$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/dc34bf9d-4f09-4b04-abc0-93082ac3a461.roa File: dc34bf9d-4f09-4b04-abc0-93082ac3a461.roa (raw, json) Hash identifier: pkc2+thu4CIjAae7ejLOMKbAlAu9Z9OcKYvIpS6+li8= Subject key identifier: 9E:9E:CE:36:71:70:CF:FD:22:37:50:82:7B:89:E7:F1:D0:75:D4:2A Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 560A92667AF997A7E0170ECC4A3D450BEC39DFAF Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/dc34bf9d-4f09-4b04-abc0-93082ac3a461.roa Signing time: Mon 13 Oct 2025 16:01:01 +0000 ROA not before: Mon 13 Oct 2025 16:01:01 +0000 ROA not after: Mon 17 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 204.246.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:0a:92:66:7a:f9:97:a7:e0:17:0e:cc:4a:3d:45:0b:ec:39:df:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 13 16:01:01 2025 GMT Not After : Nov 17 23:59:59 2025 GMT Subject: serialNumber=0c02204c19a30a25c9d2804ad5a05235600ae328739f404950ea3353d1e0f54f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f2:f0:9a:a4:9c:d9:0f:c7:96:d1:6a:53:9a: ba:b1:39:f5:4f:e6:7f:8f:bb:3b:47:4d:34:7d:d9: 69:fa:a7:51:99:ac:30:37:be:1a:83:ea:54:a2:b8: 37:a0:a8:54:44:16:7a:b4:d6:cf:d7:f3:2a:bd:fa: 2a:3a:47:1c:44:30:15:0b:4a:23:73:89:b7:04:53: 21:f4:0a:b8:49:bd:21:03:e1:22:4b:c3:2f:4b:89: 06:eb:89:02:2d:c8:e8:0e:53:da:21:9e:ff:e0:21: 96:02:ec:5d:b5:96:a8:90:ca:09:55:4b:9c:e0:1b: c5:c2:3e:bd:2d:b8:31:69:29:d1:91:80:a5:19:25: db:f8:52:eb:40:7a:d8:82:45:4b:50:ff:cb:02:9d: 55:69:72:df:3f:6d:4f:4e:6c:d5:0d:be:44:44:d1: 88:3d:ff:c6:8b:a2:48:ef:ee:6c:4a:da:61:40:83: 4a:4f:f9:db:6b:7d:1f:89:a8:89:cd:a4:b6:5e:5f: d7:00:14:dd:93:bf:83:e1:5d:c2:f0:2a:48:1d:23: a0:2f:54:78:53:e7:8b:8c:ff:fb:c7:b6:cf:f2:cc: 5f:30:68:13:ec:ed:b0:ac:65:42:c0:f3:f5:2e:78: b9:7f:d9:c3:6d:54:4a:50:e0:c1:b8:b8:35:e0:cd: 20:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:9E:CE:36:71:70:CF:FD:22:37:50:82:7B:89:E7:F1:D0:75:D4:2A X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/dc34bf9d-4f09-4b04-abc0-93082ac3a461.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 204.246.169.0/24 Signature Algorithm: sha256WithRSAEncryption 66:73:ce:16:a5:d0:be:2e:d0:eb:4b:3e:71:7a:ce:67:bb:9e: f7:9c:c0:01:81:f2:37:e3:99:ee:d3:17:f5:0c:8c:b3:24:b7: 52:d0:b2:5c:ed:e0:2c:db:b7:ad:a7:0a:fb:75:e3:de:8e:b3: d4:85:96:e6:1b:d8:16:17:8b:8b:27:10:d8:c5:6f:fa:56:3f: 69:79:c2:14:ba:26:e9:44:d0:88:42:1b:11:34:ed:24:24:c4: 0b:b8:ea:08:e8:7a:67:59:6f:de:33:09:b8:ce:21:9f:2f:22: 8a:e9:96:77:8a:71:85:49:55:de:8c:3d:99:3f:4e:34:88:81: 8b:5f:63:e3:60:4a:6e:1b:e2:d4:d3:f9:40:b6:6e:35:1c:44: 55:9f:14:86:02:02:56:f6:64:f6:7f:11:d4:1e:9c:0a:b5:55: 01:8a:f2:9f:91:30:2b:52:27:a9:93:9f:3e:d1:c8:a3:18:38: 98:66:ab:ab:c8:6a:93:0d:33:2c:56:a8:4e:b5:31:a6:c3:43: eb:63:da:97:0d:cf:ca:ee:9d:9a:e7:c9:c7:e8:9a:9e:d0:c7: c0:24:2e:d9:fd:e6:74:79:13:c2:88:b4:71:1a:eb:4b:f9:e7: c5:81:70:9f:eb:40:90:4c:ce:25:f0:9d:f3:e4:08:15:64:6a: 3c:0c:04:a8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVgqSZnr5l6fgFw7MSj1FC+w5368wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDEzMTYwMTAxWhcNMjUxMTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0AwYzAyMjA0YzE5YTMwYTI1YzlkMjgwNGFkNWEwNTIzNTYw MGFlMzI4NzM5ZjQwNDk1MGVhMzM1M2QxZTBmNTRmMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCT8vCapJzZD8eW0WpTmrqxOfVP5n+PuztHTTR92Wn6p1GZ rDA3vhqD6lSiuDegqFREFnq01s/X8yq9+io6RxxEMBULSiNzibcEUyH0CrhJvSED 4SJLwy9LiQbriQItyOgOU9ohnv/gIZYC7F21lqiQyglVS5zgG8XCPr0tuDFpKdGR gKUZJdv4UutAetiCRUtQ/8sCnVVpct8/bU9ObNUNvkRE0Yg9/8aLokjv7mxK2mFA g0pP+dtrfR+JqInNpLZeX9cAFN2Tv4PhXcLwKkgdI6AvVHhT54uM//vHts/yzF8w aBPs7bCsZULA8/UueLl/2cNtVEpQ4MG4uDXgzSAfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUnp7ONnFwz/0iN1CCe4nn8dB11CowHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2RjMzRiZjlkLTRmMDktNGIwNC1hYmMwLTkzMDgyYWMzYTQ2MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADM9qkwDQYJKoZIhvcNAQELBQADggEBAGZzzhal0L4u0OtLPnF6zme7nvec wAGB8jfjme7TF/UMjLMkt1LQslzt4Czbt62nCvt1496Os9SFluYb2BYXi4snENjF b/pWP2l5whS6JulE0IhCGxE07SQkxAu46gjoemdZb94zCbjOIZ8vIorplneKcYVJ Vd6MPZk/TjSIgYtfY+NgSm4b4tTT+UC2bjUcRFWfFIYCAlb2ZPZ/EdQenAq1VQGK 8p+RMCtSJ6mTnz7RyKMYOJhmq6vIapMNMyxWqE61MabDQ+tj2pcNz8runZrnycfo mp7Qx8AkLtn95nR5E8KItHEa60v558WBcJ/rQJBMziXwnfPkCBVkajwMBKg= -----END CERTIFICATE-----Generated at Mon Oct 20 20:26:12 2025 by rpki-client