$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/fec47f42-6995-41de-9988-39dc7a89551a.roa File: fec47f42-6995-41de-9988-39dc7a89551a.roa (raw, json) Hash identifier: H7uKwEDZAL1/OtWf1b+ccSW8igvCnfLcFnE9G+V0slg= Subject key identifier: 75:4D:0D:ED:77:1A:B5:E3:0D:1D:CB:7A:DD:88:00:C4:05:BD:73:60 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 65E1B02DBB7EA5649C069EA6E155FE857E927995 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/fec47f42-6995-41de-9988-39dc7a89551a.roa Signing time: Thu 18 Sep 2025 19:52:30 +0000 ROA not before: Thu 18 Sep 2025 19:52:30 +0000 ROA not after: Thu 23 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 205.251.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:e1:b0:2d:bb:7e:a5:64:9c:06:9e:a6:e1:55:fe:85:7e:92:79:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Sep 18 19:52:30 2025 GMT Not After : Oct 23 23:59:59 2025 GMT Subject: serialNumber=bc541bb4cad15fa78d8a26bbaf4550285ebef041aff6b05952c7aa7018239457, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:d2:03:4d:cc:9e:ec:7c:20:d7:76:6b:1c:de: ae:e3:28:2d:2a:5b:ad:a8:ea:15:a9:ae:63:c2:66: 8d:9d:0e:8e:95:2b:51:c3:a5:9d:ea:06:12:96:86: 68:f9:e0:c1:05:5b:00:d9:a7:db:88:74:93:8c:a1: 38:3a:84:66:b0:50:a2:5c:44:be:dc:34:31:67:37: e8:2f:a1:eb:62:2f:dd:6d:58:22:d4:9f:47:28:ad: c2:0f:e6:5a:9b:0a:ee:09:cf:8f:6e:90:f8:4f:2d: 65:ba:bf:aa:46:eb:6d:63:59:6f:6f:a4:87:c6:c2: b7:fc:26:3c:23:57:23:74:fc:63:eb:da:2e:66:ff: ab:27:bf:b4:c7:ca:0e:6c:55:f8:ed:7e:e0:24:fb: ae:08:1b:e2:bd:16:46:2b:83:a2:f9:60:3f:66:94: a5:9a:31:2d:14:82:1f:44:cd:3e:81:71:4d:eb:ea: 3e:fd:1a:c7:f6:85:8a:fc:a0:0a:bd:a6:c3:ba:d3: 7a:ae:67:4e:09:41:61:4b:4f:eb:94:5f:5f:57:ab: 74:4b:8e:99:fb:2b:fb:04:33:f0:02:4d:9e:a3:60: 74:ef:0a:87:78:92:3a:9a:6a:a9:e2:5b:51:81:1f: 35:28:22:b9:68:d7:e6:20:f0:87:1b:1f:24:5b:a3: 78:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:4D:0D:ED:77:1A:B5:E3:0D:1D:CB:7A:DD:88:00:C4:05:BD:73:60 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/fec47f42-6995-41de-9988-39dc7a89551a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 205.251.211.0/24 Signature Algorithm: sha256WithRSAEncryption 02:7e:a6:db:ea:8e:38:ee:4a:2e:c9:aa:e6:4c:1c:df:fc:90: a1:dd:18:37:40:83:d4:11:83:e2:86:1b:e5:4f:90:2c:c8:ef: 27:01:cb:27:44:27:c1:5f:60:64:dd:69:29:2c:9e:61:af:d0: c1:62:da:cb:1a:1f:5b:1a:b4:b0:47:29:d9:9c:af:d8:c2:f5: 2e:c6:9a:87:db:56:37:b4:85:6f:c8:7a:cb:3e:fb:9b:e9:fb: 7c:dd:1e:01:51:d5:bb:47:73:77:a1:12:bd:02:6e:f2:79:7e: 60:78:e7:3b:2b:e0:93:b7:47:ad:f7:08:d8:03:84:c6:6f:a8: b2:67:cb:46:97:76:18:80:73:c1:fc:67:49:f4:ea:92:67:4d: 62:f9:93:14:b5:54:c4:ee:6a:c6:3b:75:f4:a4:7a:e5:c8:4e: 6f:7f:4b:b8:28:cb:1f:af:ee:da:85:7e:38:59:6d:a7:31:0a: 9f:3d:f3:8a:b2:0b:33:a9:51:a0:09:0f:94:9b:26:f7:99:88: 03:d8:a1:c6:da:8b:00:e1:7c:ea:c4:13:7f:e1:9e:55:aa:91: 8e:38:dd:d2:f8:2a:7e:2e:2c:16:52:7c:c8:f3:85:3e:68:51: e9:c8:78:36:5b:39:ae:09:ad:8d:b3:eb:10:a3:b1:f7:b7:e8: 85:a8:56:6a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZeGwLbt+pWScBp6m4VX+hX6SeZUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUwOTE4MTk1MjMwWhcNMjUxMDIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BiYzU0MWJiNGNhZDE1ZmE3OGQ4YTI2YmJhZjQ1NTAyODVl YmVmMDQxYWZmNmIwNTk1MmM3YWE3MDE4MjM5NDU3MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDs0gNNzJ7sfCDXdmsc3q7jKC0qW62o6hWprmPCZo2dDo6V K1HDpZ3qBhKWhmj54MEFWwDZp9uIdJOMoTg6hGawUKJcRL7cNDFnN+gvoetiL91t WCLUn0corcIP5lqbCu4Jz49ukPhPLWW6v6pG621jWW9vpIfGwrf8JjwjVyN0/GPr 2i5m/6snv7THyg5sVfjtfuAk+64IG+K9FkYrg6L5YD9mlKWaMS0Ugh9EzT6BcU3r 6j79Gsf2hYr8oAq9psO603quZ04JQWFLT+uUX19Xq3RLjpn7K/sEM/ACTZ6jYHTv Cod4kjqaaqniW1GBHzUoIrlo1+Yg8IcbHyRbo3hXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUdU0N7XcateMNHct63YgAxAW9c2AwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2ZlYzQ3ZjQyLTY5OTUtNDFkZS05OTg4LTM5ZGM3YTg5NTUxYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADN+9MwDQYJKoZIhvcNAQELBQADggEBAAJ+ptvqjjjuSi7JquZMHN/8kKHd GDdAg9QRg+KGG+VPkCzI7ycByydEJ8FfYGTdaSksnmGv0MFi2ssaH1satLBHKdmc r9jC9S7GmofbVje0hW/Iess++5vp+3zdHgFR1btHc3ehEr0CbvJ5fmB45zsr4JO3 R633CNgDhMZvqLJny0aXdhiAc8H8Z0n06pJnTWL5kxS1VMTuasY7dfSkeuXITm9/ S7goyx+v7tqFfjhZbacxCp8984qyCzOpUaAJD5SbJveZiAPYocbaiwDhfOrEE3/h nlWqkY443dL4Kn4uLBZSfMjzhT5oUenIeDZbOa4JrY2z6xCjsfe36IWoVmo= -----END CERTIFICATE-----Generated at Fri Sep 19 03:18:33 2025 by rpki-client