$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b50f1382-bb50-430d-9b35-c29ed7bae260.roa File: b50f1382-bb50-430d-9b35-c29ed7bae260.roa (raw, json) Hash identifier: K08UzQpZwI1UpVg7pRfxqgV1kf6dKTt7Qf/htkIUsw8= Subject key identifier: 62:7C:40:FF:B9:B7:52:2E:6A:43:5E:FC:BB:1F:B8:80:80:AB:BA:EA Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 43E548854EC38C442CA252E9CEDB43C546D18701 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b50f1382-bb50-430d-9b35-c29ed7bae260.roa Signing time: Tue 21 Oct 2025 04:42:20 +0000 ROA not before: Tue 21 Oct 2025 04:42:20 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.253.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:e5:48:85:4e:c3:8c:44:2c:a2:52:e9:ce:db:43:c5:46:d1:87:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 21 04:42:20 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=075bd334a7bc41d25270efc0ed826afd98bfb42d43c5d9d0f6995cc5bace706f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:18:ce:aa:91:17:88:7d:06:78:d3:bd:41:47: 04:9c:ad:43:c7:0d:f2:f7:9d:01:a0:81:f9:39:ad: d7:39:3e:97:20:ba:dc:52:36:9f:74:73:c1:80:ff: 3b:7e:95:2d:ec:b8:ea:39:b4:f8:b8:9f:a9:6f:07: c5:3d:73:0b:f8:24:92:c1:b7:8b:2d:18:aa:b5:16: bb:76:4e:fa:96:c7:7f:93:55:c9:8c:88:8e:81:27: 83:b4:77:19:33:1d:92:a4:b4:0d:2a:54:e7:b1:95: c1:c1:6a:0f:54:0d:d8:14:91:12:89:94:d7:28:55: 96:df:57:59:cf:1c:7d:ff:db:7e:2d:30:af:c4:aa: ba:ef:31:47:51:25:88:47:44:ce:d9:88:37:ab:cd: 5c:60:54:f1:8a:11:51:bf:d6:91:71:d3:84:3d:8a: eb:a4:de:52:29:9b:cf:a1:5c:c6:ee:df:3a:07:a5: 8a:b1:f1:8a:6a:6a:44:2a:aa:7e:25:9c:68:5a:7f: 68:96:fb:c0:9a:e1:9d:6d:55:d8:f3:92:cb:ec:f5: e7:ca:87:e3:fb:68:00:82:ee:fb:32:c0:05:39:a6: b3:7c:b2:4f:67:62:a1:e4:86:33:c7:b2:d4:98:65: 85:92:41:95:47:aa:f6:94:57:0f:e7:7d:26:ae:d6: 36:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:7C:40:FF:B9:B7:52:2E:6A:43:5E:FC:BB:1F:B8:80:80:AB:BA:EA X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b50f1382-bb50-430d-9b35-c29ed7bae260.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.253.128.0/17 Signature Algorithm: sha256WithRSAEncryption 01:64:2a:dd:1a:90:ac:78:59:1c:d0:7a:e0:79:84:3e:0a:70: af:25:d1:7e:17:ce:ca:38:67:df:8f:06:8f:99:f8:6a:f2:9c: fe:96:6e:2f:cc:b2:68:66:3f:b2:02:b4:84:87:ff:a9:54:d0: 44:5f:ac:db:fb:db:09:40:b6:60:0e:7e:b9:06:80:33:49:78: 73:c3:44:07:fe:eb:03:56:52:2d:10:d3:6f:0b:0f:66:07:66: 6b:57:77:59:10:77:35:9d:77:23:54:7a:93:4f:64:0b:91:db: 6f:ce:6e:c6:d9:65:a4:69:6f:57:06:aa:45:74:59:d6:e1:46: 76:b3:cb:6c:96:f6:d5:09:f3:94:52:56:1b:0e:62:62:01:f8: 5e:b7:69:a6:44:40:04:14:c5:a7:81:c6:ac:2b:5f:33:22:c1: c9:df:54:92:f1:dd:af:20:ab:71:0a:d8:3a:0b:97:9b:65:77: da:fe:04:61:1f:c9:ef:a7:da:52:e7:2b:51:0a:21:90:2d:0f: 74:d9:ae:79:8a:26:4f:c1:ac:5d:69:a4:85:0d:ee:a7:f1:5e: 0a:41:fc:76:8a:40:0f:a0:a6:73:1e:97:16:ee:ca:96:cb:c2: ac:17:8c:ef:74:db:26:4d:0c:d0:5e:80:3d:85:f3:88:cc:70: 93:be:08:4d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQ+VIhU7DjEQsolLpzttDxUbRhwEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDIxMDQ0MjIwWhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AwNzViZDMzNGE3YmM0MWQyNTI3MGVmYzBlZDgyNmFmZDk4 YmZiNDJkNDNjNWQ5ZDBmNjk5NWNjNWJhY2U3MDZmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCVGM6qkReIfQZ4071BRwScrUPHDfL3nQGggfk5rdc5Ppcg utxSNp90c8GA/zt+lS3suOo5tPi4n6lvB8U9cwv4JJLBt4stGKq1Frt2TvqWx3+T VcmMiI6BJ4O0dxkzHZKktA0qVOexlcHBag9UDdgUkRKJlNcoVZbfV1nPHH3/234t MK/EqrrvMUdRJYhHRM7ZiDerzVxgVPGKEVG/1pFx04Q9iuuk3lIpm8+hXMbu3zoH pYqx8YpqakQqqn4lnGhaf2iW+8Ca4Z1tVdjzksvs9efKh+P7aACC7vsywAU5prN8 sk9nYqHkhjPHstSYZYWSQZVHqvaUVw/nfSau1jZdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUYnxA/7m3Ui5qQ178ux+4gICruuowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2I1MGYxMzgyLWJiNTAtNDMwZC05YjM1LWMyOWVkN2JhZTI2MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcS/YAwDQYJKoZIhvcNAQELBQADggEBAAFkKt0akKx4WRzQeuB5hD4KcK8l 0X4Xzso4Z9+PBo+Z+GrynP6Wbi/MsmhmP7ICtISH/6lU0ERfrNv72wlAtmAOfrkG gDNJeHPDRAf+6wNWUi0Q028LD2YHZmtXd1kQdzWddyNUepNPZAuR22/ObsbZZaRp b1cGqkV0WdbhRnazy2yW9tUJ85RSVhsOYmIB+F63aaZEQAQUxaeBxqwrXzMiwcnf VJLx3a8gq3EK2DoLl5tld9r+BGEfye+n2lLnK1EKIZAtD3TZrnmKJk/BrF1ppIUN 7qfxXgpB/HaKQA+gpnMelxbuypbLwqwXjO902yZNDNBegD2F84jMcJO+CE0= -----END CERTIFICATE-----Generated at Wed Nov 5 01:54:07 2025 by rpki-client