$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/c2d845ec-c39b-4b99-8358-e671c21de01d.roa File: c2d845ec-c39b-4b99-8358-e671c21de01d.roa (raw, json) Hash identifier: aIh2CQKYLYh3Fv0POY/5JpHsjy7RBtgzzTa5Pvm91pI= Subject key identifier: 33:55:18:FC:76:8E:39:F2:95:70:A8:31:EE:DB:17:53:6C:0C:6E:8D Certificate issuer: /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3 Certificate serial: 269F5850DB5D6ED65B6877D7FA9B15F9A1D5692F Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/c2d845ec-c39b-4b99-8358-e671c21de01d.roa Signing time: Fri 07 Aug 2026 00:50:26 +0000 ROA not before: Fri 07 Aug 2026 00:50:26 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 50.112.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:9f:58:50:db:5d:6e:d6:5b:68:77:d7:fa:9b:15:f9:a1:d5:69:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3 Validity Not Before: Aug 7 00:50:26 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=bd760717ba016b6ae4f08141985ee3e37ce6ea9da8007bed8ee74c0617309e25, CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7a:dd:a1:79:b7:d0:38:ff:04:47:c6:87:2a: 79:a9:5d:98:98:2a:71:10:0c:07:4d:94:0f:97:e3: a2:25:17:b7:01:a6:f0:87:95:cd:22:66:86:68:5b: c3:8d:be:7e:1e:9c:06:b6:26:2d:9e:59:cc:10:4e: 1f:8b:41:c0:c5:3b:9b:03:c8:21:5d:16:fd:17:40: 0d:03:53:44:2c:bd:dc:47:51:fc:22:47:5a:c0:d1: 55:07:50:4b:95:f4:dd:9e:4a:d5:ea:cb:ef:ac:7a: e1:3a:98:75:db:4e:d3:9d:1d:90:9b:e8:86:5b:d2: be:56:35:02:0e:aa:db:39:24:53:99:d0:79:7c:99: 34:8d:45:e8:fc:99:dd:02:0f:bb:b0:af:8c:e2:81: eb:8b:3d:64:44:17:83:94:15:d9:ff:3e:82:9a:d9: e9:dc:2c:0e:2b:95:ed:83:67:ab:68:f5:9b:fd:6f: 14:e3:70:e8:4c:0d:43:20:3f:c5:46:31:89:db:69: 32:c6:29:e8:53:fa:93:56:9b:95:64:15:f6:62:ad: cd:01:5b:6e:c8:91:dd:36:60:f5:a9:08:c9:fb:05: 0f:1b:6e:4a:55:ab:6a:d6:d1:69:9e:30:9f:72:4d: 04:ea:e9:bc:6c:b7:18:22:11:59:73:e8:99:d0:1e: 75:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:55:18:FC:76:8E:39:F2:95:70:A8:31:EE:DB:17:53:6C:0C:6E:8D X509v3 Authority Key Identifier: keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/c2d845ec-c39b-4b99-8358-e671c21de01d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.112.240.0/20 Signature Algorithm: sha256WithRSAEncryption 28:69:11:7f:da:8c:2d:b3:a4:ed:b6:06:71:16:83:9e:a0:00: 2a:a5:f1:87:81:bb:5c:eb:4c:8b:13:18:39:98:ec:ff:6f:bc: a2:a7:ad:52:11:19:c8:89:38:64:ea:bb:34:62:6d:c5:13:1d: bb:69:4b:69:fb:7c:ec:57:0e:44:66:0f:35:88:6b:a5:93:59: c5:4c:9b:67:d9:4a:1b:89:df:1d:87:bd:5f:ae:5f:ce:07:3c: 9a:9c:ea:14:f3:83:b9:a8:f5:8a:c7:36:fd:41:72:a9:0e:b4: 1a:7d:30:12:da:70:22:fc:15:2b:2d:8f:ef:f2:f2:0a:a3:e0: af:9f:7c:cc:7f:8f:e4:51:d1:9c:da:62:6d:c1:30:b3:0a:a6: da:b7:bc:20:af:52:62:b3:fe:91:99:16:5f:d6:da:dd:e8:73: 0b:a7:c3:01:5a:80:89:e1:da:1e:d8:c8:3e:89:8c:45:36:d5: 36:ae:42:74:de:0e:9b:ed:2c:83:ac:56:3b:52:c3:c0:9c:d8: 74:f4:a8:2b:fb:87:a3:ff:44:4f:3f:b9:aa:20:a3:aa:ed:6d: e0:06:1c:ce:34:4f:a2:9d:c3:14:08:3d:0f:52:3f:85:ee:cb: 11:67:6b:d2:ee:84:e4:2d:11:f5:f9:fd:de:0f:76:a3:d8:43: 0d:02:c7:f6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJp9YUNtdbtZbaHfX+psV+aHVaS8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTE1ZDhhYTEwZDYyZGJkZDM0ODMyNjg3NmJhNTY3NTNj Yjk5YjQ2NGNjNDU1MzI0YjMwHhcNMjYwODA3MDA1MDI2WhcNMjYxMTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BiZDc2MDcxN2JhMDE2YjZhZTRmMDgxNDE5ODVlZTNlMzdj ZTZlYTlkYTgwMDdiZWQ4ZWU3NGMwNjE3MzA5ZTI1MS0wKwYDVQQDEyRkZGZiYzk3 Yy03YmVkLTQwZGYtOTVjYS1lNjY0YjI5ZDdiMjcwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCcet2hebfQOP8ER8aHKnmpXZiYKnEQDAdNlA+X46IlF7cB pvCHlc0iZoZoW8ONvn4enAa2Ji2eWcwQTh+LQcDFO5sDyCFdFv0XQA0DU0QsvdxH UfwiR1rA0VUHUEuV9N2eStXqy++seuE6mHXbTtOdHZCb6IZb0r5WNQIOqts5JFOZ 0Hl8mTSNRej8md0CD7uwr4zigeuLPWREF4OUFdn/PoKa2encLA4rle2DZ6to9Zv9 bxTjcOhMDUMgP8VGMYnbaTLGKehT+pNWm5VkFfZirc0BW27Ikd02YPWpCMn7BQ8b bkpVq2rW0WmeMJ9yTQTq6bxstxgiEVlz6JnQHnWBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUM1UY/HaOOfKVcKgx7tsXU2wMbo0wHwYDVR0jBBgwFoAUkS3GDddkKYK8 rn+B/jxMEnKAIh8wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83MTg4YWMyNC0w OWNjLTRmMjAtOWRiZC1jZDkwMDVkMjc5N2UvYTE1ZDhhYTEwZDYyZGJkZDM0ODMy Njg3NmJhNTY3NTNjYjk5YjQ2NGNjNDU1MzI0YjMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNjAyYTI2ZTUtNGE5ZS00ZTVlLTg5ZjAtZWY4 OTE0OTBkOWM5L2MyZDg0NWVjLWMzOWItNGI5OS04MzU4LWU2NzFjMjFkZTAxZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzYwMmEyNmU1LTRhOWUtNGU1ZS04OWYw LWVmODkxNDkwZDljOS9ZdHZkTklNbWgydWxaMVBMbWJSa3pFVlRKTE0uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQycPAwDQYJKoZIhvcNAQELBQADggEBAChpEX/ajC2zpO22BnEWg56gACql 8YeBu1zrTIsTGDmY7P9vvKKnrVIRGciJOGTquzRibcUTHbtpS2n7fOxXDkRmDzWI a6WTWcVMm2fZShuJ3x2HvV+uX84HPJqc6hTzg7mo9YrHNv1BcqkOtBp9MBLacCL8 FSstj+/y8gqj4K+ffMx/j+RR0ZzaYm3BMLMKptq3vCCvUmKz/pGZFl/W2t3ocwun wwFagInh2h7YyD6JjEU21TauQnTeDpvtLIOsVjtSw8Cc2HT0qCv7h6P/RE8/uaog o6rtbeAGHM40T6KdwxQIPQ9SP4XuyxFna9LuhOQtEfX5/d4PdqPYQw0Cx/Y= -----END CERTIFICATE-----Generated at Sun Sep 27 05:15:30 2026 by rpki-client