$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e7e692c9-6c34-41dd-bc7f-31245be62ee6.roa File: e7e692c9-6c34-41dd-bc7f-31245be62ee6.roa (raw, json) Hash identifier: Tt+8quUwjrxbM0/JW0aO6qQ/Hez4JIrUF4cN11FJAhA= Subject key identifier: 64:3F:27:F0:8B:9E:C9:C5:05:DA:24:6D:E3:EF:0C:9A:A0:72:65:26 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3DABE4016AA7DED14EE7520106E1D766375014CF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e7e692c9-6c34-41dd-bc7f-31245be62ee6.roa Signing time: Sat 12 Apr 2025 00:41:17 +0000 ROA not before: Sat 12 Apr 2025 00:41:17 +0000 ROA not after: Sat 17 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 50.19.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:ab:e4:01:6a:a7:de:d1:4e:e7:52:01:06:e1:d7:66:37:50:14:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 12 00:41:17 2025 GMT Not After : May 17 23:59:59 2025 GMT Subject: serialNumber=b65377319021443a5568ef2b30c7d643a3a625e1b0674b0e5a335876ebd114ca, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d3:38:90:e9:1a:b7:f3:85:31:95:f2:ba:b6: 68:a1:d4:5d:19:ab:14:a3:69:92:b9:67:08:1a:dc: fe:b8:db:b1:5a:b8:ea:ad:5c:5c:d0:d7:5c:05:69: 1a:de:7c:17:c5:30:35:a3:3f:c1:26:cb:3c:1f:cc: ce:06:10:62:ac:54:ba:3b:91:4f:e6:a6:73:f8:73: 3a:86:03:0d:37:af:32:c4:27:e6:c7:1e:3e:80:9e: 38:8c:bd:3e:47:2d:a7:9d:d9:73:2d:86:88:0f:5d: a2:1d:6f:3d:69:0e:d9:80:30:66:bd:98:a5:61:6a: 83:54:60:1b:fa:a8:a0:2d:f4:b7:48:5f:42:b0:dc: cf:79:e9:f1:9e:9d:89:9a:53:43:fc:b8:6f:7d:fd: 10:f3:fc:fb:42:d0:7c:87:17:a8:5a:6b:4d:40:5a: b3:a0:5b:5e:7e:c8:a8:14:95:3e:aa:e4:ef:ce:bc: 2c:01:91:ba:74:c2:85:9c:41:dd:e4:c1:2b:28:b6: 62:59:88:ec:77:54:9b:17:58:a3:d6:d7:7a:98:51: a3:24:2b:b3:cf:3b:51:b4:42:1f:9d:02:10:7e:46: 2d:d5:67:94:5b:cc:c1:fd:a2:d6:e3:be:0e:b8:00: db:c5:b5:90:3c:86:4e:03:d2:cd:e8:38:9e:2b:97: 3a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:3F:27:F0:8B:9E:C9:C5:05:DA:24:6D:E3:EF:0C:9A:A0:72:65:26 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e7e692c9-6c34-41dd-bc7f-31245be62ee6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.19.128.0/17 Signature Algorithm: sha256WithRSAEncryption d2:22:56:61:ea:3d:33:85:66:ac:13:32:a8:cd:f2:6e:c3:dc: a5:af:bf:d7:04:ab:15:65:dc:b0:3b:23:ac:7c:72:90:1f:2f: 95:1c:b6:f5:2a:29:b1:41:99:dc:27:e2:08:99:0d:21:ba:bf: a5:9a:e9:fb:52:c6:06:43:cd:28:4b:85:84:25:17:5d:13:45: 2f:21:31:18:4b:8b:ed:f3:42:9d:d7:80:06:15:ed:80:f6:02: d6:3c:f7:ff:5b:69:3c:2f:4d:7d:74:5a:27:f0:2e:92:59:50: d6:62:e3:3c:a8:3d:24:30:91:0b:12:21:89:ec:27:bb:97:2b: ec:81:81:f2:a6:11:18:01:ad:1f:2f:8a:a7:f3:46:1d:75:87: 9f:46:e3:93:c0:a0:18:57:15:55:02:3a:6f:bb:fb:66:3c:66: ed:86:85:d8:a4:8e:ff:ae:23:f4:ac:1a:c4:02:2b:f6:4d:87: 2c:ca:fe:30:de:54:9c:26:1c:ae:44:f0:9e:4a:36:92:02:b2: 24:bd:02:81:a6:f7:3e:3e:8a:df:fe:6e:4b:fd:c3:50:c6:6e: 80:7c:0a:f5:e3:7f:e8:05:47:59:91:90:7b:15:a3:36:be:80: e8:dc:d6:57:68:e0:d4:d7:2a:9e:f7:25:e5:32:93:02:47:fe: d4:f7:14:16 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPavkAWqn3tFO51IBBuHXZjdQFM8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDEyMDA0MTE3WhcNMjUwNTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BiNjUzNzczMTkwMjE0NDNhNTU2OGVmMmIzMGM3ZDY0M2Ez YTYyNWUxYjA2NzRiMGU1YTMzNTg3NmViZDExNGNhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDU0ziQ6Rq384UxlfK6tmih1F0ZqxSjaZK5Zwga3P6427Fa uOqtXFzQ11wFaRrefBfFMDWjP8EmyzwfzM4GEGKsVLo7kU/mpnP4czqGAw03rzLE J+bHHj6AnjiMvT5HLaed2XMthogPXaIdbz1pDtmAMGa9mKVhaoNUYBv6qKAt9LdI X0Kw3M956fGenYmaU0P8uG99/RDz/PtC0HyHF6haa01AWrOgW15+yKgUlT6q5O/O vCwBkbp0woWcQd3kwSsotmJZiOx3VJsXWKPW13qYUaMkK7PPO1G0Qh+dAhB+Ri3V Z5RbzMH9otbjvg64ANvFtZA8hk4D0s3oOJ4rlzqHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZD8n8IueycUF2iRt4+8MmqByZSYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2U3ZTY5MmM5LTZjMzQtNDFkZC1iYzdmLTMxMjQ1YmU2MmVlNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcyE4AwDQYJKoZIhvcNAQELBQADggEBANIiVmHqPTOFZqwTMqjN8m7D3KWv v9cEqxVl3LA7I6x8cpAfL5UctvUqKbFBmdwn4giZDSG6v6Wa6ftSxgZDzShLhYQl F10TRS8hMRhLi+3zQp3XgAYV7YD2AtY89/9baTwvTX10WifwLpJZUNZi4zyoPSQw kQsSIYnsJ7uXK+yBgfKmERgBrR8viqfzRh11h59G45PAoBhXFVUCOm+7+2Y8Zu2G hdikjv+uI/SsGsQCK/ZNhyzK/jDeVJwmHK5E8J5KNpICsiS9AoGm9z4+it/+bkv9 w1DGboB8CvXjf+gFR1mRkHsVoza+gOjc1ldo4NTXKp73JeUykwJH/tT3FBY= -----END CERTIFICATE-----Generated at Sat Apr 26 14:53:24 2025 by rpki-client