$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/19698c4c-ea58-4cf5-ae00-524b923f7f21.roa File: 19698c4c-ea58-4cf5-ae00-524b923f7f21.roa (raw, json) Hash identifier: UbGdSAqWgkjq7dFVeQxqR1ED9Ig8iQ9Y0ldqTMoMhVo= Subject key identifier: 53:D6:A4:EC:5F:CC:9E:08:42:68:EF:06:8E:A7:1B:B8:65:BB:07:6E Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 3861CB7E080DAE0983162C06F454EE63A4ED03FE Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/19698c4c-ea58-4cf5-ae00-524b923f7f21.roa Signing time: Mon 13 Oct 2025 16:38:43 +0000 ROA not before: Mon 13 Oct 2025 16:38:43 +0000 ROA not after: Mon 17 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 216.137.62.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:61:cb:7e:08:0d:ae:09:83:16:2c:06:f4:54:ee:63:a4:ed:03:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 13 16:38:43 2025 GMT Not After : Nov 17 23:59:59 2025 GMT Subject: serialNumber=a9fa506e1d930bc68423db8d5bc25c41fc59442daa3774af51fbaae024719d25, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:9e:a9:5b:e4:08:fc:4b:03:c9:ea:fc:e9:58: 0c:28:eb:1e:9c:e8:5f:f2:7c:db:b2:10:ea:16:48: a9:c7:2d:e4:a3:17:dd:bb:4d:25:c8:5b:80:da:04: 2a:ae:8f:16:72:46:12:14:51:a3:9f:92:46:eb:c1: 83:ee:87:5a:d1:6c:77:cb:57:2c:7c:ae:e0:6e:09: 2f:03:16:96:75:bc:15:5b:1c:8b:08:46:f6:ab:e9: 0b:7a:a7:9e:cf:60:ea:20:07:fb:f3:5f:8f:19:bc: 5e:73:4a:74:40:f6:97:17:7a:e3:fd:97:47:4e:3a: 47:3e:d8:5a:1c:ab:b4:a4:71:d0:3d:3b:d4:9d:01: ee:4f:13:e3:bb:26:18:2d:23:cf:40:99:8b:db:98: 10:3b:a1:0d:83:04:1c:fc:cf:42:c4:e6:fe:2d:62: 22:cd:90:db:86:23:b6:98:f2:31:b5:c5:c3:84:d2: 39:24:87:f7:2f:02:cc:6c:e8:c6:74:28:e4:21:92: 29:3b:6f:f5:54:e3:9c:bf:d9:84:a3:29:96:b9:73: 9d:8e:f5:31:01:cb:47:4b:75:4d:f5:ca:93:90:2b: 3d:dd:45:92:45:47:59:ff:6a:3b:19:79:82:23:87: 68:24:be:69:0a:b9:ee:f8:f4:c1:86:17:3b:ec:ba: 6e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:D6:A4:EC:5F:CC:9E:08:42:68:EF:06:8E:A7:1B:B8:65:BB:07:6E X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/19698c4c-ea58-4cf5-ae00-524b923f7f21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.137.62.0/23 Signature Algorithm: sha256WithRSAEncryption 6b:14:24:fe:ae:44:27:b2:d0:d1:9d:84:8d:08:41:de:64:54: 4a:00:26:d6:d1:e0:03:de:db:e4:8a:52:68:68:a2:35:08:30: 0f:a7:9f:78:c0:aa:d6:5f:2b:9b:0a:b4:f4:10:52:e2:f3:ae: 19:95:18:48:8c:52:7d:42:03:b5:ae:9d:af:a0:ff:01:50:99: fc:27:59:58:85:d5:ea:b6:fb:fb:67:13:cd:cc:ec:4e:4a:1c: b3:7d:a6:2b:08:1d:bf:45:01:ec:35:94:92:a9:b5:61:f6:0d: 07:50:3c:08:e0:3b:36:48:99:0a:a3:17:ed:76:fd:6d:1b:4b: 35:af:38:06:6c:63:53:ac:47:6e:b6:e4:a4:81:7f:04:cb:44: d6:4b:83:d2:20:fa:56:28:02:99:12:ef:8b:34:eb:06:ac:38: 3a:90:7e:49:68:3d:99:c9:e5:a9:7e:7e:86:0c:34:93:62:84: 35:3a:fd:50:2f:b1:17:f3:0f:b6:50:b9:a5:2a:89:74:18:6d: f1:1c:88:89:b4:f0:31:78:8e:bd:f7:d5:61:8b:15:b0:1b:75: 56:fe:c6:16:86:08:d7:0b:8a:3a:59:23:77:2b:56:7e:c9:1d: 77:e9:e2:b7:f6:82:6f:34:97:96:5d:30:6b:1e:cf:0a:28:41: 83:b5:4a:8b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOGHLfggNrgmDFiwG9FTuY6TtA/4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDEzMTYzODQzWhcNMjUxMTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BhOWZhNTA2ZTFkOTMwYmM2ODQyM2RiOGQ1YmMyNWM0MWZj NTk0NDJkYWEzNzc0YWY1MWZiYWFlMDI0NzE5ZDI1MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDenqlb5Aj8SwPJ6vzpWAwo6x6c6F/yfNuyEOoWSKnHLeSj F927TSXIW4DaBCqujxZyRhIUUaOfkkbrwYPuh1rRbHfLVyx8ruBuCS8DFpZ1vBVb HIsIRvar6Qt6p57PYOogB/vzX48ZvF5zSnRA9pcXeuP9l0dOOkc+2Focq7SkcdA9 O9SdAe5PE+O7JhgtI89AmYvbmBA7oQ2DBBz8z0LE5v4tYiLNkNuGI7aY8jG1xcOE 0jkkh/cvAsxs6MZ0KOQhkik7b/VU45y/2YSjKZa5c52O9TEBy0dLdU31ypOQKz3d RZJFR1n/ajsZeYIjh2gkvmkKue749MGGFzvsum7zAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUU9ak7F/MnghCaO8GjqcbuGW7B24wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzE5Njk4YzRjLWVhNTgtNGNmNS1hZTAwLTUyNGI5MjNmN2YyMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHYiT4wDQYJKoZIhvcNAQELBQADggEBAGsUJP6uRCey0NGdhI0IQd5kVEoA JtbR4APe2+SKUmhoojUIMA+nn3jAqtZfK5sKtPQQUuLzrhmVGEiMUn1CA7Wuna+g /wFQmfwnWViF1eq2+/tnE83M7E5KHLN9pisIHb9FAew1lJKptWH2DQdQPAjgOzZI mQqjF+12/W0bSzWvOAZsY1OsR2625KSBfwTLRNZLg9Ig+lYoApkS74s06wasODqQ fkloPZnJ5al+foYMNJNihDU6/VAvsRfzD7ZQuaUqiXQYbfEciIm08DF4jr331WGL FbAbdVb+xhaGCNcLijpZI3crVn7JHXfp4rf2gm80l5ZdMGsezwooQYO1Sos= -----END CERTIFICATE-----Generated at Mon Oct 20 20:25:49 2025 by rpki-client