$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/21ae7e5e-d92a-420c-9819-c8d041b18432.roa File: 21ae7e5e-d92a-420c-9819-c8d041b18432.roa (raw, json) Hash identifier: M7EVKSHQSmNDA40CUBf7RMbzo67pnWRSc4KfohPzy2k= Subject key identifier: D1:D2:D2:88:C3:83:CB:A0:4E:FC:A3:2B:32:57:AA:B7:85:34:33:F8 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 49EA5A67813E42AC7BCEE505CE0CEE2BB0D57C72 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/21ae7e5e-d92a-420c-9819-c8d041b18432.roa Signing time: Tue 21 Oct 2025 04:10:05 +0000 ROA not before: Tue 21 Oct 2025 04:10:05 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 6167 IP address blocks: 155.146.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:ea:5a:67:81:3e:42:ac:7b:ce:e5:05:ce:0c:ee:2b:b0:d5:7c:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 21 04:10:05 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=20cee3b9749a3d06fd0e429985979ce8d7ae9ccf0b5c4ca6b036361affece0c8, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c6:23:78:43:20:64:0c:45:88:7b:37:53:38: 46:16:b7:df:04:2b:af:21:1e:9a:59:49:e0:e7:ec: ac:b8:23:55:1a:c2:ea:80:21:65:3f:38:7e:6d:05: ef:ba:f0:f5:4c:4c:47:5f:88:76:86:5c:a7:5e:8f: 58:9e:e6:4d:93:75:7f:88:fc:27:5c:c8:59:ae:e5: 31:bf:da:fe:a9:06:ab:b8:fc:ef:3e:35:18:9f:99: 4a:87:73:a9:50:d4:49:8d:13:06:3d:33:dd:95:4a: 8a:ab:db:19:5f:d1:8a:ca:a0:42:3a:68:ec:e8:72: 13:67:9e:19:1c:7d:35:67:a1:1f:18:48:7f:f8:6d: 05:1f:c5:de:37:e6:39:ed:1d:60:87:8c:bd:71:c8: 1a:a5:5e:3d:07:42:96:b7:d8:6f:cd:f2:d6:cc:11: 23:c0:ee:62:85:6e:db:62:fc:37:a2:b7:63:e6:f7: e0:5e:d6:b6:d1:b8:bc:af:a3:72:bd:c4:ea:31:da: 87:46:66:be:48:b5:f6:96:30:62:01:4f:b0:30:52: 94:29:7c:d4:87:17:73:80:f9:f4:c5:46:8c:02:e7: ed:70:87:92:f5:be:64:0e:ef:19:ad:23:69:66:14: ac:45:bf:89:01:e5:22:30:96:84:2d:d5:2e:c4:bb: cc:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:D2:D2:88:C3:83:CB:A0:4E:FC:A3:2B:32:57:AA:B7:85:34:33:F8 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/21ae7e5e-d92a-420c-9819-c8d041b18432.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 155.146.16.0/20 Signature Algorithm: sha256WithRSAEncryption 82:24:e3:f7:7b:69:73:26:91:12:e1:f0:c3:75:c7:cc:96:b8: 1e:df:b8:84:d1:cd:ad:79:75:8d:7a:7b:e9:97:2e:61:43:9d: 2e:a4:4b:2c:1a:99:77:56:93:7e:04:fe:46:bd:17:73:1d:33: a3:91:58:8d:68:d0:d5:31:81:d5:27:d2:22:a8:f8:58:29:ab: ce:37:9f:2a:d2:96:21:f2:9f:d3:a5:9b:83:2f:c5:e3:0b:4e: e9:c2:e8:46:02:a6:87:b4:fc:31:a2:5a:fa:aa:c9:ae:e3:0f: fc:14:ae:74:f4:84:9a:a8:2a:0f:b9:5a:1c:85:2c:8e:08:d1: 3a:c0:cd:4f:6f:f6:8e:a0:52:7a:d7:60:61:11:e6:b6:08:9e: bb:c5:06:7f:51:c3:fa:1d:24:6f:04:71:18:41:1b:b8:ef:84: 3d:c5:e9:c0:05:29:94:37:ca:cd:8c:6c:03:b6:0e:1e:a2:87: de:5c:77:31:80:f6:34:ce:ec:98:c5:a2:01:75:b7:bf:46:93: 3f:9c:79:c3:67:2f:f1:31:e7:a8:1b:71:61:07:4d:df:c4:02: c7:6e:11:a6:54:91:b8:4b:cd:7c:f6:15:73:ac:45:97:d5:b5: 92:cf:38:4f:e4:3c:0d:45:91:8b:ce:07:b9:c1:e8:09:7d:0e: 21:a4:90:6a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSepaZ4E+Qqx7zuUFzgzuK7DVfHIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDIxMDQxMDA1WhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AyMGNlZTNiOTc0OWEzZDA2ZmQwZTQyOTk4NTk3OWNlOGQ3 YWU5Y2NmMGI1YzRjYTZiMDM2MzYxYWZmZWNlMGM4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHxiN4QyBkDEWIezdTOEYWt98EK68hHppZSeDn7Ky4I1Ua wuqAIWU/OH5tBe+68PVMTEdfiHaGXKdej1ie5k2TdX+I/CdcyFmu5TG/2v6pBqu4 /O8+NRifmUqHc6lQ1EmNEwY9M92VSoqr2xlf0YrKoEI6aOzochNnnhkcfTVnoR8Y SH/4bQUfxd435jntHWCHjL1xyBqlXj0HQpa32G/N8tbMESPA7mKFbtti/Deit2Pm 9+Be1rbRuLyvo3K9xOox2odGZr5ItfaWMGIBT7AwUpQpfNSHF3OA+fTFRowC5+1w h5L1vmQO7xmtI2lmFKxFv4kB5SIwloQt1S7Eu8wxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU0dLSiMODy6BO/KMrMleqt4U0M/gwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzIxYWU3ZTVlLWQ5MmEtNDIwYy05ODE5LWM4ZDA0MWIxODQzMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBASbkhAwDQYJKoZIhvcNAQELBQADggEBAIIk4/d7aXMmkRLh8MN1x8yWuB7f uITRza15dY16e+mXLmFDnS6kSywamXdWk34E/ka9F3MdM6ORWI1o0NUxgdUn0iKo +Fgpq843nyrSliHyn9Olm4MvxeMLTunC6EYCpoe0/DGiWvqqya7jD/wUrnT0hJqo Kg+5WhyFLI4I0TrAzU9v9o6gUnrXYGER5rYInrvFBn9Rw/odJG8EcRhBG7jvhD3F 6cAFKZQ3ys2MbAO2Dh6ih95cdzGA9jTO7JjFogF1t79Gkz+cecNnL/Ex56gbcWEH Td/EAsduEaZUkbhLzXz2FXOsRZfVtZLPOE/kPA1FkYvOB7nB6Al9DiGkkGo= -----END CERTIFICATE-----Generated at Wed Nov 5 01:49:48 2025 by rpki-client