$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a2adf83d-6004-4e6d-b520-06a7b7985ee0.roa File: a2adf83d-6004-4e6d-b520-06a7b7985ee0.roa (raw, json) Hash identifier: 6qK9Uh6s74guiOdhpm77vQx+vOrM7JLplyH9J/rTVIw= Subject key identifier: CD:BF:2E:16:42:E8:14:7E:66:32:34:71:1A:EC:C8:65:BD:86:ED:BE Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 3836FDD6B4E10560E97E52683523B2174AA6570A Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a2adf83d-6004-4e6d-b520-06a7b7985ee0.roa Signing time: Thu 18 Sep 2025 19:39:48 +0000 ROA not before: Thu 18 Sep 2025 19:39:48 +0000 ROA not after: Thu 23 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 204.246.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:36:fd:d6:b4:e1:05:60:e9:7e:52:68:35:23:b2:17:4a:a6:57:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Sep 18 19:39:48 2025 GMT Not After : Oct 23 23:59:59 2025 GMT Subject: serialNumber=d30a40e7e7f24c018b5de0dd96242717f04020e0b058dad8196ee1a563a4d7aa, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fc:e0:cc:d6:80:72:ff:be:bf:6b:f6:07:e4: 3c:b8:8f:74:0c:95:71:0e:cb:43:3d:b2:48:15:e4: b7:89:f8:5f:ae:ee:89:f5:15:13:be:2e:0c:f4:17: dd:9f:fb:e5:33:ea:24:ea:80:d8:0a:5b:48:9d:d9: 5a:16:62:09:70:b9:5a:19:73:f6:de:6e:19:ed:65: 17:ab:2b:77:d1:47:af:0f:d2:1d:60:da:c5:ea:65: 8c:70:24:76:8d:39:b5:e7:f1:e2:8c:51:55:a4:3d: 94:52:08:8f:bc:54:47:68:fe:df:ed:08:51:23:f5: 97:32:b1:58:a7:19:03:1a:f4:21:b1:a8:56:af:e0: 4d:6f:f6:23:95:09:03:9c:d1:6d:5e:3a:f3:bf:97: 6a:84:bf:1f:04:cb:c9:bf:76:41:5c:45:8f:7f:74: 39:a7:4e:13:5e:cf:94:86:a8:10:87:b7:97:a2:ab: b3:e5:86:4b:d5:66:5f:0c:e9:16:5f:e0:fd:95:65: cc:cf:91:02:03:4f:65:a3:d4:e6:93:fc:3c:8c:86: 40:47:a1:f9:a7:2a:22:8c:7f:11:a9:94:f2:14:0e: 41:6b:b8:eb:c8:e1:2f:02:e7:f1:34:dd:b8:ec:12: 21:42:e0:d1:d9:78:4d:95:12:73:8b:11:9f:10:87: 25:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:BF:2E:16:42:E8:14:7E:66:32:34:71:1A:EC:C8:65:BD:86:ED:BE X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a2adf83d-6004-4e6d-b520-06a7b7985ee0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 204.246.187.0/24 Signature Algorithm: sha256WithRSAEncryption 81:91:f3:81:b0:33:45:5e:64:fa:91:99:fb:da:75:da:5e:79: c4:96:ee:df:c7:f9:1b:5f:7d:a4:0e:da:28:ed:58:be:51:0f: e7:fb:fc:e2:2a:d5:c2:dd:2d:71:2d:73:5d:a7:bf:f0:64:f8: 96:ca:9e:5e:78:8c:c4:fd:0a:f5:c8:2f:7a:ed:9f:86:e2:3e: 70:29:18:5a:31:d3:34:bb:c2:4f:72:4f:ec:de:a0:c3:97:84: d7:de:57:5c:46:17:24:77:65:d3:e9:e9:e2:cb:a6:76:38:b3: a6:77:93:ec:2b:f3:b5:fa:34:2c:f7:75:ac:d9:36:08:1c:f1: 95:be:e2:d5:b3:3a:81:c9:c1:66:8a:63:1b:4e:f1:69:d4:cb: ea:60:92:6a:45:ff:13:d3:b4:91:a4:76:be:e5:08:3c:15:9d: c7:05:ae:98:75:a3:9a:3d:d4:d0:05:18:dc:c6:e6:73:09:4e: 3f:19:4a:20:2b:11:3c:ef:f0:23:36:29:30:b9:ae:ee:a0:70: c4:87:7d:76:76:f2:0e:87:54:d5:ee:5b:6f:6b:4d:9e:10:aa: b3:62:eb:59:71:3b:6d:f9:f5:ec:e7:26:53:ae:a2:6c:34:01: 4c:f0:21:97:82:86:6e:4a:39:83:66:38:a9:d9:30:dd:28:6b: be:62:9f:f1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUODb91rThBWDpflJoNSOyF0qmVwowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUwOTE4MTkzOTQ4WhcNMjUxMDIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BkMzBhNDBlN2U3ZjI0YzAxOGI1ZGUwZGQ5NjI0MjcxN2Yw NDAyMGUwYjA1OGRhZDgxOTZlZTFhNTYzYTRkN2FhMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1/ODM1oBy/76/a/YH5Dy4j3QMlXEOy0M9skgV5LeJ+F+u 7on1FRO+Lgz0F92f++Uz6iTqgNgKW0id2VoWYglwuVoZc/bebhntZRerK3fRR68P 0h1g2sXqZYxwJHaNObXn8eKMUVWkPZRSCI+8VEdo/t/tCFEj9ZcysVinGQMa9CGx qFav4E1v9iOVCQOc0W1eOvO/l2qEvx8Ey8m/dkFcRY9/dDmnThNez5SGqBCHt5ei q7PlhkvVZl8M6RZf4P2VZczPkQIDT2Wj1OaT/DyMhkBHofmnKiKMfxGplPIUDkFr uOvI4S8C5/E03bjsEiFC4NHZeE2VEnOLEZ8QhyXpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUzb8uFkLoFH5mMjRxGuzIZb2G7b4wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2EyYWRmODNkLTYwMDQtNGU2ZC1iNTIwLTA2YTdiNzk4NWVlMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADM9rswDQYJKoZIhvcNAQELBQADggEBAIGR84GwM0VeZPqRmfvaddpeecSW 7t/H+RtffaQO2ijtWL5RD+f7/OIq1cLdLXEtc12nv/Bk+JbKnl54jMT9CvXIL3rt n4biPnApGFox0zS7wk9yT+zeoMOXhNfeV1xGFyR3ZdPp6eLLpnY4s6Z3k+wr87X6 NCz3dazZNggc8ZW+4tWzOoHJwWaKYxtO8WnUy+pgkmpF/xPTtJGkdr7lCDwVnccF rph1o5o91NAFGNzG5nMJTj8ZSiArETzv8CM2KTC5ru6gcMSHfXZ28g6HVNXuW29r TZ4QqrNi61lxO2359eznJlOuomw0AUzwIZeChm5KOYNmOKnZMN0oa75in/E= -----END CERTIFICATE-----Generated at Fri Sep 19 09:20:08 2025 by rpki-client