZS04MGNkLTc5YmQ3MjExOGFhMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAN+OEwDQYJKoZIhvcNAQELBQADggEBAChyzLsf3osP2/5vhR/Amki+pp03 AWOX93+T0PHUTfH+xBRS+EtnN9Ld3YTFMlRtp9j1MPU+Mlkka7eXKHKRbUjzy3jD 17GflupekQZi4aZpgn5G+Z9tvz8AKmt6WnRZhrw8Jn5FBzc5zg764n4VhY+tV5WB L6nC0gzgNmDh4/dzscfld1OCJECAxnlZ+akmDuSkwTk+zJfVNHMH767qIk3Yz6iV pTsn5ua7E1v7tDjkuQj/phb504rgHSV9+6+fUZoSs9ccbYg3J+N9BGz4qevgkdLt LE9MLPr5I5cjrFwPGce6Uonm44OtcKuph83TWfBMj5wbmIQfyX1olAtDPxk= -----END CERTIFICATE-----Generated at Wed Nov 5 01:45:37 2025 by rpki-client