$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5c7073cc-cabc-4a1a-b8aa-fad0cbf482d8.roa File: 5c7073cc-cabc-4a1a-b8aa-fad0cbf482d8.roa (raw, json) Hash identifier: uOGUmxnmM9AX2XkumlQ/qLtjrk4pfQakinB5SvJt/XY= Subject key identifier: 54:98:5C:84:59:8B:E3:DD:90:F2:B1:5E:58:D7:28:0B:39:A4:43:64 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 3DFA7D17BED9959DD7F45469FCF3A53257BA64BA Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5c7073cc-cabc-4a1a-b8aa-fad0cbf482d8.roa Signing time: Mon 13 Oct 2025 16:38:38 +0000 ROA not before: Mon 13 Oct 2025 16:38:38 +0000 ROA not after: Mon 17 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 216.137.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:fa:7d:17:be:d9:95:9d:d7:f4:54:69:fc:f3:a5:32:57:ba:64:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 13 16:38:38 2025 GMT Not After : Nov 17 23:59:59 2025 GMT Subject: serialNumber=95bc3e6b6f150a9ff65aad570a25b83d1522437ebcdf57e64df77e3fb6f70a97, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:4a:d7:cc:cc:40:fd:29:f1:39:6e:8e:eb:fd: 8b:3f:ef:1d:ee:da:22:7a:b7:fc:28:03:e5:ff:b3: bb:00:70:1e:ba:49:d5:7d:3e:66:44:cc:c0:3c:9a: 39:9a:d3:58:41:ca:7c:df:15:06:bc:31:8d:16:77: 4b:f1:be:35:2d:54:35:0a:b5:6d:39:36:f8:6d:98: ef:fd:f6:3f:65:81:fd:9e:7c:c6:19:d3:3d:83:37: 62:5c:04:05:35:2b:19:a4:e5:f4:d8:27:80:50:fe: e1:48:eb:fa:6a:7a:55:a8:c4:b4:ea:66:2c:0c:25: 71:6e:b6:43:76:db:73:e0:9d:97:fd:47:87:96:b3: 7c:34:63:a5:9d:76:6d:81:fc:9c:9d:35:50:24:ce: 02:9e:b6:2c:d2:ae:8c:35:fe:8b:0f:91:62:15:b2: 9e:36:08:49:42:f8:8a:19:37:f1:af:f3:98:8f:45: 74:15:3d:eb:60:3a:d6:e7:b6:ae:07:16:09:36:63: f8:d5:70:1b:51:b5:21:6b:ef:5d:56:97:1c:48:d2: 80:b0:89:45:2b:d5:70:be:64:ed:a9:1d:1f:8b:23: 32:e8:7f:ee:ed:20:e7:eb:3b:a5:a6:9a:03:a4:22: 03:32:c9:ec:a3:e1:c0:ab:40:06:7e:b5:7e:12:3d: c8:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:98:5C:84:59:8B:E3:DD:90:F2:B1:5E:58:D7:28:0B:39:A4:43:64 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5c7073cc-cabc-4a1a-b8aa-fad0cbf482d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.137.32.0/21 Signature Algorithm: sha256WithRSAEncryption 4e:9f:f7:e5:66:b2:cc:a8:dd:a6:ca:b3:a2:26:3d:86:75:1f: 3d:5c:bd:9a:08:7e:90:40:17:58:54:70:55:8f:fd:84:5a:88: d2:16:04:5e:e1:ff:08:39:51:4d:bc:40:4d:ce:1d:d7:4a:44: bf:a9:b7:ed:4d:a4:b3:08:fc:db:aa:a5:9c:83:e6:be:a7:69: 9f:bb:8f:3e:e6:2f:94:b8:71:8b:78:07:e4:70:a1:15:74:51: 65:7c:62:50:ed:f4:ed:04:50:49:a5:aa:40:14:08:b3:75:5a: 4d:b9:0e:48:f7:f1:2a:fa:12:67:c6:7c:77:37:c5:8e:d2:46: 79:00:f7:8f:a6:62:99:4f:41:69:b8:11:cb:88:fc:7a:3f:c2: 33:62:34:86:90:4e:40:2a:80:37:db:76:c9:f4:e8:7b:ce:8d: 89:14:0a:f8:a2:dd:09:07:90:76:05:91:65:4d:82:fa:a1:23: c1:a1:67:9d:c8:f5:cb:d2:1d:8f:f6:ba:b9:d3:23:21:d5:5c: 15:ab:60:44:6b:d3:3d:f5:78:04:81:04:57:3f:1a:0e:a0:0b: b7:7e:66:ba:5d:3c:4f:db:3c:6b:cc:80:b7:f1:42:80:bc:23: fb:d1:be:fb:3a:56:9b:56:b2:b3:73:53:9a:df:de:3b:89:02: 4e:bb:3b:d9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPfp9F77ZlZ3X9FRp/POlMle6ZLowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDEzMTYzODM4WhcNMjUxMTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A5NWJjM2U2YjZmMTUwYTlmZjY1YWFkNTcwYTI1YjgzZDE1 MjI0MzdlYmNkZjU3ZTY0ZGY3N2UzZmI2ZjcwYTk3MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDdStfMzED9KfE5bo7r/Ys/7x3u2iJ6t/woA+X/s7sAcB66 SdV9PmZEzMA8mjma01hBynzfFQa8MY0Wd0vxvjUtVDUKtW05NvhtmO/99j9lgf2e fMYZ0z2DN2JcBAU1Kxmk5fTYJ4BQ/uFI6/pqelWoxLTqZiwMJXFutkN223PgnZf9 R4eWs3w0Y6Wddm2B/JydNVAkzgKetizSrow1/osPkWIVsp42CElC+IoZN/Gv85iP RXQVPetgOtbntq4HFgk2Y/jVcBtRtSFr711WlxxI0oCwiUUr1XC+ZO2pHR+LIzLo f+7tIOfrO6WmmgOkIgMyyeyj4cCrQAZ+tX4SPchfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUVJhchFmL492Q8rFeWNcoCzmkQ2QwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzVjNzA3M2NjLWNhYmMtNGExYS1iOGFhLWZhZDBjYmY0ODJkOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPYiSAwDQYJKoZIhvcNAQELBQADggEBAE6f9+Vmssyo3abKs6ImPYZ1Hz1c vZoIfpBAF1hUcFWP/YRaiNIWBF7h/wg5UU28QE3OHddKRL+pt+1NpLMI/NuqpZyD 5r6naZ+7jz7mL5S4cYt4B+RwoRV0UWV8YlDt9O0EUEmlqkAUCLN1Wk25Dkj38Sr6 EmfGfHc3xY7SRnkA94+mYplPQWm4EcuI/Ho/wjNiNIaQTkAqgDfbdsn06HvOjYkU Cvii3QkHkHYFkWVNgvqhI8GhZ53I9cvSHY/2urnTIyHVXBWrYERr0z31eASBBFc/ Gg6gC7d+ZrpdPE/bPGvMgLfxQoC8I/vRvvs6VptWsrNzU5rf3juJAk67O9k= -----END CERTIFICATE-----Generated at Tue Oct 21 01:28:47 2025 by rpki-client