$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/2788fd0d-0141-46b1-b160-e9916a5caddd.roa File: 2788fd0d-0141-46b1-b160-e9916a5caddd.roa (raw, json) Hash identifier: PR6vGgRt7Mr+6pOBjnRlCyZR/GA51tvYi8ZLWdLzkvk= Subject key identifier: 65:B7:4D:9D:C4:AE:74:AB:72:30:6E:7C:AA:D9:DF:B3:96:A4:8D:D1 Certificate issuer: /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3 Certificate serial: 6D6CCDD3DFD93E9389F1FFD0A12BDD3FBA91886B Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/2788fd0d-0141-46b1-b160-e9916a5caddd.roa Signing time: Fri 26 Sep 2025 00:50:06 +0000 ROA not before: Fri 26 Sep 2025 00:50:06 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 50.112.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:6c:cd:d3:df:d9:3e:93:89:f1:ff:d0:a1:2b:dd:3f:ba:91:88:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3 Validity Not Before: Sep 26 00:50:06 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=5b6649e78ab95be3f6945ccd28eb860dc23066e74247e0bade1c45627529a46f, CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:81:c1:78:5d:7d:e0:d5:bf:30:93:48:f4:6f: c4:d1:83:9e:0b:73:05:ae:09:dd:d1:27:b2:e9:f6: 5d:ec:e6:f9:b4:f5:10:3a:94:4a:f6:ee:76:22:37: 23:d9:26:a7:1b:2a:fa:60:5d:bc:1b:e7:50:4a:7d: 6c:b1:39:8f:a8:cf:9f:4d:e6:98:ca:cc:02:59:e6: 5a:33:e5:b4:65:b5:57:60:b3:57:75:88:5e:da:dc: 32:cc:8e:89:ec:03:3a:37:cc:e5:b2:8c:03:af:a8: 15:f1:54:31:28:81:14:4e:a9:5e:78:d2:66:a8:0e: 30:b2:ac:80:b9:0e:6e:cb:6c:77:93:cd:5f:fb:b6: c4:d2:99:b6:27:b8:88:28:63:61:f6:e6:fb:49:32: a0:00:35:6e:dc:e0:be:bd:ff:51:51:0a:5f:a0:51: 00:c7:a7:08:69:ee:79:f3:75:c2:91:c7:c1:be:7a: 09:60:e4:f2:76:78:12:d1:43:43:37:91:b1:38:73: 6f:e0:f3:6f:49:8b:b9:1a:fa:8e:9a:eb:ef:b6:e0: d9:4d:41:78:b0:78:38:fd:9f:70:bf:9c:c0:d1:7b: d0:a1:15:54:20:a9:c2:08:bf:c9:5b:99:50:95:b8: f3:42:04:5b:7b:b8:76:78:69:63:5d:b5:bc:f9:8c: cd:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:B7:4D:9D:C4:AE:74:AB:72:30:6E:7C:AA:D9:DF:B3:96:A4:8D:D1 X509v3 Authority Key Identifier: keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/2788fd0d-0141-46b1-b160-e9916a5caddd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.112.0.0/24 Signature Algorithm: sha256WithRSAEncryption 98:ff:12:c0:fd:34:10:40:ca:18:48:42:86:f9:6e:45:97:93: 83:bc:14:a0:3d:31:c4:b3:99:4b:c9:b3:2f:95:58:ad:eb:b6: 76:86:68:8a:b7:2b:ae:c6:ef:3f:1d:76:7f:2d:26:c7:bb:e1: f0:d7:f3:f7:03:7b:3c:84:cb:8a:8e:31:a4:9c:5f:31:2e:78: f7:ee:ce:f2:00:28:b0:61:38:fd:6a:ad:2e:77:60:4c:d2:10: 19:93:60:6f:48:09:81:7c:c9:ed:3c:c6:08:bc:9e:6e:9d:7e: be:4d:45:c0:b8:92:05:68:9a:fa:a3:cf:04:67:67:9d:4c:b2: 6c:0d:5e:2e:b7:bc:d2:86:b3:43:8a:95:d3:46:30:bc:ec:6e: 32:df:fe:af:04:a8:88:ee:ac:13:fb:06:a8:68:bf:9a:6c:88: d4:c1:c0:3c:e3:8d:e8:c1:e7:42:af:ce:ce:f7:4c:c9:d1:75: b9:03:19:65:77:b4:06:33:a2:91:34:bc:4b:b6:8d:7d:c3:33: 5a:d2:94:b1:d8:e4:7a:72:e3:85:34:bd:9a:38:49:14:8d:c1: 80:56:ea:a9:72:c3:e4:95:5d:2f:8c:6f:92:28:57:3e:63:49: 63:42:eb:45:ac:d0:5e:ba:17:b3:6a:3c:23:f2:8a:4b:87:80: 00:8f:6a:41 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbWzN09/ZPpOJ8f/QoSvdP7qRiGswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTE1ZDhhYTEwZDYyZGJkZDM0ODMyNjg3NmJhNTY3NTNj Yjk5YjQ2NGNjNDU1MzI0YjMwHhcNMjUwOTI2MDA1MDA2WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A1YjY2NDllNzhhYjk1YmUzZjY5NDVjY2QyOGViODYwZGMy MzA2NmU3NDI0N2UwYmFkZTFjNDU2Mjc1MjlhNDZmMS0wKwYDVQQDEyRkZGZiYzk3 Yy03YmVkLTQwZGYtOTVjYS1lNjY0YjI5ZDdiMjcwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtgcF4XX3g1b8wk0j0b8TRg54LcwWuCd3RJ7Lp9l3s5vm0 9RA6lEr27nYiNyPZJqcbKvpgXbwb51BKfWyxOY+oz59N5pjKzAJZ5loz5bRltVdg s1d1iF7a3DLMjonsAzo3zOWyjAOvqBXxVDEogRROqV540maoDjCyrIC5Dm7LbHeT zV/7tsTSmbYnuIgoY2H25vtJMqAANW7c4L69/1FRCl+gUQDHpwhp7nnzdcKRx8G+ eglg5PJ2eBLRQ0M3kbE4c2/g829Ji7ka+o6a6++24NlNQXiweDj9n3C/nMDRe9Ch FVQgqcIIv8lbmVCVuPNCBFt7uHZ4aWNdtbz5jM2TAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZbdNncSudKtyMG58qtnfs5akjdEwHwYDVR0jBBgwFoAUkS3GDddkKYK8 rn+B/jxMEnKAIh8wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83MTg4YWMyNC0w OWNjLTRmMjAtOWRiZC1jZDkwMDVkMjc5N2UvYTE1ZDhhYTEwZDYyZGJkZDM0ODMy Njg3NmJhNTY3NTNjYjk5YjQ2NGNjNDU1MzI0YjMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNjAyYTI2ZTUtNGE5ZS00ZTVlLTg5ZjAtZWY4 OTE0OTBkOWM5LzI3ODhmZDBkLTAxNDEtNDZiMS1iMTYwLWU5OTE2YTVjYWRkZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzYwMmEyNmU1LTRhOWUtNGU1ZS04OWYw LWVmODkxNDkwZDljOS9ZdHZkTklNbWgydWxaMVBMbWJSa3pFVlRKTE0uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAycAAwDQYJKoZIhvcNAQELBQADggEBAJj/EsD9NBBAyhhIQob5bkWXk4O8 FKA9McSzmUvJsy+VWK3rtnaGaIq3K67G7z8ddn8tJse74fDX8/cDezyEy4qOMaSc XzEuePfuzvIAKLBhOP1qrS53YEzSEBmTYG9ICYF8ye08xgi8nm6dfr5NRcC4kgVo mvqjzwRnZ51MsmwNXi63vNKGs0OKldNGMLzsbjLf/q8EqIjurBP7Bqhov5psiNTB wDzjjejB50Kvzs73TMnRdbkDGWV3tAYzopE0vEu2jX3DM1rSlLHY5Hpy44U0vZo4 SRSNwYBW6qlyw+SVXS+Mb5IoVz5jSWNC60Ws0F66F7NqPCPyikuHgACPakE= -----END CERTIFICATE-----Generated at Mon Oct 20 13:53:23 2025 by rpki-client