$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3268998f-a34f-4aa7-928f-c9a14bc35650.roa File: 3268998f-a34f-4aa7-928f-c9a14bc35650.roa (raw, json) Hash identifier: XmOaPVJH7zJW/gDCgaPO/wVwGOtjwi1JN4mFt2L2/I8= Subject key identifier: 52:E9:A4:A5:B5:D2:88:EE:2A:3B:4D:20:EF:CE:2C:BE:ED:9A:90:3F Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 1FBDABEB37A63581793EBF2E41E839F4D0C87E55 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3268998f-a34f-4aa7-928f-c9a14bc35650.roa Signing time: Thu 18 Sep 2025 19:57:33 +0000 ROA not before: Thu 18 Sep 2025 19:57:33 +0000 ROA not after: Thu 23 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 216.137.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:bd:ab:eb:37:a6:35:81:79:3e:bf:2e:41:e8:39:f4:d0:c8:7e:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Sep 18 19:57:33 2025 GMT Not After : Oct 23 23:59:59 2025 GMT Subject: serialNumber=489e4d0be35e511472cac4ea64efc1842d5b30e8f829b4f1a5cdd34ae12c5f8a, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c1:7b:a3:8b:e1:8e:b4:ed:36:4d:ab:f8:e1: 26:63:de:42:44:d7:ac:2d:9d:52:d7:00:19:82:5c: 18:f5:a6:19:fc:99:6a:5b:d0:77:4e:67:59:8d:a7: 43:12:86:b5:34:39:e2:b8:82:25:64:27:59:71:7e: fa:a2:04:4c:d5:90:b9:65:84:37:14:c9:e7:ec:ed: 09:ee:57:38:20:c3:83:f7:31:21:99:ef:3a:bf:1d: 73:18:41:70:ba:34:fe:9b:84:08:8a:3e:c2:d8:86: 34:17:fc:72:2a:84:91:c0:16:34:ed:62:0d:4e:bb: e9:27:b7:4b:4c:f5:0f:f2:24:61:60:96:55:61:dc: 33:d4:ab:10:62:ca:fe:1f:d8:b9:0f:00:e4:9a:cb: 52:84:e7:b0:4e:58:fd:be:13:e6:75:71:8b:c6:3f: c4:f9:c3:e8:2b:f2:88:7b:59:10:e6:c4:aa:1c:6d: 72:64:dc:08:04:7c:64:cb:ec:e0:da:9f:ed:3c:51: 4b:4f:75:9b:58:78:bd:c7:af:99:f1:42:47:86:76: 76:b8:71:8d:b7:05:e7:0a:59:bd:8a:7a:12:7c:80: 49:35:cf:4b:e6:5f:b5:c7:22:e2:51:cc:92:c7:57: f8:6a:c8:06:95:de:50:9a:8f:6c:2a:5e:53:4e:a5: 3d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:E9:A4:A5:B5:D2:88:EE:2A:3B:4D:20:EF:CE:2C:BE:ED:9A:90:3F X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3268998f-a34f-4aa7-928f-c9a14bc35650.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.137.48.0/22 Signature Algorithm: sha256WithRSAEncryption 49:8d:b8:d5:34:0f:9b:de:25:f4:6b:fe:4c:ee:f0:07:38:9e: 9c:aa:ed:1d:dc:72:e2:b3:9d:d4:d2:94:e9:e2:e1:73:97:64: 06:06:65:a4:ca:c0:a9:2e:ff:0c:cb:a8:1a:62:e4:b4:f3:f7: a9:89:41:0a:26:e4:ef:7b:27:2a:27:f2:f3:d8:f8:1b:ff:91: 84:b7:22:fe:90:2c:f0:03:ba:c7:60:bb:31:e1:0f:22:c3:6b: 5f:4f:ab:4d:17:a8:e4:a1:fb:bf:cb:60:4a:88:9e:ab:d3:35: 38:c7:78:86:6c:89:8e:90:bc:a8:da:08:ee:59:a9:5e:ea:e9: 52:6d:65:6e:0a:3d:0e:c3:15:da:ea:67:85:1e:6e:51:62:48: 3a:c5:b8:0a:6c:08:ec:23:d9:5d:c6:82:9b:b0:46:88:a3:5e: ba:ee:ce:3e:ba:cc:5e:aa:ee:d4:1b:86:55:8a:0f:09:2f:34: 85:9c:02:ce:77:db:ea:39:fe:79:88:6b:8f:a1:b6:25:05:01: e4:b3:55:45:30:3c:2e:1c:b8:88:09:95:90:54:19:f0:07:87: 86:22:29:52:0f:7e:48:ae:44:80:7b:89:eb:ba:96:8b:94:ee: 68:a6:6f:03:89:af:d7:2c:30:51:8d:4f:40:60:da:32:94:72: 85:e9:8a:b0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUH72r6zemNYF5Pr8uQeg59NDIflUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUwOTE4MTk1NzMzWhcNMjUxMDIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A0ODllNGQwYmUzNWU1MTE0NzJjYWM0ZWE2NGVmYzE4NDJk NWIzMGU4ZjgyOWI0ZjFhNWNkZDM0YWUxMmM1ZjhhMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfwXuji+GOtO02Tav44SZj3kJE16wtnVLXABmCXBj1phn8 mWpb0HdOZ1mNp0MShrU0OeK4giVkJ1lxfvqiBEzVkLllhDcUyefs7QnuVzggw4P3 MSGZ7zq/HXMYQXC6NP6bhAiKPsLYhjQX/HIqhJHAFjTtYg1Ou+knt0tM9Q/yJGFg llVh3DPUqxBiyv4f2LkPAOSay1KE57BOWP2+E+Z1cYvGP8T5w+gr8oh7WRDmxKoc bXJk3AgEfGTL7ODan+08UUtPdZtYeL3Hr5nxQkeGdna4cY23BecKWb2KehJ8gEk1 z0vmX7XHIuJRzJLHV/hqyAaV3lCaj2wqXlNOpT0JAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUUumkpbXSiO4qO00g784svu2akD8wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzMyNjg5OThmLWEzNGYtNGFhNy05MjhmLWM5YTE0YmMzNTY1MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALYiTAwDQYJKoZIhvcNAQELBQADggEBAEmNuNU0D5veJfRr/kzu8Ac4npyq 7R3ccuKzndTSlOni4XOXZAYGZaTKwKku/wzLqBpi5LTz96mJQQom5O97Jyon8vPY +Bv/kYS3Iv6QLPADusdguzHhDyLDa19Pq00XqOSh+7/LYEqInqvTNTjHeIZsiY6Q vKjaCO5ZqV7q6VJtZW4KPQ7DFdrqZ4UeblFiSDrFuApsCOwj2V3GgpuwRoijXrru zj66zF6q7tQbhlWKDwkvNIWcAs532+o5/nmIa4+htiUFAeSzVUUwPC4cuIgJlZBU GfAHh4YiKVIPfkiuRIB7ieu6louU7mimbwOJr9csMFGNT0Bg2jKUcoXpirA= -----END CERTIFICATE-----Generated at Fri Sep 19 04:35:53 2025 by rpki-client