$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ae1e44be-c23d-4017-8ebd-d3f40c1ff36b.roa File: ae1e44be-c23d-4017-8ebd-d3f40c1ff36b.roa (raw, json) Hash identifier: 7P47jZFTa9lOsvwmc8zNwtxANiPZSVk1YkW27oqWxoI= Subject key identifier: 91:AD:51:A9:76:8A:41:A1:9D:F4:31:70:03:94:04:7D:68:30:70:E7 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 09FB4896B07188BA0541A580A5BA4E931B2F0F Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ae1e44be-c23d-4017-8ebd-d3f40c1ff36b.roa Signing time: Mon 13 Oct 2025 16:00:59 +0000 ROA not before: Mon 13 Oct 2025 16:00:59 +0000 ROA not after: Mon 17 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 204.246.164.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:fb:48:96:b0:71:88:ba:05:41:a5:80:a5:ba:4e:93:1b:2f:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 13 16:00:59 2025 GMT Not After : Nov 17 23:59:59 2025 GMT Subject: serialNumber=a6951a657760c1dce69897662b9dc7d2c3ff23ea898a9602cb83b7a5b5a0d8c0, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:00:a6:15:0e:8f:3c:66:2c:33:a7:cb:8b:26: ca:c4:c9:93:89:f5:d0:81:9d:67:23:48:70:97:4c: d6:3c:f5:d8:2e:02:4c:73:94:4e:87:89:15:fd:11: 72:cf:08:26:d0:d0:8d:67:00:1d:3a:90:b4:42:6f: 46:f4:96:aa:93:5a:2e:d7:36:50:d1:f7:95:d1:fa: 13:8d:4a:9b:00:47:06:47:d5:10:0c:89:85:37:2a: 5b:dc:55:a1:fc:7d:b7:73:1f:06:cb:d6:9b:0f:c8: 58:8b:0b:35:19:c1:4d:d3:e1:b3:bc:e6:9b:1f:65: c2:71:c9:5d:46:46:b5:9a:e9:92:a9:ac:99:9e:e8: 7f:43:a3:8d:2d:76:f3:39:be:94:9b:45:d3:2d:39: e5:bb:7d:b0:cb:aa:3b:77:8b:7a:75:8e:3e:72:78: 19:c1:db:20:db:75:26:70:a3:d7:44:00:29:5e:32: 0b:72:58:2e:8c:69:0f:19:cd:4e:97:90:76:21:17: 5d:4e:7d:f9:ee:04:99:1a:a8:f8:99:bc:7a:d7:06: e0:85:37:de:7f:80:e7:d7:37:33:1a:94:96:69:a5: 95:e1:fe:5f:43:73:ec:a1:42:6b:6e:74:d8:e6:9c: 03:07:a4:a5:dd:7b:69:1c:c8:af:a3:06:bb:77:d1: 4c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:AD:51:A9:76:8A:41:A1:9D:F4:31:70:03:94:04:7D:68:30:70:E7 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ae1e44be-c23d-4017-8ebd-d3f40c1ff36b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 204.246.164.0/23 Signature Algorithm: sha256WithRSAEncryption ac:9c:0f:6c:40:34:4d:bf:78:99:62:79:de:4d:64:54:98:0d: 08:75:66:91:ed:08:d6:2a:85:de:07:05:8c:0b:29:ea:cb:94: 1d:5d:3a:fa:00:98:c7:90:75:64:42:ba:72:01:72:cb:8f:8c: d0:47:cf:61:bd:5e:0b:ae:dd:e5:da:70:e3:91:3d:9c:c4:4d: 0d:cd:c1:2a:37:8d:32:dc:72:f8:ed:82:22:a1:54:41:0a:de: 57:2a:c0:bd:81:dc:b4:59:a5:55:71:6b:e1:40:e5:73:d0:d2: 0a:e0:8f:65:10:b2:68:ea:e6:99:89:9d:ec:24:8c:4b:1e:2e: e6:ed:10:05:00:0b:e2:8d:f9:2c:e2:55:c2:36:2d:92:d5:00: dd:f2:e5:56:2c:f8:ef:67:26:b7:51:5c:bb:fe:54:25:70:4c: dc:6c:fc:42:4a:f5:63:59:9b:a2:85:a6:dc:af:a4:d1:51:50: ff:a4:14:f8:23:2c:d8:f4:ea:76:3e:a0:7e:3f:9e:0e:b8:e2: 06:25:1c:b4:9a:3f:eb:17:f4:66:c7:65:40:62:7e:08:4a:ed: e9:74:d3:79:ea:6f:06:c1:b8:b0:34:68:5e:59:72:3b:18:ea: fe:55:41:01:41:50:39:fd:f5:11:df:a5:2a:8d:c3:57:7c:ca: e8:18:a7:d9 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITCftIlrBxiLoFQaWApbpOkxsvDzANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI1NTEyMDkwMjdmNWU3YWQ1NGUwNGYwNDJlNGFjMGU5ZTY1 YzU2ZTU1Yzc3NDc4ZDJjZTAeFw0yNTEwMTMxNjAwNTlaFw0yNTExMTcyMzU5NTla MHoxSTBHBgNVBAUTQGE2OTUxYTY1Nzc2MGMxZGNlNjk4OTc2NjJiOWRjN2QyYzNm ZjIzZWE4OThhOTYwMmNiODNiN2E1YjVhMGQ4YzAxLTArBgNVBAMTJDlmMjMwZmE5 LWFhMmYtNDAyMC1hZTJhLTFhNjAzNzQwODRiODCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAIkAphUOjzxmLDOny4smysTJk4n10IGdZyNIcJdM1jz12C4C THOUToeJFf0Rcs8IJtDQjWcAHTqQtEJvRvSWqpNaLtc2UNH3ldH6E41KmwBHBkfV EAyJhTcqW9xVofx9t3MfBsvWmw/IWIsLNRnBTdPhs7zmmx9lwnHJXUZGtZrpkqms mZ7of0OjjS128zm+lJtF0y055bt9sMuqO3eLenWOPnJ4GcHbINt1JnCj10QAKV4y C3JYLoxpDxnNTpeQdiEXXU59+e4EmRqo+Jm8etcG4IU33n+A59c3MxqUlmmlleH+ X0Nz7KFCa2502OacAwekpd17aRzIr6MGu3fRTG0CAwEAAaOCArEwggKtMB0GA1Ud DgQWBBSRrVGpdopBoZ30MXADlAR9aDBw5zAfBgNVHSMEGDAWgBTo88Ug4g7yXTq3 oha7FAQxajc48TAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv ZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5Lzk5ZjhmZWQyLTI5 MmItNDcyMi1iOTI4LWZlZTdiZjBhNTkxMC81NTEyMDkwMjdmNWU3YWQ1NGUwNGYw NDJlNGFjMGU5ZTY1YzU2ZTU1Yzc3NDc4ZDJjZS5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9lNzUxOGFmNS1hMzQzLTQyOGQtYmY3OC1mOTgy YjZlNjA1MDUvYWUxZTQ0YmUtYzIzZC00MDE3LThlYmQtZDNmNDBjMWZmMzZiLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgt Zjk4MmI2ZTYwNTA1L1huclZUZ1R3UXVTc0RwNWx4VzVWeDNSNDBzNC5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAcz2pDANBgkqhkiG9w0BAQsFAAOCAQEArJwPbEA0Tb94mWJ53k1kVJgNCHVm ke0I1iqF3gcFjAsp6suUHV06+gCYx5B1ZEK6cgFyy4+M0EfPYb1eC67d5dpw45E9 nMRNDc3BKjeNMtxy+O2CIqFUQQreVyrAvYHctFmlVXFr4UDlc9DSCuCPZRCyaOrm mYmd7CSMSx4u5u0QBQAL4o35LOJVwjYtktUA3fLlViz472cmt1Fcu/5UJXBM3Gz8 Qkr1Y1mbooWm3K+k0VFQ/6QU+CMs2PTqdj6gfj+eDrjiBiUctJo/6xf0ZsdlQGJ+ CErt6XTTeepvBsG4sDRoXllyOxjq/lVBAUFQOf31Ed+lKo3DV3zK6Bin2Q== -----END CERTIFICATE-----Generated at Mon Oct 20 20:26:33 2025 by rpki-client