$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/50559d01-d5e2-4dce-8a30-2c346d38e445.roa File: 50559d01-d5e2-4dce-8a30-2c346d38e445.roa (raw, json) Hash identifier: Q9B/YLb69vnXj6JFvZ3ZJoLzzEo6tMruOQXdSmPJGxU= Subject key identifier: 9A:D8:16:FC:A5:08:A9:17:E2:64:C6:13:51:F4:75:45:0D:F8:65:85 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2EB277E07589DA6885045149AD008A49DA0DB572 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/50559d01-d5e2-4dce-8a30-2c346d38e445.roa Signing time: Fri 19 Sep 2025 17:00:26 +0000 ROA not before: Fri 19 Sep 2025 17:00:26 +0000 ROA not after: Fri 24 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.251.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:b2:77:e0:75:89:da:68:85:04:51:49:ad:00:8a:49:da:0d:b5:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 19 17:00:26 2025 GMT Not After : Oct 24 23:59:59 2025 GMT Subject: serialNumber=b2ebe097f112b0da32a867638687ae7530a926931fb5a720690a540c26549394, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8a:c5:92:22:5e:e6:9e:29:a9:a9:9a:b6:81: 36:dc:23:ca:4a:a8:53:84:13:15:26:2e:72:26:4d: cb:18:46:45:4e:b9:15:15:5c:fd:76:bf:82:7a:63: ee:ec:19:e5:a9:b2:ba:4e:77:a5:96:01:f4:8e:3e: 4e:8d:d0:46:3f:a5:2d:c7:13:98:fa:0f:81:52:de: f4:29:af:48:7d:68:49:3f:51:78:13:9d:9c:a0:76: 89:51:e6:07:86:a5:47:e2:f6:d3:c3:f8:74:09:45: f8:5e:20:a1:16:af:f6:e2:f2:a8:fb:f4:f0:2e:44: 2c:1c:ab:37:3e:08:4d:ba:5e:93:e6:0f:06:6b:3d: 29:be:15:7a:61:bf:8c:47:f9:a3:77:5a:7f:41:fb: f8:fe:5f:c0:de:da:c7:79:00:6a:d3:4f:8b:4b:a6: 8f:86:c7:66:3d:20:b0:d9:cc:23:bb:44:e9:13:4e: c2:f8:70:6b:5e:8a:2f:b8:f7:9f:96:05:4d:25:a0: 8e:55:53:66:73:80:9b:0b:a4:96:ec:b0:7c:c7:39: 78:24:d1:32:ac:bc:66:8c:12:6b:e7:24:4e:a0:26: a8:14:88:ec:01:4e:ed:73:57:df:b7:7a:c0:fc:4a: f3:ff:ff:46:6e:06:0d:29:4c:e7:21:ff:89:db:51: 14:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:D8:16:FC:A5:08:A9:17:E2:64:C6:13:51:F4:75:45:0D:F8:65:85 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/50559d01-d5e2-4dce-8a30-2c346d38e445.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.251.24.0/22 Signature Algorithm: sha256WithRSAEncryption 11:a7:67:6b:c7:74:e2:66:85:81:fe:57:74:13:63:9a:a2:00: c9:6f:a9:ec:fc:ad:b3:08:5f:5b:cb:05:e3:0b:db:4a:d3:9d: a5:b7:ee:a3:58:c6:eb:6e:8d:57:89:d3:76:1c:7b:e8:67:73: e8:6b:2e:e1:5b:9a:21:70:31:dd:a6:73:89:13:1d:3e:e3:3f: fd:bc:b7:6c:27:cb:c4:57:73:54:2a:99:c6:48:68:6a:46:5f: 48:82:f4:93:10:bd:b4:86:16:32:a4:07:39:1c:cd:a1:f1:f4: d4:67:eb:76:f2:66:23:11:1f:7f:a2:9e:30:02:54:5c:d2:06: 2c:67:92:fd:70:98:82:85:ee:49:94:a0:d4:49:10:8b:9b:f6: bb:2a:17:1f:0c:67:70:a8:9c:0c:cd:a3:82:68:cc:da:76:ac: f0:f7:62:1e:82:ad:98:66:69:7d:fb:e8:f1:8d:7a:e8:ed:3f: f3:bf:ce:49:6b:09:94:b1:ca:75:31:27:94:00:fb:1f:0d:50: b2:6d:03:b8:3a:68:4d:d4:42:92:c0:2d:c7:8c:f7:0c:e3:29: ef:68:d9:6a:84:aa:2c:39:73:c8:e6:d4:20:72:d1:e1:0c:20: 36:d9:ed:e2:87:aa:91:23:93:1f:80:00:9b:c3:8a:a8:25:ba: 15:cd:bb:52 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULrJ34HWJ2miFBFFJrQCKSdoNtXIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTE5MTcwMDI2WhcNMjUxMDI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMmViZTA5N2YxMTJiMGRhMzJhODY3NjM4Njg3YWU3NTMw YTkyNjkzMWZiNWE3MjA2OTBhNTQwYzI2NTQ5Mzk0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDPisWSIl7mnimpqZq2gTbcI8pKqFOEExUmLnImTcsYRkVO uRUVXP12v4J6Y+7sGeWpsrpOd6WWAfSOPk6N0EY/pS3HE5j6D4FS3vQpr0h9aEk/ UXgTnZygdolR5geGpUfi9tPD+HQJRfheIKEWr/bi8qj79PAuRCwcqzc+CE26XpPm DwZrPSm+FXphv4xH+aN3Wn9B+/j+X8De2sd5AGrTT4tLpo+Gx2Y9ILDZzCO7ROkT TsL4cGteii+495+WBU0loI5VU2ZzgJsLpJbssHzHOXgk0TKsvGaMEmvnJE6gJqgU iOwBTu1zV9+3esD8SvP//0ZuBg0pTOch/4nbURTPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUmtgW/KUIqRfiZMYTUfR1RQ34ZYUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzUwNTU5ZDAxLWQ1ZTItNGRjZS04YTMwLTJjMzQ2ZDM4ZTQ0NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI2+xgwDQYJKoZIhvcNAQELBQADggEBABGnZ2vHdOJmhYH+V3QTY5qiAMlv qez8rbMIX1vLBeML20rTnaW37qNYxutujVeJ03Yce+hnc+hrLuFbmiFwMd2mc4kT HT7jP/28t2wny8RXc1QqmcZIaGpGX0iC9JMQvbSGFjKkBzkczaHx9NRn63byZiMR H3+injACVFzSBixnkv1wmIKF7kmUoNRJEIub9rsqFx8MZ3ConAzNo4JozNp2rPD3 Yh6CrZhmaX376PGNeujtP/O/zklrCZSxynUxJ5QA+x8NULJtA7g6aE3UQpLALceM 9wzjKe9o2WqEqiw5c8jm1CBy0eEMIDbZ7eKHqpEjkx+AAJvDiqgluhXNu1I= -----END CERTIFICATE-----Generated at Sat Oct 18 02:42:08 2025 by rpki-client