$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/86928c79-5b49-45a0-867b-64a68ed13bd7.roa File: 86928c79-5b49-45a0-867b-64a68ed13bd7.roa (raw, json) Hash identifier: WrpN/KVdFhFXuPVCzlUIY51GlC6VMrDbH8eXBDST5XU= Subject key identifier: 8E:E8:4B:FC:41:8D:50:8D:61:40:B8:F9:37:D3:78:58:00:E8:46:36 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 18F46DC3EC67DD2EA4329E9A9437546B7EC4FEC5 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/86928c79-5b49-45a0-867b-64a68ed13bd7.roa Signing time: Mon 02 Jun 2025 15:40:13 +0000 ROA not before: Mon 02 Jun 2025 15:40:13 +0000 ROA not after: Mon 07 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 50.19.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:f4:6d:c3:ec:67:dd:2e:a4:32:9e:9a:94:37:54:6b:7e:c4:fe:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 2 15:40:13 2025 GMT Not After : Jul 7 23:59:59 2025 GMT Subject: serialNumber=6cefa768f5ef4d73a1ddee3258498e995bddfd97d284d827d0d00c297d503f18, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:10:c7:ae:3b:69:35:7e:02:47:fe:d0:d1:75: c3:87:a0:84:ea:79:45:10:ad:45:e1:8f:69:46:00: 09:49:32:5f:ea:b5:57:e8:c7:a0:5d:14:73:b9:2e: eb:77:d9:36:73:a7:b8:9d:3c:83:1d:22:57:17:cb: 95:85:09:a4:af:a3:e0:1f:ab:66:1f:65:75:28:ac: 64:19:d5:64:46:34:82:c6:7d:e3:1b:cf:90:cd:45: e3:db:76:35:d0:50:86:a6:9a:db:9b:98:ba:5a:f2: 81:b9:5d:77:0a:5b:38:68:94:90:e2:aa:9c:1a:df: c3:a6:4b:7c:42:ac:79:21:75:52:83:65:2b:d6:75: 84:73:30:f2:54:79:80:bf:a1:89:a8:01:f9:57:82: 52:8e:eb:75:6d:e4:73:6d:d2:05:37:f0:2f:bc:f4: bd:9b:31:ac:cd:b8:db:6b:cc:b6:7b:cd:b9:7b:5b: 39:12:fc:a1:57:76:05:95:ab:e1:e8:9d:dc:95:28: 16:e2:37:c7:a3:fb:52:a3:33:12:08:84:f0:4c:d5: fb:c4:bc:cd:df:be:bf:36:65:24:37:a4:98:cf:e9: 96:57:7a:74:f4:0b:38:cc:6e:a6:01:cf:14:0e:60: 23:65:c2:42:68:ec:69:97:9e:8b:73:a2:c4:88:df: 09:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:E8:4B:FC:41:8D:50:8D:61:40:B8:F9:37:D3:78:58:00:E8:46:36 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/86928c79-5b49-45a0-867b-64a68ed13bd7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.19.208.0/20 Signature Algorithm: sha256WithRSAEncryption 4d:2e:90:bf:f9:9a:90:6c:dd:ad:38:d5:0c:62:84:45:00:df: 40:49:c4:a5:71:6f:8c:87:31:18:8e:ca:c6:24:37:ef:71:87: ab:f2:15:0e:e7:6a:01:e1:58:12:17:53:31:fa:35:90:9a:9c: 83:a8:cf:5a:dd:43:a9:84:ef:dc:74:59:e1:ef:b4:dc:bd:34: 45:f3:7c:35:93:23:dd:29:33:1e:f1:5c:7d:88:f3:b9:7f:02: 51:5e:7a:1a:0a:0c:1f:d3:21:78:12:9f:87:40:82:15:46:7e: 7c:c8:0c:43:db:63:f3:23:0d:e8:a5:34:55:7b:02:1c:e8:77: 6c:a9:5e:06:ef:b7:48:69:00:18:fb:65:23:72:25:df:42:a7: be:8c:d5:5e:7e:41:0f:fe:3a:60:b1:2f:53:69:ad:46:2e:2c: 6c:09:e1:4a:bc:24:8a:89:33:ac:dd:3b:95:b2:69:ab:27:f6: 88:f7:a1:42:bb:cd:b4:47:0a:af:ad:d5:90:cd:d8:38:b9:24: cc:a1:0b:a9:b2:c8:13:27:12:90:d1:ba:a7:c2:e1:33:4c:6a: 90:ef:e0:4f:c4:1a:89:35:37:a1:8e:0e:af:77:ce:51:61:f6: d3:3e:89:34:78:a4:52:93:7e:15:80:2d:01:92:7e:05:19:ee: 65:be:75:b4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGPRtw+xn3S6kMp6alDdUa37E/sUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjAyMTU0MDEzWhcNMjUwNzA3MjM1OTU5 WjB6MUkwRwYDVQQFE0A2Y2VmYTc2OGY1ZWY0ZDczYTFkZGVlMzI1ODQ5OGU5OTVi ZGRmZDk3ZDI4NGQ4MjdkMGQwMGMyOTdkNTAzZjE4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDZEMeuO2k1fgJH/tDRdcOHoITqeUUQrUXhj2lGAAlJMl/q tVfox6BdFHO5Lut32TZzp7idPIMdIlcXy5WFCaSvo+Afq2YfZXUorGQZ1WRGNILG feMbz5DNRePbdjXQUIammtubmLpa8oG5XXcKWzholJDiqpwa38OmS3xCrHkhdVKD ZSvWdYRzMPJUeYC/oYmoAflXglKO63Vt5HNt0gU38C+89L2bMazNuNtrzLZ7zbl7 WzkS/KFXdgWVq+HondyVKBbiN8ej+1KjMxIIhPBM1fvEvM3fvr82ZSQ3pJjP6ZZX enT0CzjMbqYBzxQOYCNlwkJo7GmXnotzosSI3wlRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUjuhL/EGNUI1hQLj5N9N4WADoRjYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzg2OTI4Yzc5LTViNDktNDVhMC04NjdiLTY0YTY4ZWQxM2JkNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQyE9AwDQYJKoZIhvcNAQELBQADggEBAE0ukL/5mpBs3a041QxihEUA30BJ xKVxb4yHMRiOysYkN+9xh6vyFQ7nagHhWBIXUzH6NZCanIOoz1rdQ6mE79x0WeHv tNy9NEXzfDWTI90pMx7xXH2I87l/AlFeehoKDB/TIXgSn4dAghVGfnzIDEPbY/Mj DeilNFV7Ahzod2ypXgbvt0hpABj7ZSNyJd9Cp76M1V5+QQ/+OmCxL1NprUYuLGwJ 4Uq8JIqJM6zdO5Wyaasn9oj3oUK7zbRHCq+t1ZDN2Di5JMyhC6myyBMnEpDRuqfC 4TNMapDv4E/EGok1N6GODq93zlFh9tM+iTR4pFKTfhWALQGSfgUZ7mW+dbQ= -----END CERTIFICATE-----Generated at Tue Jun 17 18:54:38 2025 by rpki-client