$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef1af7e0-6933-4e52-8fd0-aa7abf670f30.roa File: ef1af7e0-6933-4e52-8fd0-aa7abf670f30.roa (raw, json) Hash identifier: WFTVNrDk6SAEntOsE9jHo6GWuvpwT+ns5Gcf4lfDkTk= Subject key identifier: 97:5E:D5:A3:BC:04:22:C4:57:40:18:C8:60:B0:F2:B3:F4:FD:F6:16 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0A31C9FD5DBC7C683FF69F68013C0DD536B112AD Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef1af7e0-6933-4e52-8fd0-aa7abf670f30.roa Signing time: Sat 16 Aug 2025 00:50:27 +0000 ROA not before: Sat 16 Aug 2025 00:50:27 +0000 ROA not after: Sat 20 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 50.18.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:31:c9:fd:5d:bc:7c:68:3f:f6:9f:68:01:3c:0d:d5:36:b1:12:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 16 00:50:27 2025 GMT Not After : Sep 20 23:59:59 2025 GMT Subject: serialNumber=4ab303f8ef12718759f484dd35329b8d7aff262aa952265dc11d075bc799006b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:04:ca:4d:64:eb:a4:c9:a7:68:b8:73:fb:10: ea:9d:69:cf:07:e0:fc:44:09:95:3c:0d:7b:36:6c: 4d:a4:af:fe:cd:0b:c2:2d:c0:33:4a:02:f5:81:24: 83:f4:15:8e:2b:bc:33:fa:2f:20:52:68:a1:f0:41: 90:20:d4:dc:1a:1a:7d:3d:9d:ab:4b:5d:89:29:7d: 70:34:97:27:66:56:4c:b2:1c:13:6c:ea:9c:bc:8c: f7:02:c8:4c:69:bd:7b:bb:18:46:7e:a0:89:98:05: 08:7d:58:53:bd:ba:39:5b:e0:c6:43:25:62:bf:3e: 0d:b1:bf:83:9d:88:a3:a7:ec:bb:d1:71:b3:cf:59: ff:04:ab:d1:58:7b:ab:ed:09:65:58:bc:bc:34:66: 56:21:83:e8:64:87:68:72:7f:f2:b6:2e:ff:ae:fc: 0f:4f:0d:bc:79:db:a2:d0:ef:a3:1f:2d:f0:ff:e3: 52:4a:cb:23:84:b7:2b:d3:90:37:65:00:b4:0d:12: b6:0f:c5:14:dc:9e:e7:90:40:d8:60:87:6e:a5:da: e3:6f:9d:34:ea:6c:d5:47:e1:58:33:0f:f2:7e:26: 21:cc:6e:17:f2:d9:f6:07:4e:0e:10:94:f6:c8:27: 23:ea:4b:8e:2e:f4:d9:c3:29:1b:38:27:6d:31:82: 15:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:5E:D5:A3:BC:04:22:C4:57:40:18:C8:60:B0:F2:B3:F4:FD:F6:16 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef1af7e0-6933-4e52-8fd0-aa7abf670f30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.18.128.0/20 Signature Algorithm: sha256WithRSAEncryption 1c:1f:bd:4f:50:d3:33:ae:12:34:fa:43:a4:f4:fc:02:e2:cd: 9b:2d:11:41:cd:0c:3e:01:44:9f:5f:32:95:10:01:2f:8d:20: ab:bf:1b:10:a7:22:1d:ab:70:01:19:5a:83:57:72:fa:dd:9c: 48:86:6c:92:82:49:b7:39:d4:f5:75:d9:46:43:ea:4f:fe:4a: 32:c1:9f:70:3a:21:84:d7:38:66:d5:08:5f:6d:23:7c:fc:ed: d0:f4:e8:a1:99:3b:e9:23:19:60:14:19:6b:de:27:80:bb:05: 1d:0a:64:e4:00:50:62:5b:ac:be:b4:01:7b:51:8d:1e:fd:98: c4:7f:c8:fb:49:8c:fe:9d:fa:09:96:1d:b2:b9:64:fd:f2:f2: 88:0b:20:47:4e:f2:b3:88:e8:be:65:4d:6e:76:73:3c:5b:23: b6:7d:e5:49:d3:5b:75:19:6e:72:dd:bc:3f:6e:2d:1d:b2:b1: 5d:0e:5c:bc:a9:57:53:e0:b8:c4:b2:03:5e:4a:eb:a4:7e:df: 47:f3:e4:3f:12:04:b8:31:c3:95:c1:7c:61:28:4b:30:1f:58: 0c:2e:3d:00:73:58:19:85:64:56:a7:32:a0:a0:17:e2:67:82: f2:4b:4e:65:07:dc:2b:ac:90:f5:cb:b7:01:0f:3b:e0:f1:95: 7d:4b:d2:18 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCjHJ/V28fGg/9p9oATwN1TaxEq0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE2MDA1MDI3WhcNMjUwOTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A0YWIzMDNmOGVmMTI3MTg3NTlmNDg0ZGQzNTMyOWI4ZDdh ZmYyNjJhYTk1MjI2NWRjMTFkMDc1YmM3OTkwMDZiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDYBMpNZOukyadouHP7EOqdac8H4PxECZU8DXs2bE2kr/7N C8ItwDNKAvWBJIP0FY4rvDP6LyBSaKHwQZAg1NwaGn09natLXYkpfXA0lydmVkyy HBNs6py8jPcCyExpvXu7GEZ+oImYBQh9WFO9ujlb4MZDJWK/Pg2xv4OdiKOn7LvR cbPPWf8Eq9FYe6vtCWVYvLw0ZlYhg+hkh2hyf/K2Lv+u/A9PDbx526LQ76MfLfD/ 41JKyyOEtyvTkDdlALQNErYPxRTcnueQQNhgh26l2uNvnTTqbNVH4VgzD/J+JiHM bhfy2fYHTg4QlPbIJyPqS44u9NnDKRs4J20xghULAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUl17Vo7wEIsRXQBjIYLDys/T99hYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2VmMWFmN2UwLTY5MzMtNGU1Mi04ZmQwLWFhN2FiZjY3MGYzMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQyEoAwDQYJKoZIhvcNAQELBQADggEBABwfvU9Q0zOuEjT6Q6T0/ALizZst EUHNDD4BRJ9fMpUQAS+NIKu/GxCnIh2rcAEZWoNXcvrdnEiGbJKCSbc51PV12UZD 6k/+SjLBn3A6IYTXOGbVCF9tI3z87dD06KGZO+kjGWAUGWveJ4C7BR0KZOQAUGJb rL60AXtRjR79mMR/yPtJjP6d+gmWHbK5ZP3y8ogLIEdO8rOI6L5lTW52czxbI7Z9 5UnTW3UZbnLdvD9uLR2ysV0OXLypV1PguMSyA15K66R+30fz5D8SBLgxw5XBfGEo SzAfWAwuPQBzWBmFZFanMqCgF+JngvJLTmUH3CuskPXLtwEPO+DxlX1L0hg= -----END CERTIFICATE-----Generated at Sat Aug 23 06:56:49 2025 by rpki-client