$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7457f14e-6dd1-4239-b2cf-efe09954cfe2.roa File: 7457f14e-6dd1-4239-b2cf-efe09954cfe2.roa (raw, json) Hash identifier: o/umYEn3+/82ql79rYIzijR+sdjXT0lfRuvgSym/n2U= Subject key identifier: 90:DE:5E:D4:DC:2C:3E:C5:FC:15:EF:33:08:46:55:8B:73:4C:C6:FB Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7A5E95B395A0380008701F07A68F1604283E4A64 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7457f14e-6dd1-4239-b2cf-efe09954cfe2.roa Signing time: Fri 27 Jun 2025 00:40:28 +0000 ROA not before: Fri 27 Jun 2025 00:40:28 +0000 ROA not after: Fri 01 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 50.18.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:5e:95:b3:95:a0:38:00:08:70:1f:07:a6:8f:16:04:28:3e:4a:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 27 00:40:28 2025 GMT Not After : Aug 1 23:59:59 2025 GMT Subject: serialNumber=ecaf2639daafd1c2fc57ef2fb43cf27136ef74d2533548e8f1b7e1a02d50410a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:86:a3:24:72:52:94:a8:c9:47:4c:11:b4:42: 9d:21:dd:b9:7a:12:08:75:cc:36:43:2a:0e:fb:0d: 17:51:78:3c:46:a2:27:f9:d9:53:2d:3c:36:07:5d: 6f:ba:bc:40:d3:91:56:f9:a0:86:c5:1e:b9:06:fe: 91:df:8c:ce:b6:b6:4b:92:e5:3e:81:49:48:9f:95: 79:0b:5a:32:96:f9:43:66:b6:ab:46:71:47:4f:c5: 5e:fe:4d:5a:8a:5c:97:1f:7d:ec:a3:0a:4c:be:21: 9e:b4:e9:c6:df:20:8c:5a:a3:5f:07:38:36:22:eb: f8:a1:45:26:34:b5:76:bf:61:7c:29:e4:7a:14:e4: 43:bf:f5:65:0c:23:5e:99:33:16:2e:b2:7b:96:b0: e6:e9:4b:8c:15:ca:5c:b9:b5:e4:67:1c:92:f2:52: e3:4f:ab:ee:05:7f:56:3e:cc:a1:0f:f7:b1:5f:3b: ea:2e:5d:6f:1f:35:95:45:eb:8c:c1:70:f7:10:d4: dd:7e:5c:14:f2:24:49:e9:88:49:f0:b6:40:16:a1: 02:f2:fd:be:12:a1:49:db:e1:59:d3:70:92:51:ad: bb:97:f9:41:28:67:76:ad:62:39:fc:27:7c:4a:e6: 90:99:aa:7e:3a:3b:33:d0:3e:c2:80:c2:34:42:1b: b9:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:DE:5E:D4:DC:2C:3E:C5:FC:15:EF:33:08:46:55:8B:73:4C:C6:FB X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7457f14e-6dd1-4239-b2cf-efe09954cfe2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.18.248.0/21 Signature Algorithm: sha256WithRSAEncryption c4:b6:24:c2:7f:0a:8f:bd:61:48:f3:12:f1:1e:28:cb:0f:4e: 00:21:c8:f0:09:99:b1:14:19:00:97:5a:b7:3c:22:51:66:66: 58:e4:eb:84:be:a9:1d:2c:f7:d9:e9:65:e8:de:74:a5:5f:9b: 61:d9:f9:d5:a8:c8:68:d6:66:02:fb:03:2a:83:e1:37:90:06: c7:99:c1:aa:10:bd:61:df:f3:5d:c9:b9:ed:31:57:cf:6d:16: b5:9e:96:d4:b1:f3:a4:80:e3:c3:91:3f:20:07:de:6b:91:ee: 03:8a:aa:f5:85:ea:e8:25:54:9b:87:f8:ce:2c:5d:a9:98:a2: 4d:04:fb:61:61:35:a3:2f:e4:16:8a:47:b3:a8:44:ce:64:cd: 90:4a:28:c6:50:23:4b:37:ef:dc:23:49:95:9c:e5:6f:49:50: c6:ba:aa:4e:31:a6:0c:a9:5a:fd:a3:4d:94:6b:fb:ad:6a:8c: 43:5a:72:a0:4c:c6:8d:80:c7:09:0a:09:a8:44:b9:6d:44:01: 44:83:7e:eb:b9:41:d7:71:ca:ff:a9:21:e6:7b:56:b3:33:5f: 32:e1:51:ce:ec:8f:b3:98:39:91:ed:ef:68:e6:e1:92:30:6d: 71:46:55:84:c9:da:a6:c8:ea:c5:10:26:70:0f:d9:0b:93:fc: 54:d0:ed:85 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUel6Vs5WgOAAIcB8Hpo8WBCg+SmQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjI3MDA0MDI4WhcNMjUwODAxMjM1OTU5 WjB6MUkwRwYDVQQFE0BlY2FmMjYzOWRhYWZkMWMyZmM1N2VmMmZiNDNjZjI3MTM2 ZWY3NGQyNTMzNTQ4ZThmMWI3ZTFhMDJkNTA0MTBhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzhqMkclKUqMlHTBG0Qp0h3bl6Egh1zDZDKg77DRdReDxG oif52VMtPDYHXW+6vEDTkVb5oIbFHrkG/pHfjM62tkuS5T6BSUiflXkLWjKW+UNm tqtGcUdPxV7+TVqKXJcffeyjCky+IZ606cbfIIxao18HODYi6/ihRSY0tXa/YXwp 5HoU5EO/9WUMI16ZMxYusnuWsObpS4wVyly5teRnHJLyUuNPq+4Ff1Y+zKEP97Ff O+ouXW8fNZVF64zBcPcQ1N1+XBTyJEnpiEnwtkAWoQLy/b4SoUnb4VnTcJJRrbuX +UEoZ3atYjn8J3xK5pCZqn46OzPQPsKAwjRCG7n3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUkN5e1NwsPsX8Fe8zCEZVi3NMxvswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc0NTdmMTRlLTZkZDEtNDIzOS1iMmNmLWVmZTA5OTU0Y2ZlMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMyEvgwDQYJKoZIhvcNAQELBQADggEBAMS2JMJ/Co+9YUjzEvEeKMsPTgAh yPAJmbEUGQCXWrc8IlFmZljk64S+qR0s99npZejedKVfm2HZ+dWoyGjWZgL7AyqD 4TeQBseZwaoQvWHf813Jue0xV89tFrWeltSx86SA48ORPyAH3muR7gOKqvWF6ugl VJuH+M4sXamYok0E+2FhNaMv5BaKR7OoRM5kzZBKKMZQI0s379wjSZWc5W9JUMa6 qk4xpgypWv2jTZRr+61qjENacqBMxo2AxwkKCahEuW1EAUSDfuu5Qddxyv+pIeZ7 VrMzXzLhUc7sj7OYOZHt72jm4ZIwbXFGVYTJ2qbI6sUQJnAP2QuT/FTQ7YU= -----END CERTIFICATE-----Generated at Sun Jun 29 09:28:36 2025 by rpki-client