$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/0ed14853-3e99-48a4-989b-2c4510ffef4d.roa File: 0ed14853-3e99-48a4-989b-2c4510ffef4d.roa (raw, json) Hash identifier: J5TfeH4p1VOFelvsH85TM4cN84MzWdRVuKFewoW/v0s= Subject key identifier: C7:2A:7B:E1:97:76:9C:09:C8:98:9B:50:D4:5E:C5:94:CD:A5:1D:4A Certificate issuer: /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3 Certificate serial: 1012AB2866E6329B02090F41105C8B260B10D10D Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/0ed14853-3e99-48a4-989b-2c4510ffef4d.roa Signing time: Tue 21 Oct 2025 00:20:02 +0000 ROA not before: Tue 21 Oct 2025 00:20:02 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 50.112.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:12:ab:28:66:e6:32:9b:02:09:0f:41:10:5c:8b:26:0b:10:d1:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3 Validity Not Before: Oct 21 00:20:02 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=35baa337d5dece44682929bc59bec48748f4891db591a8372c49b9702704f9a5, CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3d:d3:bc:61:32:92:0e:6e:8c:a5:09:3f:f7: 3a:72:64:3b:d4:2a:46:ad:d3:30:89:5b:50:de:2e: 63:3c:4f:68:4d:0e:b1:3f:ec:70:cd:b1:95:ae:82: 97:4a:84:c1:67:bc:84:4e:fa:7c:4a:55:67:62:41: b4:ab:ed:bd:e2:4d:c9:0f:74:1e:4c:87:93:48:7c: 1d:d6:89:32:83:e9:03:4a:b2:32:df:1d:f4:16:f8: 4b:33:cc:13:c1:0a:3b:df:6a:48:bc:7b:cb:51:3b: eb:d6:8d:f3:ee:e0:fb:6c:71:d7:e6:3e:3a:73:a8: e2:89:1e:68:2d:5a:25:7c:16:d8:b2:d7:40:bb:46: 5a:3a:22:58:c4:a3:5a:21:64:62:fa:7f:00:18:1f: fc:f5:76:b3:da:51:b2:5a:a8:25:c6:a2:32:ad:fe: ee:82:80:87:b3:35:f3:09:28:f0:c6:69:5c:08:28: 5f:ce:3b:47:e8:f8:d8:fd:7c:c8:9e:8d:d0:42:2e: 70:cf:3b:cc:38:3a:b9:06:63:dc:15:64:f8:37:bd: 22:82:20:b6:53:51:0c:43:3a:37:4d:f1:e6:13:e1: c6:9d:91:3e:8d:16:84:40:14:0f:fa:cc:40:c3:61: 05:a2:bc:ff:7c:63:9c:18:99:ad:5d:bd:27:b9:e1: 05:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:2A:7B:E1:97:76:9C:09:C8:98:9B:50:D4:5E:C5:94:CD:A5:1D:4A X509v3 Authority Key Identifier: keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/0ed14853-3e99-48a4-989b-2c4510ffef4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.112.2.0/23 Signature Algorithm: sha256WithRSAEncryption 70:50:28:1b:6b:31:cf:fa:7b:ad:0b:df:64:39:78:c3:7e:1f: 86:c0:ad:5d:75:fa:0f:01:97:94:97:16:42:18:b9:f1:50:c6: 66:42:88:29:5b:6e:47:ee:19:56:b0:ee:ce:2e:35:34:62:32: 61:86:cb:ed:9d:58:4f:db:57:b9:e1:65:6c:05:bb:18:c2:f7: 7a:1d:54:fd:8c:10:5c:bd:6e:b3:42:1d:72:aa:ee:ca:2c:1d: d2:2b:56:4b:5b:de:49:ef:2b:1f:0d:ef:89:f0:67:a2:e6:92: 7c:f9:e0:21:83:81:d4:1a:04:ea:cf:90:35:2f:c7:71:6c:be: a7:2d:34:91:e5:a9:61:47:99:a2:21:71:d5:5b:01:36:f9:21: 80:42:dc:d1:9f:ff:f4:69:31:b0:77:63:8e:6e:63:06:2e:33: fb:e6:8d:93:8f:17:df:64:b4:09:a8:b3:ad:04:d7:73:8d:be: 79:59:7a:85:d1:f5:a3:ef:4a:d4:84:d1:db:90:76:6e:20:f6: 92:d2:40:3d:ec:22:2a:c8:f5:a4:12:26:a6:9a:ea:73:04:0a: d9:f1:13:e9:2a:6b:79:a6:2f:dd:ee:30:3e:5c:00:1b:72:a8: cc:4e:9b:83:f5:d4:07:43:ff:17:1f:c5:78:aa:9b:91:12:2a: 3b:51:a4:82 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEBKrKGbmMpsCCQ9BEFyLJgsQ0Q0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTE1ZDhhYTEwZDYyZGJkZDM0ODMyNjg3NmJhNTY3NTNj Yjk5YjQ2NGNjNDU1MzI0YjMwHhcNMjUxMDIxMDAyMDAyWhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AzNWJhYTMzN2Q1ZGVjZTQ0NjgyOTI5YmM1OWJlYzQ4NzQ4 ZjQ4OTFkYjU5MWE4MzcyYzQ5Yjk3MDI3MDRmOWE1MS0wKwYDVQQDEyRkZGZiYzk3 Yy03YmVkLTQwZGYtOTVjYS1lNjY0YjI5ZDdiMjcwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCPdO8YTKSDm6MpQk/9zpyZDvUKkat0zCJW1DeLmM8T2hN DrE/7HDNsZWugpdKhMFnvIRO+nxKVWdiQbSr7b3iTckPdB5Mh5NIfB3WiTKD6QNK sjLfHfQW+EszzBPBCjvfaki8e8tRO+vWjfPu4PtscdfmPjpzqOKJHmgtWiV8Ftiy 10C7Rlo6IljEo1ohZGL6fwAYH/z1drPaUbJaqCXGojKt/u6CgIezNfMJKPDGaVwI KF/OO0fo+Nj9fMiejdBCLnDPO8w4OrkGY9wVZPg3vSKCILZTUQxDOjdN8eYT4cad kT6NFoRAFA/6zEDDYQWivP98Y5wYma1dvSe54QVvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUxyp74Zd2nAnImJtQ1F7FlM2lHUowHwYDVR0jBBgwFoAUkS3GDddkKYK8 rn+B/jxMEnKAIh8wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83MTg4YWMyNC0w OWNjLTRmMjAtOWRiZC1jZDkwMDVkMjc5N2UvYTE1ZDhhYTEwZDYyZGJkZDM0ODMy Njg3NmJhNTY3NTNjYjk5YjQ2NGNjNDU1MzI0YjMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNjAyYTI2ZTUtNGE5ZS00ZTVlLTg5ZjAtZWY4 OTE0OTBkOWM5LzBlZDE0ODUzLTNlOTktNDhhNC05ODliLTJjNDUxMGZmZWY0ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzYwMmEyNmU1LTRhOWUtNGU1ZS04OWYw LWVmODkxNDkwZDljOS9ZdHZkTklNbWgydWxaMVBMbWJSa3pFVlRKTE0uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEycAIwDQYJKoZIhvcNAQELBQADggEBAHBQKBtrMc/6e60L32Q5eMN+H4bA rV11+g8Bl5SXFkIYufFQxmZCiClbbkfuGVaw7s4uNTRiMmGGy+2dWE/bV7nhZWwF uxjC93odVP2MEFy9brNCHXKq7sosHdIrVktb3knvKx8N74nwZ6Lmknz54CGDgdQa BOrPkDUvx3FsvqctNJHlqWFHmaIhcdVbATb5IYBC3NGf//RpMbB3Y45uYwYuM/vm jZOPF99ktAmos60E13ONvnlZeoXR9aPvStSE0duQdm4g9pLSQD3sIirI9aQSJqaa 6nMECtnxE+kqa3mmL93uMD5cABtyqMxOm4P11AdD/xcfxXiqm5ESKjtRpII= -----END CERTIFICATE-----Generated at Wed Nov 5 11:26:12 2025 by rpki-client