$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/87a321d9-94a4-41d4-9de7-5617146603fa.roa File: 87a321d9-94a4-41d4-9de7-5617146603fa.roa (raw, json) Hash identifier: PKcgFMQLRtX9YJzvKzjVrv/gVA3dzR1AK+G7bUQs89w= Subject key identifier: C3:93:60:F4:4D:70:BB:86:30:19:C4:1F:0E:5B:65:59:0B:8E:F2:1E Certificate issuer: /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3 Certificate serial: 336059B26D519B5C9A28C81771E03490A869DE65 Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/87a321d9-94a4-41d4-9de7-5617146603fa.roa Signing time: Mon 31 Mar 2025 16:11:00 +0000 ROA not before: Mon 31 Mar 2025 16:11:00 +0000 ROA not after: Mon 05 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 50.112.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:60:59:b2:6d:51:9b:5c:9a:28:c8:17:71:e0:34:90:a8:69:de:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3 Validity Not Before: Mar 31 16:11:00 2025 GMT Not After : May 5 23:59:59 2025 GMT Subject: CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e8:f7:ce:55:9e:3e:2a:a5:25:dc:a8:d1:26: 38:2b:da:51:1e:c6:34:c8:5d:7e:39:ee:f8:de:5b: 56:35:43:14:bb:f9:a7:94:d6:f7:ba:e6:cc:1a:2a: 4b:33:72:f6:52:65:40:b0:07:52:8b:a0:e1:86:60: f4:e4:a7:7e:d0:2f:19:65:e1:45:b5:7d:f5:23:d3: b5:b2:7e:69:08:7e:40:21:6f:b8:5e:12:c4:8c:74: f3:90:f1:08:7d:3b:29:7f:69:f2:f8:bf:38:bd:a3: fe:14:21:7e:a9:87:db:00:ea:6e:52:40:5b:d2:c1: fc:84:08:f4:e8:91:c7:45:b4:4e:cd:b7:af:80:3e: 9d:37:32:ad:0b:c0:91:01:02:81:d2:ed:2d:87:3f: 06:6f:a8:99:1c:71:ed:ff:ab:86:a2:80:71:17:e5: 4a:2e:fe:09:19:13:3c:e2:29:80:89:6a:22:22:7d: 6d:7d:4b:ec:13:0a:3a:b6:22:08:48:36:06:2e:93: a8:0d:2d:a0:60:87:11:16:eb:c8:84:10:89:d8:c1: c5:2f:d0:17:89:b7:26:d4:0a:3d:b5:de:47:c6:f8: b0:0f:22:40:ff:82:53:f7:25:52:b3:f7:82:2c:51: be:42:83:46:cb:8f:28:fe:ae:ba:ef:66:f1:6b:93: 59:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:93:60:F4:4D:70:BB:86:30:19:C4:1F:0E:5B:65:59:0B:8E:F2:1E X509v3 Authority Key Identifier: keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/87a321d9-94a4-41d4-9de7-5617146603fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.112.0.0/17 Signature Algorithm: sha256WithRSAEncryption 8c:3e:25:02:d3:f3:5c:93:73:e3:a8:0f:37:dc:8b:a2:f3:0d: f5:16:fe:f0:51:3d:85:da:4d:fc:68:89:fd:a7:b6:29:9d:1b: d0:58:29:2e:36:3b:69:21:14:1d:7d:d5:57:f4:be:1d:a0:95: f0:2e:77:98:fb:20:b8:79:8a:e5:19:71:da:fe:32:99:72:f8: 0b:33:78:5b:ca:e3:22:bd:90:a6:2d:65:bf:3d:58:a7:9a:17: df:db:0a:ff:03:9d:8c:43:14:c1:86:f5:fd:c3:7e:d9:8c:e7: fb:0f:f2:41:ea:34:6c:bb:9c:40:17:a0:3b:ec:0d:9b:45:bc: 22:d4:16:7d:86:80:2a:27:2c:2f:2b:bf:c8:88:ae:1a:da:6d: e5:b1:e3:12:fa:d3:1c:fc:c0:8e:fa:47:53:69:a9:e8:71:da: 45:4e:7a:bb:cd:ce:4d:c0:7f:e0:01:f9:c2:15:8d:5c:d6:fa: 36:18:c6:43:87:a5:6b:2c:d9:7a:b7:4f:f5:1a:12:62:a3:fd: ea:3a:1d:3d:a7:ed:46:52:60:c4:bb:1c:73:1b:1a:f5:4e:07: 0d:b5:d2:30:62:52:ea:7c:a6:ac:63:39:25:74:0e:e8:05:a4: 0a:27:f5:3f:35:3d:72:3d:1a:51:d5:e5:5c:9c:a3:93:1e:ac: e0:08:05:a3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUM2BZsm1Rm1yaKMgXceA0kKhp3mUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTE1ZDhhYTEwZDYyZGJkZDM0ODMyNjg3NmJhNTY3NTNj Yjk5YjQ2NGNjNDU1MzI0YjMwHhcNMjUwMzMxMTYxMTAwWhcNMjUwNTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BjYWM2YzMzZGJjZGQ2MDViZjYwMTI1MGVlMGYzMmIwNGQ0 ZDE5ZDQ4MTk0ZjJkNzkzYWUwMWRhY2QwMGJmNzUwMS0wKwYDVQQDEyRkZGZiYzk3 Yy03YmVkLTQwZGYtOTVjYS1lNjY0YjI5ZDdiMjcwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCt6PfOVZ4+KqUl3KjRJjgr2lEexjTIXX457vjeW1Y1QxS7 +aeU1ve65swaKkszcvZSZUCwB1KLoOGGYPTkp37QLxll4UW1ffUj07WyfmkIfkAh b7heEsSMdPOQ8Qh9Oyl/afL4vzi9o/4UIX6ph9sA6m5SQFvSwfyECPTokcdFtE7N t6+APp03Mq0LwJEBAoHS7S2HPwZvqJkcce3/q4aigHEX5Uou/gkZEzziKYCJaiIi fW19S+wTCjq2IghINgYuk6gNLaBghxEW68iEEInYwcUv0BeJtybUCj213kfG+LAP IkD/glP3JVKz94IsUb5Cg0bLjyj+rrrvZvFrk1n9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUw5Ng9E1wu4YwGcQfDltlWQuO8h4wHwYDVR0jBBgwFoAUkS3GDddkKYK8 rn+B/jxMEnKAIh8wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83MTg4YWMyNC0w OWNjLTRmMjAtOWRiZC1jZDkwMDVkMjc5N2UvYTE1ZDhhYTEwZDYyZGJkZDM0ODMy Njg3NmJhNTY3NTNjYjk5YjQ2NGNjNDU1MzI0YjMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNjAyYTI2ZTUtNGE5ZS00ZTVlLTg5ZjAtZWY4 OTE0OTBkOWM5Lzg3YTMyMWQ5LTk0YTQtNDFkNC05ZGU3LTU2MTcxNDY2MDNmYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzYwMmEyNmU1LTRhOWUtNGU1ZS04OWYw LWVmODkxNDkwZDljOS9ZdHZkTklNbWgydWxaMVBMbWJSa3pFVlRKTE0uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcycAAwDQYJKoZIhvcNAQELBQADggEBAIw+JQLT81yTc+OoDzfci6LzDfUW /vBRPYXaTfxoif2ntimdG9BYKS42O2khFB191Vf0vh2glfAud5j7ILh5iuUZcdr+ Mply+AszeFvK4yK9kKYtZb89WKeaF9/bCv8DnYxDFMGG9f3DftmM5/sP8kHqNGy7 nEAXoDvsDZtFvCLUFn2GgConLC8rv8iIrhrabeWx4xL60xz8wI76R1Npqehx2kVO ervNzk3Af+AB+cIVjVzW+jYYxkOHpWss2Xq3T/UaEmKj/eo6HT2n7UZSYMS7HHMb GvVOBw210jBiUup8pqxjOSV0DugFpAon9T81PXI9GlHV5Vyco5MerOAIBaM= -----END CERTIFICATE-----Generated at Sat Apr 5 11:20:36 2025 by rpki-client