$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/02fe2df1-37cf-467a-8eca-4f9d7087dd81.roa File: 02fe2df1-37cf-467a-8eca-4f9d7087dd81.roa (raw, json) Hash identifier: RvZ90CzV86GzKQsRDo4D4g1IKv4sVGTwVp+f6mOmw0g= Subject key identifier: AB:63:7F:E3:8B:12:02:51:C6:26:DE:35:48:51:76:FA:81:FC:3F:2B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 20B39DDE55521FD33F4F65983B0EF12E75D13058 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/02fe2df1-37cf-467a-8eca-4f9d7087dd81.roa Signing time: Tue 22 Jul 2025 00:40:17 +0000 ROA not before: Tue 22 Jul 2025 00:40:17 +0000 ROA not after: Tue 26 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 50.18.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:b3:9d:de:55:52:1f:d3:3f:4f:65:98:3b:0e:f1:2e:75:d1:30:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 22 00:40:17 2025 GMT Not After : Aug 26 23:59:59 2025 GMT Subject: serialNumber=1464490c138f49f0b75747a951e66e78b0daf2887ac08a6671764e5b088f7f88, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:3c:75:3f:bb:7c:b6:24:b1:f4:13:cb:59:76: 4d:aa:7f:55:0a:e4:5c:bc:63:fb:ae:a7:20:cd:c5: ef:f4:f1:26:3e:cc:8f:5e:7b:dc:ac:c3:5a:57:72: 05:de:10:8b:95:10:3c:35:94:74:2a:13:85:7c:7d: 4d:54:94:1f:75:19:76:d4:1d:ef:85:6b:95:6c:e6: c5:6b:a8:f3:84:a8:1f:50:c7:ce:56:ed:fa:19:e7: 5c:0b:c7:f7:59:9a:1b:55:97:34:00:d2:95:53:2a: 1d:86:6b:03:21:91:2b:77:75:7a:71:0c:bd:8f:f7: cf:c7:81:2a:77:eb:53:9f:11:2e:16:91:aa:05:1b: 76:e6:4a:f0:47:b0:e8:4c:b6:dc:f9:5c:ac:9d:d6: 56:39:ed:d9:c7:30:96:28:e8:0b:17:58:34:fd:45: 34:86:61:c6:66:d0:3c:c0:0b:2d:b7:3a:7b:01:0a: 9c:14:dc:f4:d2:9e:45:c8:24:24:ca:86:71:4e:c5: bc:f0:db:a4:a5:57:8c:13:1c:66:8e:1b:50:08:18: cf:32:84:c5:ac:49:8b:af:66:2d:b3:78:33:2d:62: 68:12:b9:e6:54:ab:59:12:66:ad:dd:04:31:52:e8: 1f:0e:02:5a:b1:16:2e:6f:73:40:aa:4d:68:8a:b7: 4f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:63:7F:E3:8B:12:02:51:C6:26:DE:35:48:51:76:FA:81:FC:3F:2B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/02fe2df1-37cf-467a-8eca-4f9d7087dd81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.18.96.0/21 Signature Algorithm: sha256WithRSAEncryption 79:dc:72:61:12:eb:1c:cc:f4:a4:0f:4d:ce:dc:c5:3e:c6:b3: 92:44:05:e1:d0:ee:af:e6:84:b0:06:d9:69:c7:81:72:1e:5f: 89:62:f0:2f:21:27:c4:4f:f3:64:45:3e:6d:75:ec:06:21:5b: b0:13:32:77:4c:f7:cc:08:a8:c3:5c:1c:38:b1:d2:22:88:e0: 6e:21:c5:0e:2c:a9:cd:98:26:c4:c7:a8:47:2f:14:ac:6e:a7: ea:72:57:c8:57:32:f0:76:de:ee:8e:55:90:05:5d:34:70:9f: be:1b:b1:46:0a:ea:2a:9b:fd:2b:27:67:21:fa:0a:36:e5:31: 92:7b:7c:d3:54:02:4a:ab:ad:cd:71:fc:97:3f:90:34:a1:72: 63:58:07:d3:30:1a:3e:d4:bf:50:12:84:78:93:39:99:84:de: 6f:79:c7:b9:4f:07:59:6b:b7:1c:9b:30:25:9e:9d:8e:bf:9b: ef:c8:49:0b:11:d5:85:26:dc:03:ef:3d:fd:b8:18:56:b0:d7: 23:ea:92:83:72:f4:44:44:ec:6a:3f:eb:d7:a1:03:e1:71:9b: 34:57:82:47:ae:dc:9f:3e:c5:64:db:bb:e5:48:97:ad:12:81: 75:23:ed:50:fa:89:8b:54:60:1a:03:ab:03:42:4a:d6:64:1d: d9:a3:e6:26 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUILOd3lVSH9M/T2WYOw7xLnXRMFgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzIyMDA0MDE3WhcNMjUwODI2MjM1OTU5 WjB6MUkwRwYDVQQFE0AxNDY0NDkwYzEzOGY0OWYwYjc1NzQ3YTk1MWU2NmU3OGIw ZGFmMjg4N2FjMDhhNjY3MTc2NGU1YjA4OGY3Zjg4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZPHU/u3y2JLH0E8tZdk2qf1UK5Fy8Y/uupyDNxe/08SY+ zI9ee9ysw1pXcgXeEIuVEDw1lHQqE4V8fU1UlB91GXbUHe+Fa5Vs5sVrqPOEqB9Q x85W7foZ51wLx/dZmhtVlzQA0pVTKh2GawMhkSt3dXpxDL2P98/HgSp361OfES4W kaoFG3bmSvBHsOhMttz5XKyd1lY57dnHMJYo6AsXWDT9RTSGYcZm0DzACy23OnsB CpwU3PTSnkXIJCTKhnFOxbzw26SlV4wTHGaOG1AIGM8yhMWsSYuvZi2zeDMtYmgS ueZUq1kSZq3dBDFS6B8OAlqxFi5vc0CqTWiKt0/tAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUq2N/44sSAlHGJt41SFF2+oH8PyswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzAyZmUyZGYxLTM3Y2YtNDY3YS04ZWNhLTRmOWQ3MDg3ZGQ4MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMyEmAwDQYJKoZIhvcNAQELBQADggEBAHnccmES6xzM9KQPTc7cxT7Gs5JE BeHQ7q/mhLAG2WnHgXIeX4li8C8hJ8RP82RFPm117AYhW7ATMndM98wIqMNcHDix 0iKI4G4hxQ4sqc2YJsTHqEcvFKxup+pyV8hXMvB23u6OVZAFXTRwn74bsUYK6iqb /SsnZyH6CjblMZJ7fNNUAkqrrc1x/Jc/kDShcmNYB9MwGj7Uv1AShHiTOZmE3m95 x7lPB1lrtxybMCWenY6/m+/ISQsR1YUm3APvPf24GFaw1yPqkoNy9ERE7Go/69eh A+FxmzRXgkeu3J8+xWTbu+VIl60SgXUj7VD6iYtUYBoDqwNCStZkHdmj5iY= -----END CERTIFICATE-----Generated at Tue Jul 22 05:09:44 2025 by rpki-client