$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b4696ceb-f833-43c4-af53-9960894ce08d.roa File: b4696ceb-f833-43c4-af53-9960894ce08d.roa (raw, json) Hash identifier: jSwPnRkPy95edDw03ttzBu7EXWJ7yWyK63ezZz9v5ts= Subject key identifier: 37:8F:4F:CA:CE:F4:C5:C1:BF:1B:E8:32:94:FA:A8:1F:92:FA:3A:20 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 5392E55CF2B7CA54DA754EBAC9B9F451E59F554C Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b4696ceb-f833-43c4-af53-9960894ce08d.roa Signing time: Tue 19 Aug 2025 00:40:49 +0000 ROA not before: Tue 19 Aug 2025 00:40:49 +0000 ROA not after: Tue 23 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 205.251.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:92:e5:5c:f2:b7:ca:54:da:75:4e:ba:c9:b9:f4:51:e5:9f:55:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Aug 19 00:40:49 2025 GMT Not After : Sep 23 23:59:59 2025 GMT Subject: serialNumber=fa2e97ec5ab2f5d9645c64a06dd9b56365d8f61e33d712a161c913314d9ad77f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:56:d1:db:9d:49:5a:0e:b7:81:f5:a8:a7:39: 05:22:59:9c:f1:4e:d1:1f:54:16:7b:a9:c1:52:2c: 7f:7b:15:aa:56:8e:0c:e0:07:0d:61:11:ed:1c:e0: 21:ac:de:75:b6:05:a0:2e:58:d4:93:0d:f2:04:9a: 21:0d:c8:ce:03:74:ca:b8:4d:61:ec:05:9b:b2:48: 9e:3e:ef:6b:14:1a:c2:0b:c5:dc:ea:e9:fe:5f:9f: 0a:b5:49:9e:18:bb:2c:5d:d7:f9:a9:7a:cc:b9:60: c7:ea:50:1d:a8:71:7d:a4:7d:2b:77:88:e0:f5:31: 01:98:97:19:4f:95:92:d0:05:85:39:15:2b:d8:df: 87:42:7c:d4:ed:0a:39:22:9f:f0:9c:c9:97:ed:a2: 8e:cc:e3:c3:04:18:78:c8:89:75:1a:4d:ce:b1:61: 05:99:0c:c5:9b:3c:cd:16:33:62:9e:2e:3d:bf:2a: f3:54:74:52:c6:49:9f:9f:2e:f5:d9:76:d4:50:6e: 7f:b1:c4:b7:b4:73:d9:2c:f4:7f:b0:71:be:3d:37: ce:8e:aa:13:19:ff:1d:ff:ee:8c:6b:de:3f:d1:c4: ef:3e:1b:36:c5:be:a0:bc:4d:c4:c7:54:bb:a1:31: 77:fb:20:ba:39:fd:87:9b:5c:66:6d:eb:c7:7e:90: 54:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:8F:4F:CA:CE:F4:C5:C1:BF:1B:E8:32:94:FA:A8:1F:92:FA:3A:20 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b4696ceb-f833-43c4-af53-9960894ce08d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 205.251.240.0/22 Signature Algorithm: sha256WithRSAEncryption 8a:41:20:77:f3:c7:d2:41:81:7c:21:25:95:af:3f:1d:7c:84: 25:4d:b5:8a:79:ff:32:29:8d:6d:88:de:96:38:0f:cd:bd:75: de:5c:39:ec:35:07:92:43:71:29:02:08:cc:c2:ac:bf:92:1d: df:b7:e1:74:54:e5:35:6c:99:d7:a1:19:18:6a:4b:53:25:52: 51:4b:de:09:f0:06:92:56:91:c6:01:02:d2:bd:df:60:30:fb: 0a:77:0b:b2:24:be:3d:ad:cc:e1:aa:d3:e0:f7:8c:30:51:df: bb:a2:d3:aa:f9:cb:9f:b6:fa:eb:c8:b1:45:ae:ca:50:48:e4: 55:30:2b:87:83:2c:34:c6:20:17:2e:a8:62:4a:ba:6c:fa:ff: ee:86:70:5b:ad:a0:6b:07:cf:56:2d:3b:60:96:02:7b:af:d1: ac:24:fa:b8:86:d5:b2:a8:61:c9:09:40:2a:7d:29:99:0f:ee: fa:be:c2:32:f6:99:e7:61:93:c3:a7:5c:c2:9f:49:6e:c7:c3: d4:88:70:42:29:03:ba:a2:f7:8d:d8:8d:05:5a:2b:f4:b3:3f: a5:55:92:f7:5a:1b:d3:80:5d:6c:a7:66:c4:13:52:af:99:e8: 35:13:22:22:65:79:43:da:6b:1b:a5:0d:85:fd:8a:88:e6:f3: 7d:85:cf:3f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUU5LlXPK3ylTadU66ybn0UeWfVUwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUwODE5MDA0MDQ5WhcNMjUwOTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BmYTJlOTdlYzVhYjJmNWQ5NjQ1YzY0YTA2ZGQ5YjU2MzY1 ZDhmNjFlMzNkNzEyYTE2MWM5MTMzMTRkOWFkNzdmMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDIVtHbnUlaDreB9ainOQUiWZzxTtEfVBZ7qcFSLH97FapW jgzgBw1hEe0c4CGs3nW2BaAuWNSTDfIEmiENyM4DdMq4TWHsBZuySJ4+72sUGsIL xdzq6f5fnwq1SZ4Yuyxd1/mpesy5YMfqUB2ocX2kfSt3iOD1MQGYlxlPlZLQBYU5 FSvY34dCfNTtCjkin/CcyZftoo7M48MEGHjIiXUaTc6xYQWZDMWbPM0WM2KeLj2/ KvNUdFLGSZ+fLvXZdtRQbn+xxLe0c9ks9H+wcb49N86OqhMZ/x3/7oxr3j/RxO8+ GzbFvqC8TcTHVLuhMXf7ILo5/YebXGZt68d+kFT3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUN49Pys70xcG/G+gylPqoH5L6OiAwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2I0Njk2Y2ViLWY4MzMtNDNjNC1hZjUzLTk5NjA4OTRjZTA4ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALN+/AwDQYJKoZIhvcNAQELBQADggEBAIpBIHfzx9JBgXwhJZWvPx18hCVN tYp5/zIpjW2I3pY4D829dd5cOew1B5JDcSkCCMzCrL+SHd+34XRU5TVsmdehGRhq S1MlUlFL3gnwBpJWkcYBAtK932Aw+wp3C7Ikvj2tzOGq0+D3jDBR37ui06r5y5+2 +uvIsUWuylBI5FUwK4eDLDTGIBcuqGJKumz6/+6GcFutoGsHz1YtO2CWAnuv0awk +riG1bKoYckJQCp9KZkP7vq+wjL2medhk8OnXMKfSW7Hw9SIcEIpA7qi943YjQVa K/SzP6VVkvdaG9OAXWynZsQTUq+Z6DUTIiJleUPaaxulDYX9iojm832Fzz8= -----END CERTIFICATE-----Generated at Sat Aug 23 12:15:42 2025 by rpki-client