$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8e49f25e-d120-4f09-aacc-bf4995405b55.roa File: 8e49f25e-d120-4f09-aacc-bf4995405b55.roa (raw, json) Hash identifier: 55gNqEiBwt7Bc2bMh47M0Cou08mGdFLoZf/VL4EV/Uc= Subject key identifier: 85:F2:E0:0B:5D:B3:3B:29:D8:3A:2A:09:9A:96:B4:5E:ED:EB:E5:54 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 21DA1875CD83C32C0F14394464B72A1D6E2E3BDB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8e49f25e-d120-4f09-aacc-bf4995405b55.roa Signing time: Mon 18 Aug 2025 15:40:22 +0000 ROA not before: Mon 18 Aug 2025 15:40:22 +0000 ROA not after: Mon 22 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 50.19.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:da:18:75:cd:83:c3:2c:0f:14:39:44:64:b7:2a:1d:6e:2e:3b:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 18 15:40:22 2025 GMT Not After : Sep 22 23:59:59 2025 GMT Subject: serialNumber=fba217aeed4dd643fc2ae33c7835cbbd598560b2a7950676fa08871f62f29dd0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:cd:e2:40:70:4f:67:c2:23:17:4a:4c:74:46: b4:9a:0a:1c:7d:d2:71:d5:f3:55:94:16:48:57:de: 24:a4:a2:85:59:2e:d3:33:9c:3d:17:96:4f:e0:ae: f9:37:6b:86:7a:e6:87:11:6c:df:01:d5:db:22:6e: 47:b5:40:ae:29:96:06:54:7c:da:83:d5:18:54:a1: 82:bb:84:ea:91:eb:ac:36:65:a9:6b:41:c3:f6:e2: 8c:c2:57:17:76:10:97:38:37:ab:04:45:1e:70:cc: 35:ae:bd:ab:5b:16:15:a4:e5:dc:78:bb:af:fc:b4: 43:33:f5:b1:8f:98:01:d5:1a:15:b4:cf:c0:9a:42: f6:78:4f:34:ab:e8:f9:b3:f3:57:ee:96:29:be:09: c5:88:bf:a9:94:23:2f:ca:e7:cb:cb:38:d0:c6:4f: aa:7f:57:72:0d:84:85:7c:c3:37:58:a8:f0:91:23: 30:2d:80:0f:6c:09:84:37:f4:4f:73:fe:f3:65:87: ea:96:21:0b:ef:62:b8:01:24:d8:e9:0c:7d:0d:ce: 54:41:08:6b:1e:0e:25:c1:13:87:d8:b1:d1:31:e0: bd:61:cb:68:ec:25:da:80:49:d5:e6:6d:a0:a2:13: 15:2d:75:db:f7:f6:9c:72:20:53:f7:9d:60:94:ea: d3:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:F2:E0:0B:5D:B3:3B:29:D8:3A:2A:09:9A:96:B4:5E:ED:EB:E5:54 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8e49f25e-d120-4f09-aacc-bf4995405b55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.19.128.0/18 Signature Algorithm: sha256WithRSAEncryption 4b:02:d5:eb:0c:d0:f6:12:87:8a:03:86:fa:e9:25:92:c9:cf: 23:19:c6:8c:cf:63:09:c1:be:83:17:a2:9d:d8:55:93:80:1a: af:c6:a7:9b:ec:ca:f9:87:99:13:67:06:0b:af:da:76:8a:65: 0a:d5:b7:95:5b:2b:04:1b:4f:86:f5:20:31:24:60:b8:fa:a4: f8:40:9e:33:43:cc:38:c6:46:9e:7f:e1:e8:68:6c:e6:85:81: dc:c1:0a:d6:6b:45:e6:59:83:f7:4b:92:fe:d3:d3:9b:da:dc: df:53:d0:36:4b:50:c8:02:f8:ea:8b:89:67:7c:56:f0:11:7f: cb:2a:b8:76:08:b7:33:b0:4f:4f:ec:67:92:30:65:d7:16:a6: 14:b8:b2:47:1b:5c:46:81:12:90:06:51:db:94:66:20:cf:b9: e9:ad:c9:e6:7d:14:5c:f3:a7:91:b1:21:11:c9:80:4c:ac:48: e7:69:bb:97:d3:f8:02:d7:4e:65:b1:2d:61:0d:a0:e2:7d:70: 24:23:f7:d5:b5:ae:da:56:78:80:a5:a3:de:2b:ed:1c:06:9e: 55:2b:c6:13:32:5d:06:d4:25:b4:57:ce:f3:a2:ae:5e:46:19: bb:84:5e:d9:8e:db:dc:8a:d2:a7:5c:76:fa:1f:e5:01:ed:ef: 0f:ab:1f:69 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIdoYdc2DwywPFDlEZLcqHW4uO9swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE4MTU0MDIyWhcNMjUwOTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BmYmEyMTdhZWVkNGRkNjQzZmMyYWUzM2M3ODM1Y2JiZDU5 ODU2MGIyYTc5NTA2NzZmYTA4ODcxZjYyZjI5ZGQwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvzeJAcE9nwiMXSkx0RrSaChx90nHV81WUFkhX3iSkooVZ LtMznD0Xlk/grvk3a4Z65ocRbN8B1dsibke1QK4plgZUfNqD1RhUoYK7hOqR66w2 ZalrQcP24ozCVxd2EJc4N6sERR5wzDWuvatbFhWk5dx4u6/8tEMz9bGPmAHVGhW0 z8CaQvZ4TzSr6Pmz81fulim+CcWIv6mUIy/K58vLONDGT6p/V3INhIV8wzdYqPCR IzAtgA9sCYQ39E9z/vNlh+qWIQvvYrgBJNjpDH0NzlRBCGseDiXBE4fYsdEx4L1h y2jsJdqASdXmbaCiExUtddv39pxyIFP3nWCU6tPRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhfLgC12zOynYOioJmpa0Xu3r5VQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhlNDlmMjVlLWQxMjAtNGYwOS1hYWNjLWJmNDk5NTQwNWI1NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYyE4AwDQYJKoZIhvcNAQELBQADggEBAEsC1esM0PYSh4oDhvrpJZLJzyMZ xozPYwnBvoMXop3YVZOAGq/Gp5vsyvmHmRNnBguv2naKZQrVt5VbKwQbT4b1IDEk YLj6pPhAnjNDzDjGRp5/4ehobOaFgdzBCtZrReZZg/dLkv7T05va3N9T0DZLUMgC +OqLiWd8VvARf8squHYItzOwT0/sZ5IwZdcWphS4skcbXEaBEpAGUduUZiDPuemt yeZ9FFzzp5GxIRHJgEysSOdpu5fT+ALXTmWxLWENoOJ9cCQj99W1rtpWeIClo94r 7RwGnlUrxhMyXQbUJbRXzvOirl5GGbuEXtmO29yK0qdcdvof5QHt7w+rH2k= -----END CERTIFICATE-----Generated at Sat Aug 23 12:24:02 2025 by rpki-client