$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/57433c2d-3f13-4242-9b51-a6f8d1307f78.roa File: 57433c2d-3f13-4242-9b51-a6f8d1307f78.roa (raw, json) Hash identifier: aGVF7nWRtu+416UEod0XvIduOltLYtEUWhXk2wGOyCs= Subject key identifier: 0D:45:62:C6:F1:67:7A:CF:CF:8A:D1:DD:F4:A3:06:A0:1C:2E:A0:79 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 68373EC216D9628733460BEDF3A8FCD851189218 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/57433c2d-3f13-4242-9b51-a6f8d1307f78.roa Signing time: Fri 27 Jun 2025 00:40:17 +0000 ROA not before: Fri 27 Jun 2025 00:40:17 +0000 ROA not after: Fri 01 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 50.16.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:37:3e:c2:16:d9:62:87:33:46:0b:ed:f3:a8:fc:d8:51:18:92:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 27 00:40:17 2025 GMT Not After : Aug 1 23:59:59 2025 GMT Subject: serialNumber=257baeccd314205810d0d616a36eda411f952b29e78c7947c8ee97a66cac16b5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d7:17:96:c0:07:d1:d5:ce:20:7f:27:82:e9: e2:d6:a8:0d:a9:a3:46:49:41:e1:41:49:b5:38:f9: c2:f0:a4:0e:a9:47:ad:cd:9e:70:56:5e:46:e0:9d: b7:c3:ff:e4:6a:a6:8d:d1:54:56:a2:f9:97:10:e4: 05:eb:09:18:6a:a8:d6:36:73:cd:13:44:35:6b:be: e1:52:b3:fa:23:3a:b7:ef:1a:76:ff:c4:c4:07:cb: 80:14:0e:44:92:fb:ea:af:c1:54:46:36:af:a4:76: ae:f7:7c:c4:2f:e2:22:01:d7:b1:9b:53:41:e8:96: b6:b8:b5:b7:ee:ad:50:bb:7d:58:5f:0d:8f:e1:01: 80:b3:42:00:3b:a0:33:42:98:b4:b5:80:47:b8:c6: 78:b1:c4:7d:d8:0c:ed:89:49:ef:49:9c:2f:f9:d0: d3:2f:9b:28:51:c8:c3:f1:45:4b:50:10:db:17:41: 06:d8:fd:3c:32:e5:b9:f2:78:a3:eb:cf:11:7a:8b: 13:69:83:65:c2:09:ee:ed:ad:66:6a:d7:81:99:f7: 51:96:5f:32:7f:a9:f8:a0:4a:cd:5d:b0:ef:f6:e6: 5b:36:8b:bc:5f:54:fc:f6:b1:ba:4d:b6:cd:54:6f: e0:1d:e1:e8:28:2d:25:dd:05:5a:25:fb:a4:9d:48: 80:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:45:62:C6:F1:67:7A:CF:CF:8A:D1:DD:F4:A3:06:A0:1C:2E:A0:79 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/57433c2d-3f13-4242-9b51-a6f8d1307f78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.16.184.0/21 Signature Algorithm: sha256WithRSAEncryption 63:a3:81:50:c8:b8:39:3b:75:66:5f:85:51:0a:72:2d:a8:5f: 66:7a:26:2c:5d:06:b8:cb:53:44:54:29:e5:85:18:54:02:23: 4a:e9:87:d9:ab:71:96:23:ab:80:18:83:12:cd:2a:1d:9e:81: 54:e8:d6:ba:cd:c0:69:e3:74:f3:db:bb:9a:4a:22:6c:4a:c6: 82:42:5b:bb:f4:4c:8c:5e:62:48:71:db:38:b7:28:df:4f:48: 1b:b8:da:73:be:58:43:00:ea:a5:14:f1:f4:77:f8:db:0d:30: ea:b8:73:b3:96:de:e2:26:81:ae:57:e3:1e:57:5b:62:f4:2d: 70:a4:e3:a5:41:56:a7:22:8b:b4:1f:b8:89:0b:d7:51:1f:82: 57:50:45:d8:4d:19:b5:1b:8b:bd:00:db:52:02:10:0b:b2:56: 37:71:0c:9b:70:1d:72:f8:cc:e8:7b:95:99:80:d5:45:b9:78: e6:0d:21:ae:23:ba:5f:45:04:b9:cb:33:18:e1:53:cd:95:d9: 73:4f:a3:cd:07:e7:7e:d3:89:88:eb:76:b3:2f:3e:09:9b:3d: 73:87:48:c6:52:a9:64:93:f4:ca:36:d2:e0:c7:33:e4:20:e5: 7b:e1:0c:95:e1:20:ea:aa:1c:28:ab:5b:f4:1d:70:1f:51:ec: 24:98:70:2b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaDc+whbZYoczRgvt86j82FEYkhgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjI3MDA0MDE3WhcNMjUwODAxMjM1OTU5 WjB6MUkwRwYDVQQFE0AyNTdiYWVjY2QzMTQyMDU4MTBkMGQ2MTZhMzZlZGE0MTFm OTUyYjI5ZTc4Yzc5NDdjOGVlOTdhNjZjYWMxNmI1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/1xeWwAfR1c4gfyeC6eLWqA2po0ZJQeFBSbU4+cLwpA6p R63NnnBWXkbgnbfD/+Rqpo3RVFai+ZcQ5AXrCRhqqNY2c80TRDVrvuFSs/ojOrfv Gnb/xMQHy4AUDkSS++qvwVRGNq+kdq73fMQv4iIB17GbU0Holra4tbfurVC7fVhf DY/hAYCzQgA7oDNCmLS1gEe4xnixxH3YDO2JSe9JnC/50NMvmyhRyMPxRUtQENsX QQbY/Twy5bnyeKPrzxF6ixNpg2XCCe7trWZq14GZ91GWXzJ/qfigSs1dsO/25ls2 i7xfVPz2sbpNts1Ub+Ad4egoLSXdBVol+6SdSID7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUDUVixvFnes/PitHd9KMGoBwuoHkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU3NDMzYzJkLTNmMTMtNDI0Mi05YjUxLWE2ZjhkMTMwN2Y3OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMyELgwDQYJKoZIhvcNAQELBQADggEBAGOjgVDIuDk7dWZfhVEKci2oX2Z6 JixdBrjLU0RUKeWFGFQCI0rph9mrcZYjq4AYgxLNKh2egVTo1rrNwGnjdPPbu5pK ImxKxoJCW7v0TIxeYkhx2zi3KN9PSBu42nO+WEMA6qUU8fR3+NsNMOq4c7OW3uIm ga5X4x5XW2L0LXCk46VBVqcii7QfuIkL11EfgldQRdhNGbUbi70A21ICEAuyVjdx DJtwHXL4zOh7lZmA1UW5eOYNIa4jul9FBLnLMxjhU82V2XNPo80H537TiYjrdrMv PgmbPXOHSMZSqWST9Mo20uDHM+Qg5XvhDJXhIOqqHCirW/QdcB9R7CSYcCs= -----END CERTIFICATE-----Generated at Sun Jun 29 03:51:21 2025 by rpki-client