$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0e380b09-55a0-48eb-8d67-10cd07bb93ca.roa File: 0e380b09-55a0-48eb-8d67-10cd07bb93ca.roa (raw, json) Hash identifier: WFWw0POZLzOohVKz1hKkjNjy3/1Z3XI5Y+Co20JZ7qk= Subject key identifier: FA:DA:8E:0C:59:76:29:2D:BE:73:8B:7D:0B:28:B7:FE:6E:5E:BD:80 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 2F2D47C258A8E95BCBDE95A245B66ADE0A8C6268 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0e380b09-55a0-48eb-8d67-10cd07bb93ca.roa Signing time: Thu 18 Sep 2025 19:52:45 +0000 ROA not before: Thu 18 Sep 2025 19:52:45 +0000 ROA not after: Thu 23 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 205.251.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:2d:47:c2:58:a8:e9:5b:cb:de:95:a2:45:b6:6a:de:0a:8c:62:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Sep 18 19:52:45 2025 GMT Not After : Oct 23 23:59:59 2025 GMT Subject: serialNumber=679b62241746743c1226fdf2757bc1e1c314936ee72fd2b77bb6db70ef993e13, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:01:12:75:22:8d:6b:8d:e4:73:39:bb:19:06: 7a:e7:de:ed:74:ab:7d:49:6a:3f:0f:23:a8:24:0d: b2:90:c3:99:46:ed:bf:02:e1:fd:4f:4f:49:97:d2: ab:a7:91:09:a2:88:5c:17:c9:48:3b:4f:e5:78:a1: f6:e2:9f:15:ad:52:b2:44:7d:67:e4:ec:15:32:a9: 11:8c:8c:a3:11:20:15:dd:6e:b1:03:a6:a1:c2:d9: cd:82:db:ea:31:cf:bc:22:b2:5c:3b:1a:ba:de:41: cb:cc:33:b4:59:3e:01:e0:7e:d4:47:1d:51:62:eb: bf:e6:1f:99:39:ae:fa:32:e2:72:76:65:7b:fa:c7: 5d:15:b8:c5:84:d2:76:85:7d:db:3f:6f:8e:66:0d: 32:03:23:7a:e2:56:0e:1c:f5:e2:4f:82:d1:e1:c6: b7:57:02:00:93:81:fa:f4:51:7b:cd:fd:64:d8:fa: 83:5b:58:5c:59:b2:63:c8:b2:79:a5:49:c5:ae:03: 39:1c:1a:cc:c9:cb:08:7b:0f:78:b2:5b:4f:d7:ea: f7:b3:1b:de:ca:0d:fe:e0:f3:3e:76:ca:11:dd:1b: a8:98:4a:5d:7d:6f:ac:75:f0:d3:0d:09:89:f0:50: 77:e2:9e:2a:99:a2:28:ec:84:1b:cc:32:f2:e7:fd: e9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:DA:8E:0C:59:76:29:2D:BE:73:8B:7D:0B:28:B7:FE:6E:5E:BD:80 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0e380b09-55a0-48eb-8d67-10cd07bb93ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 205.251.254.0/24 Signature Algorithm: sha256WithRSAEncryption 01:55:03:f3:33:2e:d3:3c:31:c3:13:0e:e9:c8:31:ff:c3:2d: 5c:e7:8b:36:20:e2:d3:a4:29:ea:f5:10:42:19:94:f5:6f:62: 74:dd:a4:e7:47:2d:6c:cb:be:23:32:7e:13:b0:00:f1:a0:d5: 9e:b4:e9:8a:9f:0a:9d:07:05:a5:3f:bd:f3:e2:d5:2e:36:ab: 45:53:01:8d:e6:3c:d8:10:81:1f:65:3b:62:ca:dd:61:06:69: 23:94:02:d9:9f:07:12:cb:78:13:99:9a:99:f9:3a:30:ef:74: 6d:70:ec:05:ef:20:13:f8:80:c0:b9:94:b6:b5:55:16:10:d6: 67:7b:8f:f7:81:00:5e:13:39:76:f7:6b:94:3e:b4:34:66:03: 9b:9e:d7:6c:06:41:8c:a9:2c:93:c2:24:5f:d6:5a:b8:3f:55: 0f:f0:06:04:cc:3e:c7:0c:bc:0e:65:a1:ec:0c:01:15:83:c0: 5d:28:09:50:69:e4:1d:f6:38:c6:b0:57:c5:f4:4d:4f:a1:1b: ac:2d:69:84:73:d4:c2:e8:2e:78:e5:9c:e0:03:0a:c6:4b:9f: 25:eb:74:08:3e:61:b6:a5:a6:bd:ef:78:90:df:a2:45:a1:55: e7:ce:07:89:89:0c:3f:69:c1:c0:b7:df:f4:7f:d7:42:8a:8e: c5:6f:52:ea -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULy1Hwlio6VvL3pWiRbZq3gqMYmgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUwOTE4MTk1MjQ1WhcNMjUxMDIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A2NzliNjIyNDE3NDY3NDNjMTIyNmZkZjI3NTdiYzFlMWMz MTQ5MzZlZTcyZmQyYjc3YmI2ZGI3MGVmOTkzZTEzMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCMARJ1Io1rjeRzObsZBnrn3u10q31Jaj8PI6gkDbKQw5lG 7b8C4f1PT0mX0qunkQmiiFwXyUg7T+V4ofbinxWtUrJEfWfk7BUyqRGMjKMRIBXd brEDpqHC2c2C2+oxz7wislw7GrreQcvMM7RZPgHgftRHHVFi67/mH5k5rvoy4nJ2 ZXv6x10VuMWE0naFfds/b45mDTIDI3riVg4c9eJPgtHhxrdXAgCTgfr0UXvN/WTY +oNbWFxZsmPIsnmlScWuAzkcGszJywh7D3iyW0/X6vezG97KDf7g8z52yhHdG6iY Sl19b6x18NMNCYnwUHfiniqZoijshBvMMvLn/endAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU+tqODFl2KS2+c4t9Cyi3/m5evYAwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzBlMzgwYjA5LTU1YTAtNDhlYi04ZDY3LTEwY2QwN2JiOTNjYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADN+/4wDQYJKoZIhvcNAQELBQADggEBAAFVA/MzLtM8McMTDunIMf/DLVzn izYg4tOkKer1EEIZlPVvYnTdpOdHLWzLviMyfhOwAPGg1Z606YqfCp0HBaU/vfPi 1S42q0VTAY3mPNgQgR9lO2LK3WEGaSOUAtmfBxLLeBOZmpn5OjDvdG1w7AXvIBP4 gMC5lLa1VRYQ1md7j/eBAF4TOXb3a5Q+tDRmA5ue12wGQYypLJPCJF/WWrg/VQ/w BgTMPscMvA5loewMARWDwF0oCVBp5B32OMawV8X0TU+hG6wtaYRz1MLoLnjlnOAD CsZLnyXrdAg+Ybalpr3veJDfokWhVefOB4mJDD9pwcC33/R/10KKjsVvUuo= -----END CERTIFICATE-----Generated at Fri Sep 19 04:38:12 2025 by rpki-client