$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/09324f72-174c-4531-a3c3-417a0ebf8a11.roa File: 09324f72-174c-4531-a3c3-417a0ebf8a11.roa (raw, json) Hash identifier: ww4iIQQ9UR0nYDyuuQblBDUwqGmhDE2USUinWOectWg= Subject key identifier: 74:0F:DC:F5:9C:FA:99:D1:F8:9E:D5:34:8F:F3:D8:A7:4F:5F:E1:D8 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 7924CA89C7AD3C88450CAE4F46B69CAD82B50C1F Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/09324f72-174c-4531-a3c3-417a0ebf8a11.roa Signing time: Mon 13 Oct 2025 16:10:55 +0000 ROA not before: Mon 13 Oct 2025 16:10:55 +0000 ROA not after: Mon 17 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 205.251.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:24:ca:89:c7:ad:3c:88:45:0c:ae:4f:46:b6:9c:ad:82:b5:0c:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 13 16:10:55 2025 GMT Not After : Nov 17 23:59:59 2025 GMT Subject: serialNumber=31f0bb03fcb05c8da303da0c4aada7b861732278b3417efa1d4c10264d369f78, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:39:15:e0:e4:2f:35:dc:8b:ca:ca:52:86:94: 12:fa:19:dc:c7:54:7a:c5:1d:55:ed:a0:2e:ff:43: 57:68:f1:a8:98:11:70:4b:00:63:29:96:c2:a9:d8: 73:ac:99:5e:ae:51:3d:e8:ae:bc:fa:6d:3f:7e:5f: 43:ab:c8:ab:31:8c:14:3a:5a:45:ca:45:a2:61:26: 4f:d6:01:6e:09:81:cd:41:48:4c:da:b1:f9:2a:96: e7:79:31:2b:e6:85:ae:6e:fd:f5:f8:86:1c:fe:05: d7:36:35:30:33:74:96:cb:31:8f:87:11:02:ba:f8: 8d:fa:78:9d:e1:3a:f5:a2:f6:a4:a9:e6:ab:ff:26: 17:58:6a:15:7d:e4:cb:b9:1c:06:28:a8:49:2e:8a: 3a:50:45:a0:30:a9:fb:1b:29:12:32:f3:21:ac:31: 47:c3:9b:9e:26:0d:54:ee:a9:6c:9b:10:3f:c6:8b: 85:cd:f2:80:5a:d6:0c:f7:bc:e6:2f:f5:d7:3b:6f: 8a:66:45:a4:91:27:24:52:56:95:f2:25:8b:8f:a3: 71:58:0b:c8:03:1b:80:5f:eb:14:c9:36:2b:45:58: 0c:c4:16:55:cd:d4:aa:dd:82:da:93:34:5a:5a:8f: 58:1f:7c:09:5c:df:8a:d3:8d:f5:a1:eb:04:54:55: 6d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:0F:DC:F5:9C:FA:99:D1:F8:9E:D5:34:8F:F3:D8:A7:4F:5F:E1:D8 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/09324f72-174c-4531-a3c3-417a0ebf8a11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 205.251.216.0/24 Signature Algorithm: sha256WithRSAEncryption 21:81:c1:26:b1:a3:f4:25:44:b5:b7:ab:b1:9c:cc:95:d3:3f: fd:d3:4b:62:ae:7b:90:af:d7:4a:39:75:46:4c:ea:f1:d4:6d: d8:61:14:2c:a6:71:42:67:37:7e:ad:02:36:d8:15:36:c5:d0: f0:28:3f:c9:db:36:72:34:ec:c9:26:e8:84:64:b5:d7:54:e7: 58:86:5d:f9:78:ef:8d:2e:a6:c4:84:65:e8:92:bb:18:e5:25: 9f:cb:69:02:cd:60:17:09:73:30:2a:36:10:97:cc:fa:e6:a5: 2d:d4:93:cb:a6:01:27:e9:20:d9:d5:ac:40:f7:c3:81:ed:d5: e4:44:1f:0a:e9:5e:da:72:09:48:1d:94:fe:b9:a6:18:dd:5d: 5b:31:b4:9c:96:70:08:4d:52:d4:db:3d:30:6d:0f:fa:65:53: d0:7f:57:54:02:ea:a4:97:69:f6:31:91:d6:2e:ff:d3:d8:4a: d0:5d:20:ab:de:be:45:3a:c2:67:a5:33:01:bf:a8:84:6d:cf: 69:46:1a:d1:37:c5:f0:a6:41:ce:2c:d8:8b:a7:85:73:89:cd: 4f:f4:ad:80:45:6a:8e:08:4e:0e:1c:88:7a:c0:4b:28:f1:89: 90:50:7c:24:c0:a4:56:21:5e:64:04:f4:2d:2f:bb:42:ed:ec: 13:4c:d9:3e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUeSTKicetPIhFDK5PRracrYK1DB8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDEzMTYxMDU1WhcNMjUxMTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0AzMWYwYmIwM2ZjYjA1YzhkYTMwM2RhMGM0YWFkYTdiODYx NzMyMjc4YjM0MTdlZmExZDRjMTAyNjRkMzY5Zjc4MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2ORXg5C813IvKylKGlBL6GdzHVHrFHVXtoC7/Q1do8aiY EXBLAGMplsKp2HOsmV6uUT3orrz6bT9+X0OryKsxjBQ6WkXKRaJhJk/WAW4Jgc1B SEzasfkqlud5MSvmha5u/fX4hhz+Bdc2NTAzdJbLMY+HEQK6+I36eJ3hOvWi9qSp 5qv/JhdYahV95Mu5HAYoqEkuijpQRaAwqfsbKRIy8yGsMUfDm54mDVTuqWybED/G i4XN8oBa1gz3vOYv9dc7b4pmRaSRJyRSVpXyJYuPo3FYC8gDG4Bf6xTJNitFWAzE FlXN1KrdgtqTNFpaj1gffAlc34rTjfWh6wRUVW3FAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUdA/c9Zz6mdH4ntU0j/PYp09f4dgwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzA5MzI0ZjcyLTE3NGMtNDUzMS1hM2MzLTQxN2EwZWJmOGExMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADN+9gwDQYJKoZIhvcNAQELBQADggEBACGBwSaxo/QlRLW3q7GczJXTP/3T S2Kue5Cv10o5dUZM6vHUbdhhFCymcUJnN36tAjbYFTbF0PAoP8nbNnI07Mkm6IRk tddU51iGXfl4740upsSEZeiSuxjlJZ/LaQLNYBcJczAqNhCXzPrmpS3Uk8umASfp INnVrED3w4Ht1eREHwrpXtpyCUgdlP65phjdXVsxtJyWcAhNUtTbPTBtD/plU9B/ V1QC6qSXafYxkdYu/9PYStBdIKvevkU6wmelMwG/qIRtz2lGGtE3xfCmQc4s2Iun hXOJzU/0rYBFao4ITg4ciHrASyjxiZBQfCTApFYhXmQE9C0vu0Lt7BNM2T4= -----END CERTIFICATE-----Generated at Mon Oct 20 20:26:11 2025 by rpki-client