$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/87a321d9-94a4-41d4-9de7-5617146603fa.roa File: 87a321d9-94a4-41d4-9de7-5617146603fa.roa (raw, json) Hash identifier: 3gYATByJX3fOpQgK0AzJpgIC2BigbGVI14iftdw2wS4= Subject key identifier: 5B:B3:CB:F6:31:DF:E6:83:F3:58:6D:2B:80:78:FB:9B:CA:8A:39:EF Certificate issuer: /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3 Certificate serial: 660282BB15FA6E966F2619E556C4C5205C08376A Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/87a321d9-94a4-41d4-9de7-5617146603fa.roa Signing time: Fri 26 Sep 2025 00:50:34 +0000 ROA not before: Fri 26 Sep 2025 00:50:34 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 50.112.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:02:82:bb:15:fa:6e:96:6f:26:19:e5:56:c4:c5:20:5c:08:37:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3 Validity Not Before: Sep 26 00:50:34 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=48ecddcd8a2d57e0a5081c1171cc264b45d0284e00d7d3b30dea4bf594575071, CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:16:34:69:18:46:cc:36:98:99:20:9e:2e:99: 96:2b:c7:a2:b0:95:5c:96:3a:c9:73:7f:c3:6c:84: 70:02:5f:95:c8:c4:16:9a:f9:6b:dc:bc:f0:7b:ae: de:26:ed:dc:8c:78:76:39:d5:da:15:80:38:02:5d: d1:6f:de:bf:57:3d:6a:c2:47:2b:a3:c4:18:0f:0c: 5d:84:f6:15:5a:77:24:0a:85:09:49:02:6c:26:50: 97:15:a9:66:3b:a1:88:fb:b8:75:bf:24:a1:d9:66: ff:b9:45:72:e2:52:55:87:68:f2:ae:40:c7:ce:9f: 38:b8:ee:69:68:b2:eb:f7:7c:71:0f:7f:b1:51:d2: 12:a2:f2:e1:10:e9:a9:8f:f8:4b:5c:c3:8f:d2:78: 57:9d:10:04:f6:91:98:b2:34:fc:aa:d0:44:98:90: b3:df:65:37:56:2b:18:a6:75:c9:ee:15:11:5a:25: 49:8c:bb:20:e4:61:b4:0f:9b:f8:cf:4d:80:48:a9: 5c:c0:23:c7:be:78:b9:9c:b6:f5:d3:55:58:59:3c: 36:6b:48:ae:60:c5:9c:20:6a:fd:5a:79:75:da:e9: 2d:5c:2a:11:3b:3d:97:13:33:b8:a8:f9:79:d8:70: 3e:84:e5:2f:d0:09:25:9f:c4:37:5e:48:d4:e6:00: 76:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:B3:CB:F6:31:DF:E6:83:F3:58:6D:2B:80:78:FB:9B:CA:8A:39:EF X509v3 Authority Key Identifier: keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/87a321d9-94a4-41d4-9de7-5617146603fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.112.0.0/17 Signature Algorithm: sha256WithRSAEncryption 4f:74:b2:47:37:4e:06:d0:37:37:08:5d:63:02:e0:db:00:0a: af:6a:9d:06:ae:03:8c:08:c9:e7:18:bc:b2:6d:ee:bf:15:ba: d7:8d:60:f3:1d:08:04:61:fe:38:be:10:c2:e7:af:2a:53:87: 4c:ee:1f:6c:5c:dd:55:e0:a1:50:ef:ba:29:ac:6d:17:89:be: 53:17:0c:2b:09:bd:10:9c:e0:92:02:a5:0f:88:7f:fc:59:e1: d3:bb:de:31:42:f0:9d:2f:3a:bb:0a:71:66:96:74:2f:e3:09: ec:5f:3a:80:92:b6:cb:88:3a:ee:a1:17:40:ea:e0:90:96:36: 01:48:f4:ee:6d:fe:61:48:ab:2a:07:1b:45:42:4f:38:f0:76: fe:59:87:80:cb:54:f6:71:c8:06:02:04:7e:fa:72:bb:a6:07: 96:37:6f:13:6a:bc:ed:84:5a:86:d7:1a:79:e4:32:d8:14:3e: fc:17:be:90:2a:96:4d:d6:79:3b:e8:b4:e0:12:f2:aa:33:4b: 64:ff:ea:ad:7c:65:54:c1:2a:82:e3:c5:11:c2:a9:32:d3:56: a4:47:26:09:a1:f6:23:c8:0a:ac:35:65:0b:e6:99:d3:80:14: 1e:41:66:fd:35:72:a2:7b:cd:f4:35:31:01:a6:1f:4f:a5:96: d7:a8:1b:2e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZgKCuxX6bpZvJhnlVsTFIFwIN2owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTE1ZDhhYTEwZDYyZGJkZDM0ODMyNjg3NmJhNTY3NTNj Yjk5YjQ2NGNjNDU1MzI0YjMwHhcNMjUwOTI2MDA1MDM0WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A0OGVjZGRjZDhhMmQ1N2UwYTUwODFjMTE3MWNjMjY0YjQ1 ZDAyODRlMDBkN2QzYjMwZGVhNGJmNTk0NTc1MDcxMS0wKwYDVQQDEyRkZGZiYzk3 Yy03YmVkLTQwZGYtOTVjYS1lNjY0YjI5ZDdiMjcwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCLFjRpGEbMNpiZIJ4umZYrx6KwlVyWOslzf8NshHACX5XI xBaa+WvcvPB7rt4m7dyMeHY51doVgDgCXdFv3r9XPWrCRyujxBgPDF2E9hVadyQK hQlJAmwmUJcVqWY7oYj7uHW/JKHZZv+5RXLiUlWHaPKuQMfOnzi47mlosuv3fHEP f7FR0hKi8uEQ6amP+Etcw4/SeFedEAT2kZiyNPyq0ESYkLPfZTdWKximdcnuFRFa JUmMuyDkYbQPm/jPTYBIqVzAI8e+eLmctvXTVVhZPDZrSK5gxZwgav1aeXXa6S1c KhE7PZcTM7io+XnYcD6E5S/QCSWfxDdeSNTmAHbpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUW7PL9jHf5oPzWG0rgHj7m8qKOe8wHwYDVR0jBBgwFoAUkS3GDddkKYK8 rn+B/jxMEnKAIh8wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83MTg4YWMyNC0w OWNjLTRmMjAtOWRiZC1jZDkwMDVkMjc5N2UvYTE1ZDhhYTEwZDYyZGJkZDM0ODMy Njg3NmJhNTY3NTNjYjk5YjQ2NGNjNDU1MzI0YjMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNjAyYTI2ZTUtNGE5ZS00ZTVlLTg5ZjAtZWY4 OTE0OTBkOWM5Lzg3YTMyMWQ5LTk0YTQtNDFkNC05ZGU3LTU2MTcxNDY2MDNmYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzYwMmEyNmU1LTRhOWUtNGU1ZS04OWYw LWVmODkxNDkwZDljOS9ZdHZkTklNbWgydWxaMVBMbWJSa3pFVlRKTE0uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcycAAwDQYJKoZIhvcNAQELBQADggEBAE90skc3TgbQNzcIXWMC4NsACq9q nQauA4wIyecYvLJt7r8VuteNYPMdCARh/ji+EMLnrypTh0zuH2xc3VXgoVDvuims bReJvlMXDCsJvRCc4JICpQ+If/xZ4dO73jFC8J0vOrsKcWaWdC/jCexfOoCStsuI Ou6hF0Dq4JCWNgFI9O5t/mFIqyoHG0VCTzjwdv5Zh4DLVPZxyAYCBH76crumB5Y3 bxNqvO2EWobXGnnkMtgUPvwXvpAqlk3WeTvotOAS8qozS2T/6q18ZVTBKoLjxRHC qTLTVqRHJgmh9iPICqw1ZQvmmdOAFB5BZv01cqJ7zfQ1MQGmH0+llteoGy4= -----END CERTIFICATE-----Generated at Mon Oct 20 13:53:04 2025 by rpki-client