$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cb58d632-a584-45c8-80fa-1a4a4ad4e6f8.roa File: cb58d632-a584-45c8-80fa-1a4a4ad4e6f8.roa (raw, json) Hash identifier: iScZkjQT2fcNNa33gSc2OLBEluhKStbqPBavc8/1Da4= Subject key identifier: 42:DF:C7:C5:C6:33:B4:16:11:CC:F0:40:0E:21:63:F1:57:38:A7:BF Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 096A28A82075E5F67BA679E20AB46463AD084E09 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cb58d632-a584-45c8-80fa-1a4a4ad4e6f8.roa Signing time: Mon 15 Sep 2025 15:50:05 +0000 ROA not before: Mon 15 Sep 2025 15:50:05 +0000 ROA not after: Mon 20 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 150.222.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:6a:28:a8:20:75:e5:f6:7b:a6:79:e2:0a:b4:64:63:ad:08:4e:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 15 15:50:05 2025 GMT Not After : Oct 20 23:59:59 2025 GMT Subject: serialNumber=846de11d45bdf904fba517bc2c7b79e6ba016514148c4de23060debd33a841b1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:db:b0:17:44:ca:ea:9e:08:58:e6:12:d6:2d: 8b:4c:0b:4b:00:0a:c3:c5:e3:21:4a:59:53:42:02: be:0a:af:f6:de:33:98:40:62:c0:74:9e:17:44:7d: 47:f1:40:70:3e:aa:41:31:b9:c4:dc:40:f0:1c:e4: e0:81:f0:bc:ae:7a:f1:eb:54:3c:cc:75:9f:2c:b6: 37:6d:e9:36:9f:17:e4:fa:cf:84:12:2b:94:05:37: 48:6e:a7:10:9b:ca:d8:08:b2:a9:7d:fc:91:d0:bb: f4:90:3b:9a:af:f3:43:e1:1b:e0:0a:9a:1b:7f:41: e9:13:af:64:84:7d:8a:40:f8:ad:63:99:9f:88:bd: 7a:5d:25:e1:b5:06:f5:14:42:69:74:85:cb:e7:5f: 3f:12:dd:c8:4f:7e:55:54:b6:73:4c:07:ba:67:af: 17:69:10:c7:e7:e7:91:12:9a:24:f2:86:b3:3a:65: b6:f7:53:cc:61:ec:34:12:1a:14:39:71:a4:4f:a0: ed:ea:a0:9d:dd:5d:94:7a:39:89:b8:9d:e1:56:b4: 06:1d:14:49:c1:5f:36:25:b2:9a:b1:59:68:b8:d9: c3:b4:a4:e0:65:8e:43:91:52:ea:3c:53:83:76:43: 5c:07:69:cf:03:3b:32:2f:31:a4:b1:af:11:0f:ae: 55:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:DF:C7:C5:C6:33:B4:16:11:CC:F0:40:0E:21:63:F1:57:38:A7:BF X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cb58d632-a584-45c8-80fa-1a4a4ad4e6f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.222.110.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:dc:00:ad:5e:fb:32:81:fd:e9:ef:c7:2a:c6:f2:d1:50:89: eb:74:e5:29:20:07:3c:4a:c6:93:c7:dd:fb:f3:0b:7d:6c:65: 76:ea:90:65:db:b7:88:9f:60:de:24:df:a6:d3:f9:b4:c0:94: 44:a4:9f:2a:38:f2:8a:7d:3a:17:c4:a4:c6:35:0c:96:26:a6: c6:07:21:fe:02:aa:6f:03:b0:c5:ee:e0:43:26:92:27:c3:09: 0a:64:ee:bf:59:a1:be:bc:49:06:ed:b1:e6:5b:d8:0c:1b:7d: 60:36:82:4d:cf:09:03:b5:99:38:2a:82:0e:e4:37:6d:18:d9: d5:f6:44:45:de:1b:b5:d1:0f:25:7d:92:39:2e:f6:75:5e:94: 0c:74:19:8d:d0:75:5a:a7:8f:21:19:e3:5a:13:07:fe:7d:f1: 8f:f9:bd:4f:f6:8f:5e:31:56:aa:5f:b1:4f:da:e1:dd:4f:49: 7a:cf:3f:8a:08:71:38:de:65:5d:a2:7b:df:be:f6:87:28:2c: 48:97:2e:f9:0e:82:0a:bb:7e:15:37:52:bd:a3:00:5c:ea:1f: 34:b3:d4:bb:86:7d:9b:1b:4d:4b:ad:5f:41:f4:e6:9d:7f:02: 19:09:5a:cb:d4:b2:04:09:05:fb:3b:f7:b0:da:9a:b8:d3:8e: 00:32:f5:f3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCWooqCB15fZ7pnniCrRkY60ITgkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTE1MTU1MDA1WhcNMjUxMDIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A4NDZkZTExZDQ1YmRmOTA0ZmJhNTE3YmMyYzdiNzllNmJh MDE2NTE0MTQ4YzRkZTIzMDYwZGViZDMzYTg0MWIxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCh27AXRMrqnghY5hLWLYtMC0sACsPF4yFKWVNCAr4Kr/be M5hAYsB0nhdEfUfxQHA+qkExucTcQPAc5OCB8LyuevHrVDzMdZ8stjdt6TafF+T6 z4QSK5QFN0hupxCbytgIsql9/JHQu/SQO5qv80PhG+AKmht/QekTr2SEfYpA+K1j mZ+IvXpdJeG1BvUUQml0hcvnXz8S3chPflVUtnNMB7pnrxdpEMfn55ESmiTyhrM6 Zbb3U8xh7DQSGhQ5caRPoO3qoJ3dXZR6OYm4neFWtAYdFEnBXzYlspqxWWi42cO0 pOBljkORUuo8U4N2Q1wHac8DOzIvMaSxrxEPrlXpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUQt/HxcYztBYRzPBADiFj8Vc4p78wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2NiNThkNjMyLWE1ODQtNDVjOC04MGZhLTFhNGE0YWQ0ZTZmOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACW3m4wDQYJKoZIhvcNAQELBQADggEBAI/cAK1e+zKB/envxyrG8tFQiet0 5SkgBzxKxpPH3fvzC31sZXbqkGXbt4ifYN4k36bT+bTAlESknyo48op9OhfEpMY1 DJYmpsYHIf4Cqm8DsMXu4EMmkifDCQpk7r9Zob68SQbtseZb2AwbfWA2gk3PCQO1 mTgqgg7kN20Y2dX2REXeG7XRDyV9kjku9nVelAx0GY3QdVqnjyEZ41oTB/598Y/5 vU/2j14xVqpfsU/a4d1PSXrPP4oIcTjeZV2ie9++9ocoLEiXLvkOggq7fhU3Ur2j AFzqHzSz1LuGfZsbTUutX0H05p1/AhkJWsvUsgQJBfs797DamrjTjgAy9fM= -----END CERTIFICATE-----Generated at Wed Oct 8 21:34:26 2025 by rpki-client