$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fa19e71d-d2eb-4bcb-94f5-313a66410a4f.roa File: fa19e71d-d2eb-4bcb-94f5-313a66410a4f.roa (raw, json) Hash identifier: CUvNuZ3OWiprOUqwsFeCERtzHOXQa+6mKBLXLFPlH2o= Subject key identifier: BE:D6:0A:95:B6:65:4E:45:4D:A7:98:0A:20:4F:39:F5:09:10:73:37 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 65DAA609FFCF9E6E5CDFFD8721B481E8429C9AF2 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fa19e71d-d2eb-4bcb-94f5-313a66410a4f.roa Signing time: Tue 04 Nov 2025 01:21:48 +0000 ROA not before: Tue 04 Nov 2025 01:21:48 +0000 ROA not after: Tue 09 Dec 2025 23:59:59 +0000 asID: 14618 IP address blocks: 13.248.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:da:a6:09:ff:cf:9e:6e:5c:df:fd:87:21:b4:81:e8:42:9c:9a:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Nov 4 01:21:48 2025 GMT Not After : Dec 9 23:59:59 2025 GMT Subject: serialNumber=0639b7bae7cbd504c4240436f3f3bf63acee7e8a558c75d883950029d9d5a48d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d4:0c:79:4e:2e:4f:8d:c7:f3:bc:a5:7a:c3: f1:3d:58:90:b1:ba:4c:2c:37:a4:c7:46:8e:65:2f: f7:26:8a:78:83:d9:00:ec:f8:f5:5b:0c:9f:2e:86: 30:41:ca:86:9d:17:46:14:74:d8:e9:6e:19:db:6f: b9:f5:8b:86:bb:d7:86:e1:f9:81:f6:be:aa:94:1b: 16:54:e5:01:43:03:5b:2a:50:06:88:59:03:9c:07: b2:b8:ac:06:ce:f3:0e:40:02:e0:2b:8b:89:7e:6e: bd:c5:91:bc:66:14:7b:af:80:dc:3b:78:ac:5f:be: a1:f6:ab:7e:eb:70:52:a1:65:9e:6d:19:da:25:b0: a8:c1:a8:65:a4:1c:a4:ba:81:7c:8e:a0:cd:12:d9: 9e:11:20:b1:a2:b2:34:1a:62:eb:97:8b:ec:c0:7b: a9:16:fd:be:35:02:21:f1:7f:7e:4c:6e:d2:d0:d1: 67:27:87:be:95:38:51:51:78:b2:bd:a9:31:51:ee: 3f:f2:bf:83:2e:87:fd:70:76:8d:c4:e9:89:66:ee: c6:9f:47:d1:ac:76:97:e0:c3:60:03:b0:a5:85:9d: a2:8f:0f:08:43:5d:85:0a:aa:ff:49:9c:0d:8a:0f: f5:94:b4:76:ab:bd:e1:3a:2d:c5:53:6b:11:e6:d9: 95:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:D6:0A:95:B6:65:4E:45:4D:A7:98:0A:20:4F:39:F5:09:10:73:37 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fa19e71d-d2eb-4bcb-94f5-313a66410a4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.248.116.0/24 Signature Algorithm: sha256WithRSAEncryption 91:d5:09:c1:d8:f9:b9:50:52:f1:67:d1:1a:ab:4d:77:59:f4: 3e:da:5c:1f:24:0a:1b:ae:0c:04:ac:cc:64:a2:cb:85:c4:77: c4:2b:20:68:8a:6b:1d:83:c3:e5:ff:e6:66:65:37:57:42:7f: 83:ba:77:3f:a0:30:34:1b:22:7e:df:2e:dd:b3:d0:e6:49:c1: 1d:68:d4:1f:ed:07:b0:54:75:f0:94:89:a4:e9:5c:fc:01:dd: 28:83:20:e0:01:82:c2:2a:27:32:93:44:e6:37:d2:28:7c:16: 55:84:3c:63:4f:ca:f1:33:0c:57:4a:76:1a:ff:6e:4e:dd:44: f4:ef:d7:6e:c1:a1:9c:2b:0d:d3:33:f6:34:16:b2:89:15:e4: 27:48:de:58:53:3d:6c:76:1b:44:fa:1b:a6:7c:50:60:4c:44: bf:ec:ae:70:b0:1d:af:b8:64:17:48:81:f0:d3:77:69:ab:43: 0e:59:50:b9:83:88:6b:08:4b:78:98:94:2f:c5:68:38:f6:a4: 6f:dc:b3:0e:68:c1:4e:2e:19:67:83:25:95:82:a9:a5:b6:31: c1:1b:7e:49:61:16:f8:8e:98:f6:f6:4c:37:26:62:98:58:37: 22:68:8e:a7:39:7d:b4:5e:2c:96:44:4c:f4:99:fc:66:06:ce: ae:64:8e:56 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZdqmCf/Pnm5c3/2HIbSB6EKcmvIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMTA0MDEyMTQ4WhcNMjUxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AwNjM5YjdiYWU3Y2JkNTA0YzQyNDA0MzZmM2YzYmY2M2Fj ZWU3ZThhNTU4Yzc1ZDg4Mzk1MDAyOWQ5ZDVhNDhkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDB1Ax5Ti5PjcfzvKV6w/E9WJCxukwsN6THRo5lL/cminiD 2QDs+PVbDJ8uhjBByoadF0YUdNjpbhnbb7n1i4a714bh+YH2vqqUGxZU5QFDA1sq UAaIWQOcB7K4rAbO8w5AAuAri4l+br3FkbxmFHuvgNw7eKxfvqH2q37rcFKhZZ5t GdolsKjBqGWkHKS6gXyOoM0S2Z4RILGisjQaYuuXi+zAe6kW/b41AiHxf35MbtLQ 0Wcnh76VOFFReLK9qTFR7j/yv4Muh/1wdo3E6Ylm7safR9Gsdpfgw2ADsKWFnaKP DwhDXYUKqv9JnA2KD/WUtHarveE6LcVTaxHm2ZXxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUvtYKlbZlTkVNp5gKIE859QkQczcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2ZhMTllNzFkLWQyZWItNGJjYi05NGY1LTMxM2E2NjQxMGE0Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAN+HQwDQYJKoZIhvcNAQELBQADggEBAJHVCcHY+blQUvFn0RqrTXdZ9D7a XB8kChuuDASszGSiy4XEd8QrIGiKax2Dw+X/5mZlN1dCf4O6dz+gMDQbIn7fLt2z 0OZJwR1o1B/tB7BUdfCUiaTpXPwB3SiDIOABgsIqJzKTROY30ih8FlWEPGNPyvEz DFdKdhr/bk7dRPTv127BoZwrDdMz9jQWsokV5CdI3lhTPWx2G0T6G6Z8UGBMRL/s rnCwHa+4ZBdIgfDTd2mrQw5ZULmDiGsIS3iYlC/FaDj2pG/csw5owU4uGWeDJZWC qaW2McEbfklhFviOmPb2TDcmYphYNyJojqc5fbReLJZETPSZ/GYGzq5kjlY= -----END CERTIFICATE-----Generated at Wed Nov 5 07:25:30 2025 by rpki-client