$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/cdc16ed2-fa9b-4d7c-a961-4d107b73c403.roa File: cdc16ed2-fa9b-4d7c-a961-4d107b73c403.roa (raw, json) Hash identifier: HOrmHZ0BLqzatm1FLCOIj5x9eRkYEXOAD+8KrvupKfI= Subject key identifier: 1F:ED:88:E7:94:8F:37:B1:6A:13:6B:E3:74:CE:61:0F:E2:02:D2:47 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 5E441EF47BF0DD92192EE1E7F0E706EC354672DB Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/cdc16ed2-fa9b-4d7c-a961-4d107b73c403.roa Signing time: Mon 13 Oct 2025 16:40:04 +0000 ROA not before: Mon 13 Oct 2025 16:40:04 +0000 ROA not after: Mon 17 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 216.137.54.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:44:1e:f4:7b:f0:dd:92:19:2e:e1:e7:f0:e7:06:ec:35:46:72:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 13 16:40:04 2025 GMT Not After : Nov 17 23:59:59 2025 GMT Subject: serialNumber=d79c4df44818f4b6eb707b306c8c7d3af5a5eef58ecdfeb52e667a43ac99124f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:51:ec:ea:ae:fe:c4:82:3d:6c:5c:ff:b5:1a: b3:5e:98:09:40:37:99:7c:7e:44:59:57:db:0d:dd: d5:18:ee:a3:48:07:49:5b:76:65:39:8e:4b:d1:7e: 73:93:5e:a6:2c:02:88:46:6b:fc:6a:68:9d:72:0f: e6:fb:57:2c:f0:55:5f:5c:84:b7:e1:7b:ed:04:aa: f1:31:53:42:a6:d2:d5:76:af:3c:d1:83:05:5f:0b: 51:b9:5b:99:c4:11:77:86:b5:2c:6f:1b:1d:5c:29: 6c:94:f5:e6:c6:e7:93:44:28:4b:8c:5f:76:9b:06: 48:45:c9:b0:86:6c:db:4d:36:a2:65:1c:db:18:1a: a8:cf:03:0d:dd:da:65:43:9d:70:08:d0:eb:b8:11: 7a:61:ef:48:d4:ec:fd:27:49:9e:31:a5:72:43:55: 1b:35:d6:77:b4:b7:b8:72:7a:dc:4c:0c:79:2f:a6: bc:f4:ee:bd:a2:e9:e9:69:69:ab:c4:4a:b1:e2:3f: f6:03:47:10:39:71:ff:e6:82:09:86:59:a8:00:f8: 75:b7:3b:f8:c0:a1:49:14:d1:f7:78:13:e8:ad:76: 3e:a6:46:90:0c:56:7e:b8:8a:25:70:06:bc:4a:85: 84:20:9f:5a:35:8c:17:ce:1b:b6:00:f9:d6:92:23: c0:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:ED:88:E7:94:8F:37:B1:6A:13:6B:E3:74:CE:61:0F:E2:02:D2:47 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/cdc16ed2-fa9b-4d7c-a961-4d107b73c403.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.137.54.0/23 Signature Algorithm: sha256WithRSAEncryption 34:47:2e:7e:25:e3:cd:11:a4:cc:d9:73:15:00:9b:8d:b7:33: 82:1f:1a:7a:3f:7c:31:0f:aa:16:d4:82:a5:c3:a4:64:8d:d1: b0:d8:74:03:d0:6e:59:31:35:01:68:7c:72:dd:23:52:5c:33: b7:ab:a7:c5:df:ad:2d:3c:7b:12:72:de:14:7f:6a:82:05:1a: c4:d5:4c:b8:ce:bc:2c:c6:96:b6:97:2e:a2:d1:fc:da:db:87: 64:bd:51:18:62:b5:40:8b:a6:83:f5:b2:0c:59:11:16:54:9b: db:18:da:fb:d1:51:12:ac:17:f7:73:fe:db:a4:50:d7:35:cc: 24:35:0f:e8:c1:ee:ee:26:77:db:e8:32:00:6d:f2:55:e8:0c: 57:b9:79:d6:22:4d:6d:27:df:ee:27:ac:83:f3:42:95:48:08: c4:b5:30:7b:70:07:46:08:f7:11:14:0d:e9:61:91:ac:37:b7: 24:12:73:b4:f5:19:08:07:bb:bb:1f:07:f8:f9:d3:ed:7b:25: f1:3c:93:2c:87:ee:9c:e8:e1:9b:64:34:aa:ea:5d:e2:0a:8c: 16:1e:24:28:47:28:44:c0:07:fc:0b:5d:34:6b:6b:68:29:97: 7d:16:32:0c:d9:95:f4:e2:59:71:23:cb:27:b8:6e:2f:68:23: 22:2e:c4:a5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXkQe9Hvw3ZIZLuHn8OcG7DVGctswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDEzMTY0MDA0WhcNMjUxMTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNzljNGRmNDQ4MThmNGI2ZWI3MDdiMzA2YzhjN2QzYWY1 YTVlZWY1OGVjZGZlYjUyZTY2N2E0M2FjOTkxMjRmMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0Uezqrv7Egj1sXP+1GrNemAlAN5l8fkRZV9sN3dUY7qNI B0lbdmU5jkvRfnOTXqYsAohGa/xqaJ1yD+b7VyzwVV9chLfhe+0EqvExU0Km0tV2 rzzRgwVfC1G5W5nEEXeGtSxvGx1cKWyU9ebG55NEKEuMX3abBkhFybCGbNtNNqJl HNsYGqjPAw3d2mVDnXAI0Ou4EXph70jU7P0nSZ4xpXJDVRs11ne0t7hyetxMDHkv prz07r2i6elpaavESrHiP/YDRxA5cf/mggmGWagA+HW3O/jAoUkU0fd4E+itdj6m RpAMVn64iiVwBrxKhYQgn1o1jBfOG7YA+daSI8CpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUH+2I55SPN7FqE2vjdM5hD+IC0kcwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2NkYzE2ZWQyLWZhOWItNGQ3Yy1hOTYxLTRkMTA3YjczYzQwMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHYiTYwDQYJKoZIhvcNAQELBQADggEBADRHLn4l480RpMzZcxUAm423M4If Gno/fDEPqhbUgqXDpGSN0bDYdAPQblkxNQFofHLdI1JcM7erp8XfrS08exJy3hR/ aoIFGsTVTLjOvCzGlraXLqLR/Nrbh2S9URhitUCLpoP1sgxZERZUm9sY2vvRURKs F/dz/tukUNc1zCQ1D+jB7u4md9voMgBt8lXoDFe5edYiTW0n3+4nrIPzQpVICMS1 MHtwB0YI9xEUDelhkaw3tyQSc7T1GQgHu7sfB/j50+17JfE8kyyH7pzo4ZtkNKrq XeIKjBYeJChHKETAB/wLXTRra2gpl30WMgzZlfTiWXEjyye4bi9oIyIuxKU= -----END CERTIFICATE-----Generated at Wed Nov 5 12:49:00 2025 by rpki-client