$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/50ef1f8a-b614-47b4-aac9-43160386dd5e.roa File: 50ef1f8a-b614-47b4-aac9-43160386dd5e.roa (raw, json) Hash identifier: utBlC4KKYVPDZy8hGtNdnW6oZoeGGXYdzL14cYp0sxw= Subject key identifier: E2:6C:B6:C5:9E:0A:86:8C:6C:3D:B9:7F:EC:BF:27:F4:96:F6:66:75 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 43BBC61948FF6712CFEE89EE6D62EA4247943C6C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/50ef1f8a-b614-47b4-aac9-43160386dd5e.roa Signing time: Fri 10 Oct 2025 15:36:35 +0000 ROA not before: Fri 10 Oct 2025 15:36:35 +0000 ROA not after: Fri 14 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 34.253.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:bb:c6:19:48:ff:67:12:cf:ee:89:ee:6d:62:ea:42:47:94:3c:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 10 15:36:35 2025 GMT Not After : Nov 14 23:59:59 2025 GMT Subject: serialNumber=8588680dd836c35a6a126760d177f8c8b1c667d9f700f7843d27d5c087327045, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:1a:3a:62:5b:82:b2:5f:aa:50:b9:b2:94:2a: f1:a8:79:8f:e8:c7:a7:ae:93:d6:45:e8:a4:d7:b5: e9:3e:32:84:b6:fb:7a:6f:97:e5:fc:40:26:f6:ac: b9:99:4a:e7:45:dd:0c:62:8e:b9:7a:e6:48:cd:8f: 74:ec:72:14:39:8b:7d:28:ed:99:26:fe:ef:50:ce: b6:aa:cb:cf:89:ef:8e:0a:df:6e:3f:ce:dc:aa:ef: cd:04:f5:04:80:1e:34:e5:ad:f8:bc:e7:cb:23:54: 9c:8d:a3:f7:b0:33:59:71:48:4b:b0:fa:47:cc:2a: f1:99:33:07:a1:c5:0f:04:cd:4f:55:d7:cb:39:80: 88:b6:94:d5:6f:59:cd:ad:dd:1c:86:b0:b7:a6:8e: 36:a7:6f:ba:25:0e:01:fd:43:27:06:a7:4f:2a:d7: 28:02:dc:29:e6:d5:dc:aa:2a:5e:8c:48:df:7c:66: 67:e5:14:12:3c:93:95:33:6d:0c:75:28:c9:ed:5e: d8:57:02:42:37:f6:ce:e0:ce:84:5d:17:9d:70:d7: 7a:fc:4e:56:2e:4b:ff:ef:05:d4:ed:7a:23:03:e0: 9a:10:54:be:50:a7:e7:fe:5d:20:a6:0d:c2:10:8e: 30:85:f6:73:90:8c:b6:87:8d:f1:7f:54:d8:89:3b: 61:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:6C:B6:C5:9E:0A:86:8C:6C:3D:B9:7F:EC:BF:27:F4:96:F6:66:75 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/50ef1f8a-b614-47b4-aac9-43160386dd5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 34.253.0.0/18 Signature Algorithm: sha256WithRSAEncryption 72:31:55:e7:8f:50:af:e1:b2:44:d4:42:f1:02:66:25:52:e4: 80:77:f7:9c:a1:06:97:56:dc:19:7f:6d:16:ab:bb:ff:cb:92: c2:76:47:01:3f:c1:7c:4d:9f:c3:16:79:9c:f2:e0:79:96:41: 0f:25:ed:96:26:09:50:c2:48:00:e2:89:d3:98:6e:d3:84:98: 49:25:87:a1:cc:fd:21:75:c4:f4:1a:bd:b7:28:25:08:7b:4c: 17:f0:6d:4a:8b:00:ad:07:c3:ae:bf:ea:bf:bc:a5:e4:3c:fb: 2d:51:fe:50:85:a6:31:09:5a:b2:ea:23:6e:10:75:aa:1a:af: 31:cb:f8:13:07:4e:4a:84:36:b6:46:55:e6:18:9c:8a:d0:b2: 03:e5:cb:d4:f9:c7:bf:9d:72:74:a8:8b:3b:75:a6:1e:be:d7: c4:81:c2:d7:eb:85:ef:49:a4:c5:9b:fb:0d:3e:21:cb:5b:fb: 0a:f7:c1:06:f6:b9:69:56:c6:dc:4f:d1:84:36:a8:66:e5:fe: ce:17:ee:d2:f5:fe:d3:0e:ee:78:eb:d5:2b:2b:9f:0e:4e:d1: c1:80:f9:63:79:e7:ee:ed:39:6d:e5:87:c2:1d:0b:4c:c4:9d: b4:e3:b6:ac:bf:50:da:92:3e:18:41:f9:92:bd:27:42:96:e9: 25:56:4b:f2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQ7vGGUj/ZxLP7onubWLqQkeUPGwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDEwMTUzNjM1WhcNMjUxMTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A4NTg4NjgwZGQ4MzZjMzVhNmExMjY3NjBkMTc3ZjhjOGIx YzY2N2Q5ZjcwMGY3ODQzZDI3ZDVjMDg3MzI3MDQ1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDjGjpiW4KyX6pQubKUKvGoeY/ox6euk9ZF6KTXtek+MoS2 +3pvl+X8QCb2rLmZSudF3Qxijrl65kjNj3TschQ5i30o7Zkm/u9Qzraqy8+J744K 324/ztyq780E9QSAHjTlrfi858sjVJyNo/ewM1lxSEuw+kfMKvGZMwehxQ8EzU9V 18s5gIi2lNVvWc2t3RyGsLemjjanb7olDgH9QycGp08q1ygC3Cnm1dyqKl6MSN98 ZmflFBI8k5UzbQx1KMntXthXAkI39s7gzoRdF51w13r8TlYuS//vBdTteiMD4JoQ VL5Qp+f+XSCmDcIQjjCF9nOQjLaHjfF/VNiJO2FzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU4my2xZ4KhoxsPbl/7L8n9Jb2ZnUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzUwZWYxZjhhLWI2MTQtNDdiNC1hYWM5LTQzMTYwMzg2ZGQ1ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYi/QAwDQYJKoZIhvcNAQELBQADggEBAHIxVeePUK/hskTUQvECZiVS5IB3 95yhBpdW3Bl/bRaru//LksJ2RwE/wXxNn8MWeZzy4HmWQQ8l7ZYmCVDCSADiidOY btOEmEklh6HM/SF1xPQavbcoJQh7TBfwbUqLAK0Hw66/6r+8peQ8+y1R/lCFpjEJ WrLqI24QdaoarzHL+BMHTkqENrZGVeYYnIrQsgPly9T5x7+dcnSoizt1ph6+18SB wtfrhe9JpMWb+w0+Ictb+wr3wQb2uWlWxtxP0YQ2qGbl/s4X7tL1/tMO7njr1Ssr nw5O0cGA+WN55+7tOW3lh8IdC0zEnbTjtqy/UNqSPhhB+ZK9J0KW6SVWS/I= -----END CERTIFICATE-----Generated at Sat Oct 18 00:14:46 2025 by rpki-client