$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/08a4d930-92e2-49e2-a50d-98ce0fc5b33c.roa File: 08a4d930-92e2-49e2-a50d-98ce0fc5b33c.roa (raw, json) Hash identifier: 9KlGUuYJQhmFCKDmmdn7lm3WahIThXlQhcLB5S+iK6w= Subject key identifier: 10:1A:18:35:93:61:7E:CB:F0:07:78:2A:EC:68:CA:01:A0:AE:F6:EE Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 1074FB805E637B15BC3BC84CF29E872C72FDD355 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/08a4d930-92e2-49e2-a50d-98ce0fc5b33c.roa Signing time: Thu 18 Sep 2025 19:55:55 +0000 ROA not before: Thu 18 Sep 2025 19:55:55 +0000 ROA not after: Thu 23 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 216.137.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:74:fb:80:5e:63:7b:15:bc:3b:c8:4c:f2:9e:87:2c:72:fd:d3:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Sep 18 19:55:55 2025 GMT Not After : Oct 23 23:59:59 2025 GMT Subject: serialNumber=01545d887bb87e2efd0883438ebabbeed95617c447d3c07912ec1ac4e5c52b4d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:7c:ee:be:b2:0d:52:c5:16:b5:29:5f:d9:8d: 49:3c:6e:f3:0b:15:88:0c:92:b5:37:81:70:ee:1c: 3e:0b:2c:2e:91:79:cc:d6:bb:5b:ca:c7:dc:5c:3a: 4c:3b:64:e8:cd:84:82:e9:95:b4:0e:56:b2:ce:5b: 4b:67:e3:2a:63:da:ea:46:c1:20:ee:f0:aa:bd:52: 3a:36:ae:41:93:27:f0:cb:6f:a4:95:42:74:62:b0: 85:db:9c:27:13:ed:c8:aa:4d:f8:88:29:2a:a5:f9: ea:16:6c:85:bb:91:81:2d:4e:01:f8:ee:4c:ce:29: 6c:06:31:b7:68:1a:aa:57:f2:b3:78:d7:24:45:55: e9:14:28:b2:e3:36:bc:e2:4c:c2:ec:6a:f8:10:37: 1d:ab:97:16:76:4f:69:05:a6:7b:53:f0:3b:fc:37: 64:c6:d2:4d:69:f9:e0:50:cb:b8:51:0a:4a:b4:08: e6:d7:72:29:aa:f1:72:77:d9:04:d9:e2:a5:89:9c: c6:ec:ff:1e:87:02:ed:e3:f4:78:f0:23:57:10:aa: 74:2d:5b:02:28:ad:d5:08:83:47:76:8d:05:0b:3e: 37:09:6b:3c:68:f8:9f:bc:5f:00:e5:3e:01:2f:26: 9f:62:8f:f6:a3:11:12:e3:8e:19:23:8f:03:ea:59: cd:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:1A:18:35:93:61:7E:CB:F0:07:78:2A:EC:68:CA:01:A0:AE:F6:EE X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/08a4d930-92e2-49e2-a50d-98ce0fc5b33c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.137.39.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:b6:60:6e:c6:73:69:10:23:a7:b4:96:63:d2:eb:54:71:d0: 63:bb:48:2d:5f:8e:5e:b4:00:0f:ec:48:4e:18:27:3b:76:5f: f5:06:8a:d4:bb:f7:2f:08:92:c4:da:7d:01:20:28:53:be:33: 14:1b:4f:6e:02:e1:78:89:55:34:17:e8:ed:14:0c:ee:fe:75: fb:9e:18:98:e0:8b:ea:2d:a9:58:08:62:f5:8e:ed:1f:09:a9: 6d:6e:c5:2e:19:07:6a:93:a3:8d:e6:e0:27:2c:e6:9e:fe:9c: 18:57:0d:c0:95:6a:19:80:39:db:95:4d:1c:ca:83:b7:c5:db: 33:00:ee:a4:5f:0d:c9:a5:7e:58:62:17:90:d8:5e:be:e4:59: ed:8a:6f:bf:43:79:30:41:19:7e:b7:75:9c:0a:59:fd:55:99: 76:74:60:77:37:93:02:1f:a6:85:b3:5a:fa:0d:ce:4d:f5:14: 63:b7:84:b0:9b:88:e8:22:b0:1d:e9:9e:c0:97:73:19:65:d8: f1:c7:57:4e:66:20:01:dd:30:f5:8c:73:6c:6b:39:b3:3b:93: 4c:68:a7:b3:b6:a3:45:5c:2b:d0:9c:7d:d3:f1:32:f1:84:25: 59:0f:58:2a:e2:3f:b0:63:8c:6f:90:8c:ee:8b:4c:70:a6:2e: 4e:01:a9:ee -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEHT7gF5jexW8O8hM8p6HLHL901UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUwOTE4MTk1NTU1WhcNMjUxMDIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AwMTU0NWQ4ODdiYjg3ZTJlZmQwODgzNDM4ZWJhYmJlZWQ5 NTYxN2M0NDdkM2MwNzkxMmVjMWFjNGU1YzUyYjRkMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCMfO6+sg1SxRa1KV/ZjUk8bvMLFYgMkrU3gXDuHD4LLC6R eczWu1vKx9xcOkw7ZOjNhILplbQOVrLOW0tn4ypj2upGwSDu8Kq9Ujo2rkGTJ/DL b6SVQnRisIXbnCcT7ciqTfiIKSql+eoWbIW7kYEtTgH47kzOKWwGMbdoGqpX8rN4 1yRFVekUKLLjNrziTMLsavgQNx2rlxZ2T2kFpntT8Dv8N2TG0k1p+eBQy7hRCkq0 CObXcimq8XJ32QTZ4qWJnMbs/x6HAu3j9HjwI1cQqnQtWwIordUIg0d2jQULPjcJ azxo+J+8XwDlPgEvJp9ij/ajERLjjhkjjwPqWc3nAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUEBoYNZNhfsvwB3gq7GjKAaCu9u4wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzA4YTRkOTMwLTkyZTItNDllMi1hNTBkLTk4Y2UwZmM1YjMzYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADYiScwDQYJKoZIhvcNAQELBQADggEBAI62YG7Gc2kQI6e0lmPS61Rx0GO7 SC1fjl60AA/sSE4YJzt2X/UGitS79y8IksTafQEgKFO+MxQbT24C4XiJVTQX6O0U DO7+dfueGJjgi+otqVgIYvWO7R8JqW1uxS4ZB2qTo43m4Ccs5p7+nBhXDcCVahmA OduVTRzKg7fF2zMA7qRfDcmlflhiF5DYXr7kWe2Kb79DeTBBGX63dZwKWf1VmXZ0 YHc3kwIfpoWzWvoNzk31FGO3hLCbiOgisB3pnsCXcxll2PHHV05mIAHdMPWMc2xr ObM7k0xop7O2o0VcK9CcfdPxMvGEJVkPWCriP7BjjG+QjO6LTHCmLk4Bqe4= -----END CERTIFICATE-----Generated at Fri Sep 19 11:15:06 2025 by rpki-client