$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/708a8cbd-6d44-4d2f-b6e9-45131391be6d.roa File: 708a8cbd-6d44-4d2f-b6e9-45131391be6d.roa (raw, json) Hash identifier: 2hbplac5JSJrodsc0uA/BXIBdPRhQxbi80Z3NThCWpM= Subject key identifier: 6F:DD:4D:8C:E4:65:B5:6B:2B:42:3F:2E:72:96:AB:C0:6D:8D:E9:6C Certificate issuer: /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3 Certificate serial: 735D0808D7F0FFB495E65280FDAF3AF04FE36E58 Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/708a8cbd-6d44-4d2f-b6e9-45131391be6d.roa Signing time: Mon 31 Mar 2025 16:11:07 +0000 ROA not before: Mon 31 Mar 2025 16:11:07 +0000 ROA not after: Mon 05 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 50.112.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:5d:08:08:d7:f0:ff:b4:95:e6:52:80:fd:af:3a:f0:4f:e3:6e:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3 Validity Not Before: Mar 31 16:11:07 2025 GMT Not After : May 5 23:59:59 2025 GMT Subject: CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:51:5c:3e:41:2d:71:8b:d5:35:64:b8:20:67: 47:f3:d0:55:5d:9b:65:85:90:33:97:31:cb:af:84: 99:6a:00:a4:33:99:db:4e:ac:cd:c3:d3:e0:a9:80: 62:4b:25:d9:6e:ee:93:99:d1:11:dc:b6:42:4c:d9: df:61:b7:ae:6d:93:6e:69:c5:cb:32:f5:69:90:82: a4:58:c9:60:34:2e:fb:98:f4:47:55:fb:2c:9c:26: 83:69:e6:ce:d5:33:51:81:4c:a4:ac:c2:56:5e:32: db:9f:82:1b:cd:c8:25:33:d6:2f:a4:0a:34:d3:20: 30:7a:eb:ac:49:c2:4a:1f:e6:26:8d:f5:5b:a1:03: a7:57:02:7d:fc:47:83:21:7e:8a:a9:b7:97:7b:a1: 2f:e4:d7:fb:40:b5:0c:aa:8f:88:d9:e7:d7:94:e5: f4:47:a7:32:b1:30:eb:89:05:bb:8d:45:41:68:6d: 10:aa:ad:79:2c:7f:d3:7b:dd:3c:61:f0:fd:6c:74: ed:d3:95:55:af:67:06:a7:72:95:01:a5:2f:42:09: bc:db:68:ae:f8:d5:1b:33:af:ac:50:b1:e2:65:2b: bc:9c:d7:7a:41:ac:e8:00:a4:0c:18:ed:ab:1f:a8: 1d:2a:00:be:64:b6:b1:11:91:dc:46:c7:9e:70:20: ee:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:DD:4D:8C:E4:65:B5:6B:2B:42:3F:2E:72:96:AB:C0:6D:8D:E9:6C X509v3 Authority Key Identifier: keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/708a8cbd-6d44-4d2f-b6e9-45131391be6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.112.80.0/21 Signature Algorithm: sha256WithRSAEncryption 53:21:d5:20:26:52:90:75:dc:42:84:ce:de:48:b7:08:b1:c9: 44:ce:6d:c2:88:54:4d:3e:54:8f:45:a9:e8:0e:13:a2:b3:d2: cc:c0:6b:6d:d5:69:95:37:50:68:24:23:06:be:ff:57:74:8d: cc:ba:d6:63:e8:0a:01:57:91:0e:8d:6c:0d:3a:82:c4:81:ab: a9:8b:ec:a8:bd:76:be:9e:01:51:c4:c8:f4:13:bf:ad:5c:6b: 7b:a4:48:da:4e:8d:2f:03:e5:ee:21:d7:bd:fe:fd:d7:0e:73: 22:63:0f:3d:77:1e:68:fa:3a:0a:f0:7e:ab:1f:b2:04:5b:a6: 76:71:ec:b7:63:14:39:70:23:e5:1a:d3:47:7a:3f:2a:4b:1b: 12:22:aa:ef:e4:17:8e:f7:57:af:ee:e7:1a:60:48:e1:44:d7: a5:b7:27:08:a6:e9:9b:f7:3d:45:c2:e1:96:e6:b5:f3:62:2d: 2a:d8:64:54:0c:a9:84:f0:66:4b:bf:d4:03:a5:43:0f:1e:36: 76:95:bf:7d:2d:95:1c:0e:a9:b3:9d:34:62:2f:06:9d:8a:48: c5:02:0d:37:2a:02:46:4e:4c:43:eb:95:6c:58:00:e7:97:c7: 21:9a:2a:63:d4:df:da:6d:0b:ed:1c:6d:ed:dd:e6:5c:25:83: d0:ef:97:e0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUc10ICNfw/7SV5lKA/a868E/jblgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTE1ZDhhYTEwZDYyZGJkZDM0ODMyNjg3NmJhNTY3NTNj Yjk5YjQ2NGNjNDU1MzI0YjMwHhcNMjUwMzMxMTYxMTA3WhcNMjUwNTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A2ODNkMzZlZjY5YTUxYzg5YjFjM2U4NjQ4N2ViNWFiOTIz MzgxMDg3MzBhYzMwNWNlN2E1ZTMzYjc4MjY3ZGQ4MS0wKwYDVQQDEyRkZGZiYzk3 Yy03YmVkLTQwZGYtOTVjYS1lNjY0YjI5ZDdiMjcwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3UVw+QS1xi9U1ZLggZ0fz0FVdm2WFkDOXMcuvhJlqAKQz mdtOrM3D0+CpgGJLJdlu7pOZ0RHctkJM2d9ht65tk25pxcsy9WmQgqRYyWA0LvuY 9EdV+yycJoNp5s7VM1GBTKSswlZeMtufghvNyCUz1i+kCjTTIDB666xJwkof5iaN 9VuhA6dXAn38R4Mhfoqpt5d7oS/k1/tAtQyqj4jZ59eU5fRHpzKxMOuJBbuNRUFo bRCqrXksf9N73Txh8P1sdO3TlVWvZwancpUBpS9CCbzbaK741Rszr6xQseJlK7yc 13pBrOgApAwY7asfqB0qAL5ktrERkdxGx55wIO6jAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUb91NjORltWsrQj8ucparwG2N6WwwHwYDVR0jBBgwFoAUkS3GDddkKYK8 rn+B/jxMEnKAIh8wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83MTg4YWMyNC0w OWNjLTRmMjAtOWRiZC1jZDkwMDVkMjc5N2UvYTE1ZDhhYTEwZDYyZGJkZDM0ODMy Njg3NmJhNTY3NTNjYjk5YjQ2NGNjNDU1MzI0YjMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNjAyYTI2ZTUtNGE5ZS00ZTVlLTg5ZjAtZWY4 OTE0OTBkOWM5LzcwOGE4Y2JkLTZkNDQtNGQyZi1iNmU5LTQ1MTMxMzkxYmU2ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzYwMmEyNmU1LTRhOWUtNGU1ZS04OWYw LWVmODkxNDkwZDljOS9ZdHZkTklNbWgydWxaMVBMbWJSa3pFVlRKTE0uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMycFAwDQYJKoZIhvcNAQELBQADggEBAFMh1SAmUpB13EKEzt5ItwixyUTO bcKIVE0+VI9FqegOE6Kz0szAa23VaZU3UGgkIwa+/1d0jcy61mPoCgFXkQ6NbA06 gsSBq6mL7Ki9dr6eAVHEyPQTv61ca3ukSNpOjS8D5e4h173+/dcOcyJjDz13Hmj6 OgrwfqsfsgRbpnZx7LdjFDlwI+Ua00d6PypLGxIiqu/kF473V6/u5xpgSOFE16W3 Jwim6Zv3PUXC4ZbmtfNiLSrYZFQMqYTwZku/1AOlQw8eNnaVv30tlRwOqbOdNGIv Bp2KSMUCDTcqAkZOTEPrlWxYAOeXxyGaKmPU39ptC+0cbe3d5lwlg9Dvl+A= -----END CERTIFICATE-----Generated at Sat Apr 5 11:13:00 2025 by rpki-client