$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/29fe4c24-b674-4bba-8dd9-9639a0d43dc6.roa File: 29fe4c24-b674-4bba-8dd9-9639a0d43dc6.roa (raw, json) Hash identifier: CLY/QMgyHez3AoZbCgqgAZt4tMsnXts/ZplbZIJ3Vw4= Subject key identifier: E5:7F:5F:A9:7F:F9:CF:60:40:DC:C0:BB:22:DD:8C:44:B2:13:AD:81 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4BDBF096F1FC1FCEEEB4E090D2373E70D935D627 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/29fe4c24-b674-4bba-8dd9-9639a0d43dc6.roa Signing time: Tue 22 Jul 2025 00:41:49 +0000 ROA not before: Tue 22 Jul 2025 00:41:49 +0000 ROA not after: Tue 26 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 50.17.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:db:f0:96:f1:fc:1f:ce:ee:b4:e0:90:d2:37:3e:70:d9:35:d6:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 22 00:41:49 2025 GMT Not After : Aug 26 23:59:59 2025 GMT Subject: serialNumber=923e446012adb7813fa66255a170e439850c24578ea4582f7ad12777e543a7e9, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d8:c3:5a:38:a7:d0:38:5b:09:0e:c0:57:45: b2:14:f3:e7:5b:7b:4b:42:11:63:87:83:5c:e1:0b: fa:73:10:a2:ff:41:ea:41:fc:b8:9b:6c:e9:69:a6: fb:c3:6a:ee:7d:60:79:65:ee:b4:aa:7b:08:33:84: cd:bf:39:12:e4:bc:11:39:f5:a5:2c:46:9c:9b:c7: 88:4e:4c:1e:ab:2c:dd:4d:82:f6:ab:b6:e0:9d:7a: d3:5f:3f:87:01:5b:54:2f:4f:99:1b:a9:f6:e9:5f: 4d:0d:70:1b:1c:27:f1:9f:26:cc:c4:37:a4:11:b0: 68:21:a3:55:5e:4e:3c:42:67:55:fe:89:a9:65:38: c7:d7:16:36:4b:95:9a:6a:2d:b6:70:58:06:bd:d2: b6:2d:7e:ea:7b:58:7d:f0:a8:12:ef:44:3f:10:f0: d1:5d:52:f3:ba:b1:ab:8e:b8:79:ae:ac:00:a6:05: 58:e2:ca:c0:99:0c:8b:6c:f4:9b:49:1b:db:6d:98: c9:ec:35:22:ca:1c:9c:12:f2:bf:c6:a3:96:c2:97: 05:d3:20:de:fd:29:0e:2f:d5:85:04:84:4c:fc:55: 12:eb:38:24:68:02:35:36:cf:66:74:67:f0:27:39: 21:05:fe:ee:26:47:d5:de:b1:f1:db:bb:c4:3a:cf: 36:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:7F:5F:A9:7F:F9:CF:60:40:DC:C0:BB:22:DD:8C:44:B2:13:AD:81 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/29fe4c24-b674-4bba-8dd9-9639a0d43dc6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.17.184.0/21 Signature Algorithm: sha256WithRSAEncryption a6:9a:44:75:0b:3c:74:0a:0a:f5:f7:6b:5d:a8:7c:f1:5d:41: 2d:af:5a:1b:61:92:4c:36:c9:73:0c:96:f2:69:91:9c:6d:65: fd:de:9e:59:7d:da:65:11:3c:88:0f:39:0b:55:dd:cc:19:dc: 09:b1:ca:09:86:0e:9d:30:52:0c:e0:d9:cb:8e:fe:5e:1e:9b: 80:67:00:59:d2:fb:a4:b0:b2:c4:39:0c:2c:b3:34:ad:59:a9: 5d:35:ba:74:30:ba:e4:5d:e2:3c:c5:2d:43:ee:d9:18:d3:e2: 1a:73:e1:0a:08:d6:0a:d3:8b:88:77:75:c0:10:75:ae:e3:8e: 40:cf:58:b9:81:eb:c4:a1:4b:76:a8:46:91:21:67:11:e0:9c: 78:82:eb:ea:8c:09:6a:2e:a5:94:4e:e9:26:da:98:48:c4:36: 44:06:be:e2:81:22:9a:22:b2:39:7c:74:5b:bd:d8:a2:ed:15: ab:eb:98:0d:90:58:e1:b4:65:f4:ef:39:81:71:15:17:30:1d: 51:38:b7:aa:ae:7d:6e:f3:76:12:8d:d3:20:3e:cc:4f:69:15: 45:90:55:00:79:fd:c9:be:e0:d9:da:ed:71:3e:37:79:30:f8: 5b:9e:94:80:21:ec:d6:e3:67:c9:fd:08:6f:5a:78:3a:d2:41: df:82:b7:78 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUS9vwlvH8H87utOCQ0jc+cNk11icwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzIyMDA0MTQ5WhcNMjUwODI2MjM1OTU5 WjB6MUkwRwYDVQQFE0A5MjNlNDQ2MDEyYWRiNzgxM2ZhNjYyNTVhMTcwZTQzOTg1 MGMyNDU3OGVhNDU4MmY3YWQxMjc3N2U1NDNhN2U5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDZ2MNaOKfQOFsJDsBXRbIU8+dbe0tCEWOHg1zhC/pzEKL/ QepB/LibbOlppvvDau59YHll7rSqewgzhM2/ORLkvBE59aUsRpybx4hOTB6rLN1N gvartuCdetNfP4cBW1QvT5kbqfbpX00NcBscJ/GfJszEN6QRsGgho1VeTjxCZ1X+ iallOMfXFjZLlZpqLbZwWAa90rYtfup7WH3wqBLvRD8Q8NFdUvO6sauOuHmurACm BVjiysCZDIts9JtJG9ttmMnsNSLKHJwS8r/Go5bClwXTIN79KQ4v1YUEhEz8VRLr OCRoAjU2z2Z0Z/AnOSEF/u4mR9XesfHbu8Q6zzbpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5X9fqX/5z2BA3MC7It2MRLITrYEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI5ZmU0YzI0LWI2NzQtNGJiYS04ZGQ5LTk2MzlhMGQ0M2RjNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMyEbgwDQYJKoZIhvcNAQELBQADggEBAKaaRHULPHQKCvX3a12ofPFdQS2v Whthkkw2yXMMlvJpkZxtZf3enll92mURPIgPOQtV3cwZ3AmxygmGDp0wUgzg2cuO /l4em4BnAFnS+6SwssQ5DCyzNK1ZqV01unQwuuRd4jzFLUPu2RjT4hpz4QoI1grT i4h3dcAQda7jjkDPWLmB68ShS3aoRpEhZxHgnHiC6+qMCWoupZRO6SbamEjENkQG vuKBIpoisjl8dFu92KLtFavrmA2QWOG0ZfTvOYFxFRcwHVE4t6qufW7zdhKN0yA+ zE9pFUWQVQB5/cm+4Nna7XE+N3kw+FuelIAh7NbjZ8n9CG9aeDrSQd+Ct3g= -----END CERTIFICATE-----Generated at Fri Jul 25 13:24:09 2025 by rpki-client