$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/21292a6c-d4bb-4fe1-b876-ca3132079df4.roa File: 21292a6c-d4bb-4fe1-b876-ca3132079df4.roa (raw, json) Hash identifier: IcIsfGvu7GNXVcmUf6nR84VuhODhdM8xbab+nq1BshU= Subject key identifier: 6E:79:2E:18:0D:77:5C:EF:A0:E7:99:EF:F3:D3:B8:8D:D0:EE:13:74 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4565224EDC9CE4949539A41D6C092A8958099BE0 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/21292a6c-d4bb-4fe1-b876-ca3132079df4.roa Signing time: Tue 21 Oct 2025 06:31:22 +0000 ROA not before: Tue 21 Oct 2025 06:31:22 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 150.222.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:65:22:4e:dc:9c:e4:94:95:39:a4:1d:6c:09:2a:89:58:09:9b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 21 06:31:22 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=881a10891fbcb4dd9385475800078ec2be25a8b922bb4a8fb508a126f3352f2e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:7b:e1:e2:dc:78:35:9e:cc:00:a6:92:36:14: 7d:97:b5:ff:09:da:c2:30:04:51:23:30:d1:80:dd: 58:25:de:30:e2:9c:f2:2f:9a:6f:8a:71:37:33:e1: 12:66:5b:97:b9:91:bf:03:1b:a5:ad:cd:cd:fa:75: 4f:91:80:5b:07:69:f6:e3:01:97:3b:ef:a2:80:0e: 6d:8d:18:22:c4:8c:39:4d:65:95:34:f5:0d:03:f2: e0:d0:20:6a:c0:05:e1:29:15:3d:3f:a1:1f:6c:fc: 48:41:ec:49:22:78:4a:9e:97:6f:50:a9:d9:57:ac: c9:e0:9b:de:b6:e5:54:02:87:52:34:7f:e1:50:21: be:ff:7b:c9:93:ca:aa:0b:d4:56:3c:c1:9f:5a:1d: eb:ad:65:d0:07:73:89:76:b6:c4:27:76:99:23:2f: 56:05:b2:64:5b:5b:78:6b:69:9d:5d:0c:65:c5:f3: 1f:9a:7e:79:7f:32:32:92:c7:a8:60:3e:ab:84:30: 70:c6:2a:c1:01:65:b2:c2:e6:37:8f:19:55:2a:c8: 62:11:1c:e3:61:fe:15:ca:21:5d:60:38:85:85:b0: d7:8a:71:80:91:eb:33:14:00:0f:ac:93:40:a3:9b: 82:4e:d1:ff:ad:49:b2:86:97:07:1c:63:15:37:26: 19:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:79:2E:18:0D:77:5C:EF:A0:E7:99:EF:F3:D3:B8:8D:D0:EE:13:74 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/21292a6c-d4bb-4fe1-b876-ca3132079df4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.222.100.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:fe:98:19:d3:93:74:4f:51:16:1c:cb:4c:19:c6:20:05:57: 87:f2:e7:8d:5c:da:d9:0a:2d:6b:ec:0f:99:f8:11:a0:81:d9: 15:69:f3:38:3d:32:16:1e:2c:02:2e:71:a6:2f:ac:6f:05:9c: 7c:db:e0:d2:29:93:9e:d0:9e:6a:3f:89:6a:d2:c7:e6:18:1a: 6d:fb:ef:9e:ea:ad:26:66:8c:21:ab:df:d2:1f:be:bc:c9:f2: 5e:15:68:c9:ad:ed:df:18:f3:7b:6c:32:39:1d:82:a4:8d:b7: 02:dc:e6:24:e7:90:d8:3f:53:65:42:b7:40:22:58:ec:99:e9: c0:14:ad:b5:f2:64:23:ad:41:75:1b:eb:48:e3:5b:73:83:15: 7e:2a:43:56:e3:34:4d:07:c1:39:75:aa:f0:28:b9:ee:95:7a: e3:24:dc:db:ec:09:bd:9d:4c:f4:fe:24:24:e3:42:2e:e7:6b: 36:4b:a8:1a:39:08:45:fc:17:ac:5c:6b:bb:68:62:91:8f:de: a8:c3:1d:d0:38:5d:85:d6:d3:b2:a0:71:4c:58:06:14:13:58: dd:6c:be:ee:fc:bd:68:b7:ce:a1:7c:3c:3b:9f:fa:8f:4d:db: f9:20:1c:58:ff:de:d4:f0:b1:85:5c:84:99:89:1f:3f:64:cd: 6b:61:a4:c6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURWUiTtyc5JSVOaQdbAkqiVgJm+AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDIxMDYzMTIyWhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A4ODFhMTA4OTFmYmNiNGRkOTM4NTQ3NTgwMDA3OGVjMmJl MjVhOGI5MjJiYjRhOGZiNTA4YTEyNmYzMzUyZjJlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDXe+Hi3Hg1nswAppI2FH2Xtf8J2sIwBFEjMNGA3Vgl3jDi nPIvmm+KcTcz4RJmW5e5kb8DG6Wtzc36dU+RgFsHafbjAZc776KADm2NGCLEjDlN ZZU09Q0D8uDQIGrABeEpFT0/oR9s/EhB7EkieEqel29QqdlXrMngm9625VQCh1I0 f+FQIb7/e8mTyqoL1FY8wZ9aHeutZdAHc4l2tsQndpkjL1YFsmRbW3hraZ1dDGXF 8x+afnl/MjKSx6hgPquEMHDGKsEBZbLC5jePGVUqyGIRHONh/hXKIV1gOIWFsNeK cYCR6zMUAA+sk0Cjm4JO0f+tSbKGlwccYxU3JhlFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUbnkuGA13XO+g55nv89O4jdDuE3QwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzIxMjkyYTZjLWQ0YmItNGZlMS1iODc2LWNhMzEzMjA3OWRmNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACW3mQwDQYJKoZIhvcNAQELBQADggEBAI7+mBnTk3RPURYcy0wZxiAFV4fy 541c2tkKLWvsD5n4EaCB2RVp8zg9MhYeLAIucaYvrG8FnHzb4NIpk57Qnmo/iWrS x+YYGm37757qrSZmjCGr39IfvrzJ8l4VaMmt7d8Y83tsMjkdgqSNtwLc5iTnkNg/ U2VCt0AiWOyZ6cAUrbXyZCOtQXUb60jjW3ODFX4qQ1bjNE0HwTl1qvAoue6VeuMk 3NvsCb2dTPT+JCTjQi7nazZLqBo5CEX8F6xca7toYpGP3qjDHdA4XYXW07KgcUxY BhQTWN1svu78vWi3zqF8PDuf+o9N2/kgHFj/3tTwsYVchJmJHz9kzWthpMY= -----END CERTIFICATE-----Generated at Wed Nov 5 07:43:19 2025 by rpki-client