$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2cd2616a-9845-46c4-8003-b0526557ae7e.roa File: 2cd2616a-9845-46c4-8003-b0526557ae7e.roa (raw, json) Hash identifier: XfnP0z1SUgksN+6Po5NI7lIeKVNRYV3Gyp1X14QW83U= Subject key identifier: 87:28:00:18:01:46:ED:E5:D1:92:B6:21:B8:61:1C:09:A0:82:77:06 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 17C7DF7C5B5BE0D6553AB462155F9EC3B7A25187 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2cd2616a-9845-46c4-8003-b0526557ae7e.roa Signing time: Fri 27 Jun 2025 00:50:27 +0000 ROA not before: Fri 27 Jun 2025 00:50:27 +0000 ROA not after: Fri 01 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 50.18.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:c7:df:7c:5b:5b:e0:d6:55:3a:b4:62:15:5f:9e:c3:b7:a2:51:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 27 00:50:27 2025 GMT Not After : Aug 1 23:59:59 2025 GMT Subject: serialNumber=aa83023296a6e076067fcbfd0d37e8399b652483ce4d48b688fbff6bcbf326ec, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:89:1a:b6:48:70:9f:33:df:14:e6:3a:2f:8f: e2:1f:64:75:70:c6:15:87:5f:d1:09:8b:51:79:c3: 3d:0e:e4:4d:ab:d3:59:a5:0e:a2:69:9f:0d:91:88: 5f:bb:a3:e5:ab:e4:ac:97:89:df:c9:d9:a3:be:d7: 6d:b9:e8:7e:ad:76:e8:9a:02:38:ef:3b:d9:a2:16: 64:a5:15:c5:3d:87:e8:a2:87:04:cf:6c:a7:8e:c9: 77:f3:d8:f2:6f:cd:43:95:29:1c:7b:95:e8:1a:64: 83:0d:2c:72:98:b6:d4:86:8f:41:59:60:ea:cc:52: fa:1b:72:a9:c6:62:ad:0a:09:cb:7d:04:eb:36:f6: cd:b3:5c:c6:c4:d0:8b:d7:cd:f3:a6:d4:59:9e:4e: 34:0a:e8:48:31:9a:24:f3:c3:3a:d8:88:55:da:96: 73:6f:d2:f1:d9:7d:07:8e:26:1e:ee:c9:ee:ad:26: d7:84:3d:85:15:d6:ff:e2:07:ef:2f:1e:f0:d3:d0: d0:46:f4:8e:a1:80:c1:0e:2c:5c:c2:17:4c:2a:4b: bf:06:8a:8d:b7:26:44:73:65:ee:9b:ed:47:ad:b8: 5d:94:05:fa:8c:7c:20:35:bd:26:62:32:60:6f:9c: 33:e2:66:70:a2:aa:e1:05:fd:14:25:9b:a2:54:7e: 51:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:28:00:18:01:46:ED:E5:D1:92:B6:21:B8:61:1C:09:A0:82:77:06 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2cd2616a-9845-46c4-8003-b0526557ae7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.18.224.0/19 Signature Algorithm: sha256WithRSAEncryption b6:f0:69:ce:ca:58:77:bf:0a:2e:26:f5:bc:a2:1c:53:84:82: e7:f4:f0:d4:5d:64:3e:c7:77:30:cc:52:45:6a:15:4c:31:94: 2d:26:92:aa:db:6d:96:2d:5f:e9:01:6c:5e:a0:27:22:ee:f8: 5e:f7:51:c3:ba:c8:d6:0a:89:88:ce:ad:23:ae:57:7d:69:55: 3a:d0:62:77:ef:e4:a5:0b:2b:a3:e1:dc:ae:7f:f8:51:b6:63: 4d:a6:ec:d9:73:c5:fe:23:c4:eb:84:0e:9a:b1:69:95:ac:ca: a3:7d:07:6c:f5:d7:c8:16:db:e0:fe:80:5e:bb:3e:9a:46:20: 6e:4b:78:2a:12:8d:bc:cf:e0:9c:63:cc:5a:12:8a:0e:26:a0: 67:ee:d6:e3:81:f5:40:62:c5:22:74:60:bc:47:dd:93:eb:0b: 68:55:3f:3b:12:e4:96:63:b7:08:2a:8c:c9:a1:1c:e0:05:73: 58:cf:a0:51:93:74:61:87:f1:21:0c:e8:1e:ea:be:47:01:42: 73:74:3d:38:2d:6a:94:a8:87:f3:e3:b2:75:9d:01:bd:0e:d1: 38:97:36:c2:af:e3:9e:61:c5:bd:4b:69:4e:f7:0c:6a:16:51: a8:86:ff:ac:04:d5:e1:e0:4c:b5:38:f0:7f:80:02:6c:d0:ce: ca:b7:9a:95 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUF8fffFtb4NZVOrRiFV+ew7eiUYcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjI3MDA1MDI3WhcNMjUwODAxMjM1OTU5 WjB6MUkwRwYDVQQFE0BhYTgzMDIzMjk2YTZlMDc2MDY3ZmNiZmQwZDM3ZTgzOTli NjUyNDgzY2U0ZDQ4YjY4OGZiZmY2YmNiZjMyNmVjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDEiRq2SHCfM98U5jovj+IfZHVwxhWHX9EJi1F5wz0O5E2r 01mlDqJpnw2RiF+7o+Wr5KyXid/J2aO+12256H6tduiaAjjvO9miFmSlFcU9h+ii hwTPbKeOyXfz2PJvzUOVKRx7legaZIMNLHKYttSGj0FZYOrMUvobcqnGYq0KCct9 BOs29s2zXMbE0IvXzfOm1FmeTjQK6EgxmiTzwzrYiFXalnNv0vHZfQeOJh7uye6t JteEPYUV1v/iB+8vHvDT0NBG9I6hgMEOLFzCF0wqS78Gio23JkRzZe6b7UetuF2U BfqMfCA1vSZiMmBvnDPiZnCiquEF/RQlm6JUflFFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhygAGAFG7eXRkrYhuGEcCaCCdwYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJjZDI2MTZhLTk4NDUtNDZjNC04MDAzLWIwNTI2NTU3YWU3ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUyEuAwDQYJKoZIhvcNAQELBQADggEBALbwac7KWHe/Ci4m9byiHFOEguf0 8NRdZD7HdzDMUkVqFUwxlC0mkqrbbZYtX+kBbF6gJyLu+F73UcO6yNYKiYjOrSOu V31pVTrQYnfv5KULK6Ph3K5/+FG2Y02m7Nlzxf4jxOuEDpqxaZWsyqN9B2z118gW 2+D+gF67PppGIG5LeCoSjbzP4JxjzFoSig4moGfu1uOB9UBixSJ0YLxH3ZPrC2hV PzsS5JZjtwgqjMmhHOAFc1jPoFGTdGGH8SEM6B7qvkcBQnN0PTgtapSoh/PjsnWd Ab0O0TiXNsKv455hxb1LaU73DGoWUaiG/6wE1eHgTLU48H+AAmzQzsq3mpU= -----END CERTIFICATE-----Generated at Tue Jul 1 18:19:51 2025 by rpki-client