$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/2788fd0d-0141-46b1-b160-e9916a5caddd.roa File: 2788fd0d-0141-46b1-b160-e9916a5caddd.roa (raw, json) Hash identifier: CbXtXqQUzMVGGAVfX+Kc9Uo6iytRgy86rAQmuLLbzq0= Subject key identifier: 80:18:EC:46:7A:F8:68:37:AB:B0:C9:D3:2A:E3:82:06:32:37:B0:B6 Certificate issuer: /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3 Certificate serial: 03C9CF9C434DA934EF69ED229F1A75BE5EF7890E Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/2788fd0d-0141-46b1-b160-e9916a5caddd.roa Signing time: Mon 16 Jun 2025 16:00:04 +0000 ROA not before: Mon 16 Jun 2025 16:00:04 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 50.112.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:c9:cf:9c:43:4d:a9:34:ef:69:ed:22:9f:1a:75:be:5e:f7:89:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3 Validity Not Before: Jun 16 16:00:04 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=36c581663544c821d905524d9f9a0a2a8002175455c6e51d331e561a2b1b716a, CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:09:88:77:94:23:9d:ea:39:53:a7:b7:db:19: 55:f5:ad:9f:54:33:96:b8:71:8e:65:32:84:f0:27: 31:64:1b:eb:f7:45:02:7d:9b:45:7b:fd:d9:39:3a: c6:97:b5:7e:3a:90:be:be:5c:ff:e9:59:ae:3d:47: e6:73:da:0e:81:9b:61:64:69:2e:72:42:28:8a:12: 2f:07:8e:8f:48:a0:da:97:8a:de:b8:e7:15:f6:8f: 99:57:38:eb:57:b1:fb:06:5b:5e:99:a3:93:9c:b8: 67:76:4e:f8:75:ca:73:e6:bd:4c:4c:9a:32:ca:35: d0:f1:3e:af:38:66:6e:82:ae:42:ce:96:23:11:f3: f6:f9:3e:a6:d6:9b:65:36:84:3d:65:10:ec:e0:77: bc:29:a7:e7:cb:ad:7d:86:99:44:76:86:58:12:24: cc:bc:0d:e7:15:05:6f:df:00:48:14:d3:24:6e:7d: 50:4f:65:ca:bd:2c:7b:64:46:7a:3d:02:31:4b:7d: 62:07:3a:d6:74:3a:09:f6:d1:1f:d2:d3:4b:17:fe: 6f:b5:b2:48:97:b2:e1:d2:51:b5:9f:f3:59:45:3b: c2:58:5e:7e:14:8e:a1:18:be:22:09:4f:3d:0c:85: 20:50:5b:61:81:07:19:33:fc:43:a4:23:6c:c8:72: 68:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:18:EC:46:7A:F8:68:37:AB:B0:C9:D3:2A:E3:82:06:32:37:B0:B6 X509v3 Authority Key Identifier: keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/2788fd0d-0141-46b1-b160-e9916a5caddd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.112.0.0/24 Signature Algorithm: sha256WithRSAEncryption 64:ca:c4:1a:75:89:79:02:75:07:be:57:35:df:d3:4e:83:ff: e0:b7:ba:05:f5:84:15:f4:6f:93:70:43:fd:b2:20:bb:ef:12: a9:a7:f1:0e:fe:f7:3f:07:90:04:5e:a9:27:81:e2:11:07:1e: 4d:0d:45:36:b1:56:fb:0c:87:2e:8a:54:33:71:34:61:59:44: e3:11:79:d8:d8:5d:60:68:fe:ed:dd:7b:10:e5:cb:61:f4:70: 50:60:1a:01:b9:2c:f2:3c:08:ac:39:d1:c1:fa:10:c7:4c:24: b9:e2:82:ae:d7:ad:b5:3c:c9:61:5c:3b:a0:f9:af:04:b4:08: d6:01:38:a8:dc:a6:a7:43:f6:e2:a0:d1:d6:25:83:4f:19:bc: 8f:ca:69:8f:06:a8:76:6a:ee:b3:93:ac:56:b7:77:23:b3:bc: 9e:1f:4a:92:5c:f6:3d:b3:5b:36:43:2c:16:40:1f:1a:0e:00: 29:2f:ec:9d:9c:f2:54:82:a2:f5:d2:b5:41:6c:81:b4:1c:3a: ae:c5:c4:78:e0:c6:cc:99:9d:d9:02:9a:7a:b6:1d:96:0b:a7: 81:58:e0:14:41:dc:9f:fc:1f:98:e4:97:e7:91:fd:22:74:40: 4d:cb:04:c4:d2:a3:18:41:d4:a2:67:c0:f8:82:ea:38:c8:aa: c5:28:25:d7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUA8nPnENNqTTvae0inxp1vl73iQ4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTE1ZDhhYTEwZDYyZGJkZDM0ODMyNjg3NmJhNTY3NTNj Yjk5YjQ2NGNjNDU1MzI0YjMwHhcNMjUwNjE2MTYwMDA0WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AzNmM1ODE2NjM1NDRjODIxZDkwNTUyNGQ5ZjlhMGEyYTgw MDIxNzU0NTVjNmU1MWQzMzFlNTYxYTJiMWI3MTZhMS0wKwYDVQQDEyRkZGZiYzk3 Yy03YmVkLTQwZGYtOTVjYS1lNjY0YjI5ZDdiMjcwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDfCYh3lCOd6jlTp7fbGVX1rZ9UM5a4cY5lMoTwJzFkG+v3 RQJ9m0V7/dk5OsaXtX46kL6+XP/pWa49R+Zz2g6Bm2FkaS5yQiiKEi8Hjo9IoNqX it645xX2j5lXOOtXsfsGW16Zo5OcuGd2Tvh1ynPmvUxMmjLKNdDxPq84Zm6CrkLO liMR8/b5PqbWm2U2hD1lEOzgd7wpp+fLrX2GmUR2hlgSJMy8DecVBW/fAEgU0yRu fVBPZcq9LHtkRno9AjFLfWIHOtZ0Ogn20R/S00sX/m+1skiXsuHSUbWf81lFO8JY Xn4UjqEYviIJTz0MhSBQW2GBBxkz/EOkI2zIcmh3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUgBjsRnr4aDersMnTKuOCBjI3sLYwHwYDVR0jBBgwFoAUkS3GDddkKYK8 rn+B/jxMEnKAIh8wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83MTg4YWMyNC0w OWNjLTRmMjAtOWRiZC1jZDkwMDVkMjc5N2UvYTE1ZDhhYTEwZDYyZGJkZDM0ODMy Njg3NmJhNTY3NTNjYjk5YjQ2NGNjNDU1MzI0YjMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNjAyYTI2ZTUtNGE5ZS00ZTVlLTg5ZjAtZWY4 OTE0OTBkOWM5LzI3ODhmZDBkLTAxNDEtNDZiMS1iMTYwLWU5OTE2YTVjYWRkZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzYwMmEyNmU1LTRhOWUtNGU1ZS04OWYw LWVmODkxNDkwZDljOS9ZdHZkTklNbWgydWxaMVBMbWJSa3pFVlRKTE0uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAycAAwDQYJKoZIhvcNAQELBQADggEBAGTKxBp1iXkCdQe+VzXf006D/+C3 ugX1hBX0b5NwQ/2yILvvEqmn8Q7+9z8HkAReqSeB4hEHHk0NRTaxVvsMhy6KVDNx NGFZROMRedjYXWBo/u3dexDly2H0cFBgGgG5LPI8CKw50cH6EMdMJLnigq7XrbU8 yWFcO6D5rwS0CNYBOKjcpqdD9uKg0dYlg08ZvI/KaY8GqHZq7rOTrFa3dyOzvJ4f SpJc9j2zWzZDLBZAHxoOACkv7J2c8lSCovXStUFsgbQcOq7FxHjgxsyZndkCmnq2 HZYLp4FY4BRB3J/8H5jkl+eR/SJ0QE3LBMTSoxhB1KJnwPiC6jjIqsUoJdc= -----END CERTIFICATE-----Generated at Sun Jun 29 09:26:48 2025 by rpki-client