$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/b0174157-080f-44e0-b58f-59731776aac9.roa File: b0174157-080f-44e0-b58f-59731776aac9.roa (raw, json) Hash identifier: y/xzWYHKwIAMBIkFsTrYi9eFum2QdycbpVZbPbjL1qQ= Subject key identifier: 55:F0:F9:1A:EB:BA:92:C0:01:90:EF:19:FB:C7:10:46:DB:73:1A:E8 Certificate issuer: /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3 Certificate serial: 17EDD3E7B134B9E958433F390E7757CC08FDC16F Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/b0174157-080f-44e0-b58f-59731776aac9.roa Signing time: Fri 26 Sep 2025 00:50:12 +0000 ROA not before: Fri 26 Sep 2025 00:50:12 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 50.112.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:ed:d3:e7:b1:34:b9:e9:58:43:3f:39:0e:77:57:cc:08:fd:c1:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3 Validity Not Before: Sep 26 00:50:12 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=c6560a2df16b954e33fba2baf801e749d9f293831416bb9b1074e82fb33cecba, CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2c:17:96:60:a4:f0:cc:90:9f:d4:c6:77:c0: fc:e2:23:54:00:7c:15:d3:f4:25:94:7a:65:6b:59: 61:ec:89:dd:1b:53:fb:48:ae:a0:26:13:c4:12:20: be:a1:5c:8e:9f:8c:bd:69:5d:89:89:53:3c:66:12: 97:bb:76:a9:eb:48:4a:55:b2:cb:10:46:9d:74:07: e8:c4:2d:b3:eb:4e:9e:b5:07:41:b9:c6:b4:72:ec: be:82:ab:59:99:10:74:fd:60:19:16:69:22:1b:1a: e5:80:7e:85:b8:aa:64:9c:85:68:84:ae:47:01:74: 3a:43:9b:e1:cf:d3:2b:54:06:fa:aa:97:b9:d5:ac: e7:75:de:a4:73:83:f8:4f:79:ca:a0:6b:49:6d:ca: aa:50:10:fc:e5:61:5f:67:b2:6d:d3:84:5c:a4:bc: 43:96:0b:6d:63:e7:a0:19:eb:05:d3:30:52:28:7e: 3a:ee:5e:fb:00:84:10:78:c6:5a:ad:14:7a:64:73: bb:0a:f2:82:09:ea:5e:a1:a0:6f:87:68:99:a2:89: 1d:4a:57:2b:45:9e:84:b0:d0:5c:5f:d2:e8:b4:28: 0c:86:93:34:eb:75:be:3e:6c:a4:02:ce:dc:60:db: 26:1b:af:ff:83:98:dd:67:0f:58:5b:24:cd:d9:4e: 0f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:F0:F9:1A:EB:BA:92:C0:01:90:EF:19:FB:C7:10:46:DB:73:1A:E8 X509v3 Authority Key Identifier: keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/b0174157-080f-44e0-b58f-59731776aac9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.112.64.0/20 Signature Algorithm: sha256WithRSAEncryption 36:d2:4c:ff:a6:16:14:ca:91:d0:58:33:e4:5b:bc:6f:22:54: dd:c3:da:33:1b:6c:13:83:f3:fc:c9:c9:90:2a:55:78:2d:e7: e8:cb:1b:58:34:20:37:07:2f:c1:e2:23:6b:95:b6:d8:bf:80: 8b:28:fc:d7:e2:6a:95:7d:72:24:44:78:7a:10:9b:9d:92:09: 5a:ea:eb:9b:0a:f7:7e:bc:28:df:c0:a3:7b:3f:4f:d0:24:c7: d5:7e:05:e8:ea:b9:56:41:ca:55:2c:3b:12:d4:a0:47:ca:1f: a2:0e:d7:2f:56:47:b7:d0:87:d6:61:e2:7c:00:9f:1f:66:5b: 2b:e7:4a:25:42:0f:fd:70:9a:4c:8b:ed:3c:40:32:77:2b:5b: 00:41:da:d7:6c:6c:99:4c:8c:50:9b:54:34:cd:68:e8:c8:ae: 95:9c:c1:ce:73:f3:e3:34:97:c3:ab:6d:80:ee:7e:a7:1f:c6: ac:e4:ac:98:7e:61:5a:4c:88:07:8b:d5:a8:73:49:9e:31:77: eb:c9:7f:14:9f:c0:a2:ba:f4:18:55:b9:07:ce:82:01:ca:eb: d5:2a:42:59:64:3c:6c:87:51:95:c6:3c:ed:94:f9:53:73:4a: fb:6a:5e:ba:42:1a:e1:c7:0b:cc:5f:1a:74:30:6e:8d:b4:81: eb:fb:33:d5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUF+3T57E0uelYQz85DndXzAj9wW8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTE1ZDhhYTEwZDYyZGJkZDM0ODMyNjg3NmJhNTY3NTNj Yjk5YjQ2NGNjNDU1MzI0YjMwHhcNMjUwOTI2MDA1MDEyWhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BjNjU2MGEyZGYxNmI5NTRlMzNmYmEyYmFmODAxZTc0OWQ5 ZjI5MzgzMTQxNmJiOWIxMDc0ZTgyZmIzM2NlY2JhMS0wKwYDVQQDEyRkZGZiYzk3 Yy03YmVkLTQwZGYtOTVjYS1lNjY0YjI5ZDdiMjcwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCbLBeWYKTwzJCf1MZ3wPziI1QAfBXT9CWUemVrWWHsid0b U/tIrqAmE8QSIL6hXI6fjL1pXYmJUzxmEpe7dqnrSEpVsssQRp10B+jELbPrTp61 B0G5xrRy7L6Cq1mZEHT9YBkWaSIbGuWAfoW4qmSchWiErkcBdDpDm+HP0ytUBvqq l7nVrOd13qRzg/hPecqga0ltyqpQEPzlYV9nsm3ThFykvEOWC21j56AZ6wXTMFIo fjruXvsAhBB4xlqtFHpkc7sK8oIJ6l6hoG+HaJmiiR1KVytFnoSw0Fxf0ui0KAyG kzTrdb4+bKQCztxg2yYbr/+DmN1nD1hbJM3ZTg8LAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUVfD5Guu6ksABkO8Z+8cQRttzGugwHwYDVR0jBBgwFoAUkS3GDddkKYK8 rn+B/jxMEnKAIh8wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83MTg4YWMyNC0w OWNjLTRmMjAtOWRiZC1jZDkwMDVkMjc5N2UvYTE1ZDhhYTEwZDYyZGJkZDM0ODMy Njg3NmJhNTY3NTNjYjk5YjQ2NGNjNDU1MzI0YjMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNjAyYTI2ZTUtNGE5ZS00ZTVlLTg5ZjAtZWY4 OTE0OTBkOWM5L2IwMTc0MTU3LTA4MGYtNDRlMC1iNThmLTU5NzMxNzc2YWFjOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzYwMmEyNmU1LTRhOWUtNGU1ZS04OWYw LWVmODkxNDkwZDljOS9ZdHZkTklNbWgydWxaMVBMbWJSa3pFVlRKTE0uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQycEAwDQYJKoZIhvcNAQELBQADggEBADbSTP+mFhTKkdBYM+RbvG8iVN3D 2jMbbBOD8/zJyZAqVXgt5+jLG1g0IDcHL8HiI2uVtti/gIso/NfiapV9ciREeHoQ m52SCVrq65sK9368KN/Ao3s/T9Akx9V+BejquVZBylUsOxLUoEfKH6IO1y9WR7fQ h9Zh4nwAnx9mWyvnSiVCD/1wmkyL7TxAMncrWwBB2tdsbJlMjFCbVDTNaOjIrpWc wc5z8+M0l8OrbYDufqcfxqzkrJh+YVpMiAeL1ahzSZ4xd+vJfxSfwKK69BhVuQfO ggHK69UqQllkPGyHUZXGPO2U+VNzSvtqXrpCGuHHC8xfGnQwbo20gev7M9U= -----END CERTIFICATE-----Generated at Mon Oct 20 13:52:32 2025 by rpki-client