$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e73183cc-2907-425e-bd2b-10fd1986e4bd.roa File: e73183cc-2907-425e-bd2b-10fd1986e4bd.roa (raw, json) Hash identifier: gFVUP6H3cwSSr+fSnbcpL9EVokgmenZFYVdf6pi9kpA= Subject key identifier: 98:73:F2:6F:57:71:4D:07:7C:C2:FC:BA:AE:AE:46:00:08:CA:11:6D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 43CE72B9ACF06D5F023F350B7B58DDFD4A8F4001 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e73183cc-2907-425e-bd2b-10fd1986e4bd.roa Signing time: Tue 22 Jul 2025 15:01:34 +0000 ROA not before: Tue 22 Jul 2025 15:01:34 +0000 ROA not after: Tue 26 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 50.16.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:ce:72:b9:ac:f0:6d:5f:02:3f:35:0b:7b:58:dd:fd:4a:8f:40:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 22 15:01:34 2025 GMT Not After : Aug 26 23:59:59 2025 GMT Subject: serialNumber=a92d11a839eead9e5a710dd136fb4e6f0b6275fb8f418dbdfb46b18a6ed37ed1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:fc:91:2b:69:8b:31:39:63:6b:a5:81:df:83: 7a:2d:f8:8a:1c:dd:34:50:d1:31:fb:8f:2d:86:63: bd:a1:e2:bf:5a:61:23:c2:45:b8:d0:f4:50:20:3b: 76:e4:35:47:35:e8:2d:12:dd:c0:97:d2:1b:db:a7: 48:c6:3b:fb:76:9d:b2:7b:c6:f0:df:2a:e4:c9:0b: 71:ee:e5:cf:b3:0f:06:90:17:21:cd:17:81:f2:23: 74:33:16:f8:bb:da:cd:8d:f0:82:5b:df:22:8c:04: e1:f8:bb:eb:36:68:96:52:6d:47:ce:c2:a0:a1:ee: 2f:ef:d0:67:c2:17:68:1d:a2:dd:7b:74:c6:53:6c: 2e:b6:b4:b2:72:8e:56:7f:55:84:c4:dd:2e:22:49: 73:d2:ca:5d:86:ba:04:31:7f:09:b8:51:b4:3a:d6: 49:90:77:b6:4b:df:9f:39:d7:7d:78:69:4f:df:d4: a1:de:be:67:bc:c0:65:e6:70:ea:6c:80:31:fa:9c: 92:07:43:cd:c0:a4:11:bb:a4:74:95:d9:32:96:1f: e6:8f:36:9a:e0:75:1d:1c:e6:c4:19:45:4a:b9:00: a9:d8:bf:c2:51:d5:47:e3:d5:32:fd:fe:32:07:fa: fb:50:1a:c6:86:bc:63:26:8d:42:1c:3f:ca:0a:29: 73:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:73:F2:6F:57:71:4D:07:7C:C2:FC:BA:AE:AE:46:00:08:CA:11:6D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e73183cc-2907-425e-bd2b-10fd1986e4bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.16.0.0/17 Signature Algorithm: sha256WithRSAEncryption 1f:6f:d2:b4:f9:71:4d:1b:1a:b8:6f:c7:6c:80:33:26:47:ca: 48:f7:8a:b9:08:50:36:1c:a8:b7:27:60:45:03:5a:10:f6:53: ac:ff:e7:78:1e:be:9c:1e:3f:85:0b:bf:8c:f0:13:87:ca:d4: 52:4f:d9:37:00:c5:f5:81:9d:e9:99:72:86:55:f8:51:57:d4: 58:bc:8c:d1:cb:bf:22:bc:1e:34:7a:20:6e:af:73:ae:35:b9: 69:09:69:17:f6:af:0b:fa:75:ea:b5:be:39:cb:ac:54:61:0d: fa:8b:55:9e:77:02:86:b1:cf:d7:87:09:ab:b0:d9:7a:59:09: d9:c4:4c:10:65:37:e6:9a:ca:90:1a:69:b9:9a:c2:2a:56:dd: 9c:31:5f:ac:3e:69:01:a1:be:63:db:09:9c:34:2d:d3:d1:ac: 45:a5:6b:1c:e9:78:da:24:39:16:95:74:25:45:aa:35:3b:b1: dd:29:a5:e4:c7:9d:26:46:4a:4c:4f:7c:e5:dc:08:a5:73:6f: ef:df:9b:fc:6d:7e:96:6a:aa:63:7a:06:66:d2:c1:01:ca:d5: ff:83:40:57:c1:6b:fc:f3:1e:ea:42:af:69:16:d3:23:88:0e: 6b:ba:68:e0:5d:01:00:de:5c:cd:39:d9:0a:1b:05:44:4a:93: 2a:7b:c2:2d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQ85yuazwbV8CPzULe1jd/UqPQAEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzIyMTUwMTM0WhcNMjUwODI2MjM1OTU5 WjB6MUkwRwYDVQQFE0BhOTJkMTFhODM5ZWVhZDllNWE3MTBkZDEzNmZiNGU2ZjBi NjI3NWZiOGY0MThkYmRmYjQ2YjE4YTZlZDM3ZWQxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCI/JEraYsxOWNrpYHfg3ot+Ioc3TRQ0TH7jy2GY72h4r9a YSPCRbjQ9FAgO3bkNUc16C0S3cCX0hvbp0jGO/t2nbJ7xvDfKuTJC3Hu5c+zDwaQ FyHNF4HyI3QzFvi72s2N8IJb3yKMBOH4u+s2aJZSbUfOwqCh7i/v0GfCF2gdot17 dMZTbC62tLJyjlZ/VYTE3S4iSXPSyl2GugQxfwm4UbQ61kmQd7ZL35851314aU/f 1KHevme8wGXmcOpsgDH6nJIHQ83ApBG7pHSV2TKWH+aPNprgdR0c5sQZRUq5AKnY v8JR1Ufj1TL9/jIH+vtQGsaGvGMmjUIcP8oKKXORAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUmHPyb1dxTQd8wvy6rq5GAAjKEW0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2U3MzE4M2NjLTI5MDctNDI1ZS1iZDJiLTEwZmQxOTg2ZTRiZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcyEAAwDQYJKoZIhvcNAQELBQADggEBAB9v0rT5cU0bGrhvx2yAMyZHykj3 irkIUDYcqLcnYEUDWhD2U6z/53gevpweP4ULv4zwE4fK1FJP2TcAxfWBnemZcoZV +FFX1Fi8jNHLvyK8HjR6IG6vc641uWkJaRf2rwv6deq1vjnLrFRhDfqLVZ53Aoax z9eHCauw2XpZCdnETBBlN+aaypAaabmawipW3ZwxX6w+aQGhvmPbCZw0LdPRrEWl axzpeNokORaVdCVFqjU7sd0ppeTHnSZGSkxPfOXcCKVzb+/fm/xtfpZqqmN6BmbS wQHK1f+DQFfBa/zzHupCr2kW0yOIDmu6aOBdAQDeXM052QobBURKkyp7wi0= -----END CERTIFICATE-----Generated at Wed Aug 6 14:19:21 2025 by rpki-client