$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/dab6c546-48c1-4c99-8ae5-e04c21f53289.roa File: dab6c546-48c1-4c99-8ae5-e04c21f53289.roa (raw, json) Hash identifier: 4i8F2WnaVm6namUagLDIy/ZK1NehNrApVaUEca43qmI= Subject key identifier: 5C:69:DE:47:0A:B9:21:9A:40:86:50:96:D6:8B:67:DD:0F:C1:B1:A8 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 20A3254863C48EA755F1AE08588EB49C441DFC1C Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/dab6c546-48c1-4c99-8ae5-e04c21f53289.roa Signing time: Wed 22 Oct 2025 19:45:13 +0000 ROA not before: Wed 22 Oct 2025 19:45:13 +0000 ROA not after: Wed 26 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 204.246.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:a3:25:48:63:c4:8e:a7:55:f1:ae:08:58:8e:b4:9c:44:1d:fc:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 22 19:45:13 2025 GMT Not After : Nov 26 23:59:59 2025 GMT Subject: serialNumber=3ba4a162077326d799f43716038e22bdae40a3ccb76474a28c8f365e1063c8c4, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a1:81:16:c6:04:61:66:fb:89:2d:2f:88:37: 88:4c:eb:01:64:e0:5b:f8:f6:e4:89:59:5c:5d:24: 9f:ba:fc:2c:85:43:d3:e1:d7:64:c6:38:b8:cd:45: 82:46:5b:78:41:02:bc:ad:2c:dc:36:b8:4a:d1:10: 0d:af:d6:b2:b6:65:aa:25:1d:63:d6:e8:be:44:26: a5:aa:a3:31:78:48:f5:f3:8e:78:b0:c7:fa:7c:16: 4e:65:fe:99:d2:37:de:e3:02:4a:b3:c3:94:a3:2a: bd:d4:e6:59:ed:74:03:36:0f:4c:25:71:b4:dd:8b: 56:17:cf:e7:f5:be:9e:91:6e:3c:b7:fd:fe:d7:55: 99:cf:c5:a9:9b:e7:56:02:72:93:47:35:25:bd:7b: 95:75:d8:89:0d:a7:9e:82:83:1c:4e:7d:1f:00:19: 1f:8b:a1:6e:fe:94:d1:7d:7a:be:fd:50:46:b5:df: ee:bb:f4:30:26:9c:8c:9d:72:07:74:7c:02:17:18: 0f:c7:ae:ed:e5:82:8a:b9:73:bc:cf:77:45:41:0d: bd:4d:6c:7e:6d:25:ed:95:17:8f:47:46:41:be:71: a9:c5:33:ee:a1:3b:e3:61:49:2c:81:17:b3:91:01: e5:26:5e:86:5d:e9:9b:03:f5:f6:06:60:df:2d:13: 2e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:69:DE:47:0A:B9:21:9A:40:86:50:96:D6:8B:67:DD:0F:C1:B1:A8 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/dab6c546-48c1-4c99-8ae5-e04c21f53289.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 204.246.188.0/22 Signature Algorithm: sha256WithRSAEncryption a7:9c:db:8c:00:53:2b:38:e4:24:b6:6a:63:34:e2:c5:99:7f: a0:43:57:c2:74:dc:a2:f2:fd:8d:a9:50:83:66:76:b8:70:5e: ca:96:73:03:8b:cf:e0:80:7c:ee:3c:92:64:39:51:9f:a1:2d: bd:09:03:81:0d:1e:92:64:36:be:ad:a9:66:ab:16:00:2a:ca: 4d:47:e3:08:53:d7:fb:1f:af:86:17:68:d8:71:e3:7f:a2:0b: b6:b7:c4:1d:0b:ce:26:9f:50:06:3f:8a:2c:0c:2e:80:3c:3e: 88:c4:2f:ad:70:3e:04:a3:87:76:06:8c:86:af:0a:60:03:b4: 2d:57:e1:a1:f4:18:38:58:cf:af:4e:72:72:dc:3f:b4:af:54: 26:bd:f1:44:7c:d3:5e:71:ef:01:46:e3:2d:73:31:ec:64:c4: ed:51:8e:bc:f1:1b:a2:c5:a2:6f:bb:cb:44:50:6d:cb:2d:6c: 1c:84:e9:67:60:b7:51:bb:dd:a5:00:2b:73:7e:d6:a0:71:ab: 68:f6:c3:51:e0:31:b5:e9:01:92:dd:c2:f7:50:ff:4a:05:df: 97:72:33:ce:0b:d1:cd:31:f5:ca:1e:1b:4c:20:75:89:3e:b8: 6f:18:e7:ca:ca:61:2b:94:1c:1b:b4:ce:39:6c:90:f0:20:ee: f8:15:ce:ca -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIKMlSGPEjqdV8a4IWI60nEQd/BwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDIyMTk0NTEzWhcNMjUxMTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0AzYmE0YTE2MjA3NzMyNmQ3OTlmNDM3MTYwMzhlMjJiZGFl NDBhM2NjYjc2NDc0YTI4YzhmMzY1ZTEwNjNjOGM0MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwoYEWxgRhZvuJLS+IN4hM6wFk4Fv49uSJWVxdJJ+6/CyF Q9Ph12TGOLjNRYJGW3hBArytLNw2uErREA2v1rK2ZaolHWPW6L5EJqWqozF4SPXz jniwx/p8Fk5l/pnSN97jAkqzw5SjKr3U5lntdAM2D0wlcbTdi1YXz+f1vp6Rbjy3 /f7XVZnPxamb51YCcpNHNSW9e5V12IkNp56CgxxOfR8AGR+LoW7+lNF9er79UEa1 3+679DAmnIydcgd0fAIXGA/Hru3lgoq5c7zPd0VBDb1NbH5tJe2VF49HRkG+canF M+6hO+NhSSyBF7ORAeUmXoZd6ZsD9fYGYN8tEy4FAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUXGneRwq5IZpAhlCW1otn3Q/BsagwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2RhYjZjNTQ2LTQ4YzEtNGM5OS04YWU1LWUwNGMyMWY1MzI4OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALM9rwwDQYJKoZIhvcNAQELBQADggEBAKec24wAUys45CS2amM04sWZf6BD V8J03KLy/Y2pUINmdrhwXsqWcwOLz+CAfO48kmQ5UZ+hLb0JA4ENHpJkNr6tqWar FgAqyk1H4whT1/sfr4YXaNhx43+iC7a3xB0LziafUAY/iiwMLoA8PojEL61wPgSj h3YGjIavCmADtC1X4aH0GDhYz69OcnLcP7SvVCa98UR8015x7wFG4y1zMexkxO1R jrzxG6LFom+7y0RQbcstbByE6Wdgt1G73aUAK3N+1qBxq2j2w1HgMbXpAZLdwvdQ /0oF35dyM84L0c0x9coeG0wgdYk+uG8Y58rKYSuUHBu0zjlskPAg7vgVzso= -----END CERTIFICATE-----Generated at Wed Nov 5 07:45:57 2025 by rpki-client