$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e5ebd6c8-09b4-4e77-9d8f-913002cdfa21.roa File: e5ebd6c8-09b4-4e77-9d8f-913002cdfa21.roa (raw, json) Hash identifier: MBoTGjAqgW8ujtrIQLEXmJ0PV3jpsiMCFwGYJzwcgOw= Subject key identifier: 1C:3A:76:48:42:BA:54:70:9D:EC:51:3A:D5:C3:C1:3D:AC:24:16:D4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 58503ECEA7EDE1B3935323A84FCF7409795BB1B2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e5ebd6c8-09b4-4e77-9d8f-913002cdfa21.roa Signing time: Sat 16 Aug 2025 00:42:03 +0000 ROA not before: Sat 16 Aug 2025 00:42:03 +0000 ROA not after: Sat 20 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 50.19.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:50:3e:ce:a7:ed:e1:b3:93:53:23:a8:4f:cf:74:09:79:5b:b1:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 16 00:42:03 2025 GMT Not After : Sep 20 23:59:59 2025 GMT Subject: serialNumber=5b7f76b5c5bdced986386d7ed84b5a571a1fa67bd24c7db646bfdce635b0824d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:33:4c:14:dd:5c:89:1b:ed:e6:6b:c3:f4:31: 35:90:66:c9:08:9f:d5:63:a2:72:b6:53:5c:e5:55: b3:e0:ab:cf:97:0c:fb:5f:1e:88:3b:19:f0:c2:c4: 50:8b:a6:1d:70:35:95:de:16:a1:34:6f:02:61:e8: 95:8f:f6:5d:73:7a:45:ba:33:50:4c:74:31:a0:55: 07:ca:ff:af:30:a2:26:4f:d8:93:57:3c:76:14:7d: bf:14:2e:84:37:d1:07:35:6b:b8:41:a3:6e:50:f7: ad:24:c6:ae:58:a2:ce:8c:d4:34:32:90:0c:97:11: be:18:b3:44:2f:7a:d1:12:40:98:5e:f1:c3:9c:f7: 04:1f:0b:93:e0:28:b0:82:ef:07:bf:62:5b:68:ce: d7:56:0d:95:4d:a2:21:df:d8:18:54:73:a0:35:82: 54:26:eb:57:42:e2:bd:23:aa:27:b1:45:08:6a:c9: 6e:a5:c6:db:4e:f7:13:10:65:14:8d:cf:6d:69:68: 3f:92:7b:2a:c6:78:98:4a:aa:20:27:08:76:eb:0d: b3:21:b5:49:20:fd:21:bd:5d:b6:e2:be:35:2a:d4: 58:13:cc:4d:76:f4:34:7c:c5:dc:e1:47:0a:37:8b: 55:9a:aa:fa:41:b0:ff:8c:d6:b0:38:9a:c6:be:2b: 3a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:3A:76:48:42:BA:54:70:9D:EC:51:3A:D5:C3:C1:3D:AC:24:16:D4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e5ebd6c8-09b4-4e77-9d8f-913002cdfa21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.19.208.0/20 Signature Algorithm: sha256WithRSAEncryption b4:d6:62:43:36:9e:da:b9:cb:98:0b:a7:6d:2a:67:33:ef:f2: c1:64:93:0b:55:b8:c4:00:11:a2:12:16:c4:89:a1:90:1c:1e: 28:63:21:d7:99:d9:5a:b5:8a:40:e8:e1:cd:09:27:98:60:15: 24:06:5e:4a:52:49:12:df:e2:45:71:5a:63:41:59:b0:be:86: ae:12:99:3b:65:a6:6d:dc:ed:93:42:d6:8a:67:99:d6:14:8b: e9:33:76:26:6b:18:f4:fb:06:35:ec:95:9c:97:d1:02:1d:70: e7:56:12:b4:20:fa:49:9a:22:45:d4:e0:f0:79:0f:9a:7c:7c: 8a:4c:e5:9e:5c:0c:2d:22:d9:65:af:8b:32:36:4f:34:c4:84: d8:b5:a8:9b:65:e3:b0:4e:63:27:1f:c5:e4:af:f0:a4:27:79: eb:b7:4d:ce:8f:49:64:37:a1:6a:60:a1:90:88:7e:f4:5b:17: 88:63:04:04:70:4e:5b:45:32:3e:8d:03:32:7a:80:a3:6c:9a: 14:9b:24:23:bc:34:7a:bd:93:80:e0:15:fd:10:d4:5e:3b:94: 3c:0d:70:62:c0:c5:34:08:86:3f:c8:aa:ec:5b:4c:9f:ee:89: b3:92:ad:4c:76:44:29:4c:e5:7e:49:bd:79:ce:e6:fe:a7:da: 5f:00:4f:3f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWFA+zqft4bOTUyOoT890CXlbsbIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE2MDA0MjAzWhcNMjUwOTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A1YjdmNzZiNWM1YmRjZWQ5ODYzODZkN2VkODRiNWE1NzFh MWZhNjdiZDI0YzdkYjY0NmJmZGNlNjM1YjA4MjRkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtM0wU3VyJG+3ma8P0MTWQZskIn9VjonK2U1zlVbPgq8+X DPtfHog7GfDCxFCLph1wNZXeFqE0bwJh6JWP9l1zekW6M1BMdDGgVQfK/68woiZP 2JNXPHYUfb8ULoQ30Qc1a7hBo25Q960kxq5Yos6M1DQykAyXEb4Ys0QvetESQJhe 8cOc9wQfC5PgKLCC7we/YltoztdWDZVNoiHf2BhUc6A1glQm61dC4r0jqiexRQhq yW6lxttO9xMQZRSNz21paD+SeyrGeJhKqiAnCHbrDbMhtUkg/SG9XbbivjUq1FgT zE129DR8xdzhRwo3i1WaqvpBsP+M1rA4msa+Kzo7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUHDp2SEK6VHCd7FE61cPBPawkFtQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2U1ZWJkNmM4LTA5YjQtNGU3Ny05ZDhmLTkxMzAwMmNkZmEyMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQyE9AwDQYJKoZIhvcNAQELBQADggEBALTWYkM2ntq5y5gLp20qZzPv8sFk kwtVuMQAEaISFsSJoZAcHihjIdeZ2Vq1ikDo4c0JJ5hgFSQGXkpSSRLf4kVxWmNB WbC+hq4SmTtlpm3c7ZNC1opnmdYUi+kzdiZrGPT7BjXslZyX0QIdcOdWErQg+kma IkXU4PB5D5p8fIpM5Z5cDC0i2WWvizI2TzTEhNi1qJtl47BOYycfxeSv8KQneeu3 Tc6PSWQ3oWpgoZCIfvRbF4hjBARwTltFMj6NAzJ6gKNsmhSbJCO8NHq9k4DgFf0Q 1F47lDwNcGLAxTQIhj/IquxbTJ/uibOSrUx2RClM5X5JvXnO5v6n2l8ATz8= -----END CERTIFICATE-----Generated at Sat Aug 23 08:17:06 2025 by rpki-client