$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/279cf132-8e63-4dce-9533-2ca7355ac7f2.roa File: 279cf132-8e63-4dce-9533-2ca7355ac7f2.roa (raw, json) Hash identifier: qezCjW43uUoiZeKM5PwF3bl5yljS6xeZ+FHbKvJ7qgA= Subject key identifier: 0B:BF:84:18:A8:E7:4D:B3:F5:5C:53:B9:31:0B:7A:E6:16:04:F6:97 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 65C0B8C7AD3332D119964A651E13E510BC9A3EBA Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/279cf132-8e63-4dce-9533-2ca7355ac7f2.roa Signing time: Mon 01 Sep 2025 16:31:26 +0000 ROA not before: Mon 01 Sep 2025 16:31:26 +0000 ROA not after: Mon 06 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 150.222.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:c0:b8:c7:ad:33:32:d1:19:96:4a:65:1e:13:e5:10:bc:9a:3e:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 1 16:31:26 2025 GMT Not After : Oct 6 23:59:59 2025 GMT Subject: serialNumber=8d8d7bd7c432f09f5ea925c898a0a324e22da70ed7d0be09666fbf1e7cd4079b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a1:0f:ff:4c:61:0d:48:d1:4e:88:33:7f:da: fe:ad:01:b0:88:d5:8e:8f:bd:ef:4d:98:0d:4a:f4: 57:ea:d2:71:d1:e6:84:b2:c9:06:d9:14:ad:24:ee: 59:5e:17:48:44:68:42:c6:ee:10:2d:bb:ca:ef:49: 67:31:65:c8:25:66:87:6f:05:c8:df:0b:3d:ba:cc: c0:7b:a9:78:92:4f:70:2d:d3:f8:01:14:ca:ab:14: 35:92:aa:fc:5c:07:e1:37:fe:90:d3:62:bc:c0:2d: 40:d4:ca:7d:df:d8:c8:07:8a:17:02:32:8e:88:b1: 98:9e:25:83:5c:55:91:c9:13:d7:b3:14:b4:6d:48: cd:94:a5:08:bc:5e:59:91:f2:54:a1:d3:54:1d:ba: df:c9:a4:3a:46:9f:2e:96:f2:22:0c:63:22:10:92: 5a:9b:5a:ad:46:49:c6:64:d8:87:e9:57:20:75:29: 96:20:cd:95:c4:e2:72:7f:cb:23:02:ba:23:0b:e9: 1f:86:da:c3:fa:1e:c3:b4:a1:95:f8:f6:a6:3f:83: 68:b2:c1:1c:2f:c6:b5:01:7e:e9:3e:9c:18:0f:e6: dc:43:5e:9e:ba:cc:6a:b9:9c:fc:c3:0c:52:1b:0f: 12:99:42:b9:7c:e6:24:68:27:f6:26:61:23:a6:67: ee:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:BF:84:18:A8:E7:4D:B3:F5:5C:53:B9:31:0B:7A:E6:16:04:F6:97 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/279cf132-8e63-4dce-9533-2ca7355ac7f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.222.138.0/24 Signature Algorithm: sha256WithRSAEncryption 49:8a:34:e5:f7:c7:2e:a9:f0:cd:db:4c:02:63:f4:20:66:c3: 68:94:04:ff:5d:8b:70:fa:60:1e:c5:07:b4:4e:8b:dd:7b:36: 2e:16:03:67:20:4e:2c:0d:63:f6:c4:5d:ee:c6:b1:85:a5:af: f1:55:92:9e:5a:02:0c:3c:78:41:c3:7d:45:d2:88:12:cd:48: 1c:7d:ef:95:8d:13:0e:9d:9f:07:0b:55:fc:6b:49:35:f5:2d: c2:d0:ce:ba:2e:56:85:8e:ea:25:10:ac:c7:c6:0d:86:fb:76: a0:1d:bb:82:85:86:b0:46:61:ed:36:ef:27:ee:0b:ce:9b:2f: 73:85:9e:50:40:e3:be:3e:6b:34:17:da:06:a4:27:10:88:85: e0:92:bd:49:1b:bb:83:7c:11:08:c6:01:e2:2d:b4:d7:79:0a: 67:a7:e2:56:a8:7c:a6:48:13:a0:b7:26:69:1c:2f:8d:f3:fe: ff:79:6c:b5:83:67:26:de:b8:38:a1:f6:bc:25:aa:85:4c:82: d9:9c:a1:d7:05:a8:52:8e:95:7f:ea:08:77:ae:4a:2e:39:55: c0:b9:4f:bb:7a:ee:7a:6c:86:ac:df:ef:ff:eb:90:64:66:1c: a8:ce:6b:c6:29:7d:c0:f7:fd:a2:a6:99:0c:b4:34:81:be:c4: 78:15:4a:70 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZcC4x60zMtEZlkplHhPlELyaProwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTAxMTYzMTI2WhcNMjUxMDA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZDhkN2JkN2M0MzJmMDlmNWVhOTI1Yzg5OGEwYTMyNGUy MmRhNzBlZDdkMGJlMDk2NjZmYmYxZTdjZDQwNzliMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCeoQ//TGENSNFOiDN/2v6tAbCI1Y6Pve9NmA1K9Ffq0nHR 5oSyyQbZFK0k7lleF0hEaELG7hAtu8rvSWcxZcglZodvBcjfCz26zMB7qXiST3At 0/gBFMqrFDWSqvxcB+E3/pDTYrzALUDUyn3f2MgHihcCMo6IsZieJYNcVZHJE9ez FLRtSM2UpQi8XlmR8lSh01Qdut/JpDpGny6W8iIMYyIQklqbWq1GScZk2IfpVyB1 KZYgzZXE4nJ/yyMCuiML6R+G2sP6HsO0oZX49qY/g2iywRwvxrUBfuk+nBgP5txD Xp66zGq5nPzDDFIbDxKZQrl85iRoJ/YmYSOmZ+6tAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUC7+EGKjnTbP1XFO5MQt65hYE9pcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzI3OWNmMTMyLThlNjMtNGRjZS05NTMzLTJjYTczNTVhYzdmMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACW3oowDQYJKoZIhvcNAQELBQADggEBAEmKNOX3xy6p8M3bTAJj9CBmw2iU BP9di3D6YB7FB7ROi917Ni4WA2cgTiwNY/bEXe7GsYWlr/FVkp5aAgw8eEHDfUXS iBLNSBx975WNEw6dnwcLVfxrSTX1LcLQzrouVoWO6iUQrMfGDYb7dqAdu4KFhrBG Ye027yfuC86bL3OFnlBA474+azQX2gakJxCIheCSvUkbu4N8EQjGAeIttNd5Cmen 4laofKZIE6C3JmkcL43z/v95bLWDZybeuDih9rwlqoVMgtmcodcFqFKOlX/qCHeu Si45VcC5T7t67npshqzf7//rkGRmHKjOa8YpfcD3/aKmmQy0NIG+xHgVSnA= -----END CERTIFICATE-----Generated at Thu Sep 18 03:34:30 2025 by rpki-client