$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/50e1e1c8-7a3e-4005-8226-06f11d9e0935.roa File: 50e1e1c8-7a3e-4005-8226-06f11d9e0935.roa (raw, json) Hash identifier: +KJDV4VG9EdRrJLrdVrEwaTtjGKSBIl9DjCjsN3tkgM= Subject key identifier: F5:59:CC:AD:A3:EB:6A:B3:C7:6F:1B:9A:27:BB:93:D2:2E:B0:5D:E5 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 698250721EB52655DB383E36B5052063EEB7AB9D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/50e1e1c8-7a3e-4005-8226-06f11d9e0935.roa Signing time: Wed 24 Sep 2025 22:41:46 +0000 ROA not before: Wed 24 Sep 2025 22:41:46 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.67.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:82:50:72:1e:b5:26:55:db:38:3e:36:b5:05:20:63:ee:b7:ab:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 22:41:46 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=3ecdf112be4b978bc57285c2f0b78adb50811ee4698559ac1d7bc25d9abb9650, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:57:10:bd:f1:0b:4b:73:3d:f9:93:4d:5d:da: 11:27:c3:a0:51:aa:4b:64:ec:d2:4f:a4:49:12:39: bd:41:01:a0:6e:f3:c8:9c:04:b5:ea:a0:20:28:58: dc:cf:f6:ae:57:6a:98:3d:b2:85:0c:9d:53:fd:e3: e2:0c:c2:b3:63:06:a4:87:ab:f6:e3:aa:48:55:3b: f3:b1:0c:13:91:c6:51:b9:9e:26:a9:ed:06:ec:8c: dc:5c:f7:02:6d:42:a6:17:2b:18:74:ab:aa:8c:d3: 53:1d:38:11:42:42:b8:8c:ca:68:68:56:78:93:9c: 79:74:2a:75:eb:a6:df:63:ed:cb:60:f6:8c:a9:25: 9d:87:af:19:04:68:80:0f:05:62:c7:05:da:6e:5e: 76:bc:4a:e6:b5:df:ff:22:ac:ea:7d:6c:40:f0:fc: 13:cd:98:eb:67:4a:4c:8d:2e:65:c9:e6:46:e3:3c: 97:c7:12:ac:a3:fc:ab:40:ab:9e:d2:7d:06:78:0c: 49:a4:2c:f6:c4:57:6d:dd:f3:a5:64:37:f6:90:3f: eb:d4:a6:6f:c4:b8:19:d8:cd:3e:cb:d1:6a:d1:d7: a5:25:53:b8:c7:ec:0e:47:06:64:42:f9:ea:e4:2f: 15:d3:4e:39:df:7b:da:64:da:4a:ed:1c:39:71:7f: 11:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:59:CC:AD:A3:EB:6A:B3:C7:6F:1B:9A:27:BB:93:D2:2E:B0:5D:E5 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/50e1e1c8-7a3e-4005-8226-06f11d9e0935.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.67.254.0/23 Signature Algorithm: sha256WithRSAEncryption 3a:69:ed:d1:1c:9a:7b:eb:cf:fd:e1:ab:6e:68:ce:70:12:50: 7c:b7:b5:30:34:b7:e4:c3:95:98:7b:e7:bf:0a:5d:5e:a5:da: 73:11:46:ee:ad:eb:0f:68:92:a7:62:8e:05:55:8d:8e:b5:f8: b1:00:bb:25:5d:94:b9:82:1a:78:46:72:bc:a5:0b:05:c3:47: 5e:ec:91:e7:1b:7f:dd:6e:28:ff:ad:76:54:bd:d0:16:fc:a3: ce:8a:11:5c:78:c7:5a:27:ec:46:ee:ee:1d:b7:ea:0a:18:5d: 8c:1f:cc:45:50:70:0c:52:3e:9c:f7:ce:06:22:71:38:46:f2: 73:69:2e:59:61:2a:fb:5b:8b:23:ee:aa:38:02:33:19:cd:16: 9b:b6:1c:3b:5b:0a:5d:e2:48:ca:b7:51:7b:29:0a:1d:13:ad: 34:59:29:f2:c5:b0:f9:b9:54:24:d0:6e:9b:6c:8b:b7:17:8c: b6:91:25:4f:43:71:fd:c8:0a:e0:b3:6b:6e:9f:20:ff:fd:8a: 4f:5f:cb:8e:27:06:e9:53:c7:42:b0:06:eb:b1:80:39:08:e8: 33:e5:71:18:3e:6a:4f:74:58:4e:b9:3d:90:98:66:1b:fe:7d: 31:af:37:e7:ae:0c:3c:2c:da:6a:60:bc:59:b1:c1:3b:3e:ce: 99:76:89:95 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaYJQch61JlXbOD42tQUgY+63q50wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MjI0MTQ2WhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0AzZWNkZjExMmJlNGI5NzhiYzU3Mjg1YzJmMGI3OGFkYjUw ODExZWU0Njk4NTU5YWMxZDdiYzI1ZDlhYmI5NjUwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCVxC98QtLcz35k01d2hEnw6BRqktk7NJPpEkSOb1BAaBu 88icBLXqoCAoWNzP9q5Xapg9soUMnVP94+IMwrNjBqSHq/bjqkhVO/OxDBORxlG5 niap7QbsjNxc9wJtQqYXKxh0q6qM01MdOBFCQriMymhoVniTnHl0KnXrpt9j7ctg 9oypJZ2HrxkEaIAPBWLHBdpuXna8Sua13/8irOp9bEDw/BPNmOtnSkyNLmXJ5kbj PJfHEqyj/KtAq57SfQZ4DEmkLPbEV23d86VkN/aQP+vUpm/EuBnYzT7L0WrR16Ul U7jH7A5HBmRC+erkLxXTTjnfe9pk2krtHDlxfxGDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU9VnMraPrarPHbxuaJ7uT0i6wXeUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzUwZTFlMWM4LTdhM2UtNDAwNS04MjI2LTA2ZjExZDllMDkzNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESQ/4wDQYJKoZIhvcNAQELBQADggEBADpp7dEcmnvrz/3hq25oznASUHy3 tTA0t+TDlZh7578KXV6l2nMRRu6t6w9okqdijgVVjY61+LEAuyVdlLmCGnhGcryl CwXDR17skecbf91uKP+tdlS90Bb8o86KEVx4x1on7Ebu7h236goYXYwfzEVQcAxS Ppz3zgYicThG8nNpLllhKvtbiyPuqjgCMxnNFpu2HDtbCl3iSMq3UXspCh0TrTRZ KfLFsPm5VCTQbptsi7cXjLaRJU9Dcf3ICuCza26fIP/9ik9fy44nBulTx0KwBuux gDkI6DPlcRg+ak90WE65PZCYZhv+fTGvN+euDDws2mpgvFmxwTs+zpl2iZU= -----END CERTIFICATE-----Generated at Sat Oct 18 00:00:11 2025 by rpki-client