$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/12ef34a3-469d-44ab-acb9-bb6d82107971.roa File: 12ef34a3-469d-44ab-acb9-bb6d82107971.roa (raw, json) Hash identifier: FDCGu32Q0JIRLyw+uE+yzfdM0yHob4SPYJR3s736WyA= Subject key identifier: D1:4B:8F:84:C0:DF:AA:FE:D3:E8:4F:9A:B8:4B:72:4A:63:19:36:97 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 4BBE1C94FA0F162CD6C551C7BBEB1D0C7C66C394 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/12ef34a3-469d-44ab-acb9-bb6d82107971.roa Signing time: Fri 07 Nov 2025 01:10:14 +0000 ROA not before: Fri 07 Nov 2025 01:10:14 +0000 ROA not after: Fri 12 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 205.251.216.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:be:1c:94:fa:0f:16:2c:d6:c5:51:c7:bb:eb:1d:0c:7c:66:c3:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Nov 7 01:10:14 2025 GMT Not After : Dec 12 23:59:59 2025 GMT Subject: serialNumber=fc28d5465c93747aa503b0717b096962b64900a439a8b59f66a0b5c437058eea, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:6e:ff:cb:9c:4b:7a:70:83:e5:c0:9a:a6:75: 62:de:d6:8b:56:e5:86:23:71:f2:d0:fc:90:64:ca: 29:06:c1:fe:17:dd:86:e7:99:20:ba:df:d8:94:1a: 22:ab:b0:c7:7e:82:25:41:6c:99:fd:02:41:da:19: db:ba:58:dd:46:8d:9a:75:a2:78:e3:46:d7:f1:5f: 1e:2e:53:e8:57:ce:19:50:37:9d:48:12:0f:9e:4a: 26:27:0e:cd:8a:d7:bb:77:d9:df:00:4f:71:f3:20: 6d:ef:60:72:ce:55:f3:e6:9b:00:e5:d8:10:b2:78: 34:b7:30:71:39:ff:bc:82:6e:fe:6d:45:f2:e3:cc: 16:15:c4:cc:10:72:31:c9:4f:86:8c:02:4e:67:bb: c2:64:35:a3:6d:f9:b5:99:24:d6:9e:12:ef:90:11: 55:45:14:4e:79:f4:ad:b8:56:05:32:1a:ce:ed:a0: 16:52:15:dc:8a:16:3d:84:3b:d2:5f:89:28:ab:86: 54:a8:47:1f:6f:db:89:67:6f:7b:56:66:98:f5:50: a1:94:5d:a8:b8:2d:e8:b4:d2:59:cf:ab:19:ff:81: df:03:44:a9:f1:aa:04:68:33:d9:04:61:44:f7:72: ad:c3:17:16:88:7c:01:41:1b:cc:6c:09:03:31:b1: d7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:4B:8F:84:C0:DF:AA:FE:D3:E8:4F:9A:B8:4B:72:4A:63:19:36:97 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/12ef34a3-469d-44ab-acb9-bb6d82107971.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 205.251.216.0/23 Signature Algorithm: sha256WithRSAEncryption 11:47:b1:29:dc:9d:74:f8:df:19:b2:95:f3:21:36:1c:c8:25: 24:3c:a1:33:62:ff:aa:1a:81:57:3a:63:f5:d7:62:83:48:07: 4e:a6:ac:c1:3b:38:1e:f0:c6:fe:8c:b4:a5:1f:5c:b3:5a:fb: eb:6b:1e:1f:ba:37:1a:9b:20:ff:be:8c:c6:a8:62:a0:05:23: 42:8e:35:e9:80:16:9f:61:04:a2:f8:f9:c3:1f:b6:bb:a0:1c: 04:e0:44:da:da:3f:1a:d0:90:8e:29:ec:ae:4b:de:91:49:bc: 1e:98:5e:3e:bb:57:32:6f:26:ba:70:8f:40:d9:67:94:1b:4a: 39:5c:aa:1f:32:86:d1:5f:07:98:0f:bc:a7:7c:72:f9:2c:95: a4:b5:de:91:1d:f4:a5:2f:1b:c1:65:7b:57:b5:06:60:1d:1f: 8d:50:ad:33:b0:87:f2:a5:35:9d:c0:33:78:90:df:eb:9b:c1: a1:c1:a0:03:a9:f3:85:8f:8e:b8:99:52:57:1e:6a:8a:03:50: 13:c4:65:d4:a2:62:19:68:10:1a:58:46:de:4a:bf:b5:da:e7: 29:c8:d4:d0:81:a8:02:39:f3:ef:49:05:ac:9e:73:2e:7e:e6: ff:a1:2a:03:ce:29:26:37:2d:4b:94:07:64:1a:3f:91:0e:80: ad:5c:db:74 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUS74clPoPFizWxVHHu+sdDHxmw5QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMTA3MDExMDE0WhcNMjUxMjEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BmYzI4ZDU0NjVjOTM3NDdhYTUwM2IwNzE3YjA5Njk2MmI2 NDkwMGE0MzlhOGI1OWY2NmEwYjVjNDM3MDU4ZWVhMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDjbv/LnEt6cIPlwJqmdWLe1otW5YYjcfLQ/JBkyikGwf4X 3YbnmSC639iUGiKrsMd+giVBbJn9AkHaGdu6WN1GjZp1onjjRtfxXx4uU+hXzhlQ N51IEg+eSiYnDs2K17t32d8AT3HzIG3vYHLOVfPmmwDl2BCyeDS3MHE5/7yCbv5t RfLjzBYVxMwQcjHJT4aMAk5nu8JkNaNt+bWZJNaeEu+QEVVFFE559K24VgUyGs7t oBZSFdyKFj2EO9JfiSirhlSoRx9v24lnb3tWZpj1UKGUXai4Lei00lnPqxn/gd8D RKnxqgRoM9kEYUT3cq3DFxaIfAFBG8xsCQMxsdf5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU0UuPhMDfqv7T6E+auEtySmMZNpcwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzEyZWYzNGEzLTQ2OWQtNDRhYi1hY2I5LWJiNmQ4MjEwNzk3MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHN+9gwDQYJKoZIhvcNAQELBQADggEBABFHsSncnXT43xmylfMhNhzIJSQ8 oTNi/6oagVc6Y/XXYoNIB06mrME7OB7wxv6MtKUfXLNa++trHh+6NxqbIP++jMao YqAFI0KONemAFp9hBKL4+cMftrugHATgRNraPxrQkI4p7K5L3pFJvB6YXj67VzJv Jrpwj0DZZ5QbSjlcqh8yhtFfB5gPvKd8cvkslaS13pEd9KUvG8Fle1e1BmAdH41Q rTOwh/KlNZ3AM3iQ3+ubwaHBoAOp84WPjriZUlceaooDUBPEZdSiYhloEBpYRt5K v7Xa5ynI1NCBqAI58+9JBayecy5+5v+hKgPOKSY3LUuUB2QaP5EOgK1c23Q= -----END CERTIFICATE-----Generated at Tue Nov 18 09:36:55 2025 by rpki-client