$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/61aba975-1752-4022-8ba1-d2e851c60ade.roa File: 61aba975-1752-4022-8ba1-d2e851c60ade.roa (raw, json) Hash identifier: u0+vV9JiylEJH/eWRfAsEHDj1vmA2S+7ew3CUkMksUY= Subject key identifier: E6:5E:FC:CC:11:70:DD:E8:DD:78:9C:22:1D:AA:B8:2D:5F:AF:AB:01 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 45E853BD3676EBCBCB980FFB12E791F3B19A3D72 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/61aba975-1752-4022-8ba1-d2e851c60ade.roa Signing time: Sun 16 Nov 2025 00:40:45 +0000 ROA not before: Sun 16 Nov 2025 00:40:45 +0000 ROA not after: Sun 21 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 216.137.60.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:e8:53:bd:36:76:eb:cb:cb:98:0f:fb:12:e7:91:f3:b1:9a:3d:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Nov 16 00:40:45 2025 GMT Not After : Dec 21 23:59:59 2025 GMT Subject: serialNumber=9110ae881a83e9abcd8c2a7f9808feceaad232785214c7759057762ab06d8f7b, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:44:57:21:20:00:7e:70:9c:fc:64:98:3c:58: c2:5b:d8:96:28:d0:1e:34:18:8b:95:80:a2:95:cb: ef:4d:9e:6e:2e:db:9b:67:20:20:7d:3a:be:0b:5b: 8f:6a:bf:86:c8:71:70:bf:af:e6:e1:95:99:ae:cc: 38:31:dd:65:ec:e7:ea:a4:b9:97:ab:d0:d2:de:a1: 63:98:c4:5d:8a:10:86:91:e9:37:76:99:ac:8e:37: 1e:c9:94:f7:e0:1e:a0:38:6f:e5:ae:b6:3d:d0:a4: 7b:a8:64:02:81:31:c5:b4:1c:fb:28:00:32:a0:ac: aa:1d:3c:25:05:1f:38:78:68:78:41:7c:35:2d:9b: c6:b2:12:e8:10:6b:0e:a9:f6:18:d6:c8:b3:a1:5c: 1f:5c:6a:40:1c:70:53:7f:62:a3:89:bd:94:9e:ce: c3:5d:e9:32:15:c0:11:e2:86:d7:c9:62:bb:01:ea: 39:89:b6:51:ee:3a:fb:f6:53:68:f0:cd:56:35:b1: 2d:34:f7:63:1a:f1:0f:e8:f3:ac:7b:0b:82:c2:6d: bc:ff:bc:b2:3d:3e:ec:89:c9:a0:d6:48:73:8b:82: ac:0f:9f:05:58:7b:cd:1a:77:fa:a0:ae:d7:10:ed: ca:63:5c:02:87:66:56:87:ef:7a:e8:37:d1:bd:54: 1f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:5E:FC:CC:11:70:DD:E8:DD:78:9C:22:1D:AA:B8:2D:5F:AF:AB:01 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/61aba975-1752-4022-8ba1-d2e851c60ade.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.137.60.0/23 Signature Algorithm: sha256WithRSAEncryption ba:0e:15:68:de:6e:4b:be:7d:1b:84:3d:a2:60:f9:86:b3:63: f3:b4:1c:c0:99:ec:37:d0:bb:08:c7:d3:a9:15:a1:5c:8b:a9: 51:49:b9:12:66:72:9f:b9:9c:60:e1:be:b2:91:58:c8:51:73: 41:dd:e1:f9:79:b2:2b:f0:3c:c5:c3:d5:7a:a2:6c:19:66:a9: f7:f3:58:2d:df:06:61:6e:14:3b:5f:67:43:dd:74:da:f4:02: bb:ef:f8:32:91:a1:27:b4:45:eb:f4:19:a4:de:f4:e3:27:a1: 29:3f:d0:65:bf:a6:c9:68:d7:6a:7c:fc:04:fb:20:6f:3c:cb: 7a:fc:6e:c4:f4:22:4d:b8:79:86:1f:87:e8:ba:1d:27:21:78: 7d:9e:8b:71:59:68:0a:bc:3e:66:87:fe:d8:b9:2f:6d:97:75: 3c:7c:c4:d0:de:91:f0:7a:7b:65:72:5d:78:74:e0:65:73:41: 12:85:af:6a:4e:2f:3c:3d:09:ec:8f:a7:be:92:e8:4a:17:ba: ac:79:2a:ca:bc:88:9b:ce:7c:75:c2:33:c9:02:14:a9:18:8a: eb:8d:ad:87:5e:8a:fa:b1:25:94:30:a2:f4:43:a9:6f:5c:a9: 70:90:24:52:fd:0e:86:9d:e6:e9:df:32:4c:9e:e2:e4:38:e8: c7:28:0e:6e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURehTvTZ268vLmA/7EueR87GaPXIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMTE2MDA0MDQ1WhcNMjUxMjIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A5MTEwYWU4ODFhODNlOWFiY2Q4YzJhN2Y5ODA4ZmVjZWFh ZDIzMjc4NTIxNGM3NzU5MDU3NzYyYWIwNmQ4ZjdiMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDMRFchIAB+cJz8ZJg8WMJb2JYo0B40GIuVgKKVy+9Nnm4u 25tnICB9Or4LW49qv4bIcXC/r+bhlZmuzDgx3WXs5+qkuZer0NLeoWOYxF2KEIaR 6Td2mayONx7JlPfgHqA4b+Wutj3QpHuoZAKBMcW0HPsoADKgrKodPCUFHzh4aHhB fDUtm8ayEugQaw6p9hjWyLOhXB9cakAccFN/YqOJvZSezsNd6TIVwBHihtfJYrsB 6jmJtlHuOvv2U2jwzVY1sS0092Ma8Q/o86x7C4LCbbz/vLI9PuyJyaDWSHOLgqwP nwVYe80ad/qgrtcQ7cpjXAKHZlaH73roN9G9VB9TAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5l78zBFw3ejdeJwiHaq4LV+vqwEwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzYxYWJhOTc1LTE3NTItNDAyMi04YmExLWQyZTg1MWM2MGFkZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHYiTwwDQYJKoZIhvcNAQELBQADggEBALoOFWjebku+fRuEPaJg+YazY/O0 HMCZ7DfQuwjH06kVoVyLqVFJuRJmcp+5nGDhvrKRWMhRc0Hd4fl5sivwPMXD1Xqi bBlmqffzWC3fBmFuFDtfZ0PddNr0Arvv+DKRoSe0Rev0GaTe9OMnoSk/0GW/pslo 12p8/AT7IG88y3r8bsT0Ik24eYYfh+i6HScheH2ei3FZaAq8PmaH/ti5L22XdTx8 xNDekfB6e2VyXXh04GVzQRKFr2pOLzw9CeyPp76S6EoXuqx5Ksq8iJvOfHXCM8kC FKkYiuuNrYdeivqxJZQwovRDqW9cqXCQJFL9Doad5unfMkye4uQ46McoDm4= -----END CERTIFICATE-----Generated at Tue Nov 18 08:25:29 2025 by rpki-client