$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/881b03ed-dc50-4f52-a6e6-ddaae971f0ee.roa File: 881b03ed-dc50-4f52-a6e6-ddaae971f0ee.roa (raw, json) Hash identifier: yo4EPaaQ9BrxkfdumZXFx3cEvQ5E1k6xw7K6fPwQkSs= Subject key identifier: AD:5A:D0:32:B5:12:3A:9A:8C:D7:6E:58:94:63:21:4C:90:D3:88:6B Certificate issuer: /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3 Certificate serial: 69BBFF50DD3251DE460D390402E66FB1B84C4308 Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/881b03ed-dc50-4f52-a6e6-ddaae971f0ee.roa Signing time: Fri 11 Jul 2025 15:00:27 +0000 ROA not before: Fri 11 Jul 2025 15:00:27 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 50.112.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:bb:ff:50:dd:32:51:de:46:0d:39:04:02:e6:6f:b1:b8:4c:43:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3 Validity Not Before: Jul 11 15:00:27 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=ef0ad77032be08dbee6cd961709863c71e860838fd0d804a1784c4789190c716, CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7b:8d:98:97:19:d6:12:98:d2:5a:da:8b:16: b5:6c:09:80:4a:8e:dc:42:bf:2b:e1:cb:4e:8c:ff: 00:69:e4:0d:f6:c8:c8:42:11:e2:ac:14:d3:3d:63: bf:75:31:bc:5e:26:88:3d:7d:ed:7f:a0:f2:87:b2: b8:85:e2:cc:95:5a:93:b8:8e:ac:e6:7d:bc:49:42: 6f:e1:34:11:d1:db:9e:b1:3b:40:95:56:c9:80:ce: 2f:dd:bc:79:3c:ce:64:e8:44:2f:af:9e:d0:e2:9b: 12:1f:d3:49:a1:c1:11:29:ca:39:ec:37:22:49:ea: a2:74:a3:a2:b6:b3:32:b2:5d:df:9f:be:bd:f9:06: 2e:16:6a:31:1b:fe:e1:cd:79:4e:a9:3d:02:f8:2a: 1b:7a:47:cc:24:5c:a5:a3:7a:c0:59:6c:1c:9c:85: af:89:1b:e5:58:ef:61:ae:28:c7:0a:d4:10:69:f9: b1:50:4b:8b:d4:f9:89:cb:b8:3b:ed:d1:1b:23:a0: 4d:0f:86:25:01:50:7f:59:7b:83:c4:fa:b4:59:13: d1:ea:d4:29:9b:4c:3e:33:0e:e4:eb:db:c6:67:15: e7:b2:11:90:90:44:7f:63:9c:6c:d9:cb:d5:1f:ae: bd:2e:a8:52:3a:00:38:47:1b:be:73:b0:b6:91:62: a2:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:5A:D0:32:B5:12:3A:9A:8C:D7:6E:58:94:63:21:4C:90:D3:88:6B X509v3 Authority Key Identifier: keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/881b03ed-dc50-4f52-a6e6-ddaae971f0ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.112.192.0/18 Signature Algorithm: sha256WithRSAEncryption 57:17:83:d7:a9:cb:5d:15:de:3e:4f:42:18:e6:a4:8a:86:a3: 0f:1a:81:df:7b:8d:10:de:37:75:36:09:a1:87:98:b1:87:3f: 65:a3:73:ce:90:ff:02:50:7e:5b:d0:c4:a3:ca:69:57:de:78: 36:ed:3d:68:26:92:eb:d2:ac:d4:26:75:f3:0a:1d:03:e1:73: 84:8a:5a:64:ce:11:d7:35:30:71:cb:ab:86:9b:86:76:97:83: 13:36:1c:44:d2:c7:cd:63:d6:dd:7e:f3:58:e9:b2:16:2a:1a: 00:32:e9:8c:dc:ee:9a:92:9d:d2:b8:6d:3b:82:a5:33:ec:0d: 1a:25:0f:46:d6:06:e2:40:d7:1e:be:6f:40:eb:c8:37:56:8e: 89:ff:b1:43:71:a5:79:a0:c4:b2:d3:37:1e:4c:43:61:de:43: b4:28:ac:bc:e5:6c:b7:26:d6:da:18:2a:2b:93:af:bd:ba:32: f7:81:bf:52:f9:c9:d9:5e:c3:8b:ed:0f:94:44:a7:40:09:68: a7:36:68:7f:29:8b:db:78:4a:85:1c:05:00:b9:00:53:04:2c: e8:1c:b2:ba:2b:63:7c:a8:5d:28:01:5d:e0:2d:b6:79:3c:b3: 75:e5:3b:97:f8:23:76:12:7e:9e:94:34:8c:ae:02:bb:77:49: b4:45:97:78 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUabv/UN0yUd5GDTkEAuZvsbhMQwgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTE1ZDhhYTEwZDYyZGJkZDM0ODMyNjg3NmJhNTY3NTNj Yjk5YjQ2NGNjNDU1MzI0YjMwHhcNMjUwNzExMTUwMDI3WhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0BlZjBhZDc3MDMyYmUwOGRiZWU2Y2Q5NjE3MDk4NjNjNzFl ODYwODM4ZmQwZDgwNGExNzg0YzQ3ODkxOTBjNzE2MS0wKwYDVQQDEyRkZGZiYzk3 Yy03YmVkLTQwZGYtOTVjYS1lNjY0YjI5ZDdiMjcwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8e42YlxnWEpjSWtqLFrVsCYBKjtxCvyvhy06M/wBp5A32 yMhCEeKsFNM9Y791MbxeJog9fe1/oPKHsriF4syVWpO4jqzmfbxJQm/hNBHR256x O0CVVsmAzi/dvHk8zmToRC+vntDimxIf00mhwREpyjnsNyJJ6qJ0o6K2szKyXd+f vr35Bi4WajEb/uHNeU6pPQL4Kht6R8wkXKWjesBZbBycha+JG+VY72GuKMcK1BBp +bFQS4vU+YnLuDvt0RsjoE0PhiUBUH9Ze4PE+rRZE9Hq1CmbTD4zDuTr28ZnFeey EZCQRH9jnGzZy9Ufrr0uqFI6ADhHG75zsLaRYqJxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUrVrQMrUSOpqM125YlGMhTJDTiGswHwYDVR0jBBgwFoAUkS3GDddkKYK8 rn+B/jxMEnKAIh8wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83MTg4YWMyNC0w OWNjLTRmMjAtOWRiZC1jZDkwMDVkMjc5N2UvYTE1ZDhhYTEwZDYyZGJkZDM0ODMy Njg3NmJhNTY3NTNjYjk5YjQ2NGNjNDU1MzI0YjMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNjAyYTI2ZTUtNGE5ZS00ZTVlLTg5ZjAtZWY4 OTE0OTBkOWM5Lzg4MWIwM2VkLWRjNTAtNGY1Mi1hNmU2LWRkYWFlOTcxZjBlZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzYwMmEyNmU1LTRhOWUtNGU1ZS04OWYw LWVmODkxNDkwZDljOS9ZdHZkTklNbWgydWxaMVBMbWJSa3pFVlRKTE0uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYycMAwDQYJKoZIhvcNAQELBQADggEBAFcXg9epy10V3j5PQhjmpIqGow8a gd97jRDeN3U2CaGHmLGHP2Wjc86Q/wJQflvQxKPKaVfeeDbtPWgmkuvSrNQmdfMK HQPhc4SKWmTOEdc1MHHLq4abhnaXgxM2HETSx81j1t1+81jpshYqGgAy6Yzc7pqS ndK4bTuCpTPsDRolD0bWBuJA1x6+b0DryDdWjon/sUNxpXmgxLLTNx5MQ2HeQ7Qo rLzlbLcm1toYKiuTr726MveBv1L5ydlew4vtD5REp0AJaKc2aH8pi9t4SoUcBQC5 AFMELOgcsrorY3yoXSgBXeAttnk8s3XlO5f4I3YSfp6UNIyuArt3SbRFl3g= -----END CERTIFICATE-----Generated at Mon Aug 4 22:12:10 2025 by rpki-client