$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/9410b7d2-baa7-4841-a665-55298df4e7b6.roa File: 9410b7d2-baa7-4841-a665-55298df4e7b6.roa (raw, json) Hash identifier: z1Cssd4eYY9gsRtEKITRSG8sAbP6HWfZcTQBFyvvCkI= Subject key identifier: F7:00:5D:14:A7:8F:E5:C0:93:BF:01:31:0C:FF:4A:0F:17:5B:62:20 Certificate issuer: /CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Certificate serial: 01C7C2452D34E6D5E7A6E296EAB445B794600067 Authority key identifier: CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/9410b7d2-baa7-4841-a665-55298df4e7b6.roa Signing time: Tue 23 Sep 2025 00:10:12 +0000 ROA not before: Tue 23 Sep 2025 00:10:12 +0000 ROA not after: Tue 28 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 198.41.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:c7:c2:45:2d:34:e6:d5:e7:a6:e2:96:ea:b4:45:b7:94:60:00:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Validity Not Before: Sep 23 00:10:12 2025 GMT Not After : Oct 28 23:59:59 2025 GMT Subject: serialNumber=b58ec34e38ddb1254c526dbe20a5debca1b49d5bbdb08babb650c2827454b969, CN=88af7b95-2ef7-49fc-a37d-1b8f0547180d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8e:76:ed:e2:f8:2c:ea:76:f8:71:cd:f4:30: c7:67:bc:70:5f:43:60:51:8d:fc:90:eb:ad:c7:d4: c9:34:74:6b:cc:61:08:a0:62:f9:85:c7:1e:85:10: 37:01:d6:10:d7:5e:c3:53:15:10:21:d8:b8:14:21: 17:54:cc:58:23:d7:d1:92:c8:6e:71:1b:fa:7f:33: d2:55:83:c8:69:e1:58:0d:74:cd:2b:49:00:5a:8c: 59:e7:b9:75:63:6d:15:12:8f:b8:cd:9f:9c:7c:ea: 47:2b:4a:5e:4f:a5:2b:be:2e:17:9f:b0:fb:00:07: cd:77:d2:e2:43:8f:b3:6c:c6:bb:3b:b4:31:82:30: ac:d6:ae:ac:3d:8f:51:95:50:c3:00:18:11:5f:fe: 48:c0:4e:07:b1:59:90:05:2c:6c:ad:82:f5:cc:7c: 57:e2:15:c1:d6:af:0d:5f:c1:48:37:fc:21:ee:98: 70:d0:40:3f:5a:2d:52:5f:1e:b8:ab:cb:23:07:d4: 69:97:91:cb:4d:bf:60:29:3d:59:ba:33:9c:4f:27: ed:6c:c9:84:9d:d2:4f:81:b5:3b:27:b3:24:b4:85: ab:b0:d5:50:5f:1b:22:18:06:f3:07:a0:48:26:dc: 96:73:71:41:b8:28:9f:c6:50:84:8d:c8:97:48:08: e9:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:00:5D:14:A7:8F:E5:C0:93:BF:01:31:0C:FF:4A:0F:17:5B:62:20 X509v3 Authority Key Identifier: keyid:CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/9410b7d2-baa7-4841-a665-55298df4e7b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.41.97.0/24 Signature Algorithm: sha256WithRSAEncryption 72:86:c7:bf:af:dd:b3:17:d8:41:60:e7:81:af:6c:d7:dd:ef: 8c:8e:c5:56:f8:de:67:ec:f1:c0:67:24:dd:28:30:1d:bf:86: bb:b2:9a:1d:1e:ca:36:7e:bb:9f:d5:6c:71:95:61:4a:73:ff: f4:2b:67:d6:c5:b3:ca:30:88:91:3c:e6:8e:47:9e:54:65:0f: 0d:7b:06:6a:ef:4f:49:8b:fb:8a:7e:2b:2a:64:83:b6:69:68: 9d:61:9b:d4:05:66:fb:76:fa:92:85:f6:ef:06:61:d8:ba:3a: c6:c3:fa:d7:49:63:b4:4a:09:2f:7f:6b:eb:7f:a2:8e:6a:b6: c3:d7:2d:00:f7:5b:62:90:d4:f3:0c:dc:4a:17:cb:19:62:96: 94:8f:e1:4e:76:79:ee:90:a0:98:0c:3a:da:d0:f5:02:d4:f2: 43:0f:88:83:4e:e9:16:9f:4a:37:8a:d9:60:29:96:5b:94:82: 9e:a4:4d:9d:a4:db:d0:19:a9:ac:71:4c:1f:64:4e:ea:78:b3: 98:0a:3a:ad:d8:aa:51:18:99:4f:65:03:46:6c:fe:0b:c3:d5: e8:ac:cc:3a:6c:c4:44:16:57:ce:bc:25:50:dd:c7:a4:57:83: 7f:d9:d5:44:29:b7:b4:72:2d:51:e5:26:21:e5:2d:51:43:2d: 00:82:f1:27 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAcfCRS005tXnpuKW6rRFt5RgAGcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzMxOTQyNGUwMzlmODZkNmFkOWZjNGU3MjIzZGY4NDFk MjBhZTZkMGZmMTI0MjgxNzMwHhcNMjUwOTIzMDAxMDEyWhcNMjUxMDI4MjM1OTU5 WjB6MUkwRwYDVQQFE0BiNThlYzM0ZTM4ZGRiMTI1NGM1MjZkYmUyMGE1ZGViY2Ex YjQ5ZDViYmRiMDhiYWJiNjUwYzI4Mjc0NTRiOTY5MS0wKwYDVQQDEyQ4OGFmN2I5 NS0yZWY3LTQ5ZmMtYTM3ZC0xYjhmMDU0NzE4MGQwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtjnbt4vgs6nb4cc30MMdnvHBfQ2BRjfyQ663H1Mk0dGvM YQigYvmFxx6FEDcB1hDXXsNTFRAh2LgUIRdUzFgj19GSyG5xG/p/M9JVg8hp4VgN dM0rSQBajFnnuXVjbRUSj7jNn5x86kcrSl5PpSu+LhefsPsAB8130uJDj7Nsxrs7 tDGCMKzWrqw9j1GVUMMAGBFf/kjATgexWZAFLGytgvXMfFfiFcHWrw1fwUg3/CHu mHDQQD9aLVJfHriryyMH1GmXkctNv2ApPVm6M5xPJ+1syYSd0k+BtTsnsyS0hauw 1VBfGyIYBvMHoEgm3JZzcUG4KJ/GUISNyJdICOmPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU9wBdFKeP5cCTvwExDP9KDxdbYiAwHwYDVR0jBBgwFoAUzBBhJz//dj92 0t7ihYPoujsFxDAwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lNWRlYTY2MC1i ZjU5LTRiNGMtYjlhZC00YTY3ODdlMDNmY2UvYzMxOTQyNGUwMzlmODZkNmFkOWZj NGU3MjIzZGY4NDFkMjBhZTZkMGZmMTI0MjgxNzMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmRmNTFjZDItZTZhZi00OTNhLWE4OGEtMzIy MWQwMWY3ZDkwLzk0MTBiN2QyLWJhYTctNDg0MS1hNjY1LTU1Mjk4ZGY0ZTdiNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJkZjUxY2QyLWU2YWYtNDkzYS1hODhh LTMyMjFkMDFmN2Q5MC9uNGJXclpfRTV5STktRUhTQ3ViUV94SkNnWE0uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADGKWEwDQYJKoZIhvcNAQELBQADggEBAHKGx7+v3bMX2EFg54GvbNfd74yO xVb43mfs8cBnJN0oMB2/hruymh0eyjZ+u5/VbHGVYUpz//QrZ9bFs8owiJE85o5H nlRlDw17BmrvT0mL+4p+Kypkg7ZpaJ1hm9QFZvt2+pKF9u8GYdi6OsbD+tdJY7RK CS9/a+t/oo5qtsPXLQD3W2KQ1PMM3EoXyxlilpSP4U52ee6QoJgMOtrQ9QLU8kMP iINO6RafSjeK2WAplluUgp6kTZ2k29AZqaxxTB9kTup4s5gKOq3YqlEYmU9lA0Zs /gvD1eiszDpsxEQWV868JVDdx6RXg3/Z1UQpt7RyLVHlJiHlLVFDLQCC8Sc= -----END CERTIFICATE-----Generated at Wed Oct 8 21:17:19 2025 by rpki-client