$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/657974f1-94c0-4624-90be-8e1120bd47b0.roa File: 657974f1-94c0-4624-90be-8e1120bd47b0.roa (raw, json) Hash identifier: /v0+EZ9E2ZyxdgEntZ3bFiBP2esBX0yZVdQ7B6lLUaQ= Subject key identifier: B7:4D:6C:E3:9B:C7:3F:31:79:37:8B:BA:78:1A:80:94:D6:A8:12:C3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0C69A662609AEDB28ABEB6A1BA90ED811A333A9C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/657974f1-94c0-4624-90be-8e1120bd47b0.roa Signing time: Wed 07 May 2025 00:21:00 +0000 ROA not before: Wed 07 May 2025 00:21:00 +0000 ROA not after: Wed 11 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 50.17.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:69:a6:62:60:9a:ed:b2:8a:be:b6:a1:ba:90:ed:81:1a:33:3a:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 7 00:21:00 2025 GMT Not After : Jun 11 23:59:59 2025 GMT Subject: serialNumber=95b93cf2f5cd39e4c748bc92b72c583f58caf935b8276db22312f2aad498307c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:87:fa:58:32:1d:89:f3:c2:ca:2e:e6:f2:41: 19:aa:64:4b:7f:75:8f:46:1a:bb:a0:d9:d8:8f:6a: 8a:75:2f:86:49:f6:48:9a:99:89:a7:78:5f:82:e5: 1a:89:09:4d:90:2c:6e:47:c4:ce:8e:70:bf:a0:05: 00:a1:18:71:51:1c:69:6d:ce:e8:44:3e:64:dc:0c: ee:ad:34:42:83:dc:ec:8d:55:b8:77:14:da:b3:d8: 34:9c:f5:ee:8a:28:d3:e3:52:d4:65:e5:da:b2:ae: af:f9:70:64:c9:df:fd:5c:24:d9:5c:d3:3e:87:47: ab:b8:73:d4:b4:a0:41:07:03:93:f7:69:62:17:80: 32:e7:8c:d0:78:f7:c6:3c:3e:ec:50:93:50:c8:5d: 0b:d1:4c:21:8e:cf:98:c1:50:96:3e:3e:68:f4:aa: 2a:c9:74:1d:c8:96:cb:bb:c6:d4:28:b2:78:5f:e6: c9:9a:d8:15:f6:53:38:a5:71:78:e5:6a:40:39:10: a7:2b:d9:1d:b1:ff:3f:dc:c9:ec:df:4a:a5:33:17: 92:5a:25:0a:8b:30:38:39:2d:fa:c4:5b:8b:74:5c: 82:d4:8f:a2:87:33:c8:0d:e5:43:9f:e4:ec:5f:d0: b8:2d:34:8e:8c:09:b5:d7:81:b0:c9:24:e4:24:86: 31:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:4D:6C:E3:9B:C7:3F:31:79:37:8B:BA:78:1A:80:94:D6:A8:12:C3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/657974f1-94c0-4624-90be-8e1120bd47b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.17.176.0/22 Signature Algorithm: sha256WithRSAEncryption c4:a1:b2:44:51:19:ce:f0:0d:d4:f1:ed:7b:79:f6:07:f7:e8: 6b:94:7b:aa:37:e7:32:f0:44:04:03:60:cf:3d:fd:12:f7:da: 8c:19:d8:38:8d:4a:bc:80:18:c4:50:cf:f0:08:2a:57:da:fd: 2a:87:6b:e2:31:cc:25:76:81:77:a4:82:ee:9b:84:23:57:36: 3a:26:f9:de:92:98:a1:e5:f8:4e:a2:cf:d7:56:fe:60:2d:f7: 24:a0:bb:bc:a9:77:2c:3c:af:58:c5:f3:8f:66:a8:79:bd:d9: bb:f8:f8:c5:bb:28:6d:ed:c2:c9:94:a1:cb:c3:62:6d:e9:f8: 88:c5:16:f7:36:33:05:dd:bd:ac:53:b1:e7:07:4a:91:5e:e9: 64:c4:db:f1:2c:f0:42:af:43:d5:e0:ac:e9:a6:f6:fb:8e:1d: c5:aa:30:74:4d:77:5b:f4:2b:fb:df:fd:48:eb:23:dc:63:5f: 84:a1:f8:40:83:a7:8e:a9:71:95:3b:44:33:49:18:8a:06:54: 92:3f:2e:74:b8:ce:3d:d4:7b:cc:08:5a:cf:35:54:db:fd:0c: d5:2e:50:61:ee:12:2d:7d:d7:57:1e:5a:19:88:18:c3:4a:0e: 2e:32:d7:2c:e6:59:e4:ef:94:ba:30:22:03:d6:ec:7b:76:58: dd:69:81:4c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDGmmYmCa7bKKvrahupDtgRozOpwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTA3MDAyMTAwWhcNMjUwNjExMjM1OTU5 WjB6MUkwRwYDVQQFE0A5NWI5M2NmMmY1Y2QzOWU0Yzc0OGJjOTJiNzJjNTgzZjU4 Y2FmOTM1YjgyNzZkYjIyMzEyZjJhYWQ0OTgzMDdjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNh/pYMh2J88LKLubyQRmqZEt/dY9GGrug2diPaop1L4ZJ 9kiamYmneF+C5RqJCU2QLG5HxM6OcL+gBQChGHFRHGltzuhEPmTcDO6tNEKD3OyN Vbh3FNqz2DSc9e6KKNPjUtRl5dqyrq/5cGTJ3/1cJNlc0z6HR6u4c9S0oEEHA5P3 aWIXgDLnjNB498Y8PuxQk1DIXQvRTCGOz5jBUJY+Pmj0qirJdB3Ilsu7xtQosnhf 5sma2BX2UzilcXjlakA5EKcr2R2x/z/cyezfSqUzF5JaJQqLMDg5LfrEW4t0XILU j6KHM8gN5UOf5Oxf0LgtNI6MCbXXgbDJJOQkhjHBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUt01s45vHPzF5N4u6eBqAlNaoEsMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY1Nzk3NGYxLTk0YzAtNDYyNC05MGJlLThlMTEyMGJkNDdiMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIyEbAwDQYJKoZIhvcNAQELBQADggEBAMShskRRGc7wDdTx7Xt59gf36GuU e6o35zLwRAQDYM89/RL32owZ2DiNSryAGMRQz/AIKlfa/SqHa+IxzCV2gXekgu6b hCNXNjom+d6SmKHl+E6iz9dW/mAt9ySgu7ypdyw8r1jF849mqHm92bv4+MW7KG3t wsmUocvDYm3p+IjFFvc2MwXdvaxTsecHSpFe6WTE2/Es8EKvQ9XgrOmm9vuOHcWq MHRNd1v0K/vf/UjrI9xjX4Sh+ECDp46pcZU7RDNJGIoGVJI/LnS4zj3Ue8wIWs81 VNv9DNUuUGHuEi1911ceWhmIGMNKDi4y1yzmWeTvlLowIgPW7Ht2WN1pgUw= -----END CERTIFICATE-----Generated at Sun May 11 15:15:06 2025 by rpki-client