$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/60e3b713-eebc-44fa-b225-13a35ad6aa74.roa File: 60e3b713-eebc-44fa-b225-13a35ad6aa74.roa (raw, json) Hash identifier: zkDdpZ7+Gso2d+hPbZqRNXye0ubzoYJ2+lDHGbbUsLs= Subject key identifier: 6D:54:E1:DF:5B:2D:08:C5:EC:04:C5:5E:DF:F1:B7:AF:D7:E9:EA:A9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 072BBB8310EDDB04888676D6E96ACD7423F38ABE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/60e3b713-eebc-44fa-b225-13a35ad6aa74.roa Signing time: Sat 12 Apr 2025 00:31:49 +0000 ROA not before: Sat 12 Apr 2025 00:31:49 +0000 ROA not after: Sat 17 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 50.18.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:2b:bb:83:10:ed:db:04:88:86:76:d6:e9:6a:cd:74:23:f3:8a:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 12 00:31:49 2025 GMT Not After : May 17 23:59:59 2025 GMT Subject: serialNumber=db379b0c600fa2a983a0a2c6912d24530ca6661abba5e0360ab32fb82903f63d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a8:55:db:e1:8f:7f:1c:ca:49:d4:26:9e:85: c6:6e:93:3f:7b:39:7d:82:75:57:fb:65:15:f5:3e: 39:0c:34:e2:2e:ae:f4:d9:ae:5b:7e:0b:4c:2c:53: 1e:18:cb:69:a1:49:98:2e:39:88:ea:56:32:a2:24: 5a:92:2f:7c:2b:32:6e:81:67:9a:b3:24:5d:c2:9c: 13:74:ba:be:fe:ab:d8:6d:f4:09:0f:4d:1f:a3:02: 74:c0:0a:93:cb:96:6a:fb:c4:96:72:f6:0e:d0:56: a5:e4:c8:cf:88:93:ce:c2:23:ba:e1:e1:de:35:6f: 20:a6:fa:1f:e3:c8:f6:9f:15:d6:b4:7e:10:7c:ab: c9:df:13:7f:69:cf:46:cd:55:3a:bc:ae:1a:24:06: 30:04:17:00:b9:51:0b:21:4f:b4:17:ce:ee:2b:20: 87:01:f9:a0:dc:56:1b:17:84:0c:53:bf:9c:0a:53: 26:5c:96:35:1b:a3:d0:3e:b1:44:bf:2a:b5:eb:12: 66:cf:6d:68:74:f6:40:48:c4:84:8c:c1:b6:a8:a3: 5c:ea:f0:ff:72:72:ee:00:3b:90:6d:fe:c9:4e:a0: 27:20:49:73:cc:a6:62:47:78:6d:d5:c7:f3:a9:3f: bf:52:bb:3e:22:f5:91:80:75:2b:20:61:5b:76:0f: 38:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:54:E1:DF:5B:2D:08:C5:EC:04:C5:5E:DF:F1:B7:AF:D7:E9:EA:A9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/60e3b713-eebc-44fa-b225-13a35ad6aa74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.18.128.0/18 Signature Algorithm: sha256WithRSAEncryption d3:e4:3b:61:27:90:38:9c:c4:63:a6:ed:68:06:95:fa:24:2e: b9:a3:8c:67:2c:d9:e2:38:de:cd:08:1a:3c:2a:78:fa:bd:46: de:c5:6c:7b:42:8f:76:62:10:3e:df:6c:70:dc:01:17:1b:22: 7b:bc:89:98:fa:f8:8b:a2:78:e6:40:84:43:1d:7e:7f:f9:7b: 6e:f8:57:8a:83:76:00:06:dc:fb:f5:bf:d9:23:3a:3f:3b:da: 89:fe:2c:26:4b:10:c3:0a:77:84:9b:79:a2:46:1e:e3:bd:4c: f6:47:fb:94:34:4d:7e:50:b2:a7:68:6f:62:c1:13:74:12:8e: aa:40:3b:9f:94:c3:d7:4e:91:a9:a6:32:58:0b:b5:cb:99:88: 2c:fe:1d:c9:cc:c8:c6:79:fa:a5:1a:6e:95:80:47:12:35:43: fd:3b:3d:59:5c:79:fe:af:2b:e5:fc:76:f0:a9:2f:38:64:0c: 1a:29:77:4a:45:26:65:bf:6e:13:3a:d1:96:40:37:10:bd:dd: d9:92:a5:6b:ac:4f:a1:1e:75:4c:ad:b5:3c:a3:18:df:04:ae: 53:c7:32:e7:17:a3:2a:3c:9d:77:86:b5:9f:1d:f1:c0:cd:d4: 74:ef:3b:97:a1:02:56:a8:33:25:20:42:56:b0:1a:eb:48:ab: 09:d2:5d:46 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUByu7gxDt2wSIhnbW6WrNdCPzir4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDEyMDAzMTQ5WhcNMjUwNTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BkYjM3OWIwYzYwMGZhMmE5ODNhMGEyYzY5MTJkMjQ1MzBj YTY2NjFhYmJhNWUwMzYwYWIzMmZiODI5MDNmNjNkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqqFXb4Y9/HMpJ1CaehcZukz97OX2CdVf7ZRX1PjkMNOIu rvTZrlt+C0wsUx4Yy2mhSZguOYjqVjKiJFqSL3wrMm6BZ5qzJF3CnBN0ur7+q9ht 9AkPTR+jAnTACpPLlmr7xJZy9g7QVqXkyM+Ik87CI7rh4d41byCm+h/jyPafFda0 fhB8q8nfE39pz0bNVTq8rhokBjAEFwC5UQshT7QXzu4rIIcB+aDcVhsXhAxTv5wK UyZcljUbo9A+sUS/KrXrEmbPbWh09kBIxISMwbaoo1zq8P9ycu4AO5Bt/slOoCcg SXPMpmJHeG3Vx/OpP79Suz4i9ZGAdSsgYVt2Dzh7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUbVTh31stCMXsBMVe3/G3r9fp6qkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzYwZTNiNzEzLWVlYmMtNDRmYS1iMjI1LTEzYTM1YWQ2YWE3NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYyEoAwDQYJKoZIhvcNAQELBQADggEBANPkO2EnkDicxGOm7WgGlfokLrmj jGcs2eI43s0IGjwqePq9Rt7FbHtCj3ZiED7fbHDcARcbInu8iZj6+IuieOZAhEMd fn/5e274V4qDdgAG3Pv1v9kjOj872on+LCZLEMMKd4SbeaJGHuO9TPZH+5Q0TX5Q sqdob2LBE3QSjqpAO5+Uw9dOkammMlgLtcuZiCz+HcnMyMZ5+qUabpWARxI1Q/07 PVlcef6vK+X8dvCpLzhkDBopd0pFJmW/bhM60ZZANxC93dmSpWusT6EedUyttTyj GN8ErlPHMucXoyo8nXeGtZ8d8cDN1HTvO5ehAlaoMyUgQlawGutIqwnSXUY= -----END CERTIFICATE-----Generated at Sat Apr 26 16:46:06 2025 by rpki-client