$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/7c53740e-7300-4028-b024-414ad3814267.roa File: 7c53740e-7300-4028-b024-414ad3814267.roa (raw, json) Hash identifier: tGwemcGqTtAzceZFdCEuvUxy3Mpwp7JqYn2Q9AJjIkM= Subject key identifier: 57:E6:24:71:0C:C2:99:35:C7:D2:F3:78:19:71:7E:5B:8C:9C:22:14 Certificate issuer: /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3 Certificate serial: 7AD79B905FBF2F43493BFBD7983BE52B044685D6 Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/7c53740e-7300-4028-b024-414ad3814267.roa Signing time: Mon 16 Jun 2025 16:00:09 +0000 ROA not before: Mon 16 Jun 2025 16:00:09 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 50.112.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:d7:9b:90:5f:bf:2f:43:49:3b:fb:d7:98:3b:e5:2b:04:46:85:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3 Validity Not Before: Jun 16 16:00:09 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=787261f5cc1496d24c949e2eb42f0922a07985f72191124899b65fc62633a0a1, CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:de:32:ff:f5:62:0c:af:5a:bb:d4:28:4c:a0: 2c:da:2f:a9:41:55:8b:b3:87:e8:c4:ea:e4:28:18: fb:e5:4e:2b:b2:5c:f9:8f:66:2a:b7:e2:df:5d:3c: b0:f7:e0:be:96:58:2d:36:05:dc:70:10:09:5e:ad: 38:0a:65:59:3d:6f:85:3e:ee:52:77:f7:1a:b8:3b: 01:db:bb:ca:a3:bf:db:7a:36:c2:3a:c3:23:53:36: 5d:82:56:4c:eb:b9:45:78:0c:33:47:31:21:8a:60: 27:50:db:fb:d0:13:ff:8c:47:2b:27:d8:fa:59:1f: a3:32:d6:49:67:f0:53:86:4a:69:b4:b8:4d:e6:a6: 38:58:bb:16:87:ae:cd:4a:11:de:ff:1d:28:14:6a: ff:00:b3:58:74:40:67:fd:3c:b3:44:d8:72:bb:3e: 2c:c5:9c:58:5a:ac:d6:60:7c:d5:7f:13:be:03:11: 51:c9:10:a1:d2:fe:ee:b1:ae:4a:02:87:23:94:28: c9:d4:17:48:b8:6a:b0:2d:87:0a:88:95:ce:89:58: e7:a5:71:b9:ad:92:74:d9:77:a3:5e:5f:47:b0:5a: f1:09:e0:90:32:17:3a:7c:68:7a:5b:8f:25:ee:30: 17:49:80:01:c5:20:e1:e5:25:4b:49:d6:94:d8:45: ce:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:E6:24:71:0C:C2:99:35:C7:D2:F3:78:19:71:7E:5B:8C:9C:22:14 X509v3 Authority Key Identifier: keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/7c53740e-7300-4028-b024-414ad3814267.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.112.4.0/22 Signature Algorithm: sha256WithRSAEncryption 16:9b:8a:45:3f:33:8b:c8:68:ca:12:64:18:1a:d2:fb:09:83: 15:f0:aa:ea:b8:84:ba:88:89:16:5e:47:97:90:1f:87:94:4b: 25:ec:e6:c6:44:08:43:3d:bd:29:e6:ee:47:c2:8b:bc:d5:5b: df:8d:2d:d5:65:55:7c:45:fc:80:a3:e4:f0:25:3e:e1:6c:01: b0:19:12:e3:bf:bf:bb:38:8f:e4:d2:18:a5:e5:2c:fb:44:b2: d9:de:2c:66:05:3b:48:3c:41:fd:17:5c:b3:2c:81:ee:4b:79: 14:92:de:96:71:f4:35:42:a8:3b:84:5f:e7:7f:4f:59:04:d4: c2:2b:35:a1:08:13:d0:e9:52:05:a2:f8:f8:34:65:8a:22:91: ef:e4:49:c1:fe:a5:63:5c:13:69:37:5a:e7:fd:15:1b:7e:f0: ff:99:c6:cb:cb:db:09:96:7d:dd:2e:5c:f3:f4:d3:cf:26:37: a9:d3:0a:11:52:b0:4c:0a:a8:77:7a:9e:8e:9b:28:45:25:3c: dc:62:21:37:fd:a4:87:d7:14:3d:aa:b2:0c:f9:69:87:10:9c: ff:f5:4b:f7:47:40:cc:e2:c8:d1:14:ff:83:a8:a0:7a:a1:e6: 88:dc:53:8d:fa:64:cf:41:2c:2d:7a:2d:18:da:df:d8:d2:73: 13:2f:25:ae -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUetebkF+/L0NJO/vXmDvlKwRGhdYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTE1ZDhhYTEwZDYyZGJkZDM0ODMyNjg3NmJhNTY3NTNj Yjk5YjQ2NGNjNDU1MzI0YjMwHhcNMjUwNjE2MTYwMDA5WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A3ODcyNjFmNWNjMTQ5NmQyNGM5NDllMmViNDJmMDkyMmEw Nzk4NWY3MjE5MTEyNDg5OWI2NWZjNjI2MzNhMGExMS0wKwYDVQQDEyRkZGZiYzk3 Yy03YmVkLTQwZGYtOTVjYS1lNjY0YjI5ZDdiMjcwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCr3jL/9WIMr1q71ChMoCzaL6lBVYuzh+jE6uQoGPvlTiuy XPmPZiq34t9dPLD34L6WWC02BdxwEAlerTgKZVk9b4U+7lJ39xq4OwHbu8qjv9t6 NsI6wyNTNl2CVkzruUV4DDNHMSGKYCdQ2/vQE/+MRysn2PpZH6My1kln8FOGSmm0 uE3mpjhYuxaHrs1KEd7/HSgUav8As1h0QGf9PLNE2HK7PizFnFharNZgfNV/E74D EVHJEKHS/u6xrkoChyOUKMnUF0i4arAthwqIlc6JWOelcbmtknTZd6NeX0ewWvEJ 4JAyFzp8aHpbjyXuMBdJgAHFIOHlJUtJ1pTYRc7NAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUV+YkcQzCmTXH0vN4GXF+W4ycIhQwHwYDVR0jBBgwFoAUkS3GDddkKYK8 rn+B/jxMEnKAIh8wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83MTg4YWMyNC0w OWNjLTRmMjAtOWRiZC1jZDkwMDVkMjc5N2UvYTE1ZDhhYTEwZDYyZGJkZDM0ODMy Njg3NmJhNTY3NTNjYjk5YjQ2NGNjNDU1MzI0YjMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNjAyYTI2ZTUtNGE5ZS00ZTVlLTg5ZjAtZWY4 OTE0OTBkOWM5LzdjNTM3NDBlLTczMDAtNDAyOC1iMDI0LTQxNGFkMzgxNDI2Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzYwMmEyNmU1LTRhOWUtNGU1ZS04OWYw LWVmODkxNDkwZDljOS9ZdHZkTklNbWgydWxaMVBMbWJSa3pFVlRKTE0uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIycAQwDQYJKoZIhvcNAQELBQADggEBABabikU/M4vIaMoSZBga0vsJgxXw quq4hLqIiRZeR5eQH4eUSyXs5sZECEM9vSnm7kfCi7zVW9+NLdVlVXxF/ICj5PAl PuFsAbAZEuO/v7s4j+TSGKXlLPtEstneLGYFO0g8Qf0XXLMsge5LeRSS3pZx9DVC qDuEX+d/T1kE1MIrNaEIE9DpUgWi+Pg0ZYoike/kScH+pWNcE2k3Wuf9FRt+8P+Z xsvL2wmWfd0uXPP0088mN6nTChFSsEwKqHd6no6bKEUlPNxiITf9pIfXFD2qsgz5 aYcQnP/1S/dHQMziyNEU/4OooHqh5ojcU436ZM9BLC16LRja39jScxMvJa4= -----END CERTIFICATE-----Generated at Wed Jul 2 07:34:32 2025 by rpki-client