$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/de64e6ca-05ed-46a3-873a-8d17e7f59082.roa File: de64e6ca-05ed-46a3-873a-8d17e7f59082.roa (raw, json) Hash identifier: e2ioe6UJYcE7SynpwHoQ+NO16BFmRUKC/jlqdZzPfuk= Subject key identifier: 10:79:18:52:5E:47:26:49:67:93:ED:AA:7E:6E:2A:0D:ED:EB:73:0F Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 59F5877CACE28C90039828D7BAEACBAA2984C736 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/de64e6ca-05ed-46a3-873a-8d17e7f59082.roa Signing time: Fri 07 Nov 2025 01:00:44 +0000 ROA not before: Fri 07 Nov 2025 01:00:44 +0000 ROA not after: Fri 12 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 216.137.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:f5:87:7c:ac:e2:8c:90:03:98:28:d7:ba:ea:cb:aa:29:84:c7:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Nov 7 01:00:44 2025 GMT Not After : Dec 12 23:59:59 2025 GMT Subject: serialNumber=fc9e9ae6d62501c5c57ecd951e54274c114696f08c273c16cb0e52738928e71f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:af:ae:cb:b9:b1:3d:46:7e:24:4b:95:17:69: 62:57:38:8a:32:7e:fd:4b:65:7b:b3:1f:0f:f0:6d: ea:7e:e1:cd:07:7f:e3:1e:51:94:76:35:5e:fb:ba: f3:d2:c8:7a:85:c8:b0:21:5e:e0:2c:60:34:6d:1a: 11:82:62:55:dd:3b:26:9a:af:8f:9e:4c:0e:96:f8: 1e:8a:c9:5e:b0:1d:2d:cd:4c:c1:b8:06:80:ff:ca: f2:80:8d:e6:29:e3:8f:2f:9b:a5:be:ac:cd:3f:94: 32:b0:fa:89:18:bf:b3:d4:8c:c7:56:cc:af:0d:2d: f8:f0:91:e1:60:9f:0a:2c:63:54:63:df:b5:38:e2: 20:fb:18:21:a2:da:1c:26:a8:ed:9e:06:eb:14:df: 45:fc:81:87:9e:b6:a7:70:54:40:95:0b:a7:f1:dd: 7c:6b:16:94:75:1b:02:96:88:bc:a6:89:7e:e9:8c: 29:81:a4:2e:73:39:69:de:aa:1d:c5:e2:d3:bd:47: a2:3c:67:c2:56:f3:e4:ec:64:bb:25:a7:13:0a:8c: bc:d2:67:c2:ae:04:da:aa:27:cf:8b:e0:a0:a6:ae: 5e:71:9b:d0:e9:98:cd:56:11:f9:72:9a:eb:9c:38: fc:ca:0f:f7:de:1d:f9:ed:ff:9e:8c:a6:e0:90:b2: 24:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:79:18:52:5E:47:26:49:67:93:ED:AA:7E:6E:2A:0D:ED:EB:73:0F X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/de64e6ca-05ed-46a3-873a-8d17e7f59082.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.137.58.0/24 Signature Algorithm: sha256WithRSAEncryption 21:91:aa:3e:da:61:c2:c9:b7:d4:84:64:db:96:04:1f:66:22: ac:28:68:43:ed:89:25:02:d3:fc:06:31:34:82:0a:c2:70:05: 28:09:86:bc:bd:34:0f:68:81:fc:57:db:4b:96:a0:26:4e:02: 5b:a7:00:a3:13:10:c3:5c:20:62:6c:d1:48:d7:9f:5b:bf:e6: 46:5c:f6:1b:10:d2:c3:85:c4:e7:88:3f:87:1e:4a:a1:fc:67: 47:51:c4:8a:3e:2d:4a:d7:f5:ea:7a:53:96:03:e9:cf:18:bb: 49:a6:4f:5a:41:f0:a4:cb:b7:a0:b0:b4:af:bb:1b:0f:25:de: 93:a2:49:98:e5:42:f2:0b:09:c2:1f:35:c9:4f:04:ac:de:fc: 85:23:0c:86:7e:65:eb:fe:40:b0:dd:0d:05:80:fd:1a:21:d3: 48:0f:74:90:ea:46:f5:d1:90:e9:f1:4a:57:ed:a9:10:6d:17: 57:67:13:e9:af:d1:bb:b7:c8:f6:e2:03:8b:63:ca:26:1f:a9: 32:ec:08:b7:28:a8:ca:bb:d2:9c:28:f5:5e:da:b2:54:54:39: 73:5a:9b:77:42:89:cf:1f:4a:32:af:32:c5:3a:f8:b4:3c:3f: ff:34:ec:1c:60:43:09:63:ec:6b:1b:1a:4c:a0:a1:d2:2b:e5: 28:c5:1a:7f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWfWHfKzijJADmCjXuurLqimExzYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMTA3MDEwMDQ0WhcNMjUxMjEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BmYzllOWFlNmQ2MjUwMWM1YzU3ZWNkOTUxZTU0Mjc0YzEx NDY5NmYwOGMyNzNjMTZjYjBlNTI3Mzg5MjhlNzFmMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDRr67LubE9Rn4kS5UXaWJXOIoyfv1LZXuzHw/wbep+4c0H f+MeUZR2NV77uvPSyHqFyLAhXuAsYDRtGhGCYlXdOyaar4+eTA6W+B6KyV6wHS3N TMG4BoD/yvKAjeYp448vm6W+rM0/lDKw+okYv7PUjMdWzK8NLfjwkeFgnwosY1Rj 37U44iD7GCGi2hwmqO2eBusU30X8gYeetqdwVECVC6fx3XxrFpR1GwKWiLymiX7p jCmBpC5zOWneqh3F4tO9R6I8Z8JW8+TsZLslpxMKjLzSZ8KuBNqqJ8+L4KCmrl5x m9DpmM1WEflymuucOPzKD/feHfnt/56MpuCQsiRBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUEHkYUl5HJklnk+2qfm4qDe3rcw8wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2RlNjRlNmNhLTA1ZWQtNDZhMy04NzNhLThkMTdlN2Y1OTA4Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADYiTowDQYJKoZIhvcNAQELBQADggEBACGRqj7aYcLJt9SEZNuWBB9mIqwo aEPtiSUC0/wGMTSCCsJwBSgJhry9NA9ogfxX20uWoCZOAlunAKMTEMNcIGJs0UjX n1u/5kZc9hsQ0sOFxOeIP4ceSqH8Z0dRxIo+LUrX9ep6U5YD6c8Yu0mmT1pB8KTL t6CwtK+7Gw8l3pOiSZjlQvILCcIfNclPBKze/IUjDIZ+Zev+QLDdDQWA/Roh00gP dJDqRvXRkOnxSlftqRBtF1dnE+mv0bu3yPbiA4tjyiYfqTLsCLcoqMq70pwo9V7a slRUOXNam3dCic8fSjKvMsU6+LQ8P/807BxgQwlj7GsbGkygodIr5SjFGn8= -----END CERTIFICATE-----Generated at Tue Nov 18 08:23:38 2025 by rpki-client