$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a8820a73-326f-4265-a4a4-348ddeb4b63b.roa File: a8820a73-326f-4265-a4a4-348ddeb4b63b.roa (raw, json) Hash identifier: Qp2T2TDx5xnVSgBijDYsKZiUO33mj5dwkA8rdbaOi9k= Subject key identifier: F2:1A:95:13:8A:31:F5:4F:27:D2:B3:C5:C4:2C:49:A9:AD:D4:A7:5D Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 3F5930EFE7FC44434775E001653671E988FFAC7B Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a8820a73-326f-4265-a4a4-348ddeb4b63b.roa Signing time: Thu 18 Sep 2025 19:39:34 +0000 ROA not before: Thu 18 Sep 2025 19:39:34 +0000 ROA not after: Thu 23 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 204.246.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:59:30:ef:e7:fc:44:43:47:75:e0:01:65:36:71:e9:88:ff:ac:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Sep 18 19:39:34 2025 GMT Not After : Oct 23 23:59:59 2025 GMT Subject: serialNumber=8e537af4c9ee654520dba02c166e3db3bbdde64745b3ae595f8c756131503f36, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d3:ba:25:cf:5f:93:c4:5f:80:47:b9:c0:6a: d7:40:a6:62:98:bc:e7:06:38:06:26:c0:c3:4f:61: 60:00:15:82:c7:77:d7:d9:e8:fe:ad:a6:90:cd:4b: bb:b2:a5:5c:9a:ac:59:72:4a:f4:95:b1:19:59:dd: 72:d1:4c:01:99:57:45:71:44:07:a9:c9:ca:fb:06: 4d:2f:d5:06:3d:bf:34:7a:98:35:67:45:a8:5f:ce: 6a:6c:19:cf:3b:a0:3f:17:23:be:1b:6a:8d:bc:84: 1b:de:22:f0:c6:57:b2:c8:91:fb:fc:95:a2:4a:d7: c9:a8:8a:f6:64:ab:c2:23:40:74:14:cc:4c:57:b9: b7:8b:c5:dc:1b:f5:2b:e2:02:35:59:62:ca:8f:67: a1:04:c5:a4:c7:0d:2a:60:f1:02:50:3f:45:bf:8c: b1:ce:05:fd:8d:49:db:d2:b8:ed:cd:7e:1f:6a:6b: 64:db:00:ab:73:93:e5:d8:85:3e:9e:ac:8e:58:26: 10:97:ac:b5:b5:92:49:d1:15:cd:42:fc:43:f8:62: 6d:43:43:71:a0:cf:43:0a:2c:c0:2c:e4:66:4e:93: f5:e1:19:25:80:c0:16:94:f9:63:80:8e:7f:4b:17: 7a:dd:cd:d2:a7:be:8d:66:1e:4d:b9:06:36:3a:f5: 0a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:1A:95:13:8A:31:F5:4F:27:D2:B3:C5:C4:2C:49:A9:AD:D4:A7:5D X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a8820a73-326f-4265-a4a4-348ddeb4b63b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 204.246.168.0/24 Signature Algorithm: sha256WithRSAEncryption 45:d8:74:2b:98:92:33:6d:5e:ab:b7:2e:cd:ac:72:8e:0e:28: 11:13:7b:ed:37:2b:a1:94:93:5c:bf:72:5f:ab:01:b6:68:c1: c9:dc:ce:15:b7:1f:51:70:20:51:2f:70:6e:d5:8a:91:62:52: 87:b3:d6:64:29:72:8a:88:24:2b:52:83:24:05:07:f1:08:c1: e8:d0:7b:3e:47:0b:ad:47:54:33:a2:ec:13:20:7b:34:99:40: ab:a3:34:0d:de:2d:8b:98:fb:78:ef:ca:cc:87:74:f0:f2:c5: f5:36:87:27:c8:f4:83:89:db:c9:bc:75:c6:b8:dd:ad:49:9f: 81:a6:db:d0:f0:20:6d:3f:4d:21:82:75:a7:89:9d:f8:53:ab: ec:51:f2:27:b5:17:10:7a:db:ed:1f:7e:05:af:36:32:ef:7a: a8:77:1f:17:73:d5:4e:dd:8d:a0:7e:87:f5:11:45:ff:1f:b5: e0:7a:e0:bd:d7:ce:e8:85:d8:9c:36:eb:93:e2:c6:7c:57:87: 0e:4e:ef:54:5e:80:e0:33:0f:25:e5:b8:0e:da:22:3f:09:73: 32:66:3d:b1:8c:47:aa:bf:32:34:72:59:31:71:6f:39:da:6d: 1d:d1:a0:c9:c7:c4:2a:fd:a5:08:7a:e3:28:15:91:19:28:da: aa:33:99:02 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUP1kw7+f8RENHdeABZTZx6Yj/rHswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUwOTE4MTkzOTM0WhcNMjUxMDIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZTUzN2FmNGM5ZWU2NTQ1MjBkYmEwMmMxNjZlM2RiM2Ji ZGRlNjQ3NDViM2FlNTk1ZjhjNzU2MTMxNTAzZjM2MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC007olz1+TxF+AR7nAatdApmKYvOcGOAYmwMNPYWAAFYLH d9fZ6P6tppDNS7uypVyarFlySvSVsRlZ3XLRTAGZV0VxRAepycr7Bk0v1QY9vzR6 mDVnRahfzmpsGc87oD8XI74bao28hBveIvDGV7LIkfv8laJK18moivZkq8IjQHQU zExXubeLxdwb9SviAjVZYsqPZ6EExaTHDSpg8QJQP0W/jLHOBf2NSdvSuO3Nfh9q a2TbAKtzk+XYhT6erI5YJhCXrLW1kknRFc1C/EP4Ym1DQ3Ggz0MKLMAs5GZOk/Xh GSWAwBaU+WOAjn9LF3rdzdKnvo1mHk25BjY69QqnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU8hqVE4ox9U8n0rPFxCxJqa3Up10wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2E4ODIwYTczLTMyNmYtNDI2NS1hNGE0LTM0OGRkZWI0YjYzYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADM9qgwDQYJKoZIhvcNAQELBQADggEBAEXYdCuYkjNtXqu3Ls2sco4OKBET e+03K6GUk1y/cl+rAbZowcnczhW3H1FwIFEvcG7VipFiUoez1mQpcoqIJCtSgyQF B/EIwejQez5HC61HVDOi7BMgezSZQKujNA3eLYuY+3jvysyHdPDyxfU2hyfI9IOJ 28m8dca43a1Jn4Gm29DwIG0/TSGCdaeJnfhTq+xR8ie1FxB62+0ffgWvNjLveqh3 Hxdz1U7djaB+h/URRf8fteB64L3XzuiF2Jw265PixnxXhw5O71RegOAzDyXluA7a Ij8JczJmPbGMR6q/MjRyWTFxbznabR3RoMnHxCr9pQh64ygVkRko2qozmQI= -----END CERTIFICATE-----Generated at Fri Sep 19 04:38:05 2025 by rpki-client