$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7d2d33f-dd78-4e1e-af2a-d79c01c8402b.roa File: b7d2d33f-dd78-4e1e-af2a-d79c01c8402b.roa (raw, json) Hash identifier: xahi726Q4TbLFeHo4q5mJhEhsnDM21w1s0j5koksfDA= Subject key identifier: 63:4B:D5:2C:A5:A4:B4:8A:7D:96:67:9B:FE:1D:10:3A:21:D8:28:4D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4C845C8EC50E4E5240BDD29B859A208D6850F9D8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7d2d33f-dd78-4e1e-af2a-d79c01c8402b.roa Signing time: Mon 02 Jun 2025 15:41:50 +0000 ROA not before: Mon 02 Jun 2025 15:41:50 +0000 ROA not after: Mon 07 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 50.18.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:84:5c:8e:c5:0e:4e:52:40:bd:d2:9b:85:9a:20:8d:68:50:f9:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 2 15:41:50 2025 GMT Not After : Jul 7 23:59:59 2025 GMT Subject: serialNumber=6ef3f482e9bb692b7c55af0e74d3b4f7ba5a0ec54b3678957bedb04407e89845, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d5:c4:97:bd:8a:e9:d5:09:28:a8:8e:f3:8a: e8:6f:b6:8d:4c:a6:41:2e:a9:22:fc:e8:69:81:1b: b8:9e:be:e4:d8:ad:f1:7e:ab:67:7f:8c:c8:ed:f0: e2:a0:3d:0f:c5:9b:92:c9:22:d4:ea:b4:c4:fb:b7: c3:b1:82:a0:32:b7:ed:9e:8f:72:76:67:ea:9d:57: d2:be:2c:25:cd:3b:96:d9:3a:5c:b8:f8:f2:a6:34: 86:9d:f4:19:6b:14:03:ac:48:50:8e:11:83:0d:5a: de:7a:49:78:9f:70:45:27:22:57:ee:10:32:c9:dd: d0:aa:fd:e2:35:6c:67:8b:b9:f8:7e:11:9d:0d:bb: e4:73:1d:84:19:67:1a:d3:08:16:e8:86:a6:9d:af: d6:cb:f0:a7:e6:97:20:a8:02:7f:1f:f1:04:d0:db: ba:33:9d:5a:4d:83:8d:83:62:d2:9f:24:3a:e5:54: 3e:0f:f5:68:67:3b:5a:44:50:29:0b:2c:3e:54:98: 20:22:a4:66:47:df:fc:d2:c5:39:33:13:89:74:9e: 49:03:29:da:4f:8a:6f:11:2a:16:df:6b:1a:b8:db: a2:d8:cb:40:36:40:ac:9d:df:05:eb:16:89:6e:99: 4e:8d:3d:6c:9d:64:4f:67:a4:45:65:e0:ce:6e:5f: dd:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:4B:D5:2C:A5:A4:B4:8A:7D:96:67:9B:FE:1D:10:3A:21:D8:28:4D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7d2d33f-dd78-4e1e-af2a-d79c01c8402b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.18.32.0/21 Signature Algorithm: sha256WithRSAEncryption c1:ec:5f:0c:32:b4:9c:d8:8b:66:a3:eb:c3:32:05:0f:94:d9: f9:c4:e6:20:c8:de:0e:f1:37:8b:63:83:2b:a4:5f:72:dd:2f: 0e:83:3d:d8:9e:d4:d3:90:3f:a6:7a:d7:f2:d4:ed:40:c7:fe: 76:99:35:d5:4a:f6:77:aa:d9:25:c7:af:5b:2c:72:6d:93:bf: 29:60:9d:60:97:7f:50:60:18:d4:55:97:77:bb:9e:b5:b6:0b: 3e:ab:ae:6a:b5:ec:be:6c:b3:15:45:2d:99:b1:c3:f2:77:21: 86:4f:2e:db:1d:b3:58:b4:0d:eb:31:91:1d:2a:39:d7:7f:14: 09:93:5c:17:aa:a6:86:e8:2f:f9:d5:aa:7e:25:80:ee:fd:08: ab:c1:55:f9:d4:10:09:5a:c5:7e:d0:96:0f:41:14:3f:c3:fc: 4d:12:af:0e:06:3d:c2:64:1f:a0:78:d4:ac:14:d0:2b:6e:51: f5:9d:14:c6:47:1c:ee:76:22:25:29:0a:33:90:bb:87:05:15: e2:84:93:57:0b:69:e4:26:5b:d5:6a:07:f0:f4:aa:21:b3:0f: 65:6a:69:09:81:e5:87:18:7f:56:4d:02:5b:6f:95:c6:8d:ac: ad:80:21:50:5e:01:67:8f:2b:73:ad:9a:4a:09:28:05:10:f3: 13:f1:c2:8c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTIRcjsUOTlJAvdKbhZogjWhQ+dgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjAyMTU0MTUwWhcNMjUwNzA3MjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZWYzZjQ4MmU5YmI2OTJiN2M1NWFmMGU3NGQzYjRmN2Jh NWEwZWM1NGIzNjc4OTU3YmVkYjA0NDA3ZTg5ODQ1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDE1cSXvYrp1QkoqI7ziuhvto1MpkEuqSL86GmBG7ievuTY rfF+q2d/jMjt8OKgPQ/Fm5LJItTqtMT7t8OxgqAyt+2ej3J2Z+qdV9K+LCXNO5bZ Oly4+PKmNIad9BlrFAOsSFCOEYMNWt56SXifcEUnIlfuEDLJ3dCq/eI1bGeLufh+ EZ0Nu+RzHYQZZxrTCBbohqadr9bL8KfmlyCoAn8f8QTQ27oznVpNg42DYtKfJDrl VD4P9WhnO1pEUCkLLD5UmCAipGZH3/zSxTkzE4l0nkkDKdpPim8RKhbfaxq426LY y0A2QKyd3wXrFolumU6NPWydZE9npEVl4M5uX92TAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUY0vVLKWktIp9lmeb/h0QOiHYKE0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I3ZDJkMzNmLWRkNzgtNGUxZS1hZjJhLWQ3OWMwMWM4NDAyYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMyEiAwDQYJKoZIhvcNAQELBQADggEBAMHsXwwytJzYi2aj68MyBQ+U2fnE 5iDI3g7xN4tjgyukX3LdLw6DPdie1NOQP6Z61/LU7UDH/naZNdVK9neq2SXHr1ss cm2TvylgnWCXf1BgGNRVl3e7nrW2Cz6rrmq17L5ssxVFLZmxw/J3IYZPLtsds1i0 DesxkR0qOdd/FAmTXBeqpoboL/nVqn4lgO79CKvBVfnUEAlaxX7Qlg9BFD/D/E0S rw4GPcJkH6B41KwU0CtuUfWdFMZHHO52IiUpCjOQu4cFFeKEk1cLaeQmW9VqB/D0 qiGzD2VqaQmB5YcYf1ZNAltvlcaNrK2AIVBeAWePK3OtmkoJKAUQ8xPxwow= -----END CERTIFICATE-----Generated at Sat Jun 14 06:04:16 2025 by rpki-client