$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bd36f544-6cb4-48f8-b5ab-1f84888abee5.roa File: bd36f544-6cb4-48f8-b5ab-1f84888abee5.roa (raw, json) Hash identifier: 85mZ3h7BO62u+ktnyxlpriwHSvR3DgCP6bpQF2FTdrQ= Subject key identifier: 75:58:B1:20:C2:B5:B9:AB:38:76:F5:19:25:5A:C2:09:10:44:2D:29 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 2C23D96BBD7605211CA4771A2A84B1D5C72D0CB5 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bd36f544-6cb4-48f8-b5ab-1f84888abee5.roa Signing time: Thu 18 Sep 2025 19:55:59 +0000 ROA not before: Thu 18 Sep 2025 19:55:59 +0000 ROA not after: Thu 23 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 216.137.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:23:d9:6b:bd:76:05:21:1c:a4:77:1a:2a:84:b1:d5:c7:2d:0c:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Sep 18 19:55:59 2025 GMT Not After : Oct 23 23:59:59 2025 GMT Subject: serialNumber=b19cc29f8b0a15521535fa13b7501c43723e4f90e91ef5d646c317964dd1eb13, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6d:b9:21:f7:5c:dc:01:7f:25:a3:df:7d:49: 38:63:0f:61:b8:19:84:8c:6a:1b:05:6a:1e:31:8c: ae:d9:40:55:92:1a:19:8a:70:de:9d:7a:5c:57:26: 3b:48:99:9a:18:96:79:f4:88:5e:cc:a6:c1:69:67: cb:2a:48:c1:e0:ab:f2:98:95:df:20:07:de:d1:1f: d0:53:88:5a:91:08:d2:9e:a9:c9:df:ca:a3:16:44: 83:98:8c:a1:52:b5:50:a0:46:66:08:cb:41:9f:22: 5e:73:d4:a3:63:c0:91:73:90:c7:69:0a:cc:89:e3: c1:f7:d8:8f:2a:7c:95:2f:07:30:fb:b9:ee:18:cc: bd:12:bb:f3:2b:89:41:fd:5f:bd:a6:6c:fa:1f:72: f5:0e:20:64:8e:89:27:34:1c:6f:e4:ad:a3:bd:4d: dd:6d:c9:a2:21:38:c0:bf:8c:f4:f8:83:56:e7:72: be:26:56:84:d4:af:5d:06:e9:d6:1c:a6:96:9a:db: b0:e0:e2:07:eb:75:93:02:16:e2:bb:f5:12:ee:f5: 4b:c3:cb:cc:e8:e8:67:20:d4:7b:58:2d:d0:a4:d3: 8b:96:79:8f:07:8d:ba:f7:21:bf:02:5d:4f:7a:31: e0:d4:50:da:0b:36:36:bc:45:fa:69:21:2b:49:38: 76:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:58:B1:20:C2:B5:B9:AB:38:76:F5:19:25:5A:C2:09:10:44:2D:29 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bd36f544-6cb4-48f8-b5ab-1f84888abee5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.137.42.0/24 Signature Algorithm: sha256WithRSAEncryption b1:56:3c:ef:cd:60:c5:a2:ca:5d:ab:65:b1:e7:6a:e8:29:cf: 33:f4:42:4a:05:8a:5e:8b:98:f4:60:ba:fa:80:9b:4f:80:82: 3e:e5:fd:e8:05:a5:d9:42:4a:3c:82:db:7c:8b:33:27:79:1f: 3b:f4:cf:8f:ec:41:be:14:7c:0e:62:2e:73:b6:48:e3:8c:02: a2:d9:eb:d3:75:be:c4:9c:ea:4e:ba:df:7b:a2:46:f5:8f:97: 43:97:6c:d4:11:37:ac:08:dd:60:f1:d5:b3:00:0c:08:31:e8: f9:e6:94:68:7a:6c:fa:7b:20:14:be:d0:ca:e4:ba:15:3b:53: 16:f0:36:8c:d8:ce:04:ed:7b:0f:21:10:ef:46:57:e9:0c:e1: 00:78:64:b1:09:dc:8d:51:c2:7b:68:7a:06:bd:3b:b1:53:36: 83:ac:63:4f:93:ad:7d:e1:86:d8:c2:68:eb:c6:7f:18:5a:13: dc:8d:dc:0f:10:5d:7f:e7:a1:92:4f:a3:ff:4f:70:b9:61:32: 3d:7b:c5:be:d5:ba:60:96:a7:90:8b:f5:37:55:9d:39:0e:94: 39:32:ba:43:b4:dd:88:12:f0:b3:61:9d:d2:f3:f3:a5:d2:fa: f7:1c:43:da:6e:b1:bb:54:4c:f8:4d:cd:39:41:c5:35:d8:93: c3:ac:fe:6d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULCPZa712BSEcpHcaKoSx1cctDLUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUwOTE4MTk1NTU5WhcNMjUxMDIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BiMTljYzI5ZjhiMGExNTUyMTUzNWZhMTNiNzUwMWM0Mzcy M2U0ZjkwZTkxZWY1ZDY0NmMzMTc5NjRkZDFlYjEzMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBbbkh91zcAX8lo999SThjD2G4GYSMahsFah4xjK7ZQFWS GhmKcN6delxXJjtImZoYlnn0iF7MpsFpZ8sqSMHgq/KYld8gB97RH9BTiFqRCNKe qcnfyqMWRIOYjKFStVCgRmYIy0GfIl5z1KNjwJFzkMdpCsyJ48H32I8qfJUvBzD7 ue4YzL0Su/MriUH9X72mbPofcvUOIGSOiSc0HG/kraO9Td1tyaIhOMC/jPT4g1bn cr4mVoTUr10G6dYcppaa27Dg4gfrdZMCFuK79RLu9UvDy8zo6Gcg1HtYLdCk04uW eY8Hjbr3Ib8CXU96MeDUUNoLNja8RfppIStJOHY9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUdVixIMK1uas4dvUZJVrCCRBELSkwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2JkMzZmNTQ0LTZjYjQtNDhmOC1iNWFiLTFmODQ4ODhhYmVlNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADYiSowDQYJKoZIhvcNAQELBQADggEBALFWPO/NYMWiyl2rZbHnaugpzzP0 QkoFil6LmPRguvqAm0+Agj7l/egFpdlCSjyC23yLMyd5Hzv0z4/sQb4UfA5iLnO2 SOOMAqLZ69N1vsSc6k6633uiRvWPl0OXbNQRN6wI3WDx1bMADAgx6PnmlGh6bPp7 IBS+0MrkuhU7UxbwNozYzgTtew8hEO9GV+kM4QB4ZLEJ3I1Rwntoega9O7FTNoOs Y0+TrX3hhtjCaOvGfxhaE9yN3A8QXX/noZJPo/9PcLlhMj17xb7VumCWp5CL9TdV nTkOlDkyukO03YgS8LNhndLz86XS+vccQ9pusbtUTPhNzTlBxTXYk8Os/m0= -----END CERTIFICATE-----Generated at Fri Sep 19 03:16:38 2025 by rpki-client