$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/edabdce6-a3ca-4743-8403-ae737c3b4588.roa File: edabdce6-a3ca-4743-8403-ae737c3b4588.roa (raw, json) Hash identifier: IdRUQGv/x6rgdgwe5X1H3cEj25nXoOaXjBzTnq8Mvqg= Subject key identifier: 87:A2:00:4E:94:DD:C0:D1:80:78:90:B5:CB:89:AD:F7:74:A2:8D:64 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 443E09853FB2288FF05BE4F7F8C43CE41CFB2A8A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/edabdce6-a3ca-4743-8403-ae737c3b4588.roa Signing time: Sat 12 Apr 2025 00:31:06 +0000 ROA not before: Sat 12 Apr 2025 00:31:06 +0000 ROA not after: Sat 17 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 50.17.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:3e:09:85:3f:b2:28:8f:f0:5b:e4:f7:f8:c4:3c:e4:1c:fb:2a:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 12 00:31:06 2025 GMT Not After : May 17 23:59:59 2025 GMT Subject: serialNumber=2ff4861cdfd323d3b9beeb0980c27fefd38adf0276764ecaf96af154dd7fabcc, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d5:18:e1:a5:fd:7a:9d:76:93:6a:fa:90:02: 93:bb:a0:76:66:f9:e8:97:28:c7:1d:d4:70:4f:21: e2:30:b0:ca:c1:1c:4b:07:0f:44:2a:99:3a:dc:43: 34:05:6e:50:4e:5d:0a:d4:86:6b:2e:f8:84:71:38: b8:b6:c7:41:a7:80:e4:2f:79:d4:bb:ed:8e:14:a3: f6:8a:00:07:ea:cf:4b:c7:47:67:49:a0:62:63:53: 40:6e:06:4a:c6:6b:28:72:a6:e5:60:3c:21:8a:18: 14:31:87:15:00:fe:b2:9a:35:85:03:da:93:f6:c0: 63:95:2d:b2:62:d6:ba:ae:6e:90:ce:05:9b:3f:1a: 14:99:fa:44:55:ac:f4:00:ba:a5:b3:26:6a:1f:58: 1a:37:94:67:34:fe:9b:b0:ba:03:57:a6:44:d8:71: 58:9d:ad:d9:34:e3:95:0e:83:ed:92:49:9b:5d:98: 3b:9b:e3:75:9f:cd:8e:25:fc:83:cd:a6:9b:af:cf: 28:83:7d:a5:db:2d:e6:62:49:92:a6:4c:03:65:0e: db:e3:07:1f:23:c1:05:c8:3d:27:f3:87:11:b9:31: a0:36:6b:d7:fd:09:ad:95:94:62:88:08:cd:89:1f: 18:ec:fa:54:a2:42:88:8a:4e:52:00:19:5f:3b:0e: 14:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:A2:00:4E:94:DD:C0:D1:80:78:90:B5:CB:89:AD:F7:74:A2:8D:64 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/edabdce6-a3ca-4743-8403-ae737c3b4588.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.17.160.0/20 Signature Algorithm: sha256WithRSAEncryption 50:7d:ab:6a:6a:f6:5e:ae:c5:90:40:7e:97:84:ff:e5:b7:af: 11:ce:bb:86:6d:cd:3f:ba:d5:b7:2e:e8:aa:30:03:bc:44:a4: 1e:2d:bf:14:16:f3:e5:fc:6a:70:d6:dc:12:23:62:5e:d4:47: 1e:d8:c0:04:90:59:6c:f2:a8:51:4b:c7:6a:83:da:d9:68:53: c6:d1:5c:0d:c3:7c:c2:09:6b:f8:3b:31:b9:ff:81:a1:ff:0c: 86:1b:19:a1:71:0b:38:a8:8e:a4:64:c4:46:fe:23:86:5b:4e: 2e:90:85:75:17:06:15:d4:ed:3f:d4:b4:4f:9b:f1:29:43:fe: 7d:0b:7e:ff:84:e6:1b:4a:3c:5e:be:30:8d:d4:93:4f:4d:39: 42:f9:91:6f:e6:47:ea:eb:a0:d1:7f:7f:c1:b9:5b:e5:bb:5e: ce:3a:16:ad:d1:e6:75:8a:41:c6:b1:1a:a7:7d:aa:2a:4b:06: 8c:15:b1:01:d2:53:7e:02:75:b0:26:ff:5d:7f:d4:0b:f1:99: f5:68:8b:a1:7f:2b:dd:ed:65:ba:b9:7a:28:f7:0e:ba:c3:64: 86:c2:c7:d7:64:dd:cc:87:fc:64:1e:6e:30:83:49:8a:cc:7b: 35:94:bf:a9:66:c4:bc:47:5c:34:ea:85:cb:c3:6d:02:cf:72: 42:2a:9a:95 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURD4JhT+yKI/wW+T3+MQ85Bz7KoowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDEyMDAzMTA2WhcNMjUwNTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0AyZmY0ODYxY2RmZDMyM2QzYjliZWViMDk4MGMyN2ZlZmQz OGFkZjAyNzY3NjRlY2FmOTZhZjE1NGRkN2ZhYmNjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDY1Rjhpf16nXaTavqQApO7oHZm+eiXKMcd1HBPIeIwsMrB HEsHD0QqmTrcQzQFblBOXQrUhmsu+IRxOLi2x0GngOQvedS77Y4Uo/aKAAfqz0vH R2dJoGJjU0BuBkrGayhypuVgPCGKGBQxhxUA/rKaNYUD2pP2wGOVLbJi1rqubpDO BZs/GhSZ+kRVrPQAuqWzJmofWBo3lGc0/puwugNXpkTYcVidrdk045UOg+2SSZtd mDub43WfzY4l/IPNppuvzyiDfaXbLeZiSZKmTANlDtvjBx8jwQXIPSfzhxG5MaA2 a9f9Ca2VlGKICM2JHxjs+lSiQoiKTlIAGV87DhQ5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUh6IATpTdwNGAeJC1y4mt93SijWQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2VkYWJkY2U2LWEzY2EtNDc0My04NDAzLWFlNzM3YzNiNDU4OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQyEaAwDQYJKoZIhvcNAQELBQADggEBAFB9q2pq9l6uxZBAfpeE/+W3rxHO u4ZtzT+61bcu6KowA7xEpB4tvxQW8+X8anDW3BIjYl7URx7YwASQWWzyqFFLx2qD 2tloU8bRXA3DfMIJa/g7Mbn/gaH/DIYbGaFxCziojqRkxEb+I4ZbTi6QhXUXBhXU 7T/UtE+b8SlD/n0Lfv+E5htKPF6+MI3Uk09NOUL5kW/mR+rroNF/f8G5W+W7Xs46 Fq3R5nWKQcaxGqd9qipLBowVsQHSU34CdbAm/11/1AvxmfVoi6F/K93tZbq5eij3 DrrDZIbCx9dk3cyH/GQebjCDSYrMezWUv6lmxLxHXDTqhcvDbQLPckIqmpU= -----END CERTIFICATE-----Generated at Sat Apr 26 14:56:50 2025 by rpki-client