$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/8eab2c65-1488-45ff-b7b3-6d9c0f327f17.roa File: 8eab2c65-1488-45ff-b7b3-6d9c0f327f17.roa (raw, json) Hash identifier: TjAWvu4d3HnTohOgwv4K2oQVlQy44TStN+RjI0luLFw= Subject key identifier: EC:E2:F0:BC:FD:DB:7D:F7:C3:1E:9D:6D:F8:51:0A:F7:F1:F4:5F:D9 Certificate issuer: /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3 Certificate serial: 418A943CBB9011E2C8987F010BB3712259FE9F56 Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/8eab2c65-1488-45ff-b7b3-6d9c0f327f17.roa Signing time: Tue 21 Oct 2025 00:10:03 +0000 ROA not before: Tue 21 Oct 2025 00:10:03 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 50.112.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:8a:94:3c:bb:90:11:e2:c8:98:7f:01:0b:b3:71:22:59:fe:9f:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3 Validity Not Before: Oct 21 00:10:03 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=b9ede6bb743398c16075a2adf3529a566758de1a9e0e5d7a6cae30603723fa1d, CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a5:29:9a:a8:b0:8b:d9:26:74:e2:cb:1f:81: 9c:a5:16:c9:8b:da:60:0c:20:be:e5:83:d8:95:25: 1d:3e:be:2f:2e:f4:6c:f9:f5:30:d6:7f:e2:61:6a: 52:0a:1c:87:89:d8:7c:81:f3:76:b7:8b:1c:c7:24: 2c:43:2c:2b:74:b5:b1:17:32:88:ca:a7:8c:8d:af: b8:8f:af:11:ce:aa:1b:47:d6:73:1b:6a:59:c8:bb: df:c3:cc:3a:7d:92:0d:3b:af:91:b2:c0:f1:5a:e8: 27:7f:4b:e4:44:71:bb:9f:ac:fb:d4:7f:1f:20:63: 84:9e:a0:cb:d3:7b:1d:c9:de:80:d2:24:ea:9e:5a: 9b:50:4d:e4:a8:f8:9b:35:fc:f9:82:06:82:e1:9e: 5e:9c:70:a0:12:c5:6a:eb:0b:f6:1d:0c:cd:d8:76: b4:2f:a8:95:ec:90:cb:7f:f8:2b:b5:5a:e1:1c:82: 97:fa:ab:ed:07:2d:c5:75:e8:b9:ae:a0:86:0f:39: 68:6b:2c:08:d4:d0:65:59:d4:f8:a8:95:3b:7f:55: 28:5e:bb:eb:01:4d:d6:cb:f4:cc:77:ba:42:3f:3a: ce:6d:15:26:0a:97:52:26:81:cf:ef:5f:45:84:01: 37:be:56:42:40:8b:06:8f:4a:15:f4:75:7e:86:51: 52:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:E2:F0:BC:FD:DB:7D:F7:C3:1E:9D:6D:F8:51:0A:F7:F1:F4:5F:D9 X509v3 Authority Key Identifier: keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/8eab2c65-1488-45ff-b7b3-6d9c0f327f17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.112.128.0/19 Signature Algorithm: sha256WithRSAEncryption 56:b0:f9:c8:9b:64:bc:63:e3:78:44:4b:a3:85:b0:51:b1:09: 33:c2:4e:c3:9f:4b:2c:2e:01:48:ef:5a:f5:ed:a1:1d:57:91: af:76:4f:d1:45:ca:ff:a4:8b:14:69:e1:d8:75:39:f5:05:b1: 5d:06:c0:4c:ea:9b:4e:3c:bd:62:9c:bf:3a:5e:80:c8:61:76: e2:c0:6f:eb:01:24:83:60:4c:33:87:72:b1:65:ef:21:11:0b: 43:04:99:96:d6:3e:95:31:cc:36:99:21:e7:e0:ff:8f:1f:c8: eb:aa:ed:06:05:42:f9:36:0f:e0:29:68:99:0d:45:96:29:dc: 5e:eb:d3:3d:79:5f:43:ae:eb:dc:31:01:a9:a2:1a:dd:85:9e: 01:6d:83:2e:58:e6:d7:a8:f9:2d:97:16:94:9a:fb:d2:c6:4b: 2d:df:be:f7:7f:4c:54:06:a9:a9:29:64:3c:7b:70:f3:08:69: b7:44:e0:6e:eb:f6:6c:6a:52:9d:d1:3c:50:77:e4:e6:14:c0: 74:6e:b3:05:da:11:8e:f5:0b:d7:d6:ff:a2:69:34:7a:5a:b0: 17:e4:7c:c6:60:61:e6:da:cc:67:27:22:23:27:f9:ca:04:16: b2:08:b8:e3:e8:cc:eb:27:7c:97:97:b0:6e:43:cb:a5:79:26: 38:6d:ff:10 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQYqUPLuQEeLImH8BC7NxIln+n1YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTE1ZDhhYTEwZDYyZGJkZDM0ODMyNjg3NmJhNTY3NTNj Yjk5YjQ2NGNjNDU1MzI0YjMwHhcNMjUxMDIxMDAxMDAzWhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BiOWVkZTZiYjc0MzM5OGMxNjA3NWEyYWRmMzUyOWE1NjY3 NThkZTFhOWUwZTVkN2E2Y2FlMzA2MDM3MjNmYTFkMS0wKwYDVQQDEyRkZGZiYzk3 Yy03YmVkLTQwZGYtOTVjYS1lNjY0YjI5ZDdiMjcwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtpSmaqLCL2SZ04ssfgZylFsmL2mAMIL7lg9iVJR0+vi8u 9Gz59TDWf+JhalIKHIeJ2HyB83a3ixzHJCxDLCt0tbEXMojKp4yNr7iPrxHOqhtH 1nMbalnIu9/DzDp9kg07r5GywPFa6Cd/S+REcbufrPvUfx8gY4SeoMvTex3J3oDS JOqeWptQTeSo+Js1/PmCBoLhnl6ccKASxWrrC/YdDM3YdrQvqJXskMt/+Cu1WuEc gpf6q+0HLcV16LmuoIYPOWhrLAjU0GVZ1PiolTt/VSheu+sBTdbL9Mx3ukI/Os5t FSYKl1Imgc/vX0WEATe+VkJAiwaPShX0dX6GUVK5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU7OLwvP3bfffDHp1t+FEK9/H0X9kwHwYDVR0jBBgwFoAUkS3GDddkKYK8 rn+B/jxMEnKAIh8wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83MTg4YWMyNC0w OWNjLTRmMjAtOWRiZC1jZDkwMDVkMjc5N2UvYTE1ZDhhYTEwZDYyZGJkZDM0ODMy Njg3NmJhNTY3NTNjYjk5YjQ2NGNjNDU1MzI0YjMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNjAyYTI2ZTUtNGE5ZS00ZTVlLTg5ZjAtZWY4 OTE0OTBkOWM5LzhlYWIyYzY1LTE0ODgtNDVmZi1iN2IzLTZkOWMwZjMyN2YxNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzYwMmEyNmU1LTRhOWUtNGU1ZS04OWYw LWVmODkxNDkwZDljOS9ZdHZkTklNbWgydWxaMVBMbWJSa3pFVlRKTE0uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUycIAwDQYJKoZIhvcNAQELBQADggEBAFaw+cibZLxj43hES6OFsFGxCTPC TsOfSywuAUjvWvXtoR1Xka92T9FFyv+kixRp4dh1OfUFsV0GwEzqm048vWKcvzpe gMhhduLAb+sBJINgTDOHcrFl7yERC0MEmZbWPpUxzDaZIefg/48fyOuq7QYFQvk2 D+ApaJkNRZYp3F7r0z15X0Ou69wxAamiGt2FngFtgy5Y5teo+S2XFpSa+9LGSy3f vvd/TFQGqakpZDx7cPMIabdE4G7r9mxqUp3RPFB35OYUwHRuswXaEY71C9fW/6Jp NHpasBfkfMZgYebazGcnIiMn+coEFrIIuOPozOsnfJeXsG5Dy6V5Jjht/xA= -----END CERTIFICATE-----Generated at Wed Nov 5 09:52:57 2025 by rpki-client