$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7632c8ac-374e-4409-905e-a902947f8ce9.roa File: 7632c8ac-374e-4409-905e-a902947f8ce9.roa (raw, json) Hash identifier: GKF7aR0V+EKsG3bq8CWfoE/s4i5VYai+nWmLZXpUp/U= Subject key identifier: A3:35:01:37:E5:7D:8D:91:5C:30:B9:58:D4:04:21:D1:3A:35:15:16 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 316AD6525F8E09E0C5C78595F717412C36DA5EED Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7632c8ac-374e-4409-905e-a902947f8ce9.roa Signing time: Fri 27 Jun 2025 15:01:56 +0000 ROA not before: Fri 27 Jun 2025 15:01:56 +0000 ROA not after: Fri 01 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 50.17.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:6a:d6:52:5f:8e:09:e0:c5:c7:85:95:f7:17:41:2c:36:da:5e:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 27 15:01:56 2025 GMT Not After : Aug 1 23:59:59 2025 GMT Subject: serialNumber=fe1c78129f6cf1b1bcc7bbfddfff2eea06ae7ed9f3053b90a4443818ff58d2c2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:22:76:6c:64:9d:21:c3:29:fc:f1:64:e1:2d: e9:41:7c:95:fe:7d:83:2f:65:67:fc:1c:a4:e4:04: c5:f9:72:f9:41:7a:72:83:e9:aa:7a:ff:c9:06:11: c1:4d:1e:72:95:52:db:85:8a:e7:03:64:dc:f8:8f: 9b:21:0c:07:56:b5:b8:7f:c1:d7:01:cb:da:cf:9f: 2b:62:74:f8:b2:28:a7:78:db:e9:db:f2:7d:d8:82: 5a:ab:5b:bb:0a:2a:ca:2a:c0:58:68:40:b7:ae:49: a0:81:48:c7:e8:b9:f9:f0:3a:47:97:e8:4f:f3:00: 95:c0:3e:7f:23:a7:99:e9:d2:f3:62:aa:fd:51:58: 41:09:03:f0:e2:98:2f:e6:f9:39:ef:92:03:3c:05: 15:ff:e2:bf:4c:f5:21:94:e7:1b:82:b4:51:2b:9f: 46:87:58:a6:bf:50:6b:fd:5f:ff:c5:15:11:24:3a: 6d:46:1b:6c:69:72:ce:37:1d:8c:01:65:ef:a9:ac: 00:c4:02:0a:3f:45:33:dc:d2:4e:0d:c2:10:84:69: 2c:dd:ca:e6:66:d5:e4:e7:e3:46:99:51:81:64:25: 0e:2d:1e:49:27:d9:c1:bb:61:1d:2f:b6:4f:b6:93: 44:b8:6a:03:7a:14:2a:6b:6b:b9:b9:1f:80:d8:99: d5:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:35:01:37:E5:7D:8D:91:5C:30:B9:58:D4:04:21:D1:3A:35:15:16 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7632c8ac-374e-4409-905e-a902947f8ce9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.17.0.0/16 Signature Algorithm: sha256WithRSAEncryption ca:d9:aa:d3:7c:2a:fa:bb:4f:3a:58:1f:93:58:58:c0:27:4d: 41:b9:50:1b:ed:dd:ee:eb:bc:5b:50:99:6d:38:23:de:5b:42: a0:06:cf:8c:fc:bd:41:f8:cd:9f:f1:fb:23:33:d3:1c:e6:d6: 64:e0:f3:ac:da:79:71:25:45:94:94:58:c5:e4:34:13:78:5a: 5f:16:67:d7:cf:43:35:6f:b2:90:7d:87:45:81:2f:59:fe:12: a1:c0:8e:99:50:cd:41:7c:34:37:61:63:f3:1a:54:6d:fb:62: 7d:88:d1:fa:93:6b:88:c3:72:c5:86:9f:8d:ed:78:90:9d:f3: 2c:ba:f6:ab:77:b6:92:d9:c7:c7:d2:67:49:35:90:2b:6e:8b: f4:8a:bb:ae:3e:77:81:c5:7b:32:7d:db:d9:bb:36:63:c5:5f: 43:26:7e:de:3a:51:31:8f:96:12:e3:4b:ab:a5:d3:6c:43:10: 5b:0d:c9:99:9f:bf:66:1a:0c:ea:24:a1:e5:91:87:a4:05:38: 46:98:3f:95:aa:15:88:3d:5d:55:a8:5e:df:50:a0:fb:b0:34: d5:8e:22:a9:f7:56:f4:68:28:28:d6:cd:25:45:63:12:df:99: 7c:bc:f1:ba:2a:97:28:a6:a2:db:df:82:5e:fa:c3:e6:4c:aa: c0:db:fc:cd -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUMWrWUl+OCeDFx4WV9xdBLDbaXu0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjI3MTUwMTU2WhcNMjUwODAxMjM1OTU5 WjB6MUkwRwYDVQQFE0BmZTFjNzgxMjlmNmNmMWIxYmNjN2JiZmRkZmZmMmVlYTA2 YWU3ZWQ5ZjMwNTNiOTBhNDQ0MzgxOGZmNThkMmMyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDEInZsZJ0hwyn88WThLelBfJX+fYMvZWf8HKTkBMX5cvlB enKD6ap6/8kGEcFNHnKVUtuFiucDZNz4j5shDAdWtbh/wdcBy9rPnytidPiyKKd4 2+nb8n3YglqrW7sKKsoqwFhoQLeuSaCBSMfoufnwOkeX6E/zAJXAPn8jp5np0vNi qv1RWEEJA/DimC/m+TnvkgM8BRX/4r9M9SGU5xuCtFErn0aHWKa/UGv9X//FFREk Om1GG2xpcs43HYwBZe+prADEAgo/RTPc0k4NwhCEaSzdyuZm1eTn40aZUYFkJQ4t Hkkn2cG7YR0vtk+2k0S4agN6FCpra7m5H4DYmdXrAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUozUBN+V9jZFcMLlY1AQh0To1FRYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc2MzJjOGFjLTM3NGUtNDQwOS05MDVlLWE5MDI5NDdmOGNlOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAyETANBgkqhkiG9w0BAQsFAAOCAQEAytmq03wq+rtPOlgfk1hYwCdNQblQ G+3d7uu8W1CZbTgj3ltCoAbPjPy9QfjNn/H7IzPTHObWZODzrNp5cSVFlJRYxeQ0 E3haXxZn189DNW+ykH2HRYEvWf4SocCOmVDNQXw0N2Fj8xpUbftifYjR+pNriMNy xYafje14kJ3zLLr2q3e2ktnHx9JnSTWQK26L9Iq7rj53gcV7Mn3b2bs2Y8VfQyZ+ 3jpRMY+WEuNLq6XTbEMQWw3JmZ+/ZhoM6iSh5ZGHpAU4Rpg/laoViD1dVahe31Cg +7A01Y4iqfdW9GgoKNbNJUVjEt+ZfLzxuiqXKKai29+CXvrD5kyqwNv8zQ== -----END CERTIFICATE-----Generated at Wed Jul 2 05:22:08 2025 by rpki-client