$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ef197d5-dbf9-48d6-bb5f-f07aedb3be08.roa File: 9ef197d5-dbf9-48d6-bb5f-f07aedb3be08.roa (raw, json) Hash identifier: G70/2tTBlWqc1ybbEo8/3TYWmuC2bC378srcLrPayfE= Subject key identifier: 43:FE:1D:3D:F1:C8:85:8C:32:5C:C9:D7:16:75:F9:63:3D:34:AD:78 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5F8638BC429669294D447D34FD737EE0EAD87B78 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ef197d5-dbf9-48d6-bb5f-f07aedb3be08.roa Signing time: Mon 02 Jun 2025 15:51:00 +0000 ROA not before: Mon 02 Jun 2025 15:51:00 +0000 ROA not after: Mon 07 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 50.17.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:86:38:bc:42:96:69:29:4d:44:7d:34:fd:73:7e:e0:ea:d8:7b:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 2 15:51:00 2025 GMT Not After : Jul 7 23:59:59 2025 GMT Subject: serialNumber=5de3b7d0fdfd5efe65744c3c024d55d3af69ffa497ffd03204f1ded28be288ea, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6f:14:80:19:fd:bf:8c:55:5e:d1:1c:09:4c: 29:e9:77:5f:c2:bd:76:a6:a7:5c:cc:75:a6:7a:3a: 25:a8:0a:84:ba:96:de:58:ef:51:3b:ec:0c:91:b1: a4:3c:15:d7:43:bf:bd:b9:c0:c2:89:6c:d1:9a:0a: a7:0a:06:48:48:77:95:6a:ba:5d:d6:ab:6c:9d:76: 48:e7:01:37:58:ec:37:bf:ec:b7:46:17:94:56:22: 08:19:11:75:02:a9:dd:f8:57:d3:fe:4a:ce:df:6b: c3:7c:e9:96:2e:3c:27:a9:6d:1c:03:e1:95:36:85: fe:b1:47:c3:26:02:4a:cb:73:4f:4c:e3:2a:54:07: ef:f7:08:95:1d:64:93:77:26:fb:22:c3:ec:bd:ab: 05:1d:34:77:27:11:96:88:ab:07:1e:f9:90:9a:93: d9:89:43:48:19:89:13:fa:bd:84:45:a8:8f:9d:55: 90:d5:ae:36:ec:ec:9e:5e:51:52:0d:2a:06:22:c4: ad:eb:4f:53:f3:02:05:0c:72:fd:2d:7c:85:a5:7f: 2d:d6:38:a8:f0:37:3b:98:a0:80:49:45:c4:74:3d: ca:88:f0:69:9e:ec:9b:7d:97:cc:c2:65:45:55:0c: ca:4c:3a:5e:68:ba:b5:f3:13:65:ff:cd:db:52:4c: ed:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:FE:1D:3D:F1:C8:85:8C:32:5C:C9:D7:16:75:F9:63:3D:34:AD:78 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ef197d5-dbf9-48d6-bb5f-f07aedb3be08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.17.128.0/19 Signature Algorithm: sha256WithRSAEncryption 28:03:ce:ad:cb:30:6d:ef:37:b1:e2:1e:58:f5:c0:97:34:3a: 0b:7b:f8:67:8f:92:d0:79:26:00:53:51:7f:f3:79:4c:1f:04: 6c:9e:ce:4d:db:77:b5:d6:50:2d:7b:27:c3:93:c7:45:a5:03: 14:5a:08:c9:85:e5:05:b3:e9:19:0d:4d:78:92:d6:4f:76:da: 11:41:00:dc:d7:36:0e:4e:c7:7b:57:96:e3:6d:cc:98:13:17: f7:21:75:dd:89:51:3e:75:76:62:d1:fe:95:f6:f7:97:fb:5a: 92:bc:f1:39:f8:72:ef:0c:72:d2:34:45:3b:6b:aa:8e:d2:94: fe:41:71:91:25:36:cc:ad:f6:9f:ce:be:9f:e7:7e:aa:51:a6: 8e:ef:08:80:d5:54:3a:c6:77:6c:10:34:d4:e9:63:2a:cb:5d: 94:64:87:bd:3d:53:98:1e:ed:77:ef:b7:ba:32:16:f5:c8:dd: 0b:55:f3:af:84:26:99:d3:e1:74:e0:0e:64:43:d4:76:7a:9f: 63:ba:b3:78:fc:f9:2f:d3:bb:13:35:d1:ae:a2:66:d1:d8:58: 48:03:59:12:d0:13:c2:90:94:da:ee:b2:6f:e7:3e:a9:59:f9: 51:95:7d:94:b4:d4:8d:67:9a:63:36:e3:42:49:03:7d:c9:68: c1:0b:48:0e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUX4Y4vEKWaSlNRH00/XN+4OrYe3gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjAyMTU1MTAwWhcNMjUwNzA3MjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZGUzYjdkMGZkZmQ1ZWZlNjU3NDRjM2MwMjRkNTVkM2Fm NjlmZmE0OTdmZmQwMzIwNGYxZGVkMjhiZTI4OGVhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCsbxSAGf2/jFVe0RwJTCnpd1/CvXamp1zMdaZ6OiWoCoS6 lt5Y71E77AyRsaQ8FddDv725wMKJbNGaCqcKBkhId5Vqul3Wq2yddkjnATdY7De/ 7LdGF5RWIggZEXUCqd34V9P+Ss7fa8N86ZYuPCepbRwD4ZU2hf6xR8MmAkrLc09M 4ypUB+/3CJUdZJN3Jvsiw+y9qwUdNHcnEZaIqwce+ZCak9mJQ0gZiRP6vYRFqI+d VZDVrjbs7J5eUVINKgYixK3rT1PzAgUMcv0tfIWlfy3WOKjwNzuYoIBJRcR0PcqI 8Gme7Jt9l8zCZUVVDMpMOl5ourXzE2X/zdtSTO0lAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUQ/4dPfHIhYwyXMnXFnX5Yz00rXgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzllZjE5N2Q1LWRiZjktNDhkNi1iYjVmLWYwN2FlZGIzYmUwOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUyEYAwDQYJKoZIhvcNAQELBQADggEBACgDzq3LMG3vN7HiHlj1wJc0Ogt7 +GePktB5JgBTUX/zeUwfBGyezk3bd7XWUC17J8OTx0WlAxRaCMmF5QWz6RkNTXiS 1k922hFBANzXNg5Ox3tXluNtzJgTF/chdd2JUT51dmLR/pX295f7WpK88Tn4cu8M ctI0RTtrqo7SlP5BcZElNsyt9p/Ovp/nfqpRpo7vCIDVVDrGd2wQNNTpYyrLXZRk h709U5ge7Xfvt7oyFvXI3QtV86+EJpnT4XTgDmRD1HZ6n2O6s3j8+S/TuxM10a6i ZtHYWEgDWRLQE8KQlNrusm/nPqlZ+VGVfZS01I1nmmM240JJA33JaMELSA4= -----END CERTIFICATE-----Generated at Sun Jun 15 08:59:16 2025 by rpki-client