$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d888d73e-fb24-4a6d-bd1d-64647aca1b34.roa File: d888d73e-fb24-4a6d-bd1d-64647aca1b34.roa (raw, json) Hash identifier: tZsQA+PGHHJ2GsuGy6VMxthAJ22i23PywMUQVHCF81o= Subject key identifier: 74:9A:47:DD:E9:B5:6C:7D:A1:60:0B:90:7A:BC:5B:CB:98:F0:AB:2B Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 12D0C0AEAE6DD4C8F044565CFBFA55E613EEDE58 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d888d73e-fb24-4a6d-bd1d-64647aca1b34.roa Signing time: Mon 13 Oct 2025 16:38:21 +0000 ROA not before: Mon 13 Oct 2025 16:38:21 +0000 ROA not after: Mon 17 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 216.137.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:d0:c0:ae:ae:6d:d4:c8:f0:44:56:5c:fb:fa:55:e6:13:ee:de:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 13 16:38:21 2025 GMT Not After : Nov 17 23:59:59 2025 GMT Subject: serialNumber=b2ef1a72ad3455d28c5025cf603bc95531298d3613a57e5d276a4197f6977da4, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:92:5b:39:74:6d:f9:2c:71:dc:e7:3e:6e:e7: a6:fe:db:b8:c3:a5:bc:52:54:1f:69:4e:a3:65:65: 21:1c:db:09:8a:6b:5c:51:70:1b:39:85:b3:fb:92: 14:27:9b:70:4b:07:5e:fc:93:b6:0b:b3:ab:56:6f: 0a:7a:8b:4b:e2:ac:48:2f:19:be:80:5b:55:40:07: 5c:a2:85:93:1e:f3:62:d2:32:4e:81:45:00:bf:c8: ab:0c:8f:7a:02:f7:91:2c:a8:9d:5a:84:aa:e7:f8: 59:46:f4:ce:5a:cf:b9:bc:30:a0:f0:7b:86:8d:40: 7f:ee:90:4b:6d:9c:01:22:a1:d5:ac:79:80:43:9f: d4:b5:12:15:70:62:c4:e0:55:51:bc:35:da:ac:22: e1:4b:c8:8e:f7:da:9e:2a:37:e1:24:ac:9e:a0:ad: e3:37:88:0d:45:29:27:e6:79:fc:cd:d6:57:e7:ca: fa:5f:1b:15:54:29:01:c3:17:4c:6e:e7:73:7c:7e: 28:7a:e3:87:9f:10:14:34:43:67:e5:76:f4:0b:84: 06:c4:43:1b:0c:da:c1:42:31:5c:b4:98:f6:dd:3a: 3c:fb:25:90:2d:fd:53:c7:c9:85:21:c6:d0:2f:eb: ed:82:f6:13:3d:8c:35:65:c5:59:f0:94:9b:66:06: 07:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:9A:47:DD:E9:B5:6C:7D:A1:60:0B:90:7A:BC:5B:CB:98:F0:AB:2B X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d888d73e-fb24-4a6d-bd1d-64647aca1b34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.137.45.0/24 Signature Algorithm: sha256WithRSAEncryption 35:4e:a3:0a:61:b8:33:45:f0:34:00:f0:b3:20:05:4c:5c:76: 0d:06:d4:dc:49:b6:bc:e4:10:ba:cf:ad:11:b8:71:e9:27:2b: fd:ad:aa:9b:59:db:42:fa:3b:c5:9a:25:91:ac:35:f0:f8:3a: a9:c7:75:0e:69:85:f1:33:4d:2c:a7:d1:25:8d:e9:58:df:78: f4:d7:8a:04:95:6b:81:bb:2b:c3:9c:ae:7c:aa:c0:d5:20:9a: 86:54:cb:da:13:f7:98:5b:f1:62:57:1f:fd:0c:3d:8f:0f:a3: e8:c2:13:ed:5a:9c:bf:3e:71:f9:0f:4d:8e:ed:7f:63:4a:09: a8:37:8a:c6:c0:9f:59:32:30:ee:b6:60:0f:f6:65:34:98:f3: f3:26:dd:2e:af:0e:78:1b:93:1b:d3:f5:1e:fe:43:8f:cf:b6: 74:78:c1:7d:49:aa:b0:c8:65:64:d5:d0:be:64:9c:4f:9b:57: f6:5c:69:b1:16:db:2a:84:0d:6d:13:7b:c5:f3:82:2c:28:01: c1:37:43:27:b5:fb:70:9f:cb:24:ed:0b:73:18:02:6e:a9:0f: b8:42:8c:bc:5e:53:e2:98:6a:8e:58:b8:0d:6d:6c:6b:cb:e1: a2:a4:73:9e:10:62:7c:6c:c8:c7:a5:39:ae:a2:77:47:86:bc: 1c:74:b1:b7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEtDArq5t1MjwRFZc+/pV5hPu3lgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDEzMTYzODIxWhcNMjUxMTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMmVmMWE3MmFkMzQ1NWQyOGM1MDI1Y2Y2MDNiYzk1NTMx Mjk4ZDM2MTNhNTdlNWQyNzZhNDE5N2Y2OTc3ZGE0MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCXkls5dG35LHHc5z5u56b+27jDpbxSVB9pTqNlZSEc2wmK a1xRcBs5hbP7khQnm3BLB178k7YLs6tWbwp6i0virEgvGb6AW1VAB1yihZMe82LS Mk6BRQC/yKsMj3oC95EsqJ1ahKrn+FlG9M5az7m8MKDwe4aNQH/ukEttnAEiodWs eYBDn9S1EhVwYsTgVVG8NdqsIuFLyI732p4qN+EkrJ6greM3iA1FKSfmefzN1lfn yvpfGxVUKQHDF0xu53N8fih644efEBQ0Q2fldvQLhAbEQxsM2sFCMVy0mPbdOjz7 JZAt/VPHyYUhxtAv6+2C9hM9jDVlxVnwlJtmBgfjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUdJpH3em1bH2hYAuQerxby5jwqyswHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2Q4ODhkNzNlLWZiMjQtNGE2ZC1iZDFkLTY0NjQ3YWNhMWIzNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADYiS0wDQYJKoZIhvcNAQELBQADggEBADVOowphuDNF8DQA8LMgBUxcdg0G 1NxJtrzkELrPrRG4ceknK/2tqptZ20L6O8WaJZGsNfD4OqnHdQ5phfEzTSyn0SWN 6VjfePTXigSVa4G7K8OcrnyqwNUgmoZUy9oT95hb8WJXH/0MPY8Po+jCE+1anL8+ cfkPTY7tf2NKCag3isbAn1kyMO62YA/2ZTSY8/Mm3S6vDngbkxvT9R7+Q4/PtnR4 wX1JqrDIZWTV0L5knE+bV/ZcabEW2yqEDW0Te8XzgiwoAcE3Qye1+3CfyyTtC3MY Am6pD7hCjLxeU+KYao5YuA1tbGvL4aKkc54QYnxsyMelOa6id0eGvBx0sbc= -----END CERTIFICATE-----Generated at Tue Oct 21 01:28:48 2025 by rpki-client