$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/474b8370-dc4f-4592-ac12-366b777c2660.roa File: 474b8370-dc4f-4592-ac12-366b777c2660.roa (raw, json) Hash identifier: pns4hBfgC2/+85w7wSxHdxUwL0IYmQWNQKJqIuLelU4= Subject key identifier: E2:28:C4:92:43:10:BE:39:D1:EB:50:78:3B:86:8B:2E:69:E5:10:1B Certificate issuer: /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3 Certificate serial: 34959DD31A62EC68AA9AEEA0E3350C02A0425604 Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/474b8370-dc4f-4592-ac12-366b777c2660.roa Signing time: Fri 26 Sep 2025 00:50:04 +0000 ROA not before: Fri 26 Sep 2025 00:50:04 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 50.112.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:95:9d:d3:1a:62:ec:68:aa:9a:ee:a0:e3:35:0c:02:a0:42:56:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3 Validity Not Before: Sep 26 00:50:04 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=7e3ad6ab035e7e1bd523ca7368587faad683d0b076b92179f3beff6a9dfadf06, CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:78:00:de:1c:a5:5a:07:b2:18:5e:15:75:2f: c2:d5:9e:57:78:67:2e:28:6c:f2:5a:df:b2:5e:68: b4:10:bc:92:29:2f:78:a3:87:c5:74:02:de:0d:d0: ae:12:93:2a:5a:f7:e9:dc:a9:e6:74:e0:6f:b4:3a: 95:71:29:2a:43:0c:de:a3:ea:c8:80:b8:0f:50:55: 70:97:98:0f:12:c2:43:3c:40:3d:32:c3:c4:bb:12: 51:10:b9:00:de:25:32:76:f4:20:31:d7:38:b7:de: f6:ae:3c:15:53:06:1c:ae:bd:28:e7:b9:f2:d9:83: 9a:ab:77:0c:90:0a:db:b0:e4:f9:9b:99:ae:e9:aa: 2c:70:87:5f:02:72:a6:f3:05:1d:0c:95:1e:a7:e9: 84:76:fa:f5:7c:c2:e9:2f:63:3e:85:11:c5:66:81: 28:5b:80:f5:64:20:ae:29:f3:05:35:8e:fc:44:fe: 4c:17:77:47:3f:85:7f:1b:51:d1:4a:18:ca:2d:60: cb:b3:b8:e4:a0:7e:da:d2:94:5b:3e:51:83:6a:63: 15:5d:9f:33:b4:44:49:12:46:09:a4:7f:2b:d5:fe: 8d:f2:b7:ab:c2:e8:9f:c4:f2:73:01:12:c0:3c:89: 40:25:38:02:f5:97:26:d3:34:c2:67:9b:d3:0b:73: 9e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:28:C4:92:43:10:BE:39:D1:EB:50:78:3B:86:8B:2E:69:E5:10:1B X509v3 Authority Key Identifier: keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/474b8370-dc4f-4592-ac12-366b777c2660.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.112.1.0/24 Signature Algorithm: sha256WithRSAEncryption 09:0d:54:00:31:8a:6a:d9:c6:88:c1:03:5b:ef:b3:e3:ce:b1: 6f:f7:19:64:b8:b5:b8:6f:e1:53:00:18:2c:ef:9e:d7:1f:b4: 80:fd:dd:42:36:e9:af:10:0e:3f:07:5e:5f:1f:76:5b:cf:54: a1:96:18:4d:3f:5a:16:19:e1:ad:20:da:30:8f:d8:05:ca:27: e2:86:03:f9:aa:51:5d:74:53:4c:49:09:7c:6c:21:47:c5:a8: ca:54:e3:ac:d7:62:b5:7b:6a:b7:23:b9:34:f7:e2:86:e0:c4: 84:68:e4:d7:77:f0:52:42:b4:4f:18:82:7a:5d:21:61:08:ef: c6:f6:3a:76:5b:2d:82:12:39:4a:6a:e8:81:43:28:0f:5c:fe: e6:e7:be:66:bc:a1:95:c6:07:05:e3:50:23:bb:4d:92:01:56: 5a:b1:39:af:38:4a:af:dd:ff:3c:29:c0:80:6c:4d:db:a9:2d: b2:2d:4f:c1:77:7a:1a:cf:20:ce:b0:51:79:57:e8:ef:9a:fb: 73:3f:23:e6:51:05:40:3e:15:3f:52:e6:de:7e:1d:0a:c0:39: 58:85:c5:59:e5:69:e8:ae:4c:ab:f8:48:c4:93:e5:0a:1a:4d: 97:9f:39:6d:cc:e6:90:71:26:53:62:0e:72:8a:43:75:13:2c: 59:16:10:e6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNJWd0xpi7Giqmu6g4zUMAqBCVgQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTE1ZDhhYTEwZDYyZGJkZDM0ODMyNjg3NmJhNTY3NTNj Yjk5YjQ2NGNjNDU1MzI0YjMwHhcNMjUwOTI2MDA1MDA0WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZTNhZDZhYjAzNWU3ZTFiZDUyM2NhNzM2ODU4N2ZhYWQ2 ODNkMGIwNzZiOTIxNzlmM2JlZmY2YTlkZmFkZjA2MS0wKwYDVQQDEyRkZGZiYzk3 Yy03YmVkLTQwZGYtOTVjYS1lNjY0YjI5ZDdiMjcwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCoeADeHKVaB7IYXhV1L8LVnld4Zy4obPJa37JeaLQQvJIp L3ijh8V0At4N0K4Skypa9+ncqeZ04G+0OpVxKSpDDN6j6siAuA9QVXCXmA8SwkM8 QD0yw8S7ElEQuQDeJTJ29CAx1zi33vauPBVTBhyuvSjnufLZg5qrdwyQCtuw5Pmb ma7pqixwh18CcqbzBR0MlR6n6YR2+vV8wukvYz6FEcVmgShbgPVkIK4p8wU1jvxE /kwXd0c/hX8bUdFKGMotYMuzuOSgftrSlFs+UYNqYxVdnzO0REkSRgmkfyvV/o3y t6vC6J/E8nMBEsA8iUAlOAL1lybTNMJnm9MLc54bAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU4ijEkkMQvjnR61B4O4aLLmnlEBswHwYDVR0jBBgwFoAUkS3GDddkKYK8 rn+B/jxMEnKAIh8wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83MTg4YWMyNC0w OWNjLTRmMjAtOWRiZC1jZDkwMDVkMjc5N2UvYTE1ZDhhYTEwZDYyZGJkZDM0ODMy Njg3NmJhNTY3NTNjYjk5YjQ2NGNjNDU1MzI0YjMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNjAyYTI2ZTUtNGE5ZS00ZTVlLTg5ZjAtZWY4 OTE0OTBkOWM5LzQ3NGI4MzcwLWRjNGYtNDU5Mi1hYzEyLTM2NmI3NzdjMjY2MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzYwMmEyNmU1LTRhOWUtNGU1ZS04OWYw LWVmODkxNDkwZDljOS9ZdHZkTklNbWgydWxaMVBMbWJSa3pFVlRKTE0uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAycAEwDQYJKoZIhvcNAQELBQADggEBAAkNVAAximrZxojBA1vvs+POsW/3 GWS4tbhv4VMAGCzvntcftID93UI26a8QDj8HXl8fdlvPVKGWGE0/WhYZ4a0g2jCP 2AXKJ+KGA/mqUV10U0xJCXxsIUfFqMpU46zXYrV7arcjuTT34obgxIRo5Nd38FJC tE8YgnpdIWEI78b2OnZbLYISOUpq6IFDKA9c/ubnvma8oZXGBwXjUCO7TZIBVlqx Oa84Sq/d/zwpwIBsTdupLbItT8F3ehrPIM6wUXlX6O+a+3M/I+ZRBUA+FT9S5t5+ HQrAOViFxVnlaeiuTKv4SMST5QoaTZefOW3M5pBxJlNiDnKKQ3UTLFkWEOY= -----END CERTIFICATE-----Generated at Mon Oct 20 13:05:51 2025 by rpki-client