$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ccd4280d-fd51-46cc-89d5-000218769ba3.roa File: ccd4280d-fd51-46cc-89d5-000218769ba3.roa (raw, json) Hash identifier: KSJuxtbz230PIzuqI3+Kl7SSEC/2d4dZmC8M5vOg7So= Subject key identifier: 3C:BF:5D:9C:8A:15:FB:58:C5:A7:5C:F4:45:16:71:E2:82:AF:F7:D3 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 6CF0BFB1EC4B67419FDA44F8AFE9A4F852CC7FEC Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ccd4280d-fd51-46cc-89d5-000218769ba3.roa Signing time: Mon 13 Oct 2025 16:38:41 +0000 ROA not before: Mon 13 Oct 2025 16:38:41 +0000 ROA not after: Mon 17 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 216.137.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:f0:bf:b1:ec:4b:67:41:9f:da:44:f8:af:e9:a4:f8:52:cc:7f:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 13 16:38:41 2025 GMT Not After : Nov 17 23:59:59 2025 GMT Subject: serialNumber=9d9b0f85eeb14c4b7f696e839cdb73dc874d9fd9ad48c250390e77e220593fde, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0e:86:0c:a3:7c:66:8f:16:68:bf:28:cb:92: ec:18:13:dd:c0:82:d5:aa:bd:18:54:5d:cd:a5:82: 43:7b:9e:cb:94:e0:9c:55:45:03:21:2e:02:5d:1a: 55:76:37:48:6d:e2:16:37:1a:00:ca:e8:cb:ee:9c: b4:5c:5e:d7:86:6e:a2:15:93:a9:cf:07:2a:e6:8d: bb:81:ba:25:06:8b:f9:96:7e:f8:28:98:f2:3e:f6: 00:ba:1e:7b:23:54:c6:30:4f:ed:1b:ff:80:5c:6d: 74:95:31:f5:3e:b5:ac:d6:75:46:a5:98:55:a3:82: 98:d3:ba:bc:f3:11:ec:60:43:cc:fd:5e:4e:e6:e1: 38:95:3f:79:69:44:d7:0d:4e:77:65:2b:b9:cd:a4: ec:33:97:54:2e:c4:73:32:bd:a2:d0:0a:78:f1:bd: 31:21:30:28:e6:16:c2:72:8f:ca:04:ed:bb:dd:b9: 31:6d:55:9b:38:09:b7:a1:78:41:ab:0a:ed:ac:66: 95:b1:37:64:d3:f1:b1:f6:60:29:37:39:72:e0:f7: 52:78:e4:d6:96:a3:d3:8c:d3:f0:7d:a3:ee:04:47: ad:bf:7c:e4:79:5c:33:01:fc:56:42:b3:90:3c:6d: c4:97:b8:ca:1e:14:56:81:99:54:7d:13:42:db:28: fb:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:BF:5D:9C:8A:15:FB:58:C5:A7:5C:F4:45:16:71:E2:82:AF:F7:D3 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ccd4280d-fd51-46cc-89d5-000218769ba3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.137.56.0/21 Signature Algorithm: sha256WithRSAEncryption 6a:8c:02:9a:39:95:04:49:cb:cc:60:b5:72:be:f1:62:59:a0: 01:20:f3:57:b2:e9:ae:7e:ac:58:d8:81:66:7a:a7:05:fe:eb: 2d:5a:e5:0f:37:4b:a4:0b:85:58:bc:f1:e5:2b:80:32:e5:07: 04:a8:d9:f8:17:95:16:6e:23:6d:b2:7d:48:db:de:82:d9:64: ce:62:27:c7:e3:16:86:f6:94:21:e6:9c:e1:4c:69:b3:c9:f9: 28:d4:b7:3c:5e:66:04:eb:21:d8:8a:73:34:06:0c:d2:75:e2: 1e:44:8c:ef:0e:c7:5d:63:93:ee:40:70:c6:cd:53:37:df:9e: 79:74:36:cd:7c:60:70:ce:70:01:14:69:4a:89:87:97:70:03: 35:e1:ec:d4:1a:ad:62:1f:81:52:b8:8d:2b:21:45:01:00:5e: e3:d1:47:b4:03:35:c1:88:f8:6c:2f:4e:5e:a2:a7:52:4d:97: 9e:59:f8:83:f0:a2:7e:bf:65:4f:65:73:1d:22:9a:39:9a:a4: 86:c5:f9:d6:8b:22:cd:46:54:96:d1:7b:b2:dc:18:bd:38:19: 94:cb:85:6c:80:a5:92:73:dc:83:39:54:80:ae:0b:f1:c8:c5: 81:64:30:7e:0a:57:e8:27:96:cb:ee:55:71:1d:68:9e:85:e0: 1a:ac:5a:d3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbPC/sexLZ0Gf2kT4r+mk+FLMf+wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDEzMTYzODQxWhcNMjUxMTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZDliMGY4NWVlYjE0YzRiN2Y2OTZlODM5Y2RiNzNkYzg3 NGQ5ZmQ5YWQ0OGMyNTAzOTBlNzdlMjIwNTkzZmRlMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCoDoYMo3xmjxZovyjLkuwYE93AgtWqvRhUXc2lgkN7nsuU 4JxVRQMhLgJdGlV2N0ht4hY3GgDK6MvunLRcXteGbqIVk6nPByrmjbuBuiUGi/mW fvgomPI+9gC6HnsjVMYwT+0b/4BcbXSVMfU+tazWdUalmFWjgpjTurzzEexgQ8z9 Xk7m4TiVP3lpRNcNTndlK7nNpOwzl1QuxHMyvaLQCnjxvTEhMCjmFsJyj8oE7bvd uTFtVZs4CbeheEGrCu2sZpWxN2TT8bH2YCk3OXLg91J45NaWo9OM0/B9o+4ER62/ fOR5XDMB/FZCs5A8bcSXuMoeFFaBmVR9E0LbKPs5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUPL9dnIoV+1jFp1z0RRZx4oKv99MwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2NjZDQyODBkLWZkNTEtNDZjYy04OWQ1LTAwMDIxODc2OWJhMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPYiTgwDQYJKoZIhvcNAQELBQADggEBAGqMApo5lQRJy8xgtXK+8WJZoAEg 81ey6a5+rFjYgWZ6pwX+6y1a5Q83S6QLhVi88eUrgDLlBwSo2fgXlRZuI22yfUjb 3oLZZM5iJ8fjFob2lCHmnOFMabPJ+SjUtzxeZgTrIdiKczQGDNJ14h5EjO8Ox11j k+5AcMbNUzffnnl0Ns18YHDOcAEUaUqJh5dwAzXh7NQarWIfgVK4jSshRQEAXuPR R7QDNcGI+GwvTl6ip1JNl55Z+IPwon6/ZU9lcx0imjmapIbF+daLIs1GVJbRe7Lc GL04GZTLhWyApZJz3IM5VICuC/HIxYFkMH4KV+gnlsvuVXEdaJ6F4BqsWtM= -----END CERTIFICATE-----Generated at Mon Oct 20 12:48:34 2025 by rpki-client