$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d09f713c-653c-4c02-ba92-bdaaf70fa055.roa File: d09f713c-653c-4c02-ba92-bdaaf70fa055.roa (raw, json) Hash identifier: 6oA0jFup4E757ttpujqu16E5ODFIXlQ0MzKSBkX5DFs= Subject key identifier: 70:CE:C3:01:AF:7F:DB:B3:BC:08:E4:FB:8D:E1:D2:78:56:97:BE:81 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 27D655719B472D315729F9A2932AA69C4A548D3E Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d09f713c-653c-4c02-ba92-bdaaf70fa055.roa Signing time: Thu 18 Sep 2025 19:39:28 +0000 ROA not before: Thu 18 Sep 2025 19:39:28 +0000 ROA not after: Thu 23 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 204.246.160.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:d6:55:71:9b:47:2d:31:57:29:f9:a2:93:2a:a6:9c:4a:54:8d:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Sep 18 19:39:28 2025 GMT Not After : Oct 23 23:59:59 2025 GMT Subject: serialNumber=9db10b46e2830282fd54abb704cd94c109624d5ebbbb1546c5862cc10fec7762, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4a:2f:0b:ff:54:2d:3f:ee:83:dc:38:38:d0: 9d:7d:0d:0f:d5:5e:9e:0a:44:57:61:53:63:d8:c0: df:75:05:64:26:7e:4b:8c:e9:b2:f5:6e:2f:84:a7: 77:39:0c:0f:c8:84:ed:c7:4b:b6:23:36:3a:d3:cc: 64:1d:1b:54:12:36:cf:25:fc:1e:4b:82:2f:43:fe: 8f:5d:0a:a2:e5:b5:a4:98:67:59:ba:4a:58:3f:15: de:97:8d:96:dd:46:11:61:89:ed:54:bd:1a:eb:62: bf:e9:c5:cd:cc:37:fb:b0:c9:f8:5b:50:9b:76:1a: 2a:c8:7a:a0:c2:9e:79:6d:1d:42:cc:11:35:9b:bc: 66:8e:be:79:81:b7:eb:da:4e:5c:82:a9:41:67:9a: 91:68:e0:08:10:5e:da:c7:b7:f1:88:96:88:bd:3e: 17:81:cf:ec:51:bd:7a:91:cd:46:69:a1:48:39:a0: 9d:ff:25:ec:f6:3a:5e:ab:74:f1:b8:ea:5c:1a:bd: be:98:15:97:93:ab:39:4d:a9:27:94:d0:7b:2a:3c: a8:67:9c:ac:a2:a5:5d:79:fc:9c:b0:4b:18:1e:e1: b2:dc:1a:00:8d:04:68:5a:51:8d:35:7d:53:8d:ed: 37:90:13:38:16:76:f1:82:65:38:3f:e2:0a:45:d9: 3a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:CE:C3:01:AF:7F:DB:B3:BC:08:E4:FB:8D:E1:D2:78:56:97:BE:81 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d09f713c-653c-4c02-ba92-bdaaf70fa055.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 204.246.160.0/22 Signature Algorithm: sha256WithRSAEncryption 42:e5:83:fe:13:3b:23:cd:2e:fc:40:56:a3:f2:9f:0f:31:bb: 53:5d:73:1f:3e:0f:2d:b1:04:12:8c:d6:ef:e1:55:0e:b0:6c: f9:9b:df:2a:11:1b:d5:f3:5e:c7:93:5f:bb:16:14:36:56:c2: be:fc:35:65:a3:95:d1:31:cf:ae:68:c2:af:3a:61:ca:15:6b: ac:bd:0f:80:8c:0b:0a:98:2d:95:57:aa:60:11:5c:29:76:21: b9:e4:52:ac:04:09:d0:7a:f8:09:be:a2:54:e8:9e:b0:53:0a: 89:25:8e:a1:c6:d5:5d:37:f4:0c:e0:0d:b8:c0:cd:dc:d9:aa: 3a:ee:c3:df:2c:9f:9d:cb:95:b3:2b:a0:4e:bc:d9:2d:92:72: e8:7c:4f:2a:69:49:8d:7a:40:d1:95:e2:cf:40:3a:39:15:56: 2a:03:4d:00:17:8c:68:7a:24:f2:4e:fb:4c:b9:80:6e:ea:e8: f8:49:f2:3d:42:ca:ce:bd:79:0a:14:b8:f9:c2:8b:d0:cc:4e: 29:c6:36:e4:ae:70:4e:e2:65:5c:49:61:ca:d8:cd:2d:a0:5f: 6f:8f:ed:9d:d7:8e:fd:cb:f8:b6:1a:48:93:c0:c5:ed:de:48: de:5d:70:8e:0c:99:e9:0c:29:07:b7:ec:08:4c:a4:4f:1f:c8: 64:4d:4f:c2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJ9ZVcZtHLTFXKfmikyqmnEpUjT4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUwOTE4MTkzOTI4WhcNMjUxMDIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZGIxMGI0NmUyODMwMjgyZmQ1NGFiYjcwNGNkOTRjMTA5 NjI0ZDVlYmJiYjE1NDZjNTg2MmNjMTBmZWM3NzYyMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0Si8L/1QtP+6D3Dg40J19DQ/VXp4KRFdhU2PYwN91BWQm fkuM6bL1bi+Ep3c5DA/IhO3HS7YjNjrTzGQdG1QSNs8l/B5Lgi9D/o9dCqLltaSY Z1m6Slg/Fd6XjZbdRhFhie1UvRrrYr/pxc3MN/uwyfhbUJt2GirIeqDCnnltHULM ETWbvGaOvnmBt+vaTlyCqUFnmpFo4AgQXtrHt/GIloi9PheBz+xRvXqRzUZpoUg5 oJ3/Jez2Ol6rdPG46lwavb6YFZeTqzlNqSeU0HsqPKhnnKyipV15/JywSxge4bLc GgCNBGhaUY01fVON7TeQEzgWdvGCZTg/4gpF2Tp3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUcM7DAa9/27O8COT7jeHSeFaXvoEwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2QwOWY3MTNjLTY1M2MtNGMwMi1iYTkyLWJkYWFmNzBmYTA1NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALM9qAwDQYJKoZIhvcNAQELBQADggEBAELlg/4TOyPNLvxAVqPynw8xu1Nd cx8+Dy2xBBKM1u/hVQ6wbPmb3yoRG9XzXseTX7sWFDZWwr78NWWjldExz65owq86 YcoVa6y9D4CMCwqYLZVXqmARXCl2IbnkUqwECdB6+Am+olTonrBTCokljqHG1V03 9AzgDbjAzdzZqjruw98sn53LlbMroE682S2Scuh8TyppSY16QNGV4s9AOjkVVioD TQAXjGh6JPJO+0y5gG7q6PhJ8j1Cys69eQoUuPnCi9DMTinGNuSucE7iZVxJYcrY zS2gX2+P7Z3Xjv3L+LYaSJPAxe3eSN5dcI4MmekMKQe37AhMpE8fyGRNT8I= -----END CERTIFICATE-----Generated at Fri Sep 19 06:10:34 2025 by rpki-client