$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/cb996bbf-47a5-47b4-87c5-55faf478a35e.roa File: cb996bbf-47a5-47b4-87c5-55faf478a35e.roa (raw, json) Hash identifier: O0VMlPaMGuiw/VmxJohjgUAbqoo7o8uRuDlG7HCue0o= Subject key identifier: 5D:AD:A9:89:5E:0E:38:7E:36:22:9D:74:2B:BE:F8:43:E2:A2:3C:2C Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 0D5E07AA9A3A2AF118C8203AB26C5554F5E7CE8C Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/cb996bbf-47a5-47b4-87c5-55faf478a35e.roa Signing time: Mon 13 Oct 2025 16:20:10 +0000 ROA not before: Mon 13 Oct 2025 16:20:10 +0000 ROA not after: Mon 17 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 216.137.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:5e:07:aa:9a:3a:2a:f1:18:c8:20:3a:b2:6c:55:54:f5:e7:ce:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 13 16:20:10 2025 GMT Not After : Nov 17 23:59:59 2025 GMT Subject: serialNumber=e55566652d81150125e113d682377c8409a050a0934c4e0e39244945ce9c261e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:47:b2:f7:a0:f9:81:67:3b:c1:7b:0c:3c:69: ea:9e:66:5d:cd:50:e4:a7:30:5d:3d:86:1c:fc:35: 12:b6:64:7d:68:0b:87:05:48:b8:c7:0a:56:17:5f: b0:97:29:e0:45:50:59:c0:e7:ab:35:42:58:27:94: b8:4d:fe:86:62:6f:13:70:d4:9c:fa:4e:0f:58:16: 8f:e0:60:f1:6e:0a:12:ac:06:0d:b5:03:21:a1:c5: 6b:18:7c:83:69:0c:c1:3b:dc:1d:85:86:a5:93:f4: fa:fa:ef:ac:a9:47:64:7d:8c:e7:c8:af:5d:12:d4: 88:2a:1d:e6:7a:39:88:37:10:89:39:99:fd:b5:86: 94:7f:78:b1:84:bf:4b:3c:5a:73:ba:be:48:e4:c4: 29:84:2e:e5:c9:23:82:81:35:5b:96:d8:fb:d8:1b: 22:a1:a1:25:8e:d0:6d:4d:2b:e6:63:35:a4:3b:3b: 93:f3:22:a1:92:a6:7a:f2:bf:09:1a:00:e0:fd:da: ab:aa:82:04:7d:f2:86:7f:22:59:01:41:be:af:8f: 40:72:3b:06:fb:7b:74:29:be:6d:b2:66:61:7d:f7: 26:7c:be:a4:1c:1a:0f:cb:d6:f1:be:44:20:79:be: 6e:06:15:1c:a8:ea:16:33:1e:e6:66:23:55:be:0f: b3:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:AD:A9:89:5E:0E:38:7E:36:22:9D:74:2B:BE:F8:43:E2:A2:3C:2C X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/cb996bbf-47a5-47b4-87c5-55faf478a35e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.137.61.0/24 Signature Algorithm: sha256WithRSAEncryption 55:5b:b1:a4:5e:ec:46:ae:07:21:65:00:73:73:e2:c3:97:b5: 56:2b:39:e6:4b:48:95:fe:07:84:27:6b:54:2e:52:4e:c3:a1: 14:40:45:35:2b:7e:77:a0:3a:87:e4:27:ac:5e:d4:f8:9a:eb: 0a:54:33:e8:ba:8a:10:95:ce:9c:73:b8:84:35:2d:fc:56:4a: c7:d1:6f:2c:03:eb:39:a2:6b:35:bc:f3:4d:8a:ae:19:79:0d: 8d:8b:51:94:c5:ea:38:50:61:b2:59:9e:a9:d5:da:a5:99:e6: 24:ec:d0:2b:80:ac:86:65:27:2c:42:ed:0c:76:7f:0e:b1:38: 66:fb:80:61:5d:18:95:7e:70:55:1b:67:08:41:c7:d2:75:55: 23:c6:c0:18:cd:35:7f:5b:c3:d6:12:64:73:b1:bb:75:04:6f: 58:91:54:03:66:75:15:fe:b9:13:ad:e0:8d:2f:12:54:3e:a4: 3a:c6:d7:34:07:6b:51:8c:fd:2a:9c:29:6e:14:dd:ef:7e:d7: 1a:d5:bf:64:c7:e1:1b:6e:14:3c:5f:3b:d6:74:5e:7f:ba:a6: a1:0d:b8:e6:e2:b1:32:b7:36:ed:a1:14:32:f1:c5:53:48:66: 89:98:cd:31:74:3c:64:24:dd:14:2c:d7:7e:46:c2:55:4d:4e: a9:2f:5d:a1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDV4Hqpo6KvEYyCA6smxVVPXnzowwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDEzMTYyMDEwWhcNMjUxMTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BlNTU1NjY2NTJkODExNTAxMjVlMTEzZDY4MjM3N2M4NDA5 YTA1MGEwOTM0YzRlMGUzOTI0NDk0NWNlOWMyNjFlMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4R7L3oPmBZzvBeww8aeqeZl3NUOSnMF09hhz8NRK2ZH1o C4cFSLjHClYXX7CXKeBFUFnA56s1QlgnlLhN/oZibxNw1Jz6Tg9YFo/gYPFuChKs Bg21AyGhxWsYfINpDME73B2FhqWT9Pr676ypR2R9jOfIr10S1IgqHeZ6OYg3EIk5 mf21hpR/eLGEv0s8WnO6vkjkxCmELuXJI4KBNVuW2PvYGyKhoSWO0G1NK+ZjNaQ7 O5PzIqGSpnryvwkaAOD92quqggR98oZ/IlkBQb6vj0ByOwb7e3Qpvm2yZmF99yZ8 vqQcGg/L1vG+RCB5vm4GFRyo6hYzHuZmI1W+D7OPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUXa2piV4OOH42Ip10K774Q+KiPCwwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2NiOTk2YmJmLTQ3YTUtNDdiNC04N2M1LTU1ZmFmNDc4YTM1ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADYiT0wDQYJKoZIhvcNAQELBQADggEBAFVbsaRe7EauByFlAHNz4sOXtVYr OeZLSJX+B4Qna1QuUk7DoRRARTUrfnegOofkJ6xe1Pia6wpUM+i6ihCVzpxzuIQ1 LfxWSsfRbywD6zmiazW8802Krhl5DY2LUZTF6jhQYbJZnqnV2qWZ5iTs0CuArIZl JyxC7Qx2fw6xOGb7gGFdGJV+cFUbZwhBx9J1VSPGwBjNNX9bw9YSZHOxu3UEb1iR VANmdRX+uROt4I0vElQ+pDrG1zQHa1GM/SqcKW4U3e9+1xrVv2TH4RtuFDxfO9Z0 Xn+6pqENuObisTK3Nu2hFDLxxVNIZomYzTF0PGQk3RQs135GwlVNTqkvXaE= -----END CERTIFICATE-----Generated at Mon Oct 20 20:25:47 2025 by rpki-client