$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/74fa5671-aa1e-4029-8231-1f417907916f.roa File: 74fa5671-aa1e-4029-8231-1f417907916f.roa (raw, json) Hash identifier: Q7V3rwk2/J/dJrtRtz9qJeeWJcB7s/hRfUawHOb6n6M= Subject key identifier: BC:B6:F7:B3:AE:92:5C:F1:39:ED:6B:1B:BA:42:B7:46:66:6C:9E:17 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 603C08AD5F288D2999574C9578414A94074F6051 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/74fa5671-aa1e-4029-8231-1f417907916f.roa Signing time: Thu 18 Sep 2025 19:52:42 +0000 ROA not before: Thu 18 Sep 2025 19:52:42 +0000 ROA not after: Thu 23 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 205.251.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:3c:08:ad:5f:28:8d:29:99:57:4c:95:78:41:4a:94:07:4f:60:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Sep 18 19:52:42 2025 GMT Not After : Oct 23 23:59:59 2025 GMT Subject: serialNumber=bbb7b3f064dfe3bf225db7eb9911eb70c58d657c4c4329b5359b339f99449219, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:60:6d:50:3e:4b:01:13:ca:65:22:aa:b4:df: ac:38:d2:ec:5b:61:31:97:4c:7b:19:e0:6c:69:12: 2c:56:c9:0c:0d:4f:76:81:1d:45:d6:17:cb:a0:fb: 38:ad:8c:0d:cb:44:78:ab:1e:c3:dc:b8:a1:39:41: 49:bc:3f:cc:25:98:21:98:e2:4a:bd:a7:b0:42:77: 14:51:18:8d:3b:39:28:a0:98:2d:7d:1f:20:bf:80: 4b:23:05:e3:39:56:2f:e9:9c:2e:19:ba:6f:57:12: 20:8e:7b:2c:27:1b:c6:ea:a5:e1:10:f0:85:0a:63: 13:bf:f9:c2:bf:9a:10:1c:83:09:4c:76:ab:0a:cb: 97:86:f6:49:95:23:80:4b:ab:42:06:cc:b4:28:4a: 63:17:fa:67:b8:c3:ca:fe:65:73:a6:29:98:4f:61: e2:7b:6b:46:ee:77:68:25:20:35:30:f1:ee:b8:10: 40:47:31:59:70:28:a5:b7:0f:c1:43:22:64:99:b6: e7:48:a6:d6:bd:9a:87:ff:62:e2:88:c7:83:ac:f0: 3a:d1:3e:99:e9:56:1e:9c:06:83:3a:00:d2:0b:9b: 1d:e5:95:b2:c1:fe:ba:09:2c:d2:ee:a4:25:22:8d: e1:ea:e3:fd:66:54:c7:0e:4e:5e:7e:18:6c:51:9d: 8b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:B6:F7:B3:AE:92:5C:F1:39:ED:6B:1B:BA:42:B7:46:66:6C:9E:17 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/74fa5671-aa1e-4029-8231-1f417907916f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 205.251.249.0/24 Signature Algorithm: sha256WithRSAEncryption 05:4c:5b:1c:31:2b:d3:6c:0d:45:d3:79:94:ba:28:2c:e2:62: e2:d7:9d:53:48:0e:8e:f5:53:4c:04:1c:d6:ac:f5:28:93:f5: 7c:a0:26:64:b7:be:fa:02:71:07:bf:b3:d8:a0:a8:ac:42:d6: f5:02:f0:25:63:30:10:46:1e:bf:81:bf:9d:da:36:2c:a4:1a: 97:b9:ba:b1:18:43:36:bf:80:a4:44:d2:bd:80:38:e3:61:3e: 5d:75:a0:aa:1a:fb:ca:8c:9a:aa:74:0d:72:76:a5:4c:ad:53: 26:37:3c:01:26:79:a1:2b:e6:1c:f7:a5:c5:0d:fc:eb:3c:6d: d1:01:a9:9a:a6:ae:38:1d:54:3e:56:aa:9c:bb:cb:3d:61:85: fd:35:e9:4a:41:cb:e3:77:3a:0c:f2:f0:cd:a8:31:be:c3:07: a4:ca:00:f8:b2:c7:88:d5:b5:84:d1:98:9e:9b:69:25:c5:96: ea:c2:71:be:bb:c3:c1:0a:8f:66:38:c1:4b:21:53:c2:48:f6: b7:53:51:ea:a5:06:03:d0:6b:f5:da:7b:0b:b4:fc:84:38:7b: 1d:6d:8c:6f:55:2c:f1:1b:1e:4b:f6:ad:45:1c:c9:66:b3:0d: eb:35:7d:5c:1e:f7:a2:c8:42:90:14:a3:7d:ab:06:ab:57:23: 28:45:90:aa -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYDwIrV8ojSmZV0yVeEFKlAdPYFEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUwOTE4MTk1MjQyWhcNMjUxMDIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BiYmI3YjNmMDY0ZGZlM2JmMjI1ZGI3ZWI5OTExZWI3MGM1 OGQ2NTdjNGM0MzI5YjUzNTliMzM5Zjk5NDQ5MjE5MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvYG1QPksBE8plIqq036w40uxbYTGXTHsZ4GxpEixWyQwN T3aBHUXWF8ug+zitjA3LRHirHsPcuKE5QUm8P8wlmCGY4kq9p7BCdxRRGI07OSig mC19HyC/gEsjBeM5Vi/pnC4Zum9XEiCOeywnG8bqpeEQ8IUKYxO/+cK/mhAcgwlM dqsKy5eG9kmVI4BLq0IGzLQoSmMX+me4w8r+ZXOmKZhPYeJ7a0bud2glIDUw8e64 EEBHMVlwKKW3D8FDImSZtudIpta9mof/YuKIx4Os8DrRPpnpVh6cBoM6ANILmx3l lbLB/roJLNLupCUijeHq4/1mVMcOTl5+GGxRnYvfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUvLb3s66SXPE57WsbukK3RmZsnhcwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1Lzc0ZmE1NjcxLWFhMWUtNDAyOS04MjMxLTFmNDE3OTA3OTE2Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADN+/kwDQYJKoZIhvcNAQELBQADggEBAAVMWxwxK9NsDUXTeZS6KCziYuLX nVNIDo71U0wEHNas9SiT9XygJmS3vvoCcQe/s9igqKxC1vUC8CVjMBBGHr+Bv53a NiykGpe5urEYQza/gKRE0r2AOONhPl11oKoa+8qMmqp0DXJ2pUytUyY3PAEmeaEr 5hz3pcUN/Os8bdEBqZqmrjgdVD5Wqpy7yz1hhf016UpBy+N3Ogzy8M2oMb7DB6TK APiyx4jVtYTRmJ6baSXFlurCcb67w8EKj2Y4wUshU8JI9rdTUeqlBgPQa/Xaewu0 /IQ4ex1tjG9VLPEbHkv2rUUcyWazDes1fVwe96LIQpAUo32rBqtXIyhFkKo= -----END CERTIFICATE-----Generated at Fri Sep 19 03:16:39 2025 by rpki-client