$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2aca6853-3922-4123-8ae9-b871b4c52076.roa File: 2aca6853-3922-4123-8ae9-b871b4c52076.roa (raw, json) Hash identifier: stITgrIaWyq/coQ0DQXli7yWAYHKoowwURc36g1NHs4= Subject key identifier: 12:E5:9E:4E:0A:5A:CE:33:5E:78:0E:44:DE:14:DF:1D:A0:32:BE:31 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 7A04A3C731BE1DA9725AB6E62A5C29FBC27DFC5C Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2aca6853-3922-4123-8ae9-b871b4c52076.roa Signing time: Mon 13 Oct 2025 16:20:58 +0000 ROA not before: Mon 13 Oct 2025 16:20:58 +0000 ROA not after: Mon 17 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 205.251.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:04:a3:c7:31:be:1d:a9:72:5a:b6:e6:2a:5c:29:fb:c2:7d:fc:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 13 16:20:58 2025 GMT Not After : Nov 17 23:59:59 2025 GMT Subject: serialNumber=b4423caf23f5ba127ad562122cb24b61c870c9482dca5dd5e667d5bab6d2af8f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f5:b6:c4:38:e8:a6:9f:26:39:c2:63:07:f2: 08:f9:d2:94:e5:b8:6f:63:f4:93:17:b4:94:16:9c: 34:9f:cb:1d:21:43:98:78:f9:44:78:ab:e2:98:e5: a4:35:34:6f:50:ed:5c:42:06:76:a0:bd:76:fc:4b: dd:b7:76:aa:d9:81:f2:99:59:69:0d:24:00:8d:74: 9e:77:44:82:3a:cf:6d:07:30:54:fc:9b:2e:32:8d: 7a:04:23:32:11:ff:a8:d3:b7:f0:94:a3:65:dd:f9: 16:8c:d2:c1:e5:66:bd:2e:78:8a:17:eb:f5:98:3d: 7d:33:e7:04:70:4c:60:05:b7:38:07:bf:1a:f5:5c: 55:58:da:bc:8c:9b:0a:b4:28:a3:95:d5:13:c3:8e: e7:72:f7:ce:05:4d:32:d9:b0:b8:b3:4b:89:74:dd: 1c:bb:ab:11:82:93:8f:98:4e:9d:d7:86:7e:a1:42: 2d:b7:fc:5f:02:d9:3c:dc:3c:df:2b:2f:1d:53:df: c0:96:43:a2:52:91:fd:f8:d3:27:fd:50:50:8b:f0: d8:bf:45:6d:8f:1f:3f:bf:39:87:c5:25:94:9f:a2: 37:dd:99:72:73:55:39:e7:0b:b2:7c:3a:72:7b:67: 2e:ab:00:8d:2c:7d:f1:4e:60:54:ad:d7:81:54:1c: 53:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:E5:9E:4E:0A:5A:CE:33:5E:78:0E:44:DE:14:DF:1D:A0:32:BE:31 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2aca6853-3922-4123-8ae9-b871b4c52076.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 205.251.192.0/18 Signature Algorithm: sha256WithRSAEncryption 80:77:a3:98:82:e7:6b:8b:55:3a:a7:41:c0:97:fe:b3:09:79: f5:a8:2a:b5:7d:87:e6:ce:32:bb:d8:9f:dd:29:12:5a:f1:62: 90:64:b0:fb:7a:ec:69:fc:46:5b:e4:b0:97:40:78:19:81:43: 51:7d:70:59:ac:69:26:55:d1:fd:be:2b:7c:8d:e9:a3:a4:17: 36:52:70:31:52:6c:27:09:d5:1a:8b:fb:8a:59:d0:29:f6:b8: c8:cb:79:bb:54:7e:86:50:3e:fb:c7:88:d6:8e:61:64:9a:cc: 6b:18:3d:ac:71:a0:30:4d:1d:f0:c3:fe:05:17:30:3b:77:14: cb:7c:32:d3:04:07:65:c4:c6:06:49:72:b9:25:40:ef:55:3e: e0:0d:4b:6e:ff:7d:ff:c9:a0:72:4a:36:39:95:6c:19:e3:dd: bf:04:c0:76:b4:98:0a:24:5d:bf:e8:b1:66:9a:15:73:e4:77: a6:71:3d:f8:d1:78:53:c1:68:c6:3e:ca:03:15:37:63:59:2c: b0:82:5e:af:54:e8:36:fd:0b:33:0e:76:c8:b3:75:67:d4:c6: 8c:a7:62:4d:3a:3a:03:50:32:f3:8e:0c:f7:03:3a:5f:90:a4: fb:da:bd:42:ec:bb:fd:ee:27:a6:d4:0e:3a:20:9b:a6:47:6d: fe:d8:35:40 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUegSjxzG+HalyWrbmKlwp+8J9/FwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDEzMTYyMDU4WhcNMjUxMTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BiNDQyM2NhZjIzZjViYTEyN2FkNTYyMTIyY2IyNGI2MWM4 NzBjOTQ4MmRjYTVkZDVlNjY3ZDViYWI2ZDJhZjhmMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDS9bbEOOimnyY5wmMH8gj50pTluG9j9JMXtJQWnDSfyx0h Q5h4+UR4q+KY5aQ1NG9Q7VxCBnagvXb8S923dqrZgfKZWWkNJACNdJ53RII6z20H MFT8my4yjXoEIzIR/6jTt/CUo2Xd+RaM0sHlZr0ueIoX6/WYPX0z5wRwTGAFtzgH vxr1XFVY2ryMmwq0KKOV1RPDjudy984FTTLZsLizS4l03Ry7qxGCk4+YTp3Xhn6h Qi23/F8C2TzcPN8rLx1T38CWQ6JSkf340yf9UFCL8Ni/RW2PHz+/OYfFJZSfojfd mXJzVTnnC7J8OnJ7Zy6rAI0sffFOYFSt14FUHFOtAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUEuWeTgpazjNeeA5E3hTfHaAyvjEwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzJhY2E2ODUzLTM5MjItNDEyMy04YWU5LWI4NzFiNGM1MjA3Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAbN+8AwDQYJKoZIhvcNAQELBQADggEBAIB3o5iC52uLVTqnQcCX/rMJefWo KrV9h+bOMrvYn90pElrxYpBksPt67Gn8RlvksJdAeBmBQ1F9cFmsaSZV0f2+K3yN 6aOkFzZScDFSbCcJ1RqL+4pZ0Cn2uMjLebtUfoZQPvvHiNaOYWSazGsYPaxxoDBN HfDD/gUXMDt3FMt8MtMEB2XExgZJcrklQO9VPuANS27/ff/JoHJKNjmVbBnj3b8E wHa0mAokXb/osWaaFXPkd6ZxPfjReFPBaMY+ygMVN2NZLLCCXq9U6Db9CzMOdsiz dWfUxoynYk06OgNQMvOODPcDOl+QpPvavULsu/3uJ6bUDjogm6ZHbf7YNUA= -----END CERTIFICATE-----Generated at Mon Oct 20 12:46:54 2025 by rpki-client