$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/84ebff26-46e0-4618-91bc-f1cb0571d7de.roa File: 84ebff26-46e0-4618-91bc-f1cb0571d7de.roa (raw, json) Hash identifier: RRKVns9qDpcuuKPCHP6T7wPFvdQCR6tIsACLpzs9+28= Subject key identifier: C1:3A:10:6A:C1:77:79:42:34:D4:D9:56:B7:4A:9E:29:C5:AD:60:99 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3B5AD2E5258E83BF8D82B4347408AE0B75386839 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/84ebff26-46e0-4618-91bc-f1cb0571d7de.roa Signing time: Wed 07 May 2025 00:41:50 +0000 ROA not before: Wed 07 May 2025 00:41:50 +0000 ROA not after: Wed 11 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 50.19.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:5a:d2:e5:25:8e:83:bf:8d:82:b4:34:74:08:ae:0b:75:38:68:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 7 00:41:50 2025 GMT Not After : Jun 11 23:59:59 2025 GMT Subject: serialNumber=3d280f21e0438520808b4ae3988d0d856fcb24a8a4927cfd7cb2040255f1b034, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a4:83:d5:3c:26:cd:ac:a7:ee:bc:e0:b4:d5: b0:c9:89:b6:55:a8:df:02:74:f5:33:79:b3:93:03: 79:8a:11:49:d3:5f:e2:07:f7:3a:1c:28:b7:df:6f: 73:86:02:4e:2d:89:d4:6b:e9:f6:4f:a1:ee:87:8b: b8:df:a0:b6:8a:c5:d6:06:ef:2c:b3:f5:5b:7f:49: 50:77:3f:37:26:6b:aa:c9:a2:5c:6e:38:c2:c7:41: 86:ce:00:c3:34:ea:a9:c6:73:09:e0:51:ec:19:64: 70:ea:a1:dd:90:4e:71:d2:29:df:a0:d1:f1:10:23: b5:a6:5e:73:da:ae:a9:a3:e2:c0:cd:55:24:32:e2: fe:f2:db:59:89:6c:a3:38:48:9e:e0:d0:6b:4b:8b: 18:af:5d:8a:04:4f:2a:a1:a1:39:48:1c:3a:2c:8d: eb:2d:fe:5b:4b:47:17:86:9c:08:ea:91:fb:6b:3d: bf:2d:c6:af:c7:67:5f:2a:5d:5a:df:c2:1c:59:2e: ac:2a:3b:a0:9e:d8:fc:94:c4:a1:f4:6e:ca:29:d2: 0b:f7:2e:4c:4f:20:66:7a:ea:24:1f:05:50:8e:55: ef:08:2b:5f:85:e0:90:91:8e:67:0c:72:4b:6e:c0: 6f:f4:cc:1b:00:83:a0:aa:8b:4b:ec:55:ca:0c:78: 6f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:3A:10:6A:C1:77:79:42:34:D4:D9:56:B7:4A:9E:29:C5:AD:60:99 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/84ebff26-46e0-4618-91bc-f1cb0571d7de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.19.0.0/16 Signature Algorithm: sha256WithRSAEncryption 2b:ed:ed:88:7f:25:d6:ac:31:57:3d:97:f6:1d:9e:50:c2:a4: 91:44:89:23:e4:f2:d0:04:e8:dd:a9:ca:6b:46:89:5a:74:46: 46:05:f9:c4:b6:d7:3c:b9:f3:f5:5f:c6:6e:9f:c4:28:60:d9: 79:97:87:c7:6e:cc:eb:66:08:64:47:a9:54:06:8f:60:e6:53: 70:e8:5a:57:93:6c:f7:9b:74:e1:ee:bf:fd:c5:98:46:a6:fe: f4:92:14:b5:4b:b8:a9:4b:f9:2f:02:87:4f:8a:b0:32:f4:5c: b7:09:db:ed:a8:82:1d:23:16:22:49:f8:cd:9d:bf:97:35:1e: 12:cb:4c:b8:63:c1:fb:5b:be:1e:e5:1f:41:f3:4f:fc:39:74: 0a:63:1d:eb:9d:2f:e6:57:bc:bb:ef:c7:1f:7b:a8:1f:5d:1a: 62:28:99:39:05:f3:03:fe:73:38:de:15:66:12:25:e6:f5:8d: f3:ff:6f:19:4e:34:3d:e6:15:30:4c:57:9f:c5:3f:0a:75:0b: 6e:e6:e1:8f:f3:98:39:b9:9f:c0:20:1a:57:25:c1:5d:76:b4: ad:43:48:b7:25:57:9c:0f:9a:08:6c:a5:ef:9d:60:a1:16:79: 80:f3:09:cd:75:98:18:f3:50:6a:22:90:5b:bc:02:8a:1f:7e: 6e:64:b2:e0 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUO1rS5SWOg7+NgrQ0dAiuC3U4aDkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTA3MDA0MTUwWhcNMjUwNjExMjM1OTU5 WjB6MUkwRwYDVQQFE0AzZDI4MGYyMWUwNDM4NTIwODA4YjRhZTM5ODhkMGQ4NTZm Y2IyNGE4YTQ5MjdjZmQ3Y2IyMDQwMjU1ZjFiMDM0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDpIPVPCbNrKfuvOC01bDJibZVqN8CdPUzebOTA3mKEUnT X+IH9zocKLffb3OGAk4tidRr6fZPoe6Hi7jfoLaKxdYG7yyz9Vt/SVB3Pzcma6rJ olxuOMLHQYbOAMM06qnGcwngUewZZHDqod2QTnHSKd+g0fEQI7WmXnParqmj4sDN VSQy4v7y21mJbKM4SJ7g0GtLixivXYoETyqhoTlIHDosjest/ltLRxeGnAjqkftr Pb8txq/HZ18qXVrfwhxZLqwqO6Ce2PyUxKH0bsop0gv3LkxPIGZ66iQfBVCOVe8I K1+F4JCRjmcMcktuwG/0zBsAg6Cqi0vsVcoMeG/XAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUwToQasF3eUI01NlWt0qeKcWtYJkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzg0ZWJmZjI2LTQ2ZTAtNDYxOC05MWJjLWYxY2IwNTcxZDdkZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAyEzANBgkqhkiG9w0BAQsFAAOCAQEAK+3tiH8l1qwxVz2X9h2eUMKkkUSJ I+Ty0ATo3anKa0aJWnRGRgX5xLbXPLnz9V/Gbp/EKGDZeZeHx27M62YIZEepVAaP YOZTcOhaV5Ns95t04e6//cWYRqb+9JIUtUu4qUv5LwKHT4qwMvRctwnb7aiCHSMW Ikn4zZ2/lzUeEstMuGPB+1u+HuUfQfNP/Dl0CmMd650v5le8u+/HH3uoH10aYiiZ OQXzA/5zON4VZhIl5vWN8/9vGU40PeYVMExXn8U/CnULbubhj/OYObmfwCAaVyXB XXa0rUNItyVXnA+aCGyl751goRZ5gPMJzXWYGPNQaiKQW7wCih9+bmSy4A== -----END CERTIFICATE-----Generated at Tue May 13 18:53:13 2025 by rpki-client