$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7457f14e-6dd1-4239-b2cf-efe09954cfe2.roa File: 7457f14e-6dd1-4239-b2cf-efe09954cfe2.roa (raw, json) Hash identifier: /yrvOVl55CoIH0HQFt4EHBS/B6695YErE1LZTqiqqSQ= Subject key identifier: 93:8A:7D:1A:2E:29:F9:65:1B:D5:02:5D:AD:A1:F5:77:F0:96:22:2E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 411744B70C85A3AE992E02C621836B605017435E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7457f14e-6dd1-4239-b2cf-efe09954cfe2.roa Signing time: Sat 16 Aug 2025 00:40:31 +0000 ROA not before: Sat 16 Aug 2025 00:40:31 +0000 ROA not after: Sat 20 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 50.18.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:17:44:b7:0c:85:a3:ae:99:2e:02:c6:21:83:6b:60:50:17:43:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 16 00:40:31 2025 GMT Not After : Sep 20 23:59:59 2025 GMT Subject: serialNumber=aa334bd86a89f61c5d1f5d63395bf4be4d5e8510a81cffb255c1bf2b5c0c2011, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6f:65:3c:ad:22:6c:63:95:25:da:5d:08:77: bf:cc:2e:fb:cc:61:b1:71:5d:1e:92:11:8d:65:e5: e4:b3:8c:c3:34:59:9d:b6:7e:4f:dd:0e:2c:4a:45: 39:1e:12:b7:17:85:df:85:d9:0a:31:f1:2f:e7:a6: 29:ce:b6:66:e1:af:61:56:3d:a0:42:ca:d6:27:57: f7:54:1b:7a:70:bb:97:2b:b0:bb:fb:2d:81:31:d4: e0:4f:e1:d3:6a:8f:9d:09:6c:4b:0e:a8:92:38:a3: 12:b0:6f:64:d5:6e:74:c7:3f:76:a8:95:f3:8a:4f: c9:2c:d3:19:c4:49:fb:1e:03:c4:12:b2:d8:57:47: 79:6a:4c:06:70:f1:45:11:a8:6f:06:08:05:ca:6c: 36:db:40:f2:bf:2a:11:c7:c5:2c:83:6b:f2:11:56: 33:68:40:16:eb:84:e9:44:09:99:2c:af:20:c9:d4: 14:d4:2b:5d:c0:c3:9b:d6:62:3f:62:e0:1f:64:63: 11:a2:f8:3c:ba:53:25:a7:4a:da:75:2d:75:4d:04: e2:a3:81:0d:c4:da:58:09:67:ee:ca:b2:7a:37:dc: b3:b4:3a:ed:a6:40:f9:6e:20:95:a0:22:74:4a:b5: 37:2a:9e:3a:23:25:ca:a8:e6:1a:4d:5a:42:a1:14: b5:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:8A:7D:1A:2E:29:F9:65:1B:D5:02:5D:AD:A1:F5:77:F0:96:22:2E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7457f14e-6dd1-4239-b2cf-efe09954cfe2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.18.248.0/21 Signature Algorithm: sha256WithRSAEncryption 3f:74:7e:f7:82:c5:e0:aa:17:68:d0:e3:ee:5f:5a:11:b4:ee: bf:a6:12:a9:8f:bf:aa:2d:b4:68:f3:5f:ed:e0:f0:c0:0a:49: 29:3d:bc:1e:fb:fa:4b:6e:ef:41:82:04:11:6f:30:cc:09:38: 00:4f:8e:f3:bd:be:cd:76:b5:15:5a:df:b4:3e:f1:f4:fb:e9: 57:71:42:03:23:28:cf:2d:0f:3b:42:6f:a8:c7:8b:9d:48:f2: 92:2e:b8:6a:e4:3f:aa:05:46:f7:5f:66:d4:87:36:e9:5d:43: f8:1d:ca:1c:f2:58:a9:1b:c9:a7:f9:b9:31:d4:7b:97:88:e3: 3b:7e:18:69:bc:41:c8:bd:d9:04:09:c0:90:27:6e:84:55:7a: 5d:bc:e1:fd:12:6e:cd:a0:3b:23:e5:6d:cc:7c:46:9c:8a:60: 70:c4:30:c0:1f:64:0a:ad:9d:4b:20:48:3e:fd:70:a3:31:f6: 9a:bc:87:f6:89:d9:6d:14:78:26:c6:0f:7e:7e:13:65:16:c5: f4:46:a1:92:f2:52:6e:67:e3:88:ba:fa:a7:99:fe:f8:27:f4: 80:6e:e9:cd:5b:a9:3e:b1:e5:c9:53:dc:20:f2:43:35:13:9d: 5c:cc:6d:d3:19:3d:68:37:ce:64:68:17:f9:08:78:00:df:d8: 4d:f4:47:c2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQRdEtwyFo66ZLgLGIYNrYFAXQ14wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE2MDA0MDMxWhcNMjUwOTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BhYTMzNGJkODZhODlmNjFjNWQxZjVkNjMzOTViZjRiZTRk NWU4NTEwYTgxY2ZmYjI1NWMxYmYyYjVjMGMyMDExMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCnb2U8rSJsY5Ul2l0Id7/MLvvMYbFxXR6SEY1l5eSzjMM0 WZ22fk/dDixKRTkeErcXhd+F2Qox8S/npinOtmbhr2FWPaBCytYnV/dUG3pwu5cr sLv7LYEx1OBP4dNqj50JbEsOqJI4oxKwb2TVbnTHP3aolfOKT8ks0xnESfseA8QS sthXR3lqTAZw8UURqG8GCAXKbDbbQPK/KhHHxSyDa/IRVjNoQBbrhOlECZksryDJ 1BTUK13Aw5vWYj9i4B9kYxGi+Dy6UyWnStp1LXVNBOKjgQ3E2lgJZ+7Ksno33LO0 Ou2mQPluIJWgInRKtTcqnjojJcqo5hpNWkKhFLU1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUk4p9Gi4p+WUb1QJdraH1d/CWIi4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc0NTdmMTRlLTZkZDEtNDIzOS1iMmNmLWVmZTA5OTU0Y2ZlMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMyEvgwDQYJKoZIhvcNAQELBQADggEBAD90fveCxeCqF2jQ4+5fWhG07r+m EqmPv6ottGjzX+3g8MAKSSk9vB77+ktu70GCBBFvMMwJOABPjvO9vs12tRVa37Q+ 8fT76VdxQgMjKM8tDztCb6jHi51I8pIuuGrkP6oFRvdfZtSHNuldQ/gdyhzyWKkb yaf5uTHUe5eI4zt+GGm8Qci92QQJwJAnboRVel284f0Sbs2gOyPlbcx8RpyKYHDE MMAfZAqtnUsgSD79cKMx9pq8h/aJ2W0UeCbGD35+E2UWxfRGoZLyUm5n44i6+qeZ /vgn9IBu6c1bqT6x5clT3CDyQzUTnVzMbdMZPWg3zmRoF/kIeADf2E30R8I= -----END CERTIFICATE-----Generated at Sat Aug 23 08:16:25 2025 by rpki-client