$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/86928c79-5b49-45a0-867b-64a68ed13bd7.roa File: 86928c79-5b49-45a0-867b-64a68ed13bd7.roa (raw, json) Hash identifier: 20AtBqGCHnvlzpq1HJY0oqDlj2JcPdXTK769y8zZhp0= Subject key identifier: B0:CC:FE:9F:AB:68:CF:78:71:04:1A:39:7A:D4:C6:03:89:50:BC:8E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 22A71DF6598CCBB52BE46FEBB7170D3ACC1374DA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/86928c79-5b49-45a0-867b-64a68ed13bd7.roa Signing time: Tue 22 Jul 2025 00:40:19 +0000 ROA not before: Tue 22 Jul 2025 00:40:19 +0000 ROA not after: Tue 26 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 50.19.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:a7:1d:f6:59:8c:cb:b5:2b:e4:6f:eb:b7:17:0d:3a:cc:13:74:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 22 00:40:19 2025 GMT Not After : Aug 26 23:59:59 2025 GMT Subject: serialNumber=0bab8dbd85d04336090f68e6330952a0c4467ecdfd959c68d4d70db6f4593d65, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e3:fa:fb:71:1c:32:17:8b:2f:ad:65:35:4c: a6:a8:6e:c4:0b:80:6a:c5:a2:7a:00:6e:0f:40:db: 16:bf:da:83:9a:2a:1d:6d:51:13:29:56:ef:99:e3: 1d:10:22:ae:80:7d:e6:75:c7:07:49:d1:99:cf:73: 4c:3b:d5:f8:df:56:f0:77:07:ea:f8:bd:5b:c6:8b: e1:17:26:f7:3b:ab:e3:b7:98:cb:65:39:4a:55:c1: 3e:84:e3:d3:fc:c6:20:eb:69:06:ac:54:0f:95:4f: 64:24:d1:c8:86:b8:76:a0:5e:41:d9:3d:31:9b:9d: 4d:c3:a0:bf:9a:ae:17:7b:76:6c:1c:43:07:f1:9b: 5f:c3:4f:dc:1a:f6:81:e1:da:87:1f:90:18:d1:2f: aa:30:29:d9:87:32:1f:52:6a:b2:cb:d2:0b:99:58: bf:f9:96:54:c7:9b:3b:d2:bc:7c:96:4b:a0:4d:b3: 73:4b:34:c6:a5:75:a7:8c:6a:2a:65:68:eb:05:a4: 3f:52:4d:0d:f0:c1:e2:05:fd:c1:fd:af:fa:11:29: a8:e4:dd:c7:5a:23:94:b9:30:d1:30:cd:d6:61:77: 58:45:14:23:92:c1:a6:15:cd:fa:0d:87:2b:c2:50: bc:16:ab:b7:89:a4:0a:12:9e:45:dd:59:1f:47:35: f2:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:CC:FE:9F:AB:68:CF:78:71:04:1A:39:7A:D4:C6:03:89:50:BC:8E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/86928c79-5b49-45a0-867b-64a68ed13bd7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.19.208.0/20 Signature Algorithm: sha256WithRSAEncryption 09:c9:79:dc:e6:34:c7:2f:be:0e:12:17:6a:07:b2:a8:ac:dc: 5a:6d:26:b4:f0:2c:89:5b:d3:8c:87:85:8c:bb:ce:cc:51:6d: d0:ef:5a:66:ac:e1:82:0d:a7:bd:bc:55:1b:49:00:ec:7a:0f: 2e:2d:b7:3d:42:48:0a:44:3d:b4:d2:5d:ae:5f:0f:df:8f:0d: 6d:1d:94:9a:29:fb:0a:20:47:dd:d5:74:0e:a7:90:68:1c:0f: 86:bb:87:7d:ba:7a:a2:e5:28:5c:c9:55:3c:04:9a:7f:b0:8c: 9d:16:7b:42:13:91:af:0e:4c:3e:c2:8a:c1:65:e1:9e:f2:45: a3:81:74:58:6b:5d:25:c2:6e:d7:43:15:94:40:9d:79:43:e7: f6:9f:34:46:b1:a1:56:4c:5d:e1:a5:44:bd:c5:0e:01:dc:dd: f1:b5:fd:70:99:db:57:c5:27:87:99:85:fc:b7:c3:c7:02:3b: 54:5c:50:cd:b9:13:fc:e3:a6:1c:aa:db:ae:6b:b3:59:70:cc: c4:fa:91:54:ce:0c:e9:92:90:07:39:ff:e7:5f:d1:73:b1:40: 65:dd:6f:ce:20:db:c0:1c:b3:78:dc:bb:bb:92:8b:43:1f:c2: a7:62:69:37:8d:8c:4a:cc:cb:65:01:53:5e:07:17:f1:53:11: 4d:bf:5e:4c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIqcd9lmMy7Ur5G/rtxcNOswTdNowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzIyMDA0MDE5WhcNMjUwODI2MjM1OTU5 WjB6MUkwRwYDVQQFE0AwYmFiOGRiZDg1ZDA0MzM2MDkwZjY4ZTYzMzA5NTJhMGM0 NDY3ZWNkZmQ5NTljNjhkNGQ3MGRiNmY0NTkzZDY1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDP4/r7cRwyF4svrWU1TKaobsQLgGrFonoAbg9A2xa/2oOa Kh1tURMpVu+Z4x0QIq6AfeZ1xwdJ0ZnPc0w71fjfVvB3B+r4vVvGi+EXJvc7q+O3 mMtlOUpVwT6E49P8xiDraQasVA+VT2Qk0ciGuHagXkHZPTGbnU3DoL+arhd7dmwc Qwfxm1/DT9wa9oHh2ocfkBjRL6owKdmHMh9SarLL0guZWL/5llTHmzvSvHyWS6BN s3NLNMaldaeMaiplaOsFpD9STQ3wweIF/cH9r/oRKajk3cdaI5S5MNEwzdZhd1hF FCOSwaYVzfoNhyvCULwWq7eJpAoSnkXdWR9HNfLXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUsMz+n6toz3hxBBo5etTGA4lQvI4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzg2OTI4Yzc5LTViNDktNDVhMC04NjdiLTY0YTY4ZWQxM2JkNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQyE9AwDQYJKoZIhvcNAQELBQADggEBAAnJedzmNMcvvg4SF2oHsqis3Fpt JrTwLIlb04yHhYy7zsxRbdDvWmas4YINp728VRtJAOx6Dy4ttz1CSApEPbTSXa5f D9+PDW0dlJop+wogR93VdA6nkGgcD4a7h326eqLlKFzJVTwEmn+wjJ0We0ITka8O TD7CisFl4Z7yRaOBdFhrXSXCbtdDFZRAnXlD5/afNEaxoVZMXeGlRL3FDgHc3fG1 /XCZ21fFJ4eZhfy3w8cCO1RcUM25E/zjphyq265rs1lwzMT6kVTODOmSkAc5/+df 0XOxQGXdb84g28Acs3jcu7uSi0MfwqdiaTeNjErMy2UBU14HF/FTEU2/Xkw= -----END CERTIFICATE-----Generated at Tue Jul 22 05:09:51 2025 by rpki-client