$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4e29c3d6-746c-490d-9e96-6ea20776137b.roa File: 4e29c3d6-746c-490d-9e96-6ea20776137b.roa (raw, json) Hash identifier: rciLlAIki7x5X2ycFAQDOJKQv8IeaDl9df75t5icrWs= Subject key identifier: 15:8B:DA:12:BC:CA:9B:67:D8:F7:8D:90:81:39:A0:16:29:69:DD:AC Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 63F03C98A7DEBD96937D2A24AA608390CD79C387 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4e29c3d6-746c-490d-9e96-6ea20776137b.roa Signing time: Mon 13 Oct 2025 16:00:07 +0000 ROA not before: Mon 13 Oct 2025 16:00:07 +0000 ROA not after: Mon 17 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 204.246.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:f0:3c:98:a7:de:bd:96:93:7d:2a:24:aa:60:83:90:cd:79:c3:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 13 16:00:07 2025 GMT Not After : Nov 17 23:59:59 2025 GMT Subject: serialNumber=d4f785271b03620b08f2f41c9c353b8bf2899f46b91737f1847f72ca16c56516, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b3:bc:65:1c:22:08:7f:dd:1b:07:e9:2d:5f: 69:9d:ea:53:41:58:fe:90:03:0b:26:f5:dd:78:78: 0d:a4:fe:23:7e:86:9a:94:69:3d:f4:bf:6b:71:d3: 33:3e:4d:b4:b1:5b:22:c3:0d:63:09:59:6a:46:37: 56:c0:c1:10:b6:bc:e1:a0:f3:7e:65:c9:51:c9:fc: 30:b4:18:a2:12:1b:98:20:05:83:a7:82:eb:5d:62: bf:56:45:4c:10:1b:c2:8a:6f:9a:e0:a3:57:15:5a: 6d:86:9a:2d:45:fd:ce:76:8a:a2:41:cf:a3:f8:e4: 4a:92:48:11:a2:28:e7:e2:53:c8:a9:26:2a:e9:49: 97:85:95:15:e0:c2:fd:cf:c3:35:5b:7b:d2:78:93: d2:e0:13:87:5d:89:4e:16:82:5c:04:dc:f9:5c:9f: b6:29:8e:ab:b5:07:c4:fc:30:fb:fb:16:3d:5e:4d: 35:20:ed:5c:f3:5f:2d:77:a9:3c:7c:5c:7f:04:ee: eb:7d:b1:4f:86:f5:2a:f7:be:63:e9:84:2c:30:1f: 21:b9:ce:af:3b:42:7a:6f:7f:39:33:be:bd:3d:8c: 52:54:af:21:f6:02:74:a5:3d:be:89:7f:e7:c8:16: 70:7c:89:71:78:16:4e:ab:dc:50:cc:51:54:b8:07: ac:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:8B:DA:12:BC:CA:9B:67:D8:F7:8D:90:81:39:A0:16:29:69:DD:AC X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4e29c3d6-746c-490d-9e96-6ea20776137b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 204.246.182.0/24 Signature Algorithm: sha256WithRSAEncryption af:2e:ca:da:bc:45:2c:43:b8:0a:0e:26:ac:b4:88:97:2f:c3: a2:ff:3f:fd:4a:2b:eb:08:7b:44:c0:6b:67:bb:61:c9:a7:4e: 71:93:1f:16:1f:4c:56:af:10:e7:f6:d1:17:46:73:38:ac:9b: ef:f1:19:e1:d5:80:8b:ae:23:88:5c:c4:e0:d7:9d:ab:61:6e: fb:02:40:07:c8:37:e5:07:06:91:43:a0:d7:1c:0a:df:e2:0d: a5:3f:19:af:92:59:14:e8:cd:b6:59:c4:4d:f9:0f:d4:52:e7: 27:63:91:8f:ab:11:f8:ca:0f:af:7c:40:10:c8:4c:d7:98:c2: 7f:b1:09:0b:a6:13:78:f1:47:69:24:e4:16:dc:c6:20:1e:0d: 1e:4a:53:0f:33:02:83:9c:45:ad:9a:23:6b:11:cb:d1:53:d6: 50:4b:ea:8a:f6:c8:96:6e:3b:12:bb:28:b5:45:65:fc:74:11: 60:40:e8:fc:4d:45:c7:04:40:7b:51:09:85:68:d5:3d:d7:d4: e3:79:b3:3b:e5:7f:31:2a:3f:08:73:2c:77:e2:d5:ff:47:73: 02:04:ab:8a:4e:c3:03:bf:6c:f8:98:a7:61:72:bc:28:41:4d: 48:a5:82:c7:a2:3b:43:c5:3c:8e:38:cc:91:7e:5d:a1:b4:89: 3f:79:93:0a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUY/A8mKfevZaTfSokqmCDkM15w4cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDEzMTYwMDA3WhcNMjUxMTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNGY3ODUyNzFiMDM2MjBiMDhmMmY0MWM5YzM1M2I4YmYy ODk5ZjQ2YjkxNzM3ZjE4NDdmNzJjYTE2YzU2NTE2MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0s7xlHCIIf90bB+ktX2md6lNBWP6QAwsm9d14eA2k/iN+ hpqUaT30v2tx0zM+TbSxWyLDDWMJWWpGN1bAwRC2vOGg835lyVHJ/DC0GKISG5gg BYOngutdYr9WRUwQG8KKb5rgo1cVWm2Gmi1F/c52iqJBz6P45EqSSBGiKOfiU8ip JirpSZeFlRXgwv3PwzVbe9J4k9LgE4ddiU4WglwE3Plcn7Ypjqu1B8T8MPv7Fj1e TTUg7VzzXy13qTx8XH8E7ut9sU+G9Sr3vmPphCwwHyG5zq87Qnpvfzkzvr09jFJU ryH2AnSlPb6Jf+fIFnB8iXF4Fk6r3FDMUVS4B6yRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUFYvaErzKm2fY942QgTmgFilp3awwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzRlMjljM2Q2LTc0NmMtNDkwZC05ZTk2LTZlYTIwNzc2MTM3Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADM9rYwDQYJKoZIhvcNAQELBQADggEBAK8uytq8RSxDuAoOJqy0iJcvw6L/ P/1KK+sIe0TAa2e7YcmnTnGTHxYfTFavEOf20RdGczism+/xGeHVgIuuI4hcxODX nathbvsCQAfIN+UHBpFDoNccCt/iDaU/Ga+SWRTozbZZxE35D9RS5ydjkY+rEfjK D698QBDITNeYwn+xCQumE3jxR2kk5BbcxiAeDR5KUw8zAoOcRa2aI2sRy9FT1lBL 6or2yJZuOxK7KLVFZfx0EWBA6PxNRccEQHtRCYVo1T3X1ON5szvlfzEqPwhzLHfi 1f9HcwIEq4pOwwO/bPiYp2FyvChBTUilgseiO0PFPI44zJF+XaG0iT95kwo= -----END CERTIFICATE-----Generated at Mon Oct 20 20:25:56 2025 by rpki-client