$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9b148834-bac1-4fe7-b723-ac66d452de59.roa File: 9b148834-bac1-4fe7-b723-ac66d452de59.roa (raw, json) Hash identifier: ULYBHwHAq63XhoW3XWVs5IeXPCVVW+MVfrZkLy1oDU8= Subject key identifier: 3F:42:A3:05:DB:71:3A:DF:37:D2:0B:D0:98:37:2E:94:5D:6F:58:24 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 55AF07E3B23883E9EF732061B50CA3832B2879F2 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9b148834-bac1-4fe7-b723-ac66d452de59.roa Signing time: Mon 13 Oct 2025 16:37:51 +0000 ROA not before: Mon 13 Oct 2025 16:37:51 +0000 ROA not after: Mon 17 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 216.137.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:af:07:e3:b2:38:83:e9:ef:73:20:61:b5:0c:a3:83:2b:28:79:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 13 16:37:51 2025 GMT Not After : Nov 17 23:59:59 2025 GMT Subject: serialNumber=4229f09a0613caac5d9af15276304d142cb39e11ea6c24bad20434dae38116a8, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e7:51:1b:7c:9f:12:23:22:b0:74:99:ac:98: 0e:31:26:dd:6e:10:27:27:cc:e0:6c:8e:1f:d6:a8: 53:0e:a4:89:50:6f:f0:a4:6c:c6:1a:f2:38:e7:15: db:fa:c3:52:a9:4a:81:ce:cf:a0:92:30:e5:1e:31: 68:5b:9d:28:a8:ec:5a:45:f7:2c:95:d4:7e:44:9d: 61:35:52:b1:3c:ad:a8:8c:d9:a3:c5:3e:eb:ec:90: 33:a4:03:d9:d1:d9:e3:d7:c8:14:a3:ca:66:f8:b9: 9f:9a:77:0c:b9:f9:cf:1f:68:68:cd:3e:30:e4:94: 98:e7:ab:f7:96:41:99:42:e5:5f:bc:bb:ef:9b:6a: 86:94:9e:6e:08:64:aa:2d:16:77:89:89:9d:45:88: ba:1f:36:80:59:8e:53:51:a3:44:21:fa:51:f9:ba: 8c:17:75:a9:d1:8a:dd:c5:a5:af:03:41:0b:5a:90: 50:a8:00:d7:c9:99:38:64:f8:23:df:f7:b1:46:2a: cb:78:1a:0f:20:ac:8d:e0:9c:6e:81:42:44:1e:de: f8:65:9d:22:6a:c9:90:79:0a:f4:f5:5d:cc:c4:46: a2:ba:e0:30:c1:ab:6d:22:df:68:50:c0:0b:f4:17: d4:60:34:55:d6:4f:c0:b1:b2:b6:9b:a9:e5:d0:6f: 58:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:42:A3:05:DB:71:3A:DF:37:D2:0B:D0:98:37:2E:94:5D:6F:58:24 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9b148834-bac1-4fe7-b723-ac66d452de59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.137.36.0/24 Signature Algorithm: sha256WithRSAEncryption 45:0e:b8:a5:83:45:9f:0d:fd:14:97:6f:29:ec:8c:1b:e4:78: 3b:2e:74:48:75:ef:9f:9a:ab:94:56:57:29:39:a2:3d:d2:5e: aa:d6:8f:19:e7:1f:30:05:64:d8:b2:8a:f6:a8:a1:56:a9:c0: 73:11:c3:f9:ac:61:9b:a3:54:f2:82:e5:1f:6b:5b:63:0e:87: 5b:6b:67:f6:d4:6d:0d:23:5e:17:e1:7d:31:29:ef:a5:d9:ba: 30:1a:e7:36:5b:b5:ff:34:27:60:dd:0e:fa:3d:c1:fd:7e:ce: e2:15:a2:14:c6:99:f5:b0:52:a3:ec:cd:43:e8:3a:f2:df:3f: a4:ba:17:5f:e1:6f:6b:48:12:4e:ac:52:57:e4:4d:cd:0b:ff: b8:76:80:44:f9:b4:6c:b1:0e:1d:19:83:2c:a4:30:f3:0f:ad: 22:a7:ec:3f:5c:75:75:62:a2:fd:c3:e6:14:e6:67:8c:a4:21: 01:16:e4:fa:c1:7b:b6:e4:b1:c3:f4:89:30:ef:b5:c7:1a:40: cf:87:b6:1c:37:0d:b9:18:80:9f:f1:d6:44:24:b8:1c:e7:e9: cd:ef:95:94:6b:98:21:99:ef:7e:76:2e:21:f8:a2:e5:be:97: 27:74:32:10:84:f4:9d:86:5a:ba:a9:f0:7e:44:2a:c2:79:25: ed:ab:23:98 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVa8H47I4g+nvcyBhtQyjgysoefIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDEzMTYzNzUxWhcNMjUxMTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MjI5ZjA5YTA2MTNjYWFjNWQ5YWYxNTI3NjMwNGQxNDJj YjM5ZTExZWE2YzI0YmFkMjA0MzRkYWUzODExNmE4MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCj51EbfJ8SIyKwdJmsmA4xJt1uECcnzOBsjh/WqFMOpIlQ b/CkbMYa8jjnFdv6w1KpSoHOz6CSMOUeMWhbnSio7FpF9yyV1H5EnWE1UrE8raiM 2aPFPuvskDOkA9nR2ePXyBSjymb4uZ+adwy5+c8faGjNPjDklJjnq/eWQZlC5V+8 u++baoaUnm4IZKotFneJiZ1FiLofNoBZjlNRo0Qh+lH5uowXdanRit3Fpa8DQQta kFCoANfJmThk+CPf97FGKst4Gg8grI3gnG6BQkQe3vhlnSJqyZB5CvT1XczERqK6 4DDBq20i32hQwAv0F9RgNFXWT8CxsrabqeXQb1jdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUP0KjBdtxOt830gvQmDculF1vWCQwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzliMTQ4ODM0LWJhYzEtNGZlNy1iNzIzLWFjNjZkNDUyZGU1OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADYiSQwDQYJKoZIhvcNAQELBQADggEBAEUOuKWDRZ8N/RSXbynsjBvkeDsu dEh175+aq5RWVyk5oj3SXqrWjxnnHzAFZNiyivaooVapwHMRw/msYZujVPKC5R9r W2MOh1trZ/bUbQ0jXhfhfTEp76XZujAa5zZbtf80J2DdDvo9wf1+zuIVohTGmfWw UqPszUPoOvLfP6S6F1/hb2tIEk6sUlfkTc0L/7h2gET5tGyxDh0ZgyykMPMPrSKn 7D9cdXViov3D5hTmZ4ykIQEW5PrBe7bkscP0iTDvtccaQM+Hthw3DbkYgJ/x1kQk uBzn6c3vlZRrmCGZ7352LiH4ouW+lyd0MhCE9J2GWrqp8H5EKsJ5Je2rI5g= -----END CERTIFICATE-----Generated at Mon Oct 20 20:25:56 2025 by rpki-client