$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d91e1290-8903-43b0-9ff5-cf18f7e06923.roa File: d91e1290-8903-43b0-9ff5-cf18f7e06923.roa (raw, json) Hash identifier: TUZpWgcihoRnvLfJ3w91SBC2P75DIeu66zu9xEXpzEI= Subject key identifier: 29:A6:34:79:7C:84:10:4A:56:ED:61:24:F8:39:22:71:3F:5D:78:4D Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 69431EC58C8DFC3616F1F817DC365095E46CF5E8 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d91e1290-8903-43b0-9ff5-cf18f7e06923.roa Signing time: Wed 22 Oct 2025 19:45:15 +0000 ROA not before: Wed 22 Oct 2025 19:45:15 +0000 ROA not after: Wed 26 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 204.246.176.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:43:1e:c5:8c:8d:fc:36:16:f1:f8:17:dc:36:50:95:e4:6c:f5:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 22 19:45:15 2025 GMT Not After : Nov 26 23:59:59 2025 GMT Subject: serialNumber=f362ed683db7227a6e52637e1ec50ffbdb0453b7ddf5714093a58f11ddd3197f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c4:28:39:0f:55:a4:0b:3c:19:f7:9c:2a:d0: 05:00:65:e4:0c:52:74:7b:72:bf:eb:81:d2:7c:f6: 90:f7:7f:bf:9f:bc:e2:cb:da:bc:e6:e4:89:bc:92: 0b:b2:44:a9:9b:7f:59:9d:83:fb:0b:7a:5b:dd:3a: 9d:29:92:00:23:37:03:0b:ad:3b:5a:8a:df:ea:5e: ed:ab:7d:60:cb:a1:30:dc:39:14:1b:a6:a0:12:00: bd:e7:84:45:d3:47:4f:44:03:fe:6c:e8:35:42:a7: f4:18:d1:a6:e3:cf:e8:71:81:5b:e2:34:0b:5d:75: 74:fc:01:b5:fb:0d:78:60:da:8a:e9:ed:67:ab:a9: 7d:d1:d3:25:af:eb:22:8e:64:c7:ff:8c:0b:b5:bf: 49:58:7f:54:08:c1:b7:af:e1:77:7c:2c:9a:aa:ea: ee:7e:ed:41:81:43:66:00:8a:b9:91:37:6f:9e:f7: c6:8b:0e:31:07:51:03:43:ad:f6:d5:8b:fe:43:cf: 8f:fd:e3:ec:2a:57:3e:b1:97:b4:37:2c:24:ac:fe: 03:d3:06:12:f3:54:f6:aa:72:e1:d7:4a:df:79:e1: b8:a4:0d:30:f0:66:67:79:80:2f:e0:7f:39:2e:ff: 0b:21:36:9a:c0:fa:11:60:6f:76:a5:39:36:0e:da: 65:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:A6:34:79:7C:84:10:4A:56:ED:61:24:F8:39:22:71:3F:5D:78:4D X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d91e1290-8903-43b0-9ff5-cf18f7e06923.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 204.246.176.0/23 Signature Algorithm: sha256WithRSAEncryption b2:f4:b3:d9:eb:e8:45:b6:39:c6:eb:af:70:94:5c:3f:7f:fe: 5b:0b:a4:68:2e:36:e1:a8:d3:fa:39:2e:a8:71:8a:9a:96:38: 22:77:97:a8:e9:61:ef:ac:64:18:7d:f7:4c:60:c7:2d:40:cc: 0c:25:0e:1b:a7:d4:a6:2c:da:9b:5d:43:08:36:ce:be:af:db: 16:33:2c:93:d1:b9:a9:7c:0d:6b:f8:22:d9:78:52:a6:ff:cb: 0c:7f:28:61:cc:49:ee:c8:67:1d:75:b1:5b:33:e5:f2:37:89: 90:0e:ea:fe:0c:88:10:02:7f:0e:9c:25:86:61:96:e3:de:a2: e0:8c:7c:21:1f:99:39:e7:9f:60:62:7f:6b:cf:e6:ab:cb:81: 7a:11:08:01:4f:7b:d3:b7:2c:a6:77:1e:8f:1c:fe:17:69:a8: 7d:0a:8f:c9:52:b2:6c:7f:bf:5c:a1:60:22:51:18:6c:54:c8: 23:30:02:7a:c1:70:cb:4a:7b:47:74:47:fb:a6:41:bf:a8:dd: eb:88:de:ab:27:91:5b:c8:1f:73:25:48:67:ef:a0:99:7f:14: 6f:e7:0b:f6:4b:5a:5a:a4:9c:cf:64:88:e3:e9:3b:9f:02:76: 68:bb:cb:9a:07:bf:66:72:9b:d3:63:35:a0:45:cd:15:1c:0a: 49:0a:d8:ec -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaUMexYyN/DYW8fgX3DZQleRs9egwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDIyMTk0NTE1WhcNMjUxMTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0BmMzYyZWQ2ODNkYjcyMjdhNmU1MjYzN2UxZWM1MGZmYmRi MDQ1M2I3ZGRmNTcxNDA5M2E1OGYxMWRkZDMxOTdmMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDMxCg5D1WkCzwZ95wq0AUAZeQMUnR7cr/rgdJ89pD3f7+f vOLL2rzm5Im8kguyRKmbf1mdg/sLelvdOp0pkgAjNwMLrTtait/qXu2rfWDLoTDc ORQbpqASAL3nhEXTR09EA/5s6DVCp/QY0abjz+hxgVviNAtddXT8AbX7DXhg2orp 7WerqX3R0yWv6yKOZMf/jAu1v0lYf1QIwbev4Xd8LJqq6u5+7UGBQ2YAirmRN2+e 98aLDjEHUQNDrfbVi/5Dz4/94+wqVz6xl7Q3LCSs/gPTBhLzVPaqcuHXSt954bik DTDwZmd5gC/gfzku/wshNprA+hFgb3alOTYO2mWNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKaY0eXyEEEpW7WEk+DkicT9deE0wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2Q5MWUxMjkwLTg5MDMtNDNiMC05ZmY1LWNmMThmN2UwNjkyMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHM9rAwDQYJKoZIhvcNAQELBQADggEBALL0s9nr6EW2Ocbrr3CUXD9//lsL pGguNuGo0/o5LqhxipqWOCJ3l6jpYe+sZBh990xgxy1AzAwlDhun1KYs2ptdQwg2 zr6v2xYzLJPRual8DWv4Itl4Uqb/ywx/KGHMSe7IZx11sVsz5fI3iZAO6v4MiBAC fw6cJYZhluPeouCMfCEfmTnnn2Bif2vP5qvLgXoRCAFPe9O3LKZ3Ho8c/hdpqH0K j8lSsmx/v1yhYCJRGGxUyCMwAnrBcMtKe0d0R/umQb+o3euI3qsnkVvIH3MlSGfv oJl/FG/nC/ZLWlqknM9kiOPpO58Cdmi7y5oHv2Zym9NjNaBFzRUcCkkK2Ow= -----END CERTIFICATE-----Generated at Wed Nov 5 10:42:19 2025 by rpki-client