$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c4b9dde3-4dc7-492b-a8b4-2ead613e4347.roa File: c4b9dde3-4dc7-492b-a8b4-2ead613e4347.roa (raw, json) Hash identifier: qPExJK8Pi8FrXeBYaLx4YxdQ3pVln0dvDzxtoa0lpv4= Subject key identifier: 69:F1:15:FB:14:1F:E0:8E:F2:C5:4F:CA:11:7E:B4:D8:38:DB:51:B4 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 019E0AE9A3769C9771CF978053F5BC1EEC8C6812 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c4b9dde3-4dc7-492b-a8b4-2ead613e4347.roa Signing time: Wed 22 Oct 2025 19:53:16 +0000 ROA not before: Wed 22 Oct 2025 19:53:16 +0000 ROA not after: Wed 26 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 216.137.52.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:0a:e9:a3:76:9c:97:71:cf:97:80:53:f5:bc:1e:ec:8c:68:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 22 19:53:16 2025 GMT Not After : Nov 26 23:59:59 2025 GMT Subject: serialNumber=8dd62b4999fd0b9632750f0bb8ecc095f43cdaabbc7d501c7973f833392f247d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:85:7c:66:44:bc:29:cf:09:86:31:81:43:80: 58:5e:ec:2b:73:f8:40:91:a0:b7:50:af:17:36:fc: 14:a1:6e:02:a8:03:55:cb:dd:3c:68:e7:51:b6:f5: 5a:93:1c:3c:39:12:30:ad:07:f7:be:18:c8:8c:98: b4:3a:cd:90:28:29:7f:e5:93:5b:1d:f1:6c:33:96: af:87:82:b2:41:7c:ab:b5:a4:e8:91:1f:a4:2f:c8: 01:f6:15:2a:0e:94:10:92:a2:2d:56:b3:2c:f3:c3: c4:e7:90:c4:d5:f8:7e:ae:3a:6e:bb:c4:45:0b:bf: dc:60:b1:8e:01:f2:b5:a2:08:94:a5:5f:70:04:4b: b0:28:e2:6c:b7:69:1a:31:96:75:de:4f:02:9b:0e: 7d:51:df:d6:43:4b:c0:7e:9e:db:f7:c8:2f:a3:11: a0:3c:4c:e8:46:e3:ab:4b:11:cc:26:ab:2c:d1:d9: fa:ab:30:d8:2d:b1:bf:ef:c0:40:69:36:02:9f:3d: e7:37:a8:b3:9b:fe:db:9a:b9:2e:2f:df:9a:8f:7d: 78:d8:ab:d6:d6:57:23:ce:7b:81:bc:3b:08:d5:c5: 65:01:25:eb:29:1b:8c:cd:39:1f:87:ad:53:d4:21: f4:da:99:25:69:dd:8d:19:44:10:8e:92:a0:d2:48: d3:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:F1:15:FB:14:1F:E0:8E:F2:C5:4F:CA:11:7E:B4:D8:38:DB:51:B4 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c4b9dde3-4dc7-492b-a8b4-2ead613e4347.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.137.52.0/23 Signature Algorithm: sha256WithRSAEncryption 1a:71:45:c5:03:05:b1:7b:fd:c6:df:34:0a:3a:71:f3:ed:ba: 19:0a:cb:d3:6b:73:1f:eb:1b:08:70:46:a5:a6:fc:33:e0:6d: 26:dd:d4:9d:22:08:bc:c4:67:26:72:1b:fe:77:9c:b9:70:f3: 81:91:56:b7:ab:05:8d:b4:43:1f:c9:11:0a:e2:78:a9:71:a0: 4b:88:06:24:cb:31:83:7e:13:a3:38:22:06:83:39:31:ed:c5: 82:8a:37:04:4b:cf:72:69:9a:8d:56:0d:f8:7f:19:4c:e0:34: f3:98:52:33:f0:1b:7c:b8:06:1f:7f:f5:52:d5:9d:0e:cc:3e: fe:00:f3:06:b3:3e:10:88:cf:82:6e:5d:a6:c8:4d:bb:1e:47: 0a:5a:4a:c9:47:8f:f3:b9:16:70:64:43:a9:7d:13:11:0a:29: 3d:0d:97:0a:29:0c:ea:08:09:6e:db:d5:eb:2f:e7:6f:42:2f: 7d:24:39:0e:de:7a:e2:fc:f9:11:62:32:3d:cb:ed:ed:6a:cb: 96:06:2f:20:9a:57:03:db:10:93:e2:e4:b9:7e:00:05:cc:d5: 4d:7e:3b:79:93:b3:2d:b8:70:48:95:48:57:ac:ce:5e:96:af: b2:ff:8f:ce:df:e4:b1:2b:6d:ff:6c:96:74:30:15:66:1b:32: 22:a2:7f:ac -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAZ4K6aN2nJdxz5eAU/W8HuyMaBIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDIyMTk1MzE2WhcNMjUxMTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZGQ2MmI0OTk5ZmQwYjk2MzI3NTBmMGJiOGVjYzA5NWY0 M2NkYWFiYmM3ZDUwMWM3OTczZjgzMzM5MmYyNDdkMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1hXxmRLwpzwmGMYFDgFhe7Ctz+ECRoLdQrxc2/BShbgKo A1XL3Txo51G29VqTHDw5EjCtB/e+GMiMmLQ6zZAoKX/lk1sd8Wwzlq+HgrJBfKu1 pOiRH6QvyAH2FSoOlBCSoi1Wsyzzw8TnkMTV+H6uOm67xEULv9xgsY4B8rWiCJSl X3AES7Ao4my3aRoxlnXeTwKbDn1R39ZDS8B+ntv3yC+jEaA8TOhG46tLEcwmqyzR 2fqrMNgtsb/vwEBpNgKfPec3qLOb/tuauS4v35qPfXjYq9bWVyPOe4G8OwjVxWUB JespG4zNOR+HrVPUIfTamSVp3Y0ZRBCOkqDSSNOPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUafEV+xQf4I7yxU/KEX602DjbUbQwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2M0YjlkZGUzLTRkYzctNDkyYi1hOGI0LTJlYWQ2MTNlNDM0Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHYiTQwDQYJKoZIhvcNAQELBQADggEBABpxRcUDBbF7/cbfNAo6cfPtuhkK y9Nrcx/rGwhwRqWm/DPgbSbd1J0iCLzEZyZyG/53nLlw84GRVrerBY20Qx/JEQri eKlxoEuIBiTLMYN+E6M4IgaDOTHtxYKKNwRLz3Jpmo1WDfh/GUzgNPOYUjPwG3y4 Bh9/9VLVnQ7MPv4A8wazPhCIz4JuXabITbseRwpaSslHj/O5FnBkQ6l9ExEKKT0N lwopDOoICW7b1esv529CL30kOQ7eeuL8+RFiMj3L7e1qy5YGLyCaVwPbEJPi5Ll+ AAXM1U1+O3mTsy24cEiVSFeszl6Wr7L/j87f5LErbf9slnQwFWYbMiKif6w= -----END CERTIFICATE-----Generated at Wed Nov 5 10:56:08 2025 by rpki-client