$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/cfa9fbaf-d677-4bfa-9d13-802dafc8c30d.roa File: cfa9fbaf-d677-4bfa-9d13-802dafc8c30d.roa (raw, json) Hash identifier: OSZWKi4OcyC234DVKexskUW9f3ZfzFJslduzef+Ldwc= Subject key identifier: 58:78:CB:1C:23:D0:FF:BB:CC:E8:DF:04:4C:CD:89:5F:F9:95:F2:A0 Certificate issuer: /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3 Certificate serial: 1F2E25C034C262C3ED7628BEA4C663E165AF680F Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/cfa9fbaf-d677-4bfa-9d13-802dafc8c30d.roa Signing time: Tue 21 Oct 2025 00:10:06 +0000 ROA not before: Tue 21 Oct 2025 00:10:06 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 50.112.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:2e:25:c0:34:c2:62:c3:ed:76:28:be:a4:c6:63:e1:65:af:68:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3 Validity Not Before: Oct 21 00:10:06 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=96234f8ec41814ca0ea65bb805959b68baca3e875a654a9cfd30ec1158d3e02c, CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b0:9b:46:3e:fe:f4:04:0e:f3:f0:18:20:1c: 9c:67:e5:43:40:38:be:85:39:7c:53:84:bc:f3:5a: c9:c3:c2:e6:ed:dd:cc:38:f4:8d:7e:c2:70:13:70: 13:2c:69:5f:fa:60:d6:59:38:52:46:da:8b:b4:b0: f1:96:47:5e:34:81:95:e8:d1:14:a7:e4:2d:e2:31: 75:ac:81:3f:76:a5:23:a1:59:7e:53:1e:ed:41:fc: e3:b5:c1:bb:5a:78:b8:99:43:c8:50:e7:35:ac:a8: 29:d9:16:9b:f3:c8:e6:b3:ae:0b:cf:68:06:61:ff: fa:a1:5b:66:03:22:95:59:51:df:48:20:5f:92:f1: a7:bf:a4:b8:ee:9b:39:21:c0:df:74:a9:42:e0:a5: 75:1e:57:3d:c0:0f:44:78:af:43:b7:76:c9:aa:c1: ad:c8:42:be:5f:da:7c:58:b8:96:07:04:5d:45:c1: e1:4b:ce:96:6e:b1:37:17:5c:43:a3:fc:cd:18:55: 1e:d9:41:51:68:ed:c5:96:dc:24:ef:b1:55:04:dc: a3:5c:8e:e6:06:c4:5d:b4:90:ed:1e:b6:8d:3c:05: f2:7d:44:ec:07:c5:4b:ad:18:44:30:8d:f5:6e:96: a1:71:e1:3c:93:dd:96:9a:16:96:35:66:cc:4a:13: 21:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:78:CB:1C:23:D0:FF:BB:CC:E8:DF:04:4C:CD:89:5F:F9:95:F2:A0 X509v3 Authority Key Identifier: keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/cfa9fbaf-d677-4bfa-9d13-802dafc8c30d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.112.192.0/19 Signature Algorithm: sha256WithRSAEncryption 14:80:58:b5:8a:aa:03:03:6f:9f:32:9a:b9:c9:17:cf:82:d7: f4:fa:64:83:60:13:d3:31:1c:d5:83:cf:e0:55:61:8d:50:96: ac:5f:58:07:b4:fd:73:52:29:41:e3:df:6f:7d:9e:01:87:c5: 20:0f:3b:58:8a:3d:02:c8:d6:79:e8:5c:c7:29:70:71:94:c4: 15:02:5f:e5:c8:7f:60:5c:af:37:73:8c:cf:0e:1f:d6:df:71: 0f:fa:68:0c:77:80:10:49:8e:8b:97:98:45:3d:e8:28:e9:ad: 88:ef:fa:ba:74:bf:37:88:e6:24:3b:46:68:89:e5:c3:01:e5: c5:4d:0d:58:b4:f2:0f:09:b1:2a:09:50:f0:cc:e1:be:06:89: 51:4f:a3:82:ed:a3:51:64:f0:6b:f8:17:54:3c:ee:cf:69:5b: 9f:4c:a0:e1:7f:67:3f:ff:98:3a:a3:63:78:8d:88:d6:5a:ad: c7:c2:4b:4c:9d:46:b8:d3:1c:6c:ac:ac:0d:9e:cf:25:f5:82: cd:4d:6d:4c:1b:39:93:29:2e:8d:cb:51:b5:3f:55:25:47:60: 58:14:94:a2:02:4b:e0:0d:85:9b:16:09:dc:bc:b2:a0:66:53: 09:14:5a:6e:b2:dd:16:a8:ad:42:1a:35:ad:20:00:cf:6f:e7: b1:5b:17:dc -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHy4lwDTCYsPtdii+pMZj4WWvaA8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTE1ZDhhYTEwZDYyZGJkZDM0ODMyNjg3NmJhNTY3NTNj Yjk5YjQ2NGNjNDU1MzI0YjMwHhcNMjUxMDIxMDAxMDA2WhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A5NjIzNGY4ZWM0MTgxNGNhMGVhNjViYjgwNTk1OWI2OGJh Y2EzZTg3NWE2NTRhOWNmZDMwZWMxMTU4ZDNlMDJjMS0wKwYDVQQDEyRkZGZiYzk3 Yy03YmVkLTQwZGYtOTVjYS1lNjY0YjI5ZDdiMjcwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDIsJtGPv70BA7z8BggHJxn5UNAOL6FOXxThLzzWsnDwubt 3cw49I1+wnATcBMsaV/6YNZZOFJG2ou0sPGWR140gZXo0RSn5C3iMXWsgT92pSOh WX5THu1B/OO1wbtaeLiZQ8hQ5zWsqCnZFpvzyOazrgvPaAZh//qhW2YDIpVZUd9I IF+S8ae/pLjumzkhwN90qULgpXUeVz3AD0R4r0O3dsmqwa3IQr5f2nxYuJYHBF1F weFLzpZusTcXXEOj/M0YVR7ZQVFo7cWW3CTvsVUE3KNcjuYGxF20kO0eto08BfJ9 ROwHxUutGEQwjfVulqFx4TyT3ZaaFpY1ZsxKEyFFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUWHjLHCPQ/7vM6N8ETM2JX/mV8qAwHwYDVR0jBBgwFoAUkS3GDddkKYK8 rn+B/jxMEnKAIh8wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83MTg4YWMyNC0w OWNjLTRmMjAtOWRiZC1jZDkwMDVkMjc5N2UvYTE1ZDhhYTEwZDYyZGJkZDM0ODMy Njg3NmJhNTY3NTNjYjk5YjQ2NGNjNDU1MzI0YjMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNjAyYTI2ZTUtNGE5ZS00ZTVlLTg5ZjAtZWY4 OTE0OTBkOWM5L2NmYTlmYmFmLWQ2NzctNGJmYS05ZDEzLTgwMmRhZmM4YzMwZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzYwMmEyNmU1LTRhOWUtNGU1ZS04OWYw LWVmODkxNDkwZDljOS9ZdHZkTklNbWgydWxaMVBMbWJSa3pFVlRKTE0uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUycMAwDQYJKoZIhvcNAQELBQADggEBABSAWLWKqgMDb58ymrnJF8+C1/T6 ZINgE9MxHNWDz+BVYY1QlqxfWAe0/XNSKUHj3299ngGHxSAPO1iKPQLI1nnoXMcp cHGUxBUCX+XIf2BcrzdzjM8OH9bfcQ/6aAx3gBBJjouXmEU96CjprYjv+rp0vzeI 5iQ7RmiJ5cMB5cVNDVi08g8JsSoJUPDM4b4GiVFPo4Lto1Fk8Gv4F1Q87s9pW59M oOF/Zz//mDqjY3iNiNZarcfCS0ydRrjTHGysrA2ezyX1gs1NbUwbOZMpLo3LUbU/ VSVHYFgUlKICS+ANhZsWCdy8sqBmUwkUWm6y3RaorUIaNa0gAM9v57FbF9w= -----END CERTIFICATE-----Generated at Wed Nov 5 07:43:22 2025 by rpki-client