$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7d2d33f-dd78-4e1e-af2a-d79c01c8402b.roa File: b7d2d33f-dd78-4e1e-af2a-d79c01c8402b.roa (raw, json) Hash identifier: JoVKvGZx75vKjGyoadwTxGZQpvjrz3Wv+tr62jD74+U= Subject key identifier: 83:4D:F5:FA:AE:BD:EC:D8:CF:C4:77:DF:A9:98:6B:3E:84:FB:1C:B8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 17962B4655C3D1AF2348A865A8E6BFD71E8CE2B2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7d2d33f-dd78-4e1e-af2a-d79c01c8402b.roa Signing time: Sat 16 Aug 2025 00:40:18 +0000 ROA not before: Sat 16 Aug 2025 00:40:18 +0000 ROA not after: Sat 20 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 50.18.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:96:2b:46:55:c3:d1:af:23:48:a8:65:a8:e6:bf:d7:1e:8c:e2:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 16 00:40:18 2025 GMT Not After : Sep 20 23:59:59 2025 GMT Subject: serialNumber=3f7616499ef39610d58968a83ec8702d3bd9621093428feb8d115a71ef4ef2b6, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f0:f3:72:aa:52:8e:56:03:f7:a7:d9:3a:af: 0d:b8:e4:cb:d3:31:be:f3:84:91:fa:92:d2:60:3d: 88:ea:10:b1:3a:15:12:be:90:72:03:c5:3d:26:b8: 15:b5:f8:fd:7c:0f:03:7d:1a:e9:6a:cc:41:0a:15: 3b:9d:3c:46:4c:5f:e8:72:87:1b:3b:88:80:27:95: 61:19:64:20:e4:22:b4:82:4e:e9:7c:53:6a:9e:95: e0:93:b8:e8:cc:84:88:b6:57:a4:ad:a3:d0:b5:47: 9a:47:68:01:d2:47:72:d8:42:eb:2b:51:4d:1a:5d: e7:b8:98:1c:62:31:1d:76:c1:6e:e5:33:75:89:49: d3:98:4c:30:36:67:3a:0d:84:3f:16:b3:c1:65:dd: 0b:d3:5e:97:d0:87:2e:e5:c4:39:97:eb:d1:bb:6a: 20:2f:df:88:11:ec:b5:0c:f1:77:48:0f:53:14:c2: dc:92:d4:8e:5e:fe:d3:4e:f1:ee:d9:a0:eb:0c:c3: b2:d0:60:da:70:35:3e:3e:c4:55:1e:a3:2c:a6:6a: 56:5b:68:08:03:26:89:18:ac:eb:43:d4:72:bb:cb: 0b:d1:22:2e:5d:9c:89:04:0c:8d:39:b8:b1:67:d0: b2:81:bc:33:e8:03:51:53:3f:9b:4a:02:e5:64:33: 43:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:4D:F5:FA:AE:BD:EC:D8:CF:C4:77:DF:A9:98:6B:3E:84:FB:1C:B8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7d2d33f-dd78-4e1e-af2a-d79c01c8402b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.18.32.0/21 Signature Algorithm: sha256WithRSAEncryption 8b:16:32:ac:a0:05:92:15:20:f4:fd:47:c6:7e:d8:63:55:a1: e0:52:06:83:4c:4e:c6:20:46:1e:e3:35:2c:b6:30:41:66:3b: f7:07:4b:d8:35:28:cc:52:ab:17:fa:86:4e:75:54:8e:e7:b8: 3f:ba:2d:37:be:4c:84:e2:75:d3:aa:7b:44:91:4b:d6:a0:c3: 07:30:91:39:38:4f:43:79:91:db:b1:ee:83:4a:95:cf:10:2f: 15:e5:36:df:98:2c:49:58:52:52:8d:41:3e:35:54:f2:50:4e: 77:91:f2:42:5f:f4:a1:8c:84:0d:0b:df:b2:0f:7c:87:68:e8: 9d:07:3e:09:35:86:96:01:cc:1c:f1:8a:9a:72:83:2f:c3:1b: b4:85:f5:b1:1e:be:12:d6:6e:a5:bc:ec:af:97:f5:d7:06:69: 98:db:27:77:ed:75:f5:38:77:9c:80:00:97:c1:de:cf:e6:a2: 55:91:f0:54:4a:b6:5a:4f:e4:f7:84:de:bc:77:3e:23:14:24: b0:a1:60:30:0f:72:5e:fe:7b:28:be:ba:e7:58:07:29:2a:68: a3:bd:e7:a4:2e:33:03:c2:68:6c:eb:61:6d:e0:79:b9:fc:0f: 97:1d:3f:53:fc:98:69:25:e3:b6:d7:c7:b5:88:84:b8:fe:fe: 92:a1:0b:e1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUF5YrRlXD0a8jSKhlqOa/1x6M4rIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE2MDA0MDE4WhcNMjUwOTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AzZjc2MTY0OTllZjM5NjEwZDU4OTY4YTgzZWM4NzAyZDNi ZDk2MjEwOTM0MjhmZWI4ZDExNWE3MWVmNGVmMmI2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCs8PNyqlKOVgP3p9k6rw245MvTMb7zhJH6ktJgPYjqELE6 FRK+kHIDxT0muBW1+P18DwN9GulqzEEKFTudPEZMX+hyhxs7iIAnlWEZZCDkIrSC Tul8U2qeleCTuOjMhIi2V6Sto9C1R5pHaAHSR3LYQusrUU0aXee4mBxiMR12wW7l M3WJSdOYTDA2ZzoNhD8Ws8Fl3QvTXpfQhy7lxDmX69G7aiAv34gR7LUM8XdID1MU wtyS1I5e/tNO8e7ZoOsMw7LQYNpwNT4+xFUeoyymalZbaAgDJokYrOtD1HK7ywvR Ii5dnIkEDI05uLFn0LKBvDPoA1FTP5tKAuVkM0N3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUg031+q697NjPxHffqZhrPoT7HLgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I3ZDJkMzNmLWRkNzgtNGUxZS1hZjJhLWQ3OWMwMWM4NDAyYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMyEiAwDQYJKoZIhvcNAQELBQADggEBAIsWMqygBZIVIPT9R8Z+2GNVoeBS BoNMTsYgRh7jNSy2MEFmO/cHS9g1KMxSqxf6hk51VI7nuD+6LTe+TITiddOqe0SR S9agwwcwkTk4T0N5kdux7oNKlc8QLxXlNt+YLElYUlKNQT41VPJQTneR8kJf9KGM hA0L37IPfIdo6J0HPgk1hpYBzBzxippygy/DG7SF9bEevhLWbqW87K+X9dcGaZjb J3ftdfU4d5yAAJfB3s/molWR8FRKtlpP5PeE3rx3PiMUJLChYDAPcl7+eyi+uudY BykqaKO956QuMwPCaGzrYW3gebn8D5cdP1P8mGkl47bXx7WIhLj+/pKhC+E= -----END CERTIFICATE-----Generated at Sat Aug 23 10:09:28 2025 by rpki-client