$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/cfa9fbaf-d677-4bfa-9d13-802dafc8c30d.roa File: cfa9fbaf-d677-4bfa-9d13-802dafc8c30d.roa (raw, json) Hash identifier: +nAWteRrfwHTSSb5vAtAqhbZHy8Na88h+BLD5ExOxm4= Subject key identifier: CB:18:F8:A5:09:29:1F:9B:5F:95:D4:05:79:6F:08:11:A7:1E:B7:D7 Certificate issuer: /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3 Certificate serial: 52D8870E99754EF43DCBE3F188ADEE0E4EB93742 Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/cfa9fbaf-d677-4bfa-9d13-802dafc8c30d.roa Signing time: Fri 07 Aug 2026 00:50:06 +0000 ROA not before: Fri 07 Aug 2026 00:50:06 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 50.112.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:d8:87:0e:99:75:4e:f4:3d:cb:e3:f1:88:ad:ee:0e:4e:b9:37:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3 Validity Not Before: Aug 7 00:50:06 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=590093d870dd72800718595dac25be35d926c1902d666f4426a451b7684bda17, CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:90:8f:8b:58:e1:3b:70:c8:af:58:14:71:24: a3:2d:39:dc:3d:6a:6f:8e:73:6c:8e:ac:8a:f5:22: 51:18:e5:c9:4f:c1:7b:45:c4:86:91:8e:39:12:ce: c1:a3:f5:56:1f:04:4b:18:f9:0a:fd:0c:e3:36:5d: c9:fb:cc:d2:a5:25:ba:a2:a3:40:fc:56:bc:11:08: ed:9f:ef:f2:0d:ea:90:91:f9:06:f5:2d:57:f1:50: cc:66:15:85:34:f7:e0:1b:e7:d3:b2:6a:80:6f:00: a8:e3:dc:f4:4c:b6:53:95:99:c2:05:e8:38:33:09: e2:c0:c9:e7:d1:da:a5:aa:9d:71:8f:2f:93:25:9c: 39:e4:d4:18:ec:72:33:ab:bf:44:02:e1:72:01:07: 98:69:db:2a:53:38:31:c5:57:a5:8f:18:80:78:03: bd:85:0c:7f:ef:64:30:e8:55:74:97:e1:a3:c4:a5: 05:cd:44:4a:7e:c5:4b:18:e4:cd:c7:e4:4f:57:f1: 93:7b:13:8e:88:d6:df:6f:2a:4a:0f:55:b4:7c:8c: f3:c1:f5:65:d9:d4:27:b8:24:a9:67:f8:5a:eb:99: d6:f8:4a:8e:75:2e:f9:6c:e2:91:7c:5c:03:4f:6c: f6:d3:00:56:e3:5c:25:b9:19:af:31:4b:7d:94:42: dc:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:18:F8:A5:09:29:1F:9B:5F:95:D4:05:79:6F:08:11:A7:1E:B7:D7 X509v3 Authority Key Identifier: keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/cfa9fbaf-d677-4bfa-9d13-802dafc8c30d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.112.192.0/19 Signature Algorithm: sha256WithRSAEncryption 79:e6:a4:78:ad:34:7e:7c:6f:9a:bd:a9:68:3c:e4:d6:19:e4: 64:7b:c1:48:6d:9d:96:2c:16:99:91:d0:db:09:27:d5:fc:5b: 69:bf:d7:66:c4:41:7d:42:27:72:7a:c4:74:2b:b2:2d:ea:fd: 46:7f:8e:73:43:cd:ec:6d:ad:cf:ae:a0:87:48:33:e9:d3:98: 9f:54:8e:d7:3c:cd:bb:19:5c:99:ac:0e:69:7f:94:a6:63:25: 17:e9:42:b4:bc:5c:1d:87:f7:9a:50:2d:ae:fd:ae:ee:fb:ea: 2d:a1:14:fd:e0:10:f2:c6:a2:f2:c4:1c:0c:ff:32:9b:c9:62: b7:b2:2e:73:41:92:02:70:65:10:9f:39:8e:74:54:6b:6a:09: ae:ec:23:80:6d:6e:65:44:ba:64:5e:32:51:13:8c:87:29:8b: a6:89:17:e9:e8:6c:25:f2:ef:ba:66:d8:46:0e:79:ed:21:55: 5e:ac:4b:5d:9a:3e:ab:20:4c:b3:91:7c:fc:a6:de:03:47:56: b4:f2:da:9d:64:fe:9e:86:9b:f9:63:ed:5e:a4:c4:7a:68:f4: 5b:31:f9:7c:d1:20:40:2d:28:26:61:87:f5:41:dc:b1:71:f6: 14:6e:5b:d6:f2:85:e6:a6:dd:46:cf:10:7c:25:20:59:4b:71: f2:d2:20:42 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUtiHDpl1TvQ9y+PxiK3uDk65N0IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTE1ZDhhYTEwZDYyZGJkZDM0ODMyNjg3NmJhNTY3NTNj Yjk5YjQ2NGNjNDU1MzI0YjMwHhcNMjYwODA3MDA1MDA2WhcNMjYxMTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A1OTAwOTNkODcwZGQ3MjgwMDcxODU5NWRhYzI1YmUzNWQ5 MjZjMTkwMmQ2NjZmNDQyNmE0NTFiNzY4NGJkYTE3MS0wKwYDVQQDEyRkZGZiYzk3 Yy03YmVkLTQwZGYtOTVjYS1lNjY0YjI5ZDdiMjcwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCgkI+LWOE7cMivWBRxJKMtOdw9am+Oc2yOrIr1IlEY5clP wXtFxIaRjjkSzsGj9VYfBEsY+Qr9DOM2Xcn7zNKlJbqio0D8VrwRCO2f7/IN6pCR +Qb1LVfxUMxmFYU09+Ab59OyaoBvAKjj3PRMtlOVmcIF6DgzCeLAyefR2qWqnXGP L5MlnDnk1BjscjOrv0QC4XIBB5hp2ypTODHFV6WPGIB4A72FDH/vZDDoVXSX4aPE pQXNREp+xUsY5M3H5E9X8ZN7E46I1t9vKkoPVbR8jPPB9WXZ1Ce4JKln+Frrmdb4 So51Lvls4pF8XANPbPbTAFbjXCW5Ga8xS32UQtzPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUyxj4pQkpH5tfldQFeW8IEacet9cwHwYDVR0jBBgwFoAUkS3GDddkKYK8 rn+B/jxMEnKAIh8wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83MTg4YWMyNC0w OWNjLTRmMjAtOWRiZC1jZDkwMDVkMjc5N2UvYTE1ZDhhYTEwZDYyZGJkZDM0ODMy Njg3NmJhNTY3NTNjYjk5YjQ2NGNjNDU1MzI0YjMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNjAyYTI2ZTUtNGE5ZS00ZTVlLTg5ZjAtZWY4 OTE0OTBkOWM5L2NmYTlmYmFmLWQ2NzctNGJmYS05ZDEzLTgwMmRhZmM4YzMwZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzYwMmEyNmU1LTRhOWUtNGU1ZS04OWYw LWVmODkxNDkwZDljOS9ZdHZkTklNbWgydWxaMVBMbWJSa3pFVlRKTE0uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUycMAwDQYJKoZIhvcNAQELBQADggEBAHnmpHitNH58b5q9qWg85NYZ5GR7 wUhtnZYsFpmR0NsJJ9X8W2m/12bEQX1CJ3J6xHQrsi3q/UZ/jnNDzextrc+uoIdI M+nTmJ9Ujtc8zbsZXJmsDml/lKZjJRfpQrS8XB2H95pQLa79ru776i2hFP3gEPLG ovLEHAz/MpvJYreyLnNBkgJwZRCfOY50VGtqCa7sI4BtbmVEumReMlETjIcpi6aJ F+nobCXy77pm2EYOee0hVV6sS12aPqsgTLORfPym3gNHVrTy2p1k/p6Gm/lj7V6k xHpo9Fsx+XzRIEAtKCZhh/VB3LFx9hRuW9byheam3UbPEHwlIFlLcfLSIEI= -----END CERTIFICATE-----Generated at Sun Sep 27 05:15:30 2026 by rpki-client