$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1c3c320a-4015-4d09-85af-05cf9a03532c.roa File: 1c3c320a-4015-4d09-85af-05cf9a03532c.roa (raw, json) Hash identifier: k+6x29YTZJQC97zDLeKhdLJLBK+XOTXX2/VqMfxBMoA= Subject key identifier: 73:7F:4D:A1:64:6A:F7:61:DE:86:C1:72:61:72:A5:2D:99:64:E0:E2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7CAD8AD1EAB667166CE170B6845651B2F4CFB3D1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1c3c320a-4015-4d09-85af-05cf9a03532c.roa Signing time: Wed 07 May 2025 00:30:20 +0000 ROA not before: Wed 07 May 2025 00:30:20 +0000 ROA not after: Wed 11 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 50.18.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:ad:8a:d1:ea:b6:67:16:6c:e1:70:b6:84:56:51:b2:f4:cf:b3:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 7 00:30:20 2025 GMT Not After : Jun 11 23:59:59 2025 GMT Subject: serialNumber=a6c8871d9544e7b246962b724a6d850cf599d18dd50e3e7455116b71e794871d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:7d:93:b7:ad:17:c4:06:9b:72:46:2b:12:53: 8c:55:8e:a8:2a:53:07:7e:bd:cb:e9:fb:3e:39:26: ed:17:b9:ad:01:7c:12:90:64:0b:0b:d5:2c:16:56: d4:5c:d6:61:aa:7e:fc:01:be:3d:4b:ce:59:76:50: a0:ca:07:1d:54:b8:a0:94:14:9d:9a:58:47:06:a2: c6:92:36:d0:82:c7:8a:47:7d:91:bf:2c:01:57:2f: ed:ad:92:5c:90:25:e9:40:65:c9:5b:3f:a6:45:96: e4:8c:ab:04:e3:44:c2:ef:29:2c:e6:62:07:d6:10: 5d:79:2a:92:1b:f2:d6:c0:8a:9f:6a:77:63:2e:8b: e5:e8:25:b7:30:70:aa:a7:6f:68:be:ef:35:9c:2a: 54:56:ff:a1:57:e8:55:12:b3:56:aa:7b:e4:16:de: 90:f7:7b:82:39:7c:e5:07:91:98:80:9f:6f:cf:bc: 8a:c2:38:c8:5b:0c:ad:76:92:85:93:43:04:07:6f: 13:df:22:5a:a7:6d:4b:4e:4a:cb:2c:35:74:5f:bd: 85:8b:52:27:8d:29:71:af:1f:f1:35:52:e0:21:70: e7:36:be:c6:8e:95:24:b4:9e:cf:7f:33:2a:10:7e: fa:c9:cb:b6:33:12:4b:96:da:de:ea:1c:e9:b6:78: b1:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:7F:4D:A1:64:6A:F7:61:DE:86:C1:72:61:72:A5:2D:99:64:E0:E2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1c3c320a-4015-4d09-85af-05cf9a03532c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.18.192.0/20 Signature Algorithm: sha256WithRSAEncryption 96:b6:87:87:1c:b3:ee:3c:72:6a:a2:7c:9d:53:5e:60:e2:3a: 32:a7:32:b1:6e:b5:b3:95:c6:6f:c5:10:0f:39:0a:03:7a:86: dd:b2:81:f3:bc:dd:49:e0:1e:89:b8:c8:a3:cc:8c:3a:35:4f: 6c:96:f3:40:9e:11:82:d9:d0:3b:54:57:3a:d0:65:75:68:4f: 5b:55:f7:5d:c3:f7:65:e2:e2:0b:b4:7c:a4:42:3a:15:28:74: 66:30:99:c2:0f:4e:80:93:19:8a:54:e7:0d:87:13:ec:54:96: 8b:0a:da:7d:ae:1c:8c:f6:c0:e5:2a:8e:52:60:a2:2d:0d:0b: d3:b3:5b:5e:d9:b6:c0:bc:bb:bd:01:5c:d4:62:65:dd:b3:e2: cd:eb:cf:fc:2a:66:b8:08:72:02:f0:1e:4d:6c:d1:21:75:0f: f7:4f:70:7f:f7:50:21:3b:d7:38:e4:16:15:e2:28:42:6d:e9: 14:dc:82:f7:29:c6:91:ad:22:9c:82:1d:ff:2a:08:19:8f:c5: d6:a5:86:32:08:eb:5c:f3:fa:2e:c0:c6:05:d4:13:d5:80:a5: 54:e2:d6:69:c4:b9:c2:ae:2f:21:28:8a:89:53:93:06:bc:c2: c9:50:bc:23:9f:27:21:37:80:2e:d3:07:3f:7a:58:69:43:09: ba:5d:c8:9a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfK2K0eq2ZxZs4XC2hFZRsvTPs9EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTA3MDAzMDIwWhcNMjUwNjExMjM1OTU5 WjB6MUkwRwYDVQQFE0BhNmM4ODcxZDk1NDRlN2IyNDY5NjJiNzI0YTZkODUwY2Y1 OTlkMThkZDUwZTNlNzQ1NTExNmI3MWU3OTQ4NzFkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDZfZO3rRfEBptyRisSU4xVjqgqUwd+vcvp+z45Ju0Xua0B fBKQZAsL1SwWVtRc1mGqfvwBvj1Lzll2UKDKBx1UuKCUFJ2aWEcGosaSNtCCx4pH fZG/LAFXL+2tklyQJelAZclbP6ZFluSMqwTjRMLvKSzmYgfWEF15KpIb8tbAip9q d2Mui+XoJbcwcKqnb2i+7zWcKlRW/6FX6FUSs1aqe+QW3pD3e4I5fOUHkZiAn2/P vIrCOMhbDK12koWTQwQHbxPfIlqnbUtOSsssNXRfvYWLUieNKXGvH/E1UuAhcOc2 vsaOlSS0ns9/MyoQfvrJy7YzEkuW2t7qHOm2eLFpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUc39NoWRq92HehsFyYXKlLZlk4OIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzFjM2MzMjBhLTQwMTUtNGQwOS04NWFmLTA1Y2Y5YTAzNTMyYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQyEsAwDQYJKoZIhvcNAQELBQADggEBAJa2h4ccs+48cmqifJ1TXmDiOjKn MrFutbOVxm/FEA85CgN6ht2ygfO83UngHom4yKPMjDo1T2yW80CeEYLZ0DtUVzrQ ZXVoT1tV913D92Xi4gu0fKRCOhUodGYwmcIPToCTGYpU5w2HE+xUlosK2n2uHIz2 wOUqjlJgoi0NC9OzW17ZtsC8u70BXNRiZd2z4s3rz/wqZrgIcgLwHk1s0SF1D/dP cH/3UCE71zjkFhXiKEJt6RTcgvcpxpGtIpyCHf8qCBmPxdalhjII61zz+i7AxgXU E9WApVTi1mnEucKuLyEoiolTkwa8wslQvCOfJyE3gC7TBz96WGlDCbpdyJo= -----END CERTIFICATE-----Generated at Fri May 9 00:42:46 2025 by rpki-client