$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4745733-2600-4627-8fbe-3ab8ab0b9769.roa File: f4745733-2600-4627-8fbe-3ab8ab0b9769.roa (raw, json) Hash identifier: duk/N90Xmx942vi6n2G6fkwcb7jXruXq0gJurUTKIYM= Subject key identifier: F7:0F:7F:77:87:9E:28:F2:15:FE:F8:DC:D0:B1:89:D7:89:A6:CA:09 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 29D8B1687A6D02400F70FF4BF5651B28A844692E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4745733-2600-4627-8fbe-3ab8ab0b9769.roa Signing time: Tue 22 Jul 2025 00:52:04 +0000 ROA not before: Tue 22 Jul 2025 00:52:04 +0000 ROA not after: Tue 26 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 50.17.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:d8:b1:68:7a:6d:02:40:0f:70:ff:4b:f5:65:1b:28:a8:44:69:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 22 00:52:04 2025 GMT Not After : Aug 26 23:59:59 2025 GMT Subject: serialNumber=2949764ad5c65d18de90bb82510e37609feba09e823fe0bd2773bc488b41c7e3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:cd:73:17:64:27:ca:7d:c3:39:3b:57:69:42: 3c:b4:c3:48:9c:a0:4a:0e:1d:6c:38:c5:9e:6d:5b: 2b:e4:ae:20:8f:7a:0a:97:81:ff:48:0f:f2:4b:b5: 11:f5:dd:a5:e0:5c:67:3c:a2:4b:b4:95:57:1e:19: e6:1f:e6:0c:8c:c5:94:6a:da:53:5a:09:34:bc:b6: 85:c8:fe:15:e7:57:93:d9:fa:e7:4b:c9:43:9e:1a: da:07:8e:f5:be:42:84:fa:99:12:06:49:5d:71:8f: 66:28:fc:7b:ff:61:5e:de:d3:8e:7e:15:5b:2b:aa: 0b:ba:ff:db:86:e8:81:be:3e:52:2a:e8:f0:90:f8: 6d:ec:b4:de:fa:3b:16:20:53:91:66:2b:99:f1:b3: a5:75:b6:96:c1:09:7f:06:d3:a2:46:28:d7:40:c6: f7:45:18:4f:42:96:01:df:00:23:48:1a:cf:83:c2: b4:97:eb:3f:0b:c0:e2:59:eb:61:6a:fb:9d:d0:23: a4:8b:2f:3a:aa:70:d6:c8:76:88:95:10:e3:89:4b: 83:b4:b2:92:39:e7:81:98:9b:5f:b8:49:13:c4:4d: a7:d0:93:86:af:43:89:0c:e4:72:ca:e8:ea:77:b1: 11:89:db:f3:f6:06:a2:c2:89:70:b8:ef:3e:56:59: f8:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:0F:7F:77:87:9E:28:F2:15:FE:F8:DC:D0:B1:89:D7:89:A6:CA:09 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4745733-2600-4627-8fbe-3ab8ab0b9769.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.17.0.0/16 Signature Algorithm: sha256WithRSAEncryption 5c:29:74:58:49:8e:4b:00:0d:5b:17:65:18:df:8f:8b:71:74: 6f:2f:c8:3d:32:e7:3c:0a:1d:7b:4d:a9:6d:9f:83:87:d4:25: f4:3f:7e:bd:9d:83:d3:8e:ed:5b:d2:8f:65:3b:3b:b1:f5:38: 22:c9:10:6f:5f:5f:7e:ca:91:d2:1b:3b:1a:0e:c6:57:12:e4: f7:07:46:2f:5d:1e:de:d5:44:b6:4c:60:5c:d2:0d:52:1e:13: 2d:fc:19:10:33:c9:7e:68:be:fd:b9:f4:cb:5a:04:fb:25:91: ab:c1:02:12:73:5e:11:68:b6:cd:79:a9:70:a7:65:92:e3:f4: 8d:4e:7b:04:7d:93:53:dd:8d:d8:12:ec:37:4f:c7:16:9e:2f: 28:11:93:e4:e8:70:25:25:8c:75:d0:8f:43:e6:bb:11:57:f0: 5e:be:94:82:e4:db:82:d8:bc:97:3e:45:2c:6e:b1:32:ca:29: 16:e9:0b:3a:d5:28:e3:63:38:b2:9c:fd:57:fe:f9:66:75:96: e9:36:56:40:02:66:5e:72:a3:c9:69:fe:c5:dd:13:23:da:b2: a8:fa:f6:58:91:b6:2d:d0:c7:ff:c3:5b:68:e2:43:9e:31:12: 45:0c:17:e6:27:c7:55:1e:46:8e:c4:2a:67:51:0c:2a:a7:1d: de:97:71:c4 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUKdixaHptAkAPcP9L9WUbKKhEaS4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzIyMDA1MjA0WhcNMjUwODI2MjM1OTU5 WjB6MUkwRwYDVQQFE0AyOTQ5NzY0YWQ1YzY1ZDE4ZGU5MGJiODI1MTBlMzc2MDlm ZWJhMDllODIzZmUwYmQyNzczYmM0ODhiNDFjN2UzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJzXMXZCfKfcM5O1dpQjy0w0icoEoOHWw4xZ5tWyvkriCP egqXgf9ID/JLtRH13aXgXGc8oku0lVceGeYf5gyMxZRq2lNaCTS8toXI/hXnV5PZ +udLyUOeGtoHjvW+QoT6mRIGSV1xj2Yo/Hv/YV7e045+FVsrqgu6/9uG6IG+PlIq 6PCQ+G3stN76OxYgU5FmK5nxs6V1tpbBCX8G06JGKNdAxvdFGE9ClgHfACNIGs+D wrSX6z8LwOJZ62Fq+53QI6SLLzqqcNbIdoiVEOOJS4O0spI554GYm1+4SRPETafQ k4avQ4kM5HLK6Op3sRGJ2/P2BqLCiXC47z5WWfgnAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU9w9/d4eeKPIV/vjc0LGJ14mmygkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y0NzQ1NzMzLTI2MDAtNDYyNy04ZmJlLTNhYjhhYjBiOTc2OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAyETANBgkqhkiG9w0BAQsFAAOCAQEAXCl0WEmOSwANWxdlGN+Pi3F0by/I PTLnPAode02pbZ+Dh9Ql9D9+vZ2D047tW9KPZTs7sfU4IskQb19ffsqR0hs7Gg7G VxLk9wdGL10e3tVEtkxgXNINUh4TLfwZEDPJfmi+/bn0y1oE+yWRq8ECEnNeEWi2 zXmpcKdlkuP0jU57BH2TU92N2BLsN0/HFp4vKBGT5OhwJSWMddCPQ+a7EVfwXr6U guTbgti8lz5FLG6xMsopFukLOtUo42M4spz9V/75ZnWW6TZWQAJmXnKjyWn+xd0T I9qyqPr2WJG2LdDH/8NbaOJDnjESRQwX5ifHVR5GjsQqZ1EMKqcd3pdxxA== -----END CERTIFICATE-----Generated at Tue Jul 22 05:13:12 2025 by rpki-client