$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4054d290-8b45-4dc7-983d-7b484ed738cb.roa File: 4054d290-8b45-4dc7-983d-7b484ed738cb.roa (raw, json) Hash identifier: B82pl4w1qVmXkaaY8KAhGHmCPKcFIH+hZ6IhXaROozQ= Subject key identifier: FD:D4:09:DC:84:A7:00:D9:13:B3:BA:A7:BA:2F:C2:B5:A6:F3:8A:DD Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 5F526B8DE9128E6E49A37CFDE13A084BEA8CB709 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4054d290-8b45-4dc7-983d-7b484ed738cb.roa Signing time: Thu 18 Sep 2025 19:40:01 +0000 ROA not before: Thu 18 Sep 2025 19:40:01 +0000 ROA not after: Thu 23 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 204.246.186.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:52:6b:8d:e9:12:8e:6e:49:a3:7c:fd:e1:3a:08:4b:ea:8c:b7:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Sep 18 19:40:01 2025 GMT Not After : Oct 23 23:59:59 2025 GMT Subject: serialNumber=29e132fde0e2fb83aad7be1f12a0cb4107ad50f774ac6ddc3231f05686da4388, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4f:e8:b5:2c:9e:e2:2c:3f:96:5c:16:03:d5: df:72:7b:c5:e1:ad:b5:14:f1:b6:89:d1:07:63:9a: 16:63:5b:c4:55:d7:86:a1:ea:e9:f2:d8:20:b4:70: bf:90:8e:59:04:25:ec:ec:ff:4c:52:70:e7:fc:ec: 65:5a:16:8e:fb:99:e9:4e:76:99:1e:5e:78:eb:52: c1:ef:ae:da:e7:85:b4:4f:03:e3:c1:8f:ba:94:43: 76:40:19:c3:ee:4f:cf:ff:25:16:f8:3c:d5:f8:2d: 81:70:92:6c:27:56:5b:30:25:1d:2e:24:a5:73:93: 24:60:57:dc:fd:ef:0b:5b:70:64:44:62:be:e7:f9: 0e:ba:fd:22:b3:2f:83:4d:bd:49:15:66:52:9e:96: c0:2e:6d:e0:cb:6d:54:fb:3b:e5:6d:95:c6:d2:c3: 2d:97:9c:23:9d:86:d2:71:a6:7c:39:67:45:7e:08: e8:38:9e:19:f5:fa:3e:70:02:94:4a:9b:85:7a:56: 0d:e2:1f:94:1e:bd:60:fa:cb:fb:c6:e9:3d:62:c8: d2:2f:19:7b:33:41:f4:e7:da:9a:a2:87:ab:e2:45: 00:34:43:20:de:e3:e5:7d:6a:4a:46:1e:ae:89:6f: 77:e8:5c:84:4d:85:89:cc:77:80:16:9a:7f:1f:a7: 70:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:D4:09:DC:84:A7:00:D9:13:B3:BA:A7:BA:2F:C2:B5:A6:F3:8A:DD X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4054d290-8b45-4dc7-983d-7b484ed738cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 204.246.186.0/23 Signature Algorithm: sha256WithRSAEncryption 37:ce:69:b9:4c:d5:a7:9d:7f:38:3a:c3:08:3c:91:a9:75:9b: 9d:aa:21:85:2a:1d:4e:9e:49:83:7b:08:f6:bb:ec:e3:cf:e1: 61:90:88:f8:e0:81:d8:59:e8:1e:9c:e9:3b:84:7c:64:44:0a: 01:bf:41:15:8f:2b:e5:f5:3d:93:79:61:dd:63:9d:09:b5:e1: 13:03:f1:08:2a:e3:6b:49:6f:66:79:82:4f:c2:16:83:af:62: 19:a5:b9:3c:65:e0:8d:ae:00:c8:17:ca:ae:ba:47:14:67:b6: 8d:86:10:fe:ed:65:7e:d6:71:46:bd:cd:72:ba:9c:41:82:88: 8c:d5:f9:07:32:da:97:05:58:0d:be:22:71:0d:74:f2:5d:0a: 5e:4f:79:49:d1:bc:24:d5:da:6e:42:7e:8d:e2:25:4e:cb:5e: 06:6e:1f:b3:41:0c:33:38:65:9a:6c:7d:33:3b:19:05:6d:b7: db:d0:d0:2f:3c:a5:5a:5a:a8:50:c5:a8:23:73:9c:01:4e:83: 22:23:ea:28:e3:d4:0a:14:fb:1d:e1:8d:e1:4d:be:ca:6e:4b: fd:4a:e1:7f:20:bf:89:1e:fb:40:bc:e7:57:b3:96:d2:fa:b0: 3b:93:3c:9c:2b:cb:e2:10:ec:66:a8:83:49:54:c9:86:20:e9: d1:be:f8:04 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUX1JrjekSjm5Jo3z94ToIS+qMtwkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUwOTE4MTk0MDAxWhcNMjUxMDIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AyOWUxMzJmZGUwZTJmYjgzYWFkN2JlMWYxMmEwY2I0MTA3 YWQ1MGY3NzRhYzZkZGMzMjMxZjA1Njg2ZGE0Mzg4MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7T+i1LJ7iLD+WXBYD1d9ye8XhrbUU8baJ0QdjmhZjW8RV 14ah6uny2CC0cL+QjlkEJezs/0xScOf87GVaFo77melOdpkeXnjrUsHvrtrnhbRP A+PBj7qUQ3ZAGcPuT8//JRb4PNX4LYFwkmwnVlswJR0uJKVzkyRgV9z97wtbcGRE Yr7n+Q66/SKzL4NNvUkVZlKelsAubeDLbVT7O+VtlcbSwy2XnCOdhtJxpnw5Z0V+ COg4nhn1+j5wApRKm4V6Vg3iH5QevWD6y/vG6T1iyNIvGXszQfTn2pqih6viRQA0 QyDe4+V9akpGHq6Jb3foXIRNhYnMd4AWmn8fp3CZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU/dQJ3ISnANkTs7qnui/Ctabzit0wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzQwNTRkMjkwLThiNDUtNGRjNy05ODNkLTdiNDg0ZWQ3MzhjYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHM9rowDQYJKoZIhvcNAQELBQADggEBADfOablM1aedfzg6wwg8kal1m52q IYUqHU6eSYN7CPa77OPP4WGQiPjggdhZ6B6c6TuEfGRECgG/QRWPK+X1PZN5Yd1j nQm14RMD8Qgq42tJb2Z5gk/CFoOvYhmluTxl4I2uAMgXyq66RxRnto2GEP7tZX7W cUa9zXK6nEGCiIzV+Qcy2pcFWA2+InENdPJdCl5PeUnRvCTV2m5Cfo3iJU7LXgZu H7NBDDM4ZZpsfTM7GQVtt9vQ0C88pVpaqFDFqCNznAFOgyIj6ijj1AoU+x3hjeFN vspuS/1K4X8gv4ke+0C851ezltL6sDuTPJwry+IQ7Gaog0lUyYYg6dG++AQ= -----END CERTIFICATE-----Generated at Fri Sep 19 04:38:03 2025 by rpki-client