$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/73c3c3ee-2dd5-4e41-8ddb-758f94a5970b.roa File: 73c3c3ee-2dd5-4e41-8ddb-758f94a5970b.roa (raw, json) Hash identifier: GLUC7pXdk0SLXD2viCswWvTogjoSG4T41lJm90FWHZ8= Subject key identifier: 00:4C:6C:7B:11:8A:03:3F:01:1C:8E:DE:6B:16:0F:F7:3C:1E:40:53 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 60EDB99EEEBC1CDBFD84B08756B576396526C513 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/73c3c3ee-2dd5-4e41-8ddb-758f94a5970b.roa Signing time: Sat 16 Aug 2025 00:50:20 +0000 ROA not before: Sat 16 Aug 2025 00:50:20 +0000 ROA not after: Sat 20 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 50.19.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:ed:b9:9e:ee:bc:1c:db:fd:84:b0:87:56:b5:76:39:65:26:c5:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 16 00:50:20 2025 GMT Not After : Sep 20 23:59:59 2025 GMT Subject: serialNumber=77047657ef391c824ba9db1b0caf07562a4588cc1d91ae0a2404f1cf34a98a40, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a6:37:6f:ec:ab:e0:0e:41:e2:5f:ea:de:62: 0a:3f:a7:16:65:19:e0:eb:12:e7:c9:8f:30:8c:cb: 82:99:2b:a5:38:4d:38:a4:9b:4d:bc:30:08:bf:08: 0a:e7:f0:bd:77:82:9f:07:71:02:7f:43:a1:0f:57: 61:aa:ff:be:10:97:68:64:1a:86:51:a9:c8:92:42: b2:64:d6:dc:65:98:d4:74:64:5e:ff:08:41:19:17: 1a:9e:40:9b:2a:e6:fa:51:48:9a:8b:b9:45:a6:13: ed:b9:8f:8a:31:f7:92:82:67:79:94:6c:29:db:4b: c9:ac:69:38:6c:2b:6b:ff:7f:6f:b8:b9:9f:dd:ea: 0a:82:16:32:7c:ce:65:52:44:62:7c:51:bf:b0:22: 4f:48:ad:18:91:08:4d:7c:7d:76:07:bc:d6:91:31: 70:d6:a9:7d:26:4b:4e:bd:98:2e:7b:cf:c9:00:aa: c0:f6:46:c7:3b:83:8d:5c:4e:52:63:66:4c:23:da: eb:d7:28:7c:aa:24:a1:62:b1:79:ca:21:cc:78:14: 69:12:05:ca:ff:b6:fb:52:c1:57:ec:72:e5:83:07: e0:34:41:97:59:5e:73:2f:fd:37:28:0b:26:9a:a6: 52:f6:10:7a:6f:92:67:6d:90:ac:30:d7:66:f0:55: 80:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:4C:6C:7B:11:8A:03:3F:01:1C:8E:DE:6B:16:0F:F7:3C:1E:40:53 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/73c3c3ee-2dd5-4e41-8ddb-758f94a5970b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.19.192.0/20 Signature Algorithm: sha256WithRSAEncryption 0b:7d:e3:21:ff:c2:01:c8:08:86:20:9c:f7:bd:e7:73:50:94: e4:5a:19:05:36:ee:ce:f9:84:aa:60:29:d7:65:73:a6:9d:36: 16:8c:bd:39:1d:33:5d:ff:97:0d:bc:e6:dc:c9:8e:80:f7:88: 0a:2f:ae:b6:dc:dc:99:49:68:04:98:69:71:18:43:f8:95:01: 2a:b3:24:f6:33:dc:a6:5e:16:d0:b8:d2:c6:4e:e5:6e:32:c7: c1:6a:a7:f6:9c:65:05:aa:75:a6:f5:fb:19:7f:0f:6a:21:a4: 8d:96:3f:e6:93:4c:36:c7:a9:e4:74:38:61:31:50:0c:c6:74: 89:90:11:8c:0c:c0:e5:ba:b0:8c:5b:a2:c6:39:b1:a7:a1:4b: 43:6f:cd:c9:61:40:89:26:92:7a:92:a4:fa:5d:02:08:e4:f6: 05:08:b0:c1:1f:c7:85:52:3a:3a:35:d8:2f:0f:9c:17:ad:c9: be:ec:b5:40:72:84:16:9f:c9:60:b7:8d:88:af:b1:45:5c:0b: 2d:ec:87:c4:74:a7:c5:01:51:4b:7d:bb:a7:65:e5:bd:9f:ec: 7c:45:55:68:9a:50:3f:19:e4:88:c4:7f:f2:b5:3b:2e:17:3c: b5:83:1a:08:5b:a7:bf:1c:0a:02:56:05:30:00:22:88:3d:76: cb:ce:ee:22 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYO25nu68HNv9hLCHVrV2OWUmxRMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE2MDA1MDIwWhcNMjUwOTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A3NzA0NzY1N2VmMzkxYzgyNGJhOWRiMWIwY2FmMDc1NjJh NDU4OGNjMWQ5MWFlMGEyNDA0ZjFjZjM0YTk4YTQwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0pjdv7KvgDkHiX+reYgo/pxZlGeDrEufJjzCMy4KZK6U4 TTikm028MAi/CArn8L13gp8HcQJ/Q6EPV2Gq/74Ql2hkGoZRqciSQrJk1txlmNR0 ZF7/CEEZFxqeQJsq5vpRSJqLuUWmE+25j4ox95KCZ3mUbCnbS8msaThsK2v/f2+4 uZ/d6gqCFjJ8zmVSRGJ8Ub+wIk9IrRiRCE18fXYHvNaRMXDWqX0mS069mC57z8kA qsD2Rsc7g41cTlJjZkwj2uvXKHyqJKFisXnKIcx4FGkSBcr/tvtSwVfscuWDB+A0 QZdZXnMv/TcoCyaaplL2EHpvkmdtkKww12bwVYCrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUAExsexGKAz8BHI7eaxYP9zweQFMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzczYzNjM2VlLTJkZDUtNGU0MS04ZGRiLTc1OGY5NGE1OTcwYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQyE8AwDQYJKoZIhvcNAQELBQADggEBAAt94yH/wgHICIYgnPe953NQlORa GQU27s75hKpgKddlc6adNhaMvTkdM13/lw285tzJjoD3iAovrrbc3JlJaASYaXEY Q/iVASqzJPYz3KZeFtC40sZO5W4yx8Fqp/acZQWqdab1+xl/D2ohpI2WP+aTTDbH qeR0OGExUAzGdImQEYwMwOW6sIxbosY5saehS0NvzclhQIkmknqSpPpdAgjk9gUI sMEfx4VSOjo12C8PnBetyb7stUByhBafyWC3jYivsUVcCy3sh8R0p8UBUUt9u6dl 5b2f7HxFVWiaUD8Z5IjEf/K1Oy4XPLWDGghbp78cCgJWBTAAIog9dsvO7iI= -----END CERTIFICATE-----Generated at Sat Aug 23 08:21:16 2025 by rpki-client