$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/edabdce6-a3ca-4743-8403-ae737c3b4588.roa File: edabdce6-a3ca-4743-8403-ae737c3b4588.roa (raw, json) Hash identifier: 555P/hvVeIuA1p+ZlAu9AN5Sc4+disN/yGsq3GPAdKM= Subject key identifier: 9A:EE:4D:B2:2E:43:50:50:67:72:47:94:91:DF:D7:7C:62:2C:ED:64 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 40D6E6D50388A5D927E01B7D41905F5A911DF8A1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/edabdce6-a3ca-4743-8403-ae737c3b4588.roa Signing time: Tue 18 Mar 2025 00:30:51 +0000 ROA not before: Tue 18 Mar 2025 00:30:51 +0000 ROA not after: Tue 22 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 50.17.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:d6:e6:d5:03:88:a5:d9:27:e0:1b:7d:41:90:5f:5a:91:1d:f8:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 18 00:30:51 2025 GMT Not After : Apr 22 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:f7:59:89:7e:89:ae:e1:3d:b8:04:b0:9d:02: b6:9f:e3:cd:60:63:7a:85:38:35:cf:17:77:95:b0: 0a:fc:2f:26:2e:1c:22:9e:27:ad:40:b3:7f:a1:f6: 14:50:b2:f7:9f:58:30:08:af:d8:4a:6d:22:31:8f: 9e:9f:eb:73:cd:5c:16:23:8e:28:5d:e0:35:10:e3: 40:68:47:2c:73:cd:1c:73:30:2c:ef:82:2e:2b:45: 19:be:d4:5b:ce:a8:cf:7c:63:ff:e0:f5:26:03:ce: 11:4b:04:cc:dd:dc:3a:ae:09:df:e4:ad:96:08:57: 89:75:1b:dd:96:f5:de:9a:f5:b7:d1:42:aa:ac:20: 67:f7:b0:30:e0:d4:96:f9:72:89:84:28:de:fb:dc: 5e:c4:3d:40:c5:fd:73:8b:ae:ca:79:f5:20:16:89: 92:6a:82:db:e5:98:08:4e:34:58:e8:0c:ee:84:6f: fa:95:b1:17:e4:88:bd:f4:88:94:b9:08:ef:d1:57: 45:36:d5:ef:1f:5e:bd:5b:96:c8:53:07:5b:3b:46: 83:60:de:06:09:ce:53:f2:d5:87:09:cf:64:a1:06: 68:5d:12:fb:a5:3d:ab:6e:71:d7:8b:41:9b:2d:eb: 46:ab:ac:14:d1:2b:a9:68:fe:1f:61:0a:82:49:0f: ba:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:EE:4D:B2:2E:43:50:50:67:72:47:94:91:DF:D7:7C:62:2C:ED:64 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/edabdce6-a3ca-4743-8403-ae737c3b4588.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.17.160.0/20 Signature Algorithm: sha256WithRSAEncryption 4a:a1:35:c1:88:23:ca:8a:11:76:34:2e:59:6e:82:eb:52:31: a9:48:a1:d0:ed:4e:6c:21:ac:13:e0:14:87:7a:48:64:11:ba: 80:57:9e:a1:18:69:14:03:60:3d:17:01:2d:65:58:3e:0e:2b: f4:71:d2:16:12:aa:be:68:db:aa:2d:49:bb:77:22:8c:03:62: a9:9c:7f:dc:7b:04:ae:32:6d:1c:3e:d2:a1:f6:08:c7:e8:b6: b7:50:36:25:45:b3:0f:00:95:ab:b6:1a:84:7f:8e:2b:36:d3: ae:f5:1a:2c:a6:19:de:ec:16:f0:30:d0:60:70:6d:7c:c2:d8: 02:52:99:5c:24:e6:8e:b7:75:1d:3e:a5:9c:0d:66:04:34:14: 11:21:e1:d9:97:13:db:71:9d:8d:31:e0:ed:e8:fe:0f:82:e3: 37:cc:13:d9:7a:ab:9f:81:31:ec:b7:e3:ef:51:e3:23:19:e1: 2c:a2:87:36:39:03:c6:d1:59:e9:06:55:3b:87:21:f8:65:48: 51:3d:bd:02:e6:bb:d4:51:3b:c7:21:83:d8:24:03:0a:2b:1c: fb:7e:28:3e:e9:0d:ff:f9:bd:83:41:83:52:04:09:06:59:8b: d7:6a:b2:aa:9c:e1:17:6e:63:28:f1:2c:34:72:c6:78:b1:0d: 4b:f5:5b:5a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQNbm1QOIpdkn4Bt9QZBfWpEd+KEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzE4MDAzMDUxWhcNMjUwNDIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZjBjOWUyMjg5NTJhMzc0MWIyNWU2Mjc2Y2FiNDAzYmE0 ZWE2Yzg1OTY5MTBkMDAwOThiZjNlZGEyNDEyOWZmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDj91mJfomu4T24BLCdAraf481gY3qFODXPF3eVsAr8LyYu HCKeJ61As3+h9hRQsvefWDAIr9hKbSIxj56f63PNXBYjjihd4DUQ40BoRyxzzRxz MCzvgi4rRRm+1FvOqM98Y//g9SYDzhFLBMzd3DquCd/krZYIV4l1G92W9d6a9bfR QqqsIGf3sDDg1Jb5comEKN773F7EPUDF/XOLrsp59SAWiZJqgtvlmAhONFjoDO6E b/qVsRfkiL30iJS5CO/RV0U21e8fXr1blshTB1s7RoNg3gYJzlPy1YcJz2ShBmhd EvulPatucdeLQZst60arrBTRK6lo/h9hCoJJD7rJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUmu5Nsi5DUFBnckeUkd/XfGIs7WQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2VkYWJkY2U2LWEzY2EtNDc0My04NDAzLWFlNzM3YzNiNDU4OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQyEaAwDQYJKoZIhvcNAQELBQADggEBAEqhNcGII8qKEXY0LllugutSMalI odDtTmwhrBPgFId6SGQRuoBXnqEYaRQDYD0XAS1lWD4OK/Rx0hYSqr5o26otSbt3 IowDYqmcf9x7BK4ybRw+0qH2CMfotrdQNiVFsw8Alau2GoR/jis20671GiymGd7s FvAw0GBwbXzC2AJSmVwk5o63dR0+pZwNZgQ0FBEh4dmXE9txnY0x4O3o/g+C4zfM E9l6q5+BMey34+9R4yMZ4SyihzY5A8bRWekGVTuHIfhlSFE9vQLmu9RRO8chg9gk AworHPt+KD7pDf/5vYNBg1IECQZZi9dqsqqc4RduYyjxLDRyxnixDUv1W1o= -----END CERTIFICATE-----Generated at Sat Apr 5 11:16:42 2025 by rpki-client