$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b50f1382-bb50-430d-9b35-c29ed7bae260.roa File: b50f1382-bb50-430d-9b35-c29ed7bae260.roa (raw, json) Hash identifier: tADIis2qehHPHRViAoj1iHKkySItCxWXBNEknWcVp+U= Subject key identifier: E7:87:2F:4A:70:31:82:01:1E:0A:AC:E7:41:3B:B5:78:2C:74:F2:6F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4A4816F591CBC0AAF9BB228BAB244F3B6D1000CB Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b50f1382-bb50-430d-9b35-c29ed7bae260.roa Signing time: Tue 05 Aug 2025 16:40:10 +0000 ROA not before: Tue 05 Aug 2025 16:40:10 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.253.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:48:16:f5:91:cb:c0:aa:f9:bb:22:8b:ab:24:4f:3b:6d:10:00:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 5 16:40:10 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=2b97291704805f36d97f56b595d59d3060712008abeb6d0a1d9f9e4e1aeee300, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:49:4f:50:0c:23:65:42:cd:55:c1:60:6f:0e: dd:ed:8e:e0:b7:91:c7:dd:1c:1b:c5:c8:56:e6:41: 92:e8:af:2e:08:b0:af:30:b7:45:b2:37:3d:67:0b: f7:65:4f:4d:34:e2:c1:59:74:00:5a:e3:45:83:c7: 91:51:2c:0c:c4:1b:41:93:88:7c:29:cf:f9:fe:41: 48:01:12:43:4e:65:56:63:c2:32:43:bf:89:44:27: a7:2b:df:c1:58:73:ef:b0:c6:e4:c9:7d:66:40:42: 90:0a:04:22:1e:92:db:41:9b:b5:9e:e3:eb:bc:70: 9d:c4:b9:8e:22:54:34:c7:59:c1:84:80:74:90:0c: 0a:2e:54:54:a8:29:70:a0:a5:c9:b4:e0:a0:57:aa: 4c:d9:93:0c:a4:d2:54:3e:5d:a2:98:88:5f:f5:8d: 28:a5:aa:d3:e3:b7:6b:57:43:5f:9e:f0:df:fc:d0: 5c:2e:d6:f2:01:9d:f3:71:f2:1c:e1:56:58:9f:ea: a6:2d:8b:79:1f:b1:40:5f:80:a1:6d:18:98:37:f9: 1f:e7:b9:62:00:73:db:80:cc:30:22:b6:0b:fd:ad: f1:5c:7e:04:0a:09:5f:b4:0a:51:29:2e:f6:e6:c1: 90:9f:9a:c1:3f:0e:91:e3:52:c1:ed:1d:e8:22:60: 73:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:87:2F:4A:70:31:82:01:1E:0A:AC:E7:41:3B:B5:78:2C:74:F2:6F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b50f1382-bb50-430d-9b35-c29ed7bae260.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.253.128.0/17 Signature Algorithm: sha256WithRSAEncryption 46:e0:fd:73:15:53:7d:d3:c3:88:f5:10:d7:78:52:d4:dd:e8: c1:8f:1a:a8:cf:ba:dc:34:50:08:a3:45:cd:1e:14:c6:e0:34: 68:b1:e5:d4:f0:13:c0:05:54:00:ff:69:d1:5f:4e:fc:97:2d: 2a:c6:3d:e7:07:40:9a:f9:ff:47:c7:73:d1:68:59:da:45:82: a0:9f:10:1e:bc:3a:93:f1:34:02:7a:a8:57:1a:f3:de:89:7a: 1c:12:4c:ba:06:6e:9e:06:3d:a8:49:95:aa:5b:60:53:3c:33: 72:80:d7:33:8f:8f:9c:f1:70:f6:5e:af:c0:10:23:31:1c:ba: 6c:0f:6a:5f:36:56:32:fb:2c:45:10:87:55:21:d9:79:39:70: 3a:c0:a1:16:cb:09:2c:79:d0:38:88:ce:9a:0e:ea:36:13:3f: 0a:44:53:eb:5e:dc:a4:87:19:a8:6b:ab:28:13:fa:16:10:b1: 77:14:a4:bf:bc:7c:66:1b:b0:8e:a4:49:e7:27:84:90:68:e1: 41:40:7a:5e:90:08:2f:70:a8:d1:4d:61:a3:47:fb:5f:a3:73: db:64:46:42:e4:e0:fe:e5:21:3b:ca:71:bb:c8:19:2c:04:e7: 1a:c6:f7:f5:a3:97:d1:5d:39:07:96:9a:f2:7b:11:b7:ef:9a: cd:89:bc:60 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSkgW9ZHLwKr5uyKLqyRPO20QAMswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODA1MTY0MDEwWhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AyYjk3MjkxNzA0ODA1ZjM2ZDk3ZjU2YjU5NWQ1OWQzMDYw NzEyMDA4YWJlYjZkMGExZDlmOWU0ZTFhZWVlMzAwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCdSU9QDCNlQs1VwWBvDt3tjuC3kcfdHBvFyFbmQZLory4I sK8wt0WyNz1nC/dlT0004sFZdABa40WDx5FRLAzEG0GTiHwpz/n+QUgBEkNOZVZj wjJDv4lEJ6cr38FYc++wxuTJfWZAQpAKBCIekttBm7We4+u8cJ3EuY4iVDTHWcGE gHSQDAouVFSoKXCgpcm04KBXqkzZkwyk0lQ+XaKYiF/1jSilqtPjt2tXQ1+e8N/8 0Fwu1vIBnfNx8hzhVlif6qYti3kfsUBfgKFtGJg3+R/nuWIAc9uAzDAitgv9rfFc fgQKCV+0ClEpLvbmwZCfmsE/DpHjUsHtHegiYHPbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU54cvSnAxggEeCqznQTu1eCx08m8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2I1MGYxMzgyLWJiNTAtNDMwZC05YjM1LWMyOWVkN2JhZTI2MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcS/YAwDQYJKoZIhvcNAQELBQADggEBAEbg/XMVU33Tw4j1ENd4UtTd6MGP GqjPutw0UAijRc0eFMbgNGix5dTwE8AFVAD/adFfTvyXLSrGPecHQJr5/0fHc9Fo WdpFgqCfEB68OpPxNAJ6qFca896JehwSTLoGbp4GPahJlapbYFM8M3KA1zOPj5zx cPZer8AQIzEcumwPal82VjL7LEUQh1Uh2Xk5cDrAoRbLCSx50DiIzpoO6jYTPwpE U+te3KSHGahrqygT+hYQsXcUpL+8fGYbsI6kSecnhJBo4UFAel6QCC9wqNFNYaNH +1+jc9tkRkLk4P7lITvKcbvIGSwE5xrG9/Wjl9FdOQeWmvJ7Ebfvms2JvGA= -----END CERTIFICATE-----Generated at Wed Aug 20 10:39:54 2025 by rpki-client