$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5c4acb8d-b200-4c99-a57a-c40435b1b115.roa File: 5c4acb8d-b200-4c99-a57a-c40435b1b115.roa (raw, json) Hash identifier: T1u5RSuc+fGuMUsYtik2VbPZey0yaJXmwwTh6k33sWA= Subject key identifier: 88:E6:7A:9D:4B:DE:4B:5A:BE:DA:86:C7:0C:5F:30:FF:05:A2:C3:DB Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 49B33D2E43516753D68FDC64EE930EFFB74A01D2 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5c4acb8d-b200-4c99-a57a-c40435b1b115.roa Signing time: Thu 18 Sep 2025 19:52:20 +0000 ROA not before: Thu 18 Sep 2025 19:52:20 +0000 ROA not after: Thu 23 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 205.251.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:b3:3d:2e:43:51:67:53:d6:8f:dc:64:ee:93:0e:ff:b7:4a:01:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Sep 18 19:52:20 2025 GMT Not After : Oct 23 23:59:59 2025 GMT Subject: serialNumber=a77e55913407cedf9170c236f1d0fac16ad42360ac42ee60da35da7ba368302a, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:92:3f:ac:28:ae:31:c1:63:f3:49:c0:4a:80: 8c:90:1b:ae:2a:92:ca:cd:87:b4:cf:7b:a7:2c:52: 33:ae:96:5c:1f:18:70:08:af:14:a9:d8:3b:9d:3b: 5e:b1:33:5d:f0:ea:60:71:2a:80:21:b9:8e:38:6f: f8:27:fd:46:24:8c:d3:bb:72:b0:37:ac:37:72:19: 21:9c:99:c6:3e:28:e2:21:d0:63:5f:17:85:b8:e7: 21:2a:70:83:b6:f8:4f:c5:c4:23:38:68:4b:b6:e7: 63:88:ab:5c:84:be:0f:ed:41:a3:3c:59:90:68:f2: 06:18:a2:03:ff:69:94:fa:31:cf:c6:57:03:e9:5e: 22:f9:1d:b0:9a:5a:b3:fd:fc:45:a5:0b:dc:56:19: 9c:8b:3f:1e:90:2e:2f:d5:bc:bd:e6:1e:8b:08:ce: 9d:a1:3f:7a:01:13:d1:b2:bf:d2:53:05:15:83:2f: 01:aa:9c:b6:dd:ae:39:3b:c5:0e:f0:fb:66:52:9f: 90:38:3e:69:76:03:f9:25:e8:7f:98:a9:66:e5:55: 7b:56:f4:69:33:61:56:e4:37:26:69:df:93:b8:82: af:2f:a0:bd:6c:d7:7d:e0:4f:59:0a:d4:e4:39:8a: af:2c:1e:a2:17:6d:f7:d6:65:a5:8e:5a:2b:77:6d: f0:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:E6:7A:9D:4B:DE:4B:5A:BE:DA:86:C7:0C:5F:30:FF:05:A2:C3:DB X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5c4acb8d-b200-4c99-a57a-c40435b1b115.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 205.251.232.0/22 Signature Algorithm: sha256WithRSAEncryption 91:16:49:cf:bb:96:cc:c3:ac:05:38:e2:91:bc:de:5d:c0:ea: 26:8c:43:49:67:c4:b2:0f:e5:f2:05:5d:01:95:84:6c:2d:98: 78:f1:ad:df:e9:fc:22:03:c2:0c:57:cc:26:24:f4:1c:9e:32: 43:18:0e:4c:79:fb:54:7f:d9:f3:77:6d:88:43:a6:7f:b2:83: ad:ae:74:8e:58:f2:d2:97:2e:92:7b:af:d6:da:b2:40:b4:b1: dd:61:ce:d2:96:e7:36:02:9e:65:ed:14:d8:fe:b2:87:54:ea: 89:2c:87:a4:dc:71:bb:55:a4:22:e1:40:85:c0:ad:e1:e8:78: cb:0e:db:1d:52:9f:e3:dc:e3:80:11:4f:50:2e:fc:ed:8e:17: 60:1c:bc:e4:ca:b6:e1:75:47:9a:17:ea:3e:d5:d5:bd:81:f0: 81:d5:d1:6c:79:42:f3:41:62:ce:03:f7:7e:6f:90:de:88:ac: 38:af:56:39:78:03:97:1f:30:b6:ef:0c:86:61:ef:36:28:36: 93:86:46:22:4a:10:8d:6b:8d:f5:99:09:87:2f:0e:2e:53:c4: 43:81:38:d3:6f:9d:da:0f:78:9a:05:20:41:16:e7:f7:3c:72: 97:1d:a6:5a:44:7d:0b:62:44:e2:ec:d4:2c:9f:89:cb:05:9d: 68:d0:65:eb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSbM9LkNRZ1PWj9xk7pMO/7dKAdIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUwOTE4MTk1MjIwWhcNMjUxMDIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BhNzdlNTU5MTM0MDdjZWRmOTE3MGMyMzZmMWQwZmFjMTZh ZDQyMzYwYWM0MmVlNjBkYTM1ZGE3YmEzNjgzMDJhMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDMkj+sKK4xwWPzScBKgIyQG64qksrNh7TPe6csUjOullwf GHAIrxSp2DudO16xM13w6mBxKoAhuY44b/gn/UYkjNO7crA3rDdyGSGcmcY+KOIh 0GNfF4W45yEqcIO2+E/FxCM4aEu252OIq1yEvg/tQaM8WZBo8gYYogP/aZT6Mc/G VwPpXiL5HbCaWrP9/EWlC9xWGZyLPx6QLi/VvL3mHosIzp2hP3oBE9Gyv9JTBRWD LwGqnLbdrjk7xQ7w+2ZSn5A4Pml2A/kl6H+YqWblVXtW9GkzYVbkNyZp35O4gq8v oL1s133gT1kK1OQ5iq8sHqIXbffWZaWOWit3bfDvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUiOZ6nUveS1q+2obHDF8w/wWiw9swHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzVjNGFjYjhkLWIyMDAtNGM5OS1hNTdhLWM0MDQzNWIxYjExNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALN++gwDQYJKoZIhvcNAQELBQADggEBAJEWSc+7lszDrAU44pG83l3A6iaM Q0lnxLIP5fIFXQGVhGwtmHjxrd/p/CIDwgxXzCYk9ByeMkMYDkx5+1R/2fN3bYhD pn+yg62udI5Y8tKXLpJ7r9baskC0sd1hztKW5zYCnmXtFNj+sodU6oksh6TccbtV pCLhQIXAreHoeMsO2x1Sn+Pc44ART1Au/O2OF2AcvOTKtuF1R5oX6j7V1b2B8IHV 0Wx5QvNBYs4D935vkN6IrDivVjl4A5cfMLbvDIZh7zYoNpOGRiJKEI1rjfWZCYcv Di5TxEOBONNvndoPeJoFIEEW5/c8cpcdplpEfQtiROLs1CyficsFnWjQZes= -----END CERTIFICATE-----Generated at Fri Sep 19 11:00:16 2025 by rpki-client