$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2cd2616a-9845-46c4-8003-b0526557ae7e.roa File: 2cd2616a-9845-46c4-8003-b0526557ae7e.roa (raw, json) Hash identifier: x4zvrfRfaakP9a7KpQ+qDVGzRvK/LSt2yuM6sbC0MIk= Subject key identifier: 25:7F:10:AA:67:CA:F2:88:83:81:17:40:99:9B:3C:A5:65:C2:87:65 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5A73C786687B637147F99525B5F6F28821B9D34F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2cd2616a-9845-46c4-8003-b0526557ae7e.roa Signing time: Mon 02 Jun 2025 15:51:44 +0000 ROA not before: Mon 02 Jun 2025 15:51:44 +0000 ROA not after: Mon 07 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 50.18.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:73:c7:86:68:7b:63:71:47:f9:95:25:b5:f6:f2:88:21:b9:d3:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 2 15:51:44 2025 GMT Not After : Jul 7 23:59:59 2025 GMT Subject: serialNumber=dca6ed2411ca00c136743dbf229bc64b36821750c01c943e5e25a55a2968ef28, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d6:55:64:0b:4b:0e:0c:35:09:21:22:05:58: c5:42:43:50:20:57:8d:04:8c:20:4d:a9:cc:19:b9: b5:a3:9a:49:c2:e0:c7:68:a1:56:7a:22:4b:6c:e8: a7:ca:f0:84:79:39:62:dc:af:e0:4a:19:e2:04:29: 8e:ce:e7:8c:b5:99:e5:02:0f:dc:fb:72:00:2a:5a: 21:45:82:89:ef:4b:8c:cc:2e:e1:17:c2:67:17:03: 66:7c:7c:97:cb:21:91:fc:5a:53:f4:99:f0:42:27: d7:71:95:a6:ba:c8:b4:6e:5d:8b:e7:34:b4:15:ec: 53:c5:cc:cb:f3:15:1d:b2:59:0b:53:ac:4a:c6:33: d9:3c:e5:21:51:92:6a:81:ce:75:e2:26:fc:3a:6d: bd:42:59:09:73:c4:4e:71:7f:18:e3:35:76:71:97: 51:1c:10:9d:87:2b:fb:be:8d:6f:87:4a:72:98:51: 32:c0:ff:a5:56:f5:1f:4f:a4:19:a1:b7:6a:cc:aa: 6c:50:36:0d:5e:ba:10:0e:a0:c2:18:3f:23:98:b6: 87:72:9d:cf:61:71:a7:68:7c:94:f7:9e:71:a0:87: 0c:71:a0:80:71:e3:b6:8f:10:d5:c7:aa:eb:97:3f: 9c:4e:2a:b5:14:01:37:a6:4b:3a:35:9c:a3:80:f5: b9:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:7F:10:AA:67:CA:F2:88:83:81:17:40:99:9B:3C:A5:65:C2:87:65 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2cd2616a-9845-46c4-8003-b0526557ae7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.18.224.0/19 Signature Algorithm: sha256WithRSAEncryption 16:7c:c9:1a:2a:1e:14:43:af:d2:44:ba:f9:ca:78:e5:08:15: 67:4f:bf:02:a6:0a:fa:26:6f:a2:69:bc:f6:ac:00:e8:bb:78: a8:21:1d:15:c5:d8:58:fc:14:30:ea:0b:9f:b5:6a:b7:a4:f8: be:36:56:c8:96:a8:c1:35:67:9e:a9:f9:f7:1d:93:d0:d2:8c: 0c:46:b4:d1:62:5c:36:94:a0:fa:ee:7e:36:29:b4:39:1d:d8: 76:64:8e:9b:3f:de:49:2c:33:87:35:ac:3a:90:56:ae:d8:fb: f4:09:eb:ca:09:b4:93:36:8a:38:66:63:58:60:fd:0f:ed:6b: 96:a9:79:02:28:d8:ea:ce:a5:2e:4c:b1:09:9f:f9:16:b6:e7: c8:09:49:21:8f:6c:67:ba:ae:3d:2a:5c:76:60:5c:33:9e:f4: 8b:fc:58:5b:73:1a:b2:59:63:26:9c:94:46:b6:ee:7c:40:31: 05:74:50:e1:86:c2:3a:6e:20:1b:9f:0f:27:9f:a8:c2:e2:c5: 9e:65:cf:40:60:a9:64:8a:90:ff:e7:41:f3:56:61:e7:34:5a: 13:e2:d3:2d:0f:95:f9:e7:a6:4c:8a:ed:99:a7:00:4d:59:7d: 45:76:1c:27:7e:73:54:51:f3:d1:90:89:16:5e:c0:00:96:dc: fb:53:75:de -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWnPHhmh7Y3FH+ZUltfbyiCG5008wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjAyMTU1MTQ0WhcNMjUwNzA3MjM1OTU5 WjB6MUkwRwYDVQQFE0BkY2E2ZWQyNDExY2EwMGMxMzY3NDNkYmYyMjliYzY0YjM2 ODIxNzUwYzAxYzk0M2U1ZTI1YTU1YTI5NjhlZjI4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDY1lVkC0sODDUJISIFWMVCQ1AgV40EjCBNqcwZubWjmknC 4MdooVZ6Ikts6KfK8IR5OWLcr+BKGeIEKY7O54y1meUCD9z7cgAqWiFFgonvS4zM LuEXwmcXA2Z8fJfLIZH8WlP0mfBCJ9dxlaa6yLRuXYvnNLQV7FPFzMvzFR2yWQtT rErGM9k85SFRkmqBznXiJvw6bb1CWQlzxE5xfxjjNXZxl1EcEJ2HK/u+jW+HSnKY UTLA/6VW9R9PpBmht2rMqmxQNg1euhAOoMIYPyOYtodync9hcadofJT3nnGghwxx oIBx47aPENXHquuXP5xOKrUUATemSzo1nKOA9bnpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJX8QqmfK8oiDgRdAmZs8pWXCh2UwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJjZDI2MTZhLTk4NDUtNDZjNC04MDAzLWIwNTI2NTU3YWU3ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUyEuAwDQYJKoZIhvcNAQELBQADggEBABZ8yRoqHhRDr9JEuvnKeOUIFWdP vwKmCvomb6JpvPasAOi7eKghHRXF2Fj8FDDqC5+1arek+L42VsiWqME1Z56p+fcd k9DSjAxGtNFiXDaUoPrufjYptDkd2HZkjps/3kksM4c1rDqQVq7Y+/QJ68oJtJM2 ijhmY1hg/Q/ta5apeQIo2OrOpS5MsQmf+Ra258gJSSGPbGe6rj0qXHZgXDOe9Iv8 WFtzGrJZYyaclEa27nxAMQV0UOGGwjpuIBufDyefqMLixZ5lz0BgqWSKkP/nQfNW Yec0WhPi0y0PlfnnpkyK7ZmnAE1ZfUV2HCd+c1RR89GQiRZewACW3PtTdd4= -----END CERTIFICATE-----Generated at Sat Jun 14 07:03:07 2025 by rpki-client