$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/24dfe680-d3e6-4d3d-8f28-ce2f99e02db6.roa File: 24dfe680-d3e6-4d3d-8f28-ce2f99e02db6.roa (raw, json) Hash identifier: Eeww0C4iFJ5ixA9GbRL45C67dNsP/YULOZ1nz2ptm14= Subject key identifier: 6C:77:B3:3F:32:08:02:DD:44:DB:A9:72:42:8A:98:6B:F3:01:AD:C1 Certificate issuer: /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3 Certificate serial: 2C703D766A8A9AB2F1894AD5B27A622B66C322E9 Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/24dfe680-d3e6-4d3d-8f28-ce2f99e02db6.roa Signing time: Tue 05 Aug 2025 15:10:04 +0000 ROA not before: Tue 05 Aug 2025 15:10:04 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 50.112.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:70:3d:76:6a:8a:9a:b2:f1:89:4a:d5:b2:7a:62:2b:66:c3:22:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3 Validity Not Before: Aug 5 15:10:04 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=27584029433cda2c82e832787730d566cddf35a569e6262a39e0b59057e99d34, CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ec:aa:20:b3:8e:8b:13:62:76:5f:c4:cb:7f: e5:e6:03:93:29:83:77:0e:b7:21:05:94:58:84:f3: b0:e2:53:1d:75:bc:d3:66:96:aa:c9:9d:eb:af:5a: 80:37:d6:ad:27:27:dd:78:dd:6a:2d:b5:59:c8:b7: 84:a6:d0:43:7e:e9:7c:d0:4b:b6:93:41:f7:ee:38: fa:1b:3e:16:67:1e:5a:ed:d5:d0:6e:b8:00:ad:e9: 9e:2c:31:d9:0c:f2:c6:36:69:0c:f3:83:0b:31:b5: 66:3d:f7:63:d7:99:26:09:ee:5d:d7:5a:46:26:49: 82:07:2d:88:17:a6:2e:8a:1c:dd:4d:1a:48:ff:71: b6:2b:6f:43:b7:ce:ab:2b:e6:68:e8:7f:a2:38:fc: 14:5b:ad:ba:41:4d:2a:28:03:7b:7f:d3:8d:b3:21: 61:b9:2d:21:2e:4e:87:6b:5e:24:eb:1a:2e:65:3c: df:ac:4c:79:80:02:8b:95:df:10:23:96:c0:ca:29: 2b:9e:00:03:14:c6:09:05:38:55:0d:e7:68:18:c1: e0:32:a7:1c:d2:39:80:24:77:e0:11:ac:56:dd:5c: 34:8c:34:4d:95:d6:99:0e:fd:d8:ca:55:06:7c:ce: 04:39:03:77:3a:bc:c5:39:0e:0f:fd:98:0e:ad:eb: 98:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:77:B3:3F:32:08:02:DD:44:DB:A9:72:42:8A:98:6B:F3:01:AD:C1 X509v3 Authority Key Identifier: keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/24dfe680-d3e6-4d3d-8f28-ce2f99e02db6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.112.32.0/19 Signature Algorithm: sha256WithRSAEncryption 65:5c:6b:f9:99:13:af:df:af:20:d1:b8:63:c6:aa:3a:d1:b7: 2e:52:05:e3:57:f9:c5:ed:1a:ee:84:e2:9c:31:e2:6f:64:28: bb:35:9a:0c:0b:34:19:0c:a5:38:9d:c2:75:0d:b6:8b:88:b9: 45:46:e0:22:99:d4:ea:1f:05:f3:56:b2:7c:3f:20:88:b9:a0: 33:9a:af:e3:94:f7:75:0f:77:aa:6a:ba:72:22:f7:89:a9:df: 48:8a:95:8f:76:74:c4:70:ac:e0:1a:1b:8e:66:9a:93:5f:9a: 6a:1d:ec:15:44:f2:60:dc:e4:17:c0:d1:91:2f:c5:5f:fe:89: de:f6:e5:a9:87:74:2f:c1:43:70:ee:f5:d2:99:cf:2b:c7:53: be:c0:0c:4f:12:3d:d6:21:77:ad:2d:a0:e2:f9:46:b8:32:c3: c2:4b:48:f7:8e:6a:47:e1:d9:30:6b:bd:10:d5:08:06:af:d2: c2:2d:3f:66:df:d8:90:b2:dd:0f:49:78:f8:84:e1:fa:61:32: 03:4c:99:c4:69:a4:6c:a9:c7:66:d0:3c:b3:96:7b:97:ca:dd: 94:d8:b8:6d:a5:86:ea:eb:ae:8d:32:86:e8:e8:b8:63:62:08: 3d:49:0f:02:e7:56:a8:35:2f:ff:87:c3:11:55:44:4d:87:49: 47:ce:ef:28 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULHA9dmqKmrLxiUrVsnpiK2bDIukwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTE1ZDhhYTEwZDYyZGJkZDM0ODMyNjg3NmJhNTY3NTNj Yjk5YjQ2NGNjNDU1MzI0YjMwHhcNMjUwODA1MTUxMDA0WhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AyNzU4NDAyOTQzM2NkYTJjODJlODMyNzg3NzMwZDU2NmNk ZGYzNWE1NjllNjI2MmEzOWUwYjU5MDU3ZTk5ZDM0MS0wKwYDVQQDEyRkZGZiYzk3 Yy03YmVkLTQwZGYtOTVjYS1lNjY0YjI5ZDdiMjcwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCG7Kogs46LE2J2X8TLf+XmA5Mpg3cOtyEFlFiE87DiUx11 vNNmlqrJneuvWoA31q0nJ9143WottVnIt4Sm0EN+6XzQS7aTQffuOPobPhZnHlrt 1dBuuACt6Z4sMdkM8sY2aQzzgwsxtWY992PXmSYJ7l3XWkYmSYIHLYgXpi6KHN1N Gkj/cbYrb0O3zqsr5mjof6I4/BRbrbpBTSooA3t/042zIWG5LSEuTodrXiTrGi5l PN+sTHmAAouV3xAjlsDKKSueAAMUxgkFOFUN52gYweAypxzSOYAkd+ARrFbdXDSM NE2V1pkO/djKVQZ8zgQ5A3c6vMU5Dg/9mA6t65g/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUbHezPzIIAt1E26lyQoqYa/MBrcEwHwYDVR0jBBgwFoAUkS3GDddkKYK8 rn+B/jxMEnKAIh8wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83MTg4YWMyNC0w OWNjLTRmMjAtOWRiZC1jZDkwMDVkMjc5N2UvYTE1ZDhhYTEwZDYyZGJkZDM0ODMy Njg3NmJhNTY3NTNjYjk5YjQ2NGNjNDU1MzI0YjMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNjAyYTI2ZTUtNGE5ZS00ZTVlLTg5ZjAtZWY4 OTE0OTBkOWM5LzI0ZGZlNjgwLWQzZTYtNGQzZC04ZjI4LWNlMmY5OWUwMmRiNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzYwMmEyNmU1LTRhOWUtNGU1ZS04OWYw LWVmODkxNDkwZDljOS9ZdHZkTklNbWgydWxaMVBMbWJSa3pFVlRKTE0uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUycCAwDQYJKoZIhvcNAQELBQADggEBAGVca/mZE6/fryDRuGPGqjrRty5S BeNX+cXtGu6E4pwx4m9kKLs1mgwLNBkMpTidwnUNtouIuUVG4CKZ1OofBfNWsnw/ IIi5oDOar+OU93UPd6pqunIi94mp30iKlY92dMRwrOAaG45mmpNfmmod7BVE8mDc 5BfA0ZEvxV/+id725amHdC/BQ3Du9dKZzyvHU77ADE8SPdYhd60toOL5Rrgyw8JL SPeOakfh2TBrvRDVCAav0sItP2bf2JCy3Q9JePiE4fphMgNMmcRppGypx2bQPLOW e5fK3ZTYuG2lhurrro0yhujouGNiCD1JDwLnVqg1L/+HwxFVRE2HSUfO7yg= -----END CERTIFICATE-----Generated at Wed Aug 20 10:40:15 2025 by rpki-client