$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f20b22c4-1b25-4b12-94c2-81fda3225593.roa File: f20b22c4-1b25-4b12-94c2-81fda3225593.roa (raw, json) Hash identifier: K12ZXjje0ZrOlH37TYEiNhhG/6r/OcdBFGyO36jbw+Q= Subject key identifier: 03:EF:C0:16:99:27:A3:23:32:BB:A9:87:8F:16:4F:D8:45:DB:06:39 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3C91DBDC02CDF148B7C10872231DA299A223FA2B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f20b22c4-1b25-4b12-94c2-81fda3225593.roa Signing time: Wed 07 May 2025 00:40:10 +0000 ROA not before: Wed 07 May 2025 00:40:10 +0000 ROA not after: Wed 11 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 50.19.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:91:db:dc:02:cd:f1:48:b7:c1:08:72:23:1d:a2:99:a2:23:fa:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 7 00:40:10 2025 GMT Not After : Jun 11 23:59:59 2025 GMT Subject: serialNumber=ac0aab38f4981e975ecb1dae83455553e26cf5038ae870fc24526260cc7b4a1e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:6a:6d:2b:13:ea:10:3a:4e:9e:18:28:7e:bc: 2f:08:16:44:d4:4f:2e:62:3d:16:19:95:a6:bd:bf: b7:35:64:f1:93:7b:ad:5a:79:cc:b7:5d:ee:1f:5e: a7:8d:04:5b:83:14:61:63:a7:4f:41:55:6b:b8:0f: 20:d3:30:20:89:f6:da:13:58:71:52:b3:b0:71:75: 8f:b9:f7:ce:e1:6b:a7:23:a3:80:da:0a:cf:dd:04: a8:cb:d4:89:5a:c4:0e:c3:e6:83:57:2f:94:2a:ce: 79:3a:6a:3c:bc:87:7e:eb:93:0f:89:b0:04:cb:c5: b0:f1:66:a8:cb:6f:ff:06:74:77:bd:8f:6b:cd:9c: 00:21:95:5d:bf:c3:f8:ca:c0:21:60:a8:e7:43:b4: 78:65:2e:ba:0f:06:96:f9:03:fd:be:b8:8d:f6:70: 59:be:45:bf:59:14:7a:b1:30:b9:9f:7d:5b:2e:76: b0:c7:5d:40:49:b9:11:9a:fb:fb:43:56:c5:1e:29: fd:1e:94:02:66:0f:23:08:8b:33:d0:e8:7e:06:63: 37:76:dd:fe:a5:e8:ce:6e:40:9b:17:50:18:d2:8f: c5:5f:9d:5c:6f:0c:59:6f:fb:94:d7:20:11:89:c8: 0b:23:e6:78:fe:05:9f:16:9f:aa:27:a8:57:fa:c8: fe:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:EF:C0:16:99:27:A3:23:32:BB:A9:87:8F:16:4F:D8:45:DB:06:39 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f20b22c4-1b25-4b12-94c2-81fda3225593.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.19.96.0/19 Signature Algorithm: sha256WithRSAEncryption 84:69:09:85:74:9f:eb:06:72:56:48:03:9a:ad:b5:4f:98:17: 78:ab:df:01:0a:e4:53:b0:12:14:e0:ac:9d:f3:86:ca:f9:02: 87:22:a3:06:70:8b:3a:9f:48:61:4f:93:a0:43:8a:ec:07:7e: cc:7b:79:f5:8d:c7:88:eb:8d:18:28:2e:c2:fe:86:26:9e:6e: 39:8f:13:1f:20:15:1a:09:2f:11:0d:a4:f2:ba:14:7e:c0:39: 55:de:54:36:7d:60:17:36:b3:d8:ac:a1:0b:a1:9c:78:51:4c: 55:30:d4:79:34:09:ef:33:ae:49:4a:9a:a3:1a:a9:c3:15:46: 27:6c:58:00:18:da:06:36:0e:88:5f:0d:d9:b2:ca:9a:d4:c4: 61:6b:69:d4:41:35:72:69:03:5e:0f:f7:fd:d1:dd:e8:11:e9: 13:b7:db:bd:99:3d:18:11:23:21:bd:9f:3b:fb:3a:af:a5:f2: 81:4a:b7:28:ed:e6:c5:17:0d:99:d9:16:2d:24:77:bd:0a:5f: c8:7a:7f:5a:a3:53:b7:2e:b8:55:90:ee:51:10:31:bb:19:d0: ed:33:05:0a:dd:e7:94:d3:f2:ec:10:2a:a5:3a:1a:6a:13:b4: 2f:7d:3c:2b:2c:26:cb:a8:61:1d:6c:10:d0:6a:da:f4:4f:8f: fc:b9:23:24 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPJHb3ALN8Ui3wQhyIx2imaIj+iswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTA3MDA0MDEwWhcNMjUwNjExMjM1OTU5 WjB6MUkwRwYDVQQFE0BhYzBhYWIzOGY0OTgxZTk3NWVjYjFkYWU4MzQ1NTU1M2Uy NmNmNTAzOGFlODcwZmMyNDUyNjI2MGNjN2I0YTFlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCcam0rE+oQOk6eGCh+vC8IFkTUTy5iPRYZlaa9v7c1ZPGT e61aecy3Xe4fXqeNBFuDFGFjp09BVWu4DyDTMCCJ9toTWHFSs7BxdY+5987ha6cj o4DaCs/dBKjL1IlaxA7D5oNXL5Qqznk6ajy8h37rkw+JsATLxbDxZqjLb/8GdHe9 j2vNnAAhlV2/w/jKwCFgqOdDtHhlLroPBpb5A/2+uI32cFm+Rb9ZFHqxMLmffVsu drDHXUBJuRGa+/tDVsUeKf0elAJmDyMIizPQ6H4GYzd23f6l6M5uQJsXUBjSj8Vf nVxvDFlv+5TXIBGJyAsj5nj+BZ8Wn6onqFf6yP5dAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUA+/AFpknoyMyu6mHjxZP2EXbBjkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2YyMGIyMmM0LTFiMjUtNGIxMi05NGMyLTgxZmRhMzIyNTU5My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUyE2AwDQYJKoZIhvcNAQELBQADggEBAIRpCYV0n+sGclZIA5qttU+YF3ir 3wEK5FOwEhTgrJ3zhsr5AociowZwizqfSGFPk6BDiuwHfsx7efWNx4jrjRgoLsL+ hiaebjmPEx8gFRoJLxENpPK6FH7AOVXeVDZ9YBc2s9isoQuhnHhRTFUw1Hk0Ce8z rklKmqMaqcMVRidsWAAY2gY2DohfDdmyyprUxGFradRBNXJpA14P9/3R3egR6RO3 272ZPRgRIyG9nzv7Oq+l8oFKtyjt5sUXDZnZFi0kd70KX8h6f1qjU7cuuFWQ7lEQ MbsZ0O0zBQrd55TT8uwQKqU6GmoTtC99PCssJsuoYR1sENBq2vRPj/y5IyQ= -----END CERTIFICATE-----Generated at Sun Jun 1 04:38:26 2025 by rpki-client