$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/e3f8a237-5d8b-4d61-abc8-c129192fb7c0.roa File: e3f8a237-5d8b-4d61-abc8-c129192fb7c0.roa (raw, json) Hash identifier: Ls28BzuUPpxpzbyQNVJk8tW161B2JJpBw/AkjCBMKgY= Subject key identifier: 57:C1:AB:4E:1D:BF:4A:8A:41:6C:79:80:16:9D:1D:D5:53:7C:58:35 Certificate issuer: /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3 Certificate serial: 643BF1556915E2A88800CB11C1803C63B36AC68E Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/e3f8a237-5d8b-4d61-abc8-c129192fb7c0.roa Signing time: Fri 26 Sep 2025 00:50:36 +0000 ROA not before: Fri 26 Sep 2025 00:50:36 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 50.112.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:3b:f1:55:69:15:e2:a8:88:00:cb:11:c1:80:3c:63:b3:6a:c6:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3 Validity Not Before: Sep 26 00:50:36 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=b4178979a34e2f9ead85e77feeca066002e36b831e4c9cee7847c16f55342bfc, CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:eb:08:5d:9d:db:80:4b:ac:b9:d3:42:35:86: d7:ce:18:7e:ca:00:c1:a5:16:ef:ca:f8:5d:32:77: 19:1e:47:2c:33:02:9c:21:98:c7:4e:18:0c:fe:43: 0e:0a:20:7a:c5:3b:ed:c6:c4:0e:85:ba:86:11:d3: 91:3e:bc:90:42:03:80:ae:51:79:15:a4:ec:ae:d0: 77:77:d0:5a:1d:24:bd:7a:87:59:c4:1f:3f:08:53: 74:e9:b6:c5:75:a6:57:ed:86:39:cd:1e:7f:d1:7c: 46:f1:71:7a:b6:4e:75:43:7e:07:d7:db:ee:e4:e3: ec:a2:1f:bf:27:3a:39:7c:3e:1d:c8:e8:24:e6:52: 61:f3:e4:25:a1:e4:86:af:41:f5:eb:c7:8b:4e:05: 51:69:b8:79:16:25:0c:cc:03:c2:92:f3:1d:72:52: d5:5e:f4:96:cd:69:fc:3e:cc:b3:55:9c:1a:50:e5: 34:58:c4:d3:51:8b:d6:3c:ec:9e:3c:cd:79:13:54: d3:bc:62:68:b8:32:40:e7:99:8d:9e:74:a2:10:09: 2d:f8:d1:0a:7f:49:cf:ff:e3:02:27:c4:24:e3:13: ff:15:ba:dc:0a:b9:62:af:9b:72:f3:a9:be:e0:70: 12:49:7c:ea:81:3b:ab:8e:6b:be:55:1f:46:c7:b8: dd:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:C1:AB:4E:1D:BF:4A:8A:41:6C:79:80:16:9D:1D:D5:53:7C:58:35 X509v3 Authority Key Identifier: keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/e3f8a237-5d8b-4d61-abc8-c129192fb7c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.112.128.0/18 Signature Algorithm: sha256WithRSAEncryption 0e:47:60:4f:d5:58:7d:dd:52:08:dc:b4:9e:3f:e5:fa:7d:15: 61:a2:73:ea:30:87:6e:f7:73:53:bd:90:bb:05:e9:17:cb:45: 0e:05:f0:8b:66:24:2c:84:73:6c:a1:f4:f2:bb:58:89:bf:3e: 1e:61:51:49:c7:75:a4:cb:45:88:9d:f7:e3:94:09:8b:02:38: 3c:35:92:de:92:17:bc:ba:fe:44:50:f4:58:63:94:4d:2b:a4: d2:16:92:7a:f9:23:63:a4:0b:e8:a2:88:5f:09:37:0d:dc:da: 96:e5:8c:04:a8:ea:3b:a1:4d:ec:17:15:8e:59:11:fc:ea:a4: 6f:e1:4a:d2:6b:84:c3:b4:e1:e2:4b:ed:2b:f1:01:a7:0d:91: 6c:b3:91:60:e8:12:5a:b7:d8:29:73:de:54:e3:fc:1a:a7:d9: fc:1d:0c:49:38:77:e3:08:dd:95:fe:6e:8d:57:b6:8a:ac:df: 87:09:fe:11:e2:29:cb:e1:7e:93:0d:02:4c:dc:1d:1c:b5:a8: f6:78:47:84:52:4a:bf:68:f4:af:87:89:13:f3:70:01:c6:4f: d8:8d:3e:40:5b:53:10:b6:99:ed:dd:60:1c:e6:e5:e5:4a:15: af:9c:b2:50:d0:c2:11:e6:6f:cd:b0:9d:ba:1d:af:81:1d:33: 93:37:db:98 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZDvxVWkV4qiIAMsRwYA8Y7Nqxo4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTE1ZDhhYTEwZDYyZGJkZDM0ODMyNjg3NmJhNTY3NTNj Yjk5YjQ2NGNjNDU1MzI0YjMwHhcNMjUwOTI2MDA1MDM2WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BiNDE3ODk3OWEzNGUyZjllYWQ4NWU3N2ZlZWNhMDY2MDAy ZTM2YjgzMWU0YzljZWU3ODQ3YzE2ZjU1MzQyYmZjMS0wKwYDVQQDEyRkZGZiYzk3 Yy03YmVkLTQwZGYtOTVjYS1lNjY0YjI5ZDdiMjcwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+6whdnduAS6y500I1htfOGH7KAMGlFu/K+F0ydxkeRywz ApwhmMdOGAz+Qw4KIHrFO+3GxA6FuoYR05E+vJBCA4CuUXkVpOyu0Hd30FodJL16 h1nEHz8IU3TptsV1plfthjnNHn/RfEbxcXq2TnVDfgfX2+7k4+yiH78nOjl8Ph3I 6CTmUmHz5CWh5IavQfXrx4tOBVFpuHkWJQzMA8KS8x1yUtVe9JbNafw+zLNVnBpQ 5TRYxNNRi9Y87J48zXkTVNO8Ymi4MkDnmY2edKIQCS340Qp/Sc//4wInxCTjE/8V utwKuWKvm3Lzqb7gcBJJfOqBO6uOa75VH0bHuN0jAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUV8GrTh2/SopBbHmAFp0d1VN8WDUwHwYDVR0jBBgwFoAUkS3GDddkKYK8 rn+B/jxMEnKAIh8wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83MTg4YWMyNC0w OWNjLTRmMjAtOWRiZC1jZDkwMDVkMjc5N2UvYTE1ZDhhYTEwZDYyZGJkZDM0ODMy Njg3NmJhNTY3NTNjYjk5YjQ2NGNjNDU1MzI0YjMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNjAyYTI2ZTUtNGE5ZS00ZTVlLTg5ZjAtZWY4 OTE0OTBkOWM5L2UzZjhhMjM3LTVkOGItNGQ2MS1hYmM4LWMxMjkxOTJmYjdjMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzYwMmEyNmU1LTRhOWUtNGU1ZS04OWYw LWVmODkxNDkwZDljOS9ZdHZkTklNbWgydWxaMVBMbWJSa3pFVlRKTE0uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYycIAwDQYJKoZIhvcNAQELBQADggEBAA5HYE/VWH3dUgjctJ4/5fp9FWGi c+owh273c1O9kLsF6RfLRQ4F8ItmJCyEc2yh9PK7WIm/Ph5hUUnHdaTLRYid9+OU CYsCODw1kt6SF7y6/kRQ9FhjlE0rpNIWknr5I2OkC+iiiF8JNw3c2pbljASo6juh TewXFY5ZEfzqpG/hStJrhMO04eJL7SvxAacNkWyzkWDoElq32Clz3lTj/Bqn2fwd DEk4d+MI3ZX+bo1Xtoqs34cJ/hHiKcvhfpMNAkzcHRy1qPZ4R4RSSr9o9K+HiRPz cAHGT9iNPkBbUxC2me3dYBzm5eVKFa+cslDQwhHmb82wnbodr4EdM5M325g= -----END CERTIFICATE-----Generated at Mon Oct 20 18:16:17 2025 by rpki-client