$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7bb93a97-3700-4e03-912e-ebac4339b0fc.roa File: 7bb93a97-3700-4e03-912e-ebac4339b0fc.roa (raw, json) Hash identifier: HAOH8rI682H8ZcbDz1CULoh1vIA223jBjfWAF6CmB+U= Subject key identifier: E1:70:9F:05:20:70:8C:BF:9B:3F:26:18:FB:6A:FD:3B:52:B2:F7:34 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1F49EFFE40BF9C8B332C9660E0ECB5D91E08B731 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7bb93a97-3700-4e03-912e-ebac4339b0fc.roa Signing time: Tue 28 Oct 2025 01:10:11 +0000 ROA not before: Tue 28 Oct 2025 01:10:11 +0000 ROA not after: Tue 02 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 150.222.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:49:ef:fe:40:bf:9c:8b:33:2c:96:60:e0:ec:b5:d9:1e:08:b7:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 28 01:10:11 2025 GMT Not After : Dec 2 23:59:59 2025 GMT Subject: serialNumber=199ebbf577b1b1cbb9d16347edde4a72b97502c05c448a988506c7785420a3d6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:75:2c:27:f7:92:24:02:49:00:d3:41:3f:5c: 75:a8:31:9b:fe:8c:a8:13:5f:65:9f:56:8a:23:b4: 8f:a9:f7:77:93:ae:c2:77:13:40:07:08:03:f8:f4: b2:88:19:7f:2e:a1:7f:4a:ab:1f:d1:fd:a6:dc:fa: 66:9d:5f:09:4b:e6:2d:0a:fb:0e:fc:7b:b9:7b:e8: 6a:32:ad:61:40:b3:5c:a5:9e:05:e0:28:9e:fb:8f: ff:b1:ee:ec:74:0b:75:b3:48:54:21:26:6a:de:76: 7a:89:92:21:96:9f:d6:58:46:34:fe:e0:02:05:c9: 15:70:c6:ae:b0:25:43:0d:1a:5d:93:0f:b0:5b:10: 40:0b:84:fb:c8:22:ea:4b:1c:c8:e8:bf:08:2a:20: 3c:70:74:67:d2:f5:b7:42:f1:2b:f6:4b:72:3c:d0: 54:36:99:64:37:d1:b4:f0:bc:7e:7a:70:d0:77:cf: 81:00:d3:33:bd:b3:6a:86:aa:0e:2e:e1:7f:24:1f: 6e:cb:4d:5b:36:af:72:6d:67:25:41:98:34:79:dc: ce:89:47:3d:ee:bc:78:e3:2a:72:33:31:75:1d:79: f8:76:cb:8d:3e:27:8a:1a:5a:3e:bf:43:b1:e1:fb: 04:c3:fb:a3:13:ab:25:57:e6:c8:b3:51:04:bd:92: 18:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:70:9F:05:20:70:8C:BF:9B:3F:26:18:FB:6A:FD:3B:52:B2:F7:34 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7bb93a97-3700-4e03-912e-ebac4339b0fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.222.32.0/24 Signature Algorithm: sha256WithRSAEncryption 18:2d:5b:3a:f4:41:e1:e2:f2:10:6f:71:0b:61:5a:ea:f2:b1: 74:af:90:26:88:4f:63:a0:2b:16:89:fb:62:94:bf:40:4b:7b: 74:6c:13:75:49:0e:ef:ff:b5:bb:79:04:96:9e:7e:9b:fb:5a: 34:0d:c1:50:e8:d8:57:90:98:82:d0:2e:5f:da:50:aa:e4:ce: 97:4e:e6:e1:8b:d7:00:cd:86:ba:17:b9:57:87:8d:15:7a:ca: b8:c2:bd:da:a8:e8:15:3d:95:07:14:64:79:ce:2b:21:57:39: ac:e9:af:97:1c:7a:06:7a:c1:7a:f0:6e:15:dc:85:a6:72:14: fd:52:c6:f1:a8:9f:ac:40:4e:ff:b0:ad:a0:f4:8c:5b:e7:89: bf:14:2f:d0:1b:c9:0e:9b:59:69:a9:4c:6c:a0:a0:44:b2:d7: 24:6d:05:a4:48:df:09:4f:6a:cf:96:90:7f:92:f4:f2:4e:59: c3:75:db:e9:49:48:1e:fb:77:81:94:84:59:46:dd:bd:3e:a0: 96:5d:0b:ff:00:70:66:74:16:95:10:13:cf:3a:0a:20:e1:65: e9:a1:f9:05:10:4c:3a:48:ec:e5:d3:8c:15:a9:73:e8:4f:47: 83:c7:56:6c:fe:39:f5:f1:b2:3c:30:e3:c3:d9:97:c5:6c:a8: 69:4a:97:83 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUH0nv/kC/nIszLJZg4Oy12R4ItzEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDI4MDExMDExWhcNMjUxMjAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AxOTllYmJmNTc3YjFiMWNiYjlkMTYzNDdlZGRlNGE3MmI5 NzUwMmMwNWM0NDhhOTg4NTA2Yzc3ODU0MjBhM2Q2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCudSwn95IkAkkA00E/XHWoMZv+jKgTX2WfVoojtI+p93eT rsJ3E0AHCAP49LKIGX8uoX9Kqx/R/abc+madXwlL5i0K+w78e7l76GoyrWFAs1yl ngXgKJ77j/+x7ux0C3WzSFQhJmrednqJkiGWn9ZYRjT+4AIFyRVwxq6wJUMNGl2T D7BbEEALhPvIIupLHMjovwgqIDxwdGfS9bdC8Sv2S3I80FQ2mWQ30bTwvH56cNB3 z4EA0zO9s2qGqg4u4X8kH27LTVs2r3JtZyVBmDR53M6JRz3uvHjjKnIzMXUdefh2 y40+J4oaWj6/Q7Hh+wTD+6MTqyVX5sizUQS9khhVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU4XCfBSBwjL+bPyYY+2r9O1Ky9zQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzdiYjkzYTk3LTM3MDAtNGUwMy05MTJlLWViYWM0MzM5YjBmYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACW3iAwDQYJKoZIhvcNAQELBQADggEBABgtWzr0QeHi8hBvcQthWurysXSv kCaIT2OgKxaJ+2KUv0BLe3RsE3VJDu//tbt5BJaefpv7WjQNwVDo2FeQmILQLl/a UKrkzpdO5uGL1wDNhroXuVeHjRV6yrjCvdqo6BU9lQcUZHnOKyFXOazpr5ccegZ6 wXrwbhXchaZyFP1SxvGon6xATv+wraD0jFvnib8UL9AbyQ6bWWmpTGygoESy1yRt BaRI3wlPas+WkH+S9PJOWcN12+lJSB77d4GUhFlG3b0+oJZdC/8AcGZ0FpUQE886 CiDhZemh+QUQTDpI7OXTjBWpc+hPR4PHVmz+OfXxsjww48PZl8VsqGlKl4M= -----END CERTIFICATE-----Generated at Wed Nov 5 01:50:55 2025 by rpki-client