$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c96c7d16-98f4-430b-900c-b555bb1ceb1f.roa File: c96c7d16-98f4-430b-900c-b555bb1ceb1f.roa (raw, json) Hash identifier: i8sN0E1YVcdx8Kq2y//gR3SEtnVdz3rZYluYwyOcems= Subject key identifier: 52:74:41:37:9F:3D:A9:D9:FB:9D:65:D9:B9:32:54:0B:99:78:B4:07 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 25946960207AE239332C63D6D241CA71738051AA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c96c7d16-98f4-430b-900c-b555bb1ceb1f.roa Signing time: Fri 27 Jun 2025 00:51:10 +0000 ROA not before: Fri 27 Jun 2025 00:51:10 +0000 ROA not after: Fri 01 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 50.18.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:94:69:60:20:7a:e2:39:33:2c:63:d6:d2:41:ca:71:73:80:51:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 27 00:51:10 2025 GMT Not After : Aug 1 23:59:59 2025 GMT Subject: serialNumber=ce00c1c6ca63d301442192994e04f621a9d57bd168c93fcf630c7eacfa8bce45, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:65:54:fb:e5:10:77:a0:e2:f1:e9:27:59:52: 26:f1:fb:e2:0f:af:46:75:53:88:b6:91:52:27:1c: b8:89:23:37:f5:e8:5f:3d:bc:94:53:3a:3e:f4:af: 07:4b:a8:11:b8:5e:9a:38:9d:20:97:34:b2:ad:6e: 58:85:03:c4:b2:ae:b5:d9:9f:72:48:a8:2a:ad:84: 97:1a:0e:91:1c:bd:f3:2e:d6:03:c6:8a:14:35:d3: 32:a8:59:13:86:36:0c:9e:6b:96:7a:37:b0:7f:cc: b9:bb:17:be:ef:de:3c:f7:01:00:5c:c5:c9:b2:b5: 22:26:f4:ad:fd:08:5a:9a:75:96:f2:65:97:17:5b: 8f:8c:49:79:95:63:c2:5d:54:12:d3:e4:68:8d:f1: 93:1b:2c:42:fb:f3:6f:24:d7:b8:1c:bd:50:47:a4: cc:6a:ff:34:21:4e:2a:88:ff:52:71:b3:fb:a7:c3: 83:0d:c2:cf:68:07:76:e8:66:ed:d9:d1:6b:99:8c: c9:c6:77:db:4b:9e:57:f2:a8:c6:93:d2:50:33:22: c8:13:0b:13:07:25:6a:25:de:ac:77:dc:a3:cb:4f: b3:ef:d3:37:0d:c1:8e:f9:a6:52:d2:05:05:2b:d1: dd:91:87:25:44:0f:9f:3e:10:2a:bd:6a:bc:64:b9: b0:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:74:41:37:9F:3D:A9:D9:FB:9D:65:D9:B9:32:54:0B:99:78:B4:07 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c96c7d16-98f4-430b-900c-b555bb1ceb1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.18.160.0/19 Signature Algorithm: sha256WithRSAEncryption 51:ec:f3:0c:3d:2b:53:94:35:ca:cc:74:e9:b9:08:01:03:5b: 12:89:4f:d5:dd:29:a3:7a:13:5e:55:6c:1c:95:0d:92:f9:d9: cf:aa:ec:df:73:3e:f6:df:45:32:cf:0c:fc:f8:04:f5:41:1a: 93:0f:c4:fe:da:73:47:72:df:41:b3:4e:c6:05:d6:73:59:de: 85:34:f5:89:4e:e6:36:98:75:f5:a6:f3:62:b7:0b:80:63:dd: f2:db:7d:13:3e:b8:c5:8b:4a:79:8a:5e:c2:2f:67:22:f5:cb: 3c:58:2d:b0:c7:17:69:5e:1a:9c:4d:0f:37:f2:6c:65:e9:71: 88:2a:72:22:28:c2:30:52:6b:e2:42:05:53:30:5e:0f:b0:d7: e6:78:92:a0:0c:b4:1d:25:65:26:0c:e4:09:0d:94:9a:3d:63: 65:48:29:98:d3:92:c2:5a:eb:03:7f:d2:11:91:a8:78:4f:a0: f7:f1:65:95:3a:41:35:13:83:d8:93:80:ca:0f:ab:80:df:d5: f2:c6:fa:3d:e7:fd:1e:88:73:a8:8c:9e:bf:36:fe:e3:1b:2f: cf:1e:1a:4c:95:2f:73:c0:9f:4a:f2:de:58:59:f5:e5:80:83: 5c:4e:dc:c3:39:b4:40:0d:ec:31:d3:23:0e:5b:b2:e5:51:3c: 42:f8:d9:ea -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJZRpYCB64jkzLGPW0kHKcXOAUaowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjI3MDA1MTEwWhcNMjUwODAxMjM1OTU5 WjB6MUkwRwYDVQQFE0BjZTAwYzFjNmNhNjNkMzAxNDQyMTkyOTk0ZTA0ZjYyMWE5 ZDU3YmQxNjhjOTNmY2Y2MzBjN2VhY2ZhOGJjZTQ1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+ZVT75RB3oOLx6SdZUibx++IPr0Z1U4i2kVInHLiJIzf1 6F89vJRTOj70rwdLqBG4Xpo4nSCXNLKtbliFA8SyrrXZn3JIqCqthJcaDpEcvfMu 1gPGihQ10zKoWROGNgyea5Z6N7B/zLm7F77v3jz3AQBcxcmytSIm9K39CFqadZby ZZcXW4+MSXmVY8JdVBLT5GiN8ZMbLEL7828k17gcvVBHpMxq/zQhTiqI/1Jxs/un w4MNws9oB3boZu3Z0WuZjMnGd9tLnlfyqMaT0lAzIsgTCxMHJWol3qx33KPLT7Pv 0zcNwY75plLSBQUr0d2RhyVED58+ECq9arxkubDtAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUUnRBN589qdn7nWXZuTJUC5l4tAcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M5NmM3ZDE2LTk4ZjQtNDMwYi05MDBjLWI1NTViYjFjZWIxZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUyEqAwDQYJKoZIhvcNAQELBQADggEBAFHs8ww9K1OUNcrMdOm5CAEDWxKJ T9XdKaN6E15VbByVDZL52c+q7N9zPvbfRTLPDPz4BPVBGpMPxP7ac0dy30GzTsYF 1nNZ3oU09YlO5jaYdfWm82K3C4Bj3fLbfRM+uMWLSnmKXsIvZyL1yzxYLbDHF2le GpxNDzfybGXpcYgqciIowjBSa+JCBVMwXg+w1+Z4kqAMtB0lZSYM5AkNlJo9Y2VI KZjTksJa6wN/0hGRqHhPoPfxZZU6QTUTg9iTgMoPq4Df1fLG+j3n/R6Ic6iMnr82 /uMbL88eGkyVL3PAn0ry3lhZ9eWAg1xO3MM5tEAN7DHTIw5bsuVRPEL42eo= -----END CERTIFICATE-----Generated at Sun Jun 29 04:36:16 2025 by rpki-client