$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a28385f-c608-4722-b24d-8ffeb91ee27c.roa File: 6a28385f-c608-4722-b24d-8ffeb91ee27c.roa (raw, json) Hash identifier: xfFyv+5vyyna8AkSbRe2huo+AE96dDgJCfYHKaPnDWs= Subject key identifier: F4:97:A2:55:9D:0E:54:DF:68:25:58:58:02:1B:DD:B5:CF:6B:2A:2B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 21F7C3A48A0761B80D83E3003E15EBA7852798AB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a28385f-c608-4722-b24d-8ffeb91ee27c.roa Signing time: Mon 18 Aug 2025 15:40:23 +0000 ROA not before: Mon 18 Aug 2025 15:40:23 +0000 ROA not after: Mon 22 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 50.19.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:f7:c3:a4:8a:07:61:b8:0d:83:e3:00:3e:15:eb:a7:85:27:98:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 18 15:40:23 2025 GMT Not After : Sep 22 23:59:59 2025 GMT Subject: serialNumber=d08ef19a3ab05e523a73a9a1bfadc342ce56789d4f7f8bcea0b9b0a2492fab73, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f9:99:7a:ee:9f:66:82:5c:f1:c4:b5:40:43: 05:22:f4:e2:ec:94:42:6e:fb:87:c4:b0:d1:d2:d0: 27:b1:56:24:e2:3b:9f:83:63:02:39:25:ee:d1:59: c6:70:7f:b3:5a:38:c7:6e:5e:22:92:ca:4b:8c:88: f9:ef:cb:bf:2e:d5:5f:99:a7:ae:56:ad:79:5e:f9: 1d:95:82:7a:0d:37:b7:6f:58:9f:a9:a2:e1:20:2c: 9c:4c:8d:23:31:36:52:45:f7:0d:97:a7:be:00:e2: cc:43:45:19:4e:be:a7:90:6d:48:ae:e4:fc:de:05: 7d:3b:2f:91:50:37:7e:3d:02:c4:9c:23:ed:1f:31: 12:9b:91:ba:23:dd:40:29:9f:86:a3:49:6c:e8:30: 4a:0f:0d:76:d2:d5:28:a0:ea:5c:cc:7f:bf:8b:3a: 65:87:ba:cb:cf:2f:c8:45:03:dc:58:ba:3d:c8:bc: f0:f2:27:1d:92:35:aa:8f:9b:ef:b5:02:f1:98:e5: 6d:bc:4f:58:3b:e6:47:fb:d6:fe:76:da:46:a2:2d: ce:c2:07:01:ed:a1:40:d3:12:cf:1d:24:4c:59:b4: ff:f4:ee:57:7c:d1:a8:cf:c1:40:9a:d1:59:e4:34: 34:09:1f:21:a7:05:a9:2c:99:4a:38:4c:2e:10:e2: c5:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:97:A2:55:9D:0E:54:DF:68:25:58:58:02:1B:DD:B5:CF:6B:2A:2B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a28385f-c608-4722-b24d-8ffeb91ee27c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.19.128.0/18 Signature Algorithm: sha256WithRSAEncryption 13:45:29:07:cc:ba:64:84:f1:0f:ed:ee:2e:a4:17:27:2d:79: 3d:36:7a:a7:b8:20:8c:41:ab:09:37:fd:f3:a4:9a:a8:44:4c: 68:02:a2:1d:ed:3d:5c:4b:8d:8a:1d:a5:e0:0e:9c:4a:16:28: 0f:57:f2:4a:68:c9:b4:ce:b1:c5:6c:a4:35:67:3b:50:b6:5b: de:31:51:7c:cc:9d:04:1b:6f:12:6e:ce:6d:1c:c7:4c:2a:11: 60:37:a6:d4:17:e2:0a:82:4e:a2:e6:64:5d:3b:2a:e6:ff:de: b2:6c:85:46:3d:4b:b3:2a:64:55:73:8b:eb:8d:3b:91:73:3b: 35:08:8c:02:d4:cd:00:4f:a9:25:bd:a6:1e:3e:67:ea:ab:3e: 01:78:2b:bd:a7:04:61:14:56:6d:35:86:93:8e:bf:00:dc:f8: aa:86:c2:b2:af:f2:d5:1d:74:47:ae:c9:ac:02:78:c9:cc:bf: fb:cb:17:6c:13:28:f3:ff:0e:d8:27:09:93:4c:93:6e:94:3d: 40:2c:88:d2:a1:be:0c:5c:6a:11:15:09:24:bd:dd:40:44:5f: 57:6a:ac:87:87:07:c0:55:d9:8f:b4:a8:e4:eb:09:68:be:6b: d5:bd:54:96:9d:4e:4d:35:85:ab:94:48:c3:ee:49:7b:55:d6: e8:53:4a:0c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIffDpIoHYbgNg+MAPhXrp4UnmKswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE4MTU0MDIzWhcNMjUwOTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BkMDhlZjE5YTNhYjA1ZTUyM2E3M2E5YTFiZmFkYzM0MmNl NTY3ODlkNGY3ZjhiY2VhMGI5YjBhMjQ5MmZhYjczMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4+Zl67p9mglzxxLVAQwUi9OLslEJu+4fEsNHS0CexViTi O5+DYwI5Je7RWcZwf7NaOMduXiKSykuMiPnvy78u1V+Zp65WrXle+R2VgnoNN7dv WJ+pouEgLJxMjSMxNlJF9w2Xp74A4sxDRRlOvqeQbUiu5PzeBX07L5FQN349AsSc I+0fMRKbkboj3UApn4ajSWzoMEoPDXbS1Sig6lzMf7+LOmWHusvPL8hFA9xYuj3I vPDyJx2SNaqPm++1AvGY5W28T1g75kf71v522kaiLc7CBwHtoUDTEs8dJExZtP/0 7ld80ajPwUCa0VnkNDQJHyGnBaksmUo4TC4Q4sXhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU9JeiVZ0OVN9oJVhYAhvdtc9rKiswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzZhMjgzODVmLWM2MDgtNDcyMi1iMjRkLThmZmViOTFlZTI3Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYyE4AwDQYJKoZIhvcNAQELBQADggEBABNFKQfMumSE8Q/t7i6kFycteT02 eqe4IIxBqwk3/fOkmqhETGgCoh3tPVxLjYodpeAOnEoWKA9X8kpoybTOscVspDVn O1C2W94xUXzMnQQbbxJuzm0cx0wqEWA3ptQX4gqCTqLmZF07Kub/3rJshUY9S7Mq ZFVzi+uNO5FzOzUIjALUzQBPqSW9ph4+Z+qrPgF4K72nBGEUVm01hpOOvwDc+KqG wrKv8tUddEeuyawCeMnMv/vLF2wTKPP/DtgnCZNMk26UPUAsiNKhvgxcahEVCSS9 3UBEX1dqrIeHB8BV2Y+0qOTrCWi+a9W9VJadTk01hauUSMPuSXtV1uhTSgw= -----END CERTIFICATE-----Generated at Sat Aug 23 06:56:24 2025 by rpki-client