$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3e01b0ad-8b16-4d93-9745-66f15bd867fc.roa File: 3e01b0ad-8b16-4d93-9745-66f15bd867fc.roa (raw, json) Hash identifier: cRHYFyajqeJrOe9C/AIz02+e73KFVimfY3ytI/1lXGw= Subject key identifier: BB:43:4B:4A:0F:46:71:CC:9C:D5:99:AD:42:27:D4:A5:77:05:84:84 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 789FD617B4324B06611E4459BB7CB1AA55AECB0F Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3e01b0ad-8b16-4d93-9745-66f15bd867fc.roa Signing time: Thu 18 Sep 2025 19:56:12 +0000 ROA not before: Thu 18 Sep 2025 19:56:12 +0000 ROA not after: Thu 23 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 216.137.34.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:9f:d6:17:b4:32:4b:06:61:1e:44:59:bb:7c:b1:aa:55:ae:cb:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Sep 18 19:56:12 2025 GMT Not After : Oct 23 23:59:59 2025 GMT Subject: serialNumber=f7a9f89c02c8a22a66f5a525cec6a11a551c0efe89962bbfe6ce78fb6f113e50, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:03:2e:c3:e9:46:b8:2e:69:71:e7:58:88:91: f4:98:c7:49:9b:b7:25:8b:61:fe:c1:c8:31:13:aa: 56:b1:94:e6:2e:46:ba:f0:b7:9f:bb:21:6a:45:39: 72:29:c2:7c:ec:21:1e:58:4d:87:7f:b8:85:90:39: 83:d4:f5:0d:b9:2a:c0:11:0c:59:8e:38:10:f3:a1: 63:19:3b:9e:c5:77:11:2f:bf:b8:17:d9:37:f0:05: ee:4b:7d:18:b3:61:ce:9a:85:ac:60:17:79:75:d2: 23:02:77:34:70:ce:23:82:dd:45:54:62:53:2c:b6: f6:5f:ed:d7:17:b2:cd:61:86:71:3b:aa:c8:d6:e5: 7c:53:2d:71:fb:af:0c:91:f3:87:1f:47:dc:97:4d: 55:92:cd:33:80:d5:44:8d:ee:bc:65:db:85:5d:bd: 5a:be:f0:c1:2e:20:ee:1f:a4:b9:47:ee:8f:b6:b5: a4:e8:84:b9:45:0f:33:a6:9e:82:e7:b1:2d:58:e6: 36:11:c5:41:69:bf:2b:a3:2f:c6:63:c4:b3:f1:6c: a6:e1:ea:1d:d9:c0:33:2e:62:00:c2:fb:bf:7c:f7: 7f:3c:1b:87:cf:c9:72:c2:74:ef:9b:59:3e:2a:81: 58:d4:90:80:df:e6:78:08:e6:58:ef:c9:c3:98:14: 08:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:43:4B:4A:0F:46:71:CC:9C:D5:99:AD:42:27:D4:A5:77:05:84:84 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3e01b0ad-8b16-4d93-9745-66f15bd867fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.137.34.0/23 Signature Algorithm: sha256WithRSAEncryption 89:39:3a:fe:21:42:46:d8:1b:da:db:27:59:2a:2d:35:e9:fd: ea:5c:fd:55:9b:27:6f:a4:e1:63:1c:5c:40:03:c4:ff:2d:64: ef:4c:53:bc:fe:95:d7:70:56:e2:8e:18:e8:c3:9b:b1:68:c5: 2a:57:65:18:81:76:bf:99:f3:4d:f5:a5:69:73:ea:99:0e:3c: 6f:08:ef:e7:59:ba:6d:b3:9e:6d:97:6a:b8:0c:4f:a8:71:bb: 7c:a6:c8:57:1e:79:4c:5e:59:4a:d2:f3:e7:0d:be:bc:a2:f4: ed:01:6e:92:07:bf:55:e0:2e:35:d7:0c:a6:98:5f:6c:75:d0: 8b:51:de:8a:58:c4:f7:76:a0:b8:60:8a:d2:35:7a:28:07:e4: b7:08:1b:fc:e1:fc:b8:a9:22:e1:0c:52:a7:0f:c0:25:56:8e: e5:04:a8:ad:5a:3c:5c:71:b6:72:84:b2:33:28:6d:1d:6d:3a: 5f:ac:4b:91:c0:8f:aa:7d:6a:0c:6a:00:40:58:36:ed:d9:79: cd:83:48:95:8e:63:8f:0a:80:e2:9c:06:0a:12:b4:37:af:4a: 9b:f7:aa:1d:dc:fd:d6:14:87:61:17:42:c0:21:c8:03:2d:a5: 0a:fa:96:d4:3b:53:61:f3:e5:a0:24:b7:73:f7:fb:4e:ff:2e: c0:2d:61:b7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUeJ/WF7QySwZhHkRZu3yxqlWuyw8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUwOTE4MTk1NjEyWhcNMjUxMDIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BmN2E5Zjg5YzAyYzhhMjJhNjZmNWE1MjVjZWM2YTExYTU1 MWMwZWZlODk5NjJiYmZlNmNlNzhmYjZmMTEzZTUwMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3Ay7D6Ua4Lmlx51iIkfSYx0mbtyWLYf7ByDETqlaxlOYu Rrrwt5+7IWpFOXIpwnzsIR5YTYd/uIWQOYPU9Q25KsARDFmOOBDzoWMZO57FdxEv v7gX2TfwBe5LfRizYc6ahaxgF3l10iMCdzRwziOC3UVUYlMstvZf7dcXss1hhnE7 qsjW5XxTLXH7rwyR84cfR9yXTVWSzTOA1USN7rxl24VdvVq+8MEuIO4fpLlH7o+2 taTohLlFDzOmnoLnsS1Y5jYRxUFpvyujL8ZjxLPxbKbh6h3ZwDMuYgDC+7989388 G4fPyXLCdO+bWT4qgVjUkIDf5ngI5ljvycOYFAjJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUu0NLSg9Gccyc1ZmtQifUpXcFhIQwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzNlMDFiMGFkLThiMTYtNGQ5My05NzQ1LTY2ZjE1YmQ4NjdmYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHYiSIwDQYJKoZIhvcNAQELBQADggEBAIk5Ov4hQkbYG9rbJ1kqLTXp/epc /VWbJ2+k4WMcXEADxP8tZO9MU7z+lddwVuKOGOjDm7FoxSpXZRiBdr+Z8031pWlz 6pkOPG8I7+dZum2znm2XargMT6hxu3ymyFceeUxeWUrS8+cNvryi9O0BbpIHv1Xg LjXXDKaYX2x10ItR3opYxPd2oLhgitI1eigH5LcIG/zh/LipIuEMUqcPwCVWjuUE qK1aPFxxtnKEsjMobR1tOl+sS5HAj6p9agxqAEBYNu3Zec2DSJWOY48KgOKcBgoS tDevSpv3qh3c/dYUh2EXQsAhyAMtpQr6ltQ7U2Hz5aAkt3P3+07/LsAtYbc= -----END CERTIFICATE-----Generated at Fri Sep 19 03:16:22 2025 by rpki-client