$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9809e303-ceeb-4605-a380-77419cc26af6.roa File: 9809e303-ceeb-4605-a380-77419cc26af6.roa (raw, json) Hash identifier: UUegf1jRCVmU4pAVOQDXuti9MCBhKn1sk/tShGrMVLY= Subject key identifier: 5C:BB:A2:9F:EC:E8:9A:CD:2C:CB:73:27:85:2C:CD:3C:54:A6:48:6A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 40CF3639DA637C86A620E378D754BE3B9D72BC78 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9809e303-ceeb-4605-a380-77419cc26af6.roa Signing time: Sat 16 Aug 2025 00:51:53 +0000 ROA not before: Sat 16 Aug 2025 00:51:53 +0000 ROA not after: Sat 20 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 50.18.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:cf:36:39:da:63:7c:86:a6:20:e3:78:d7:54:be:3b:9d:72:bc:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 16 00:51:53 2025 GMT Not After : Sep 20 23:59:59 2025 GMT Subject: serialNumber=7f148704e544ca1544baed6209655bb4fd092e353c07796d73e611639cda72fc, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:10:4d:9a:cc:17:79:71:b8:50:62:56:7f:dd: d6:db:1b:cb:19:59:6b:18:6e:5f:61:f4:1c:c4:00: 95:7a:95:31:ba:e2:49:5c:8a:29:95:48:5b:a7:9d: 03:80:ed:56:ba:18:42:b3:43:57:9f:de:11:25:7a: 42:76:f4:11:93:9f:13:e7:25:0a:c9:39:6f:a9:5e: dc:2e:70:03:d8:bd:e0:7a:9f:b8:6c:9b:79:a6:77: bf:56:e8:34:be:e4:37:a2:da:36:e6:f4:6d:68:fd: 45:62:0f:45:ee:ef:bc:a4:80:f8:c8:bf:ad:4e:75: 04:6b:37:23:98:c8:74:58:d2:f0:fa:e7:09:5c:a6: 51:d0:e2:04:a7:69:9b:10:81:47:9f:00:dc:ca:da: 28:31:54:77:d7:ed:65:07:22:ce:cd:fd:a5:d2:61: a3:30:9e:f4:14:0e:17:77:1b:12:85:92:e3:1d:7e: 52:5c:d7:f5:c0:96:66:af:75:72:19:99:22:7d:e7: d7:b2:80:43:70:1d:d9:55:8a:87:80:bf:5e:fe:46: a4:3c:bb:7e:00:55:9e:1e:e9:f7:5f:5b:59:8e:ea: 52:f2:10:d9:89:aa:f3:74:ee:34:01:f3:83:3f:05: 0f:24:04:c8:6d:c2:76:d1:b3:e0:aa:aa:35:1a:3f: 98:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:BB:A2:9F:EC:E8:9A:CD:2C:CB:73:27:85:2C:CD:3C:54:A6:48:6A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9809e303-ceeb-4605-a380-77419cc26af6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.18.0.0/18 Signature Algorithm: sha256WithRSAEncryption a9:f4:de:f4:e9:4b:25:f9:a2:38:20:9b:db:49:c7:14:ed:0a: c9:0e:5e:10:10:6d:2f:47:1b:c7:7c:2d:1b:45:7e:be:71:bf: f0:39:07:c2:be:90:fd:27:7a:c8:55:8b:fd:85:10:98:fa:32: ca:9e:e0:6d:87:b5:5a:61:fb:05:91:a2:16:ad:c7:5e:04:54: ed:70:4d:8f:bd:94:77:f2:f2:9b:71:8f:67:db:2b:9c:6a:6c: 0b:3e:18:92:ae:41:b7:a4:c8:1e:c5:84:19:09:7a:cd:07:27: 6f:f1:fb:db:b6:42:06:3d:1b:06:c2:6f:c4:39:32:de:4e:3f: a1:4e:91:bf:59:2a:8f:78:06:c8:9b:34:99:5e:f0:7f:12:17: 22:a3:7f:fe:ad:a6:b7:7c:71:a6:c5:a0:89:7e:07:3d:84:7a: 7a:8f:bb:cc:98:f1:2a:57:8b:4e:22:cd:8e:7c:85:40:59:87: d3:ff:b0:6e:ff:3f:48:55:08:ed:60:84:92:0f:7e:a0:3d:f2: bf:fc:bb:d6:53:d5:40:36:69:7b:0b:17:f4:ff:a2:88:1d:9a: 78:53:be:26:ed:5d:cf:8e:cc:69:e9:24:0c:7e:29:a7:69:48: 9f:6d:e1:0f:57:fa:d2:9b:45:b9:b4:6d:af:96:a6:aa:e2:80: ab:8b:a3:8c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQM82OdpjfIamION411S+O51yvHgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE2MDA1MTUzWhcNMjUwOTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZjE0ODcwNGU1NDRjYTE1NDRiYWVkNjIwOTY1NWJiNGZk MDkyZTM1M2MwNzc5NmQ3M2U2MTE2MzljZGE3MmZjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCUEE2azBd5cbhQYlZ/3dbbG8sZWWsYbl9h9BzEAJV6lTG6 4klciimVSFunnQOA7Va6GEKzQ1ef3hElekJ29BGTnxPnJQrJOW+pXtwucAPYveB6 n7hsm3mmd79W6DS+5Dei2jbm9G1o/UViD0Xu77ykgPjIv61OdQRrNyOYyHRY0vD6 5wlcplHQ4gSnaZsQgUefANzK2igxVHfX7WUHIs7N/aXSYaMwnvQUDhd3GxKFkuMd flJc1/XAlmavdXIZmSJ959eygENwHdlVioeAv17+RqQ8u34AVZ4e6fdfW1mO6lLy ENmJqvN07jQB84M/BQ8kBMhtwnbRs+CqqjUaP5gjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUXLuin+zoms0sy3MnhSzNPFSmSGowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk4MDllMzAzLWNlZWItNDYwNS1hMzgwLTc3NDE5Y2MyNmFmNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYyEgAwDQYJKoZIhvcNAQELBQADggEBAKn03vTpSyX5ojggm9tJxxTtCskO XhAQbS9HG8d8LRtFfr5xv/A5B8K+kP0neshVi/2FEJj6Msqe4G2HtVph+wWRohat x14EVO1wTY+9lHfy8ptxj2fbK5xqbAs+GJKuQbekyB7FhBkJes0HJ2/x+9u2QgY9 GwbCb8Q5Mt5OP6FOkb9ZKo94BsibNJle8H8SFyKjf/6tprd8cabFoIl+Bz2EenqP u8yY8SpXi04izY58hUBZh9P/sG7/P0hVCO1ghJIPfqA98r/8u9ZT1UA2aXsLF/T/ oogdmnhTvibtXc+OzGnpJAx+KadpSJ9t4Q9X+tKbRbm0ba+WpqrigKuLo4w= -----END CERTIFICATE-----Generated at Sat Aug 23 09:10:12 2025 by rpki-client