$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/b1121dfe-8b77-4852-8504-3b11c27ee5f3.roa File: b1121dfe-8b77-4852-8504-3b11c27ee5f3.roa (raw, json) Hash identifier: tn6Ga0dU+kymmMDdi3F3C7mdm/jSSc8pM3puR3+vjAQ= Subject key identifier: 2F:19:10:8B:7B:0F:1C:86:FB:63:61:2E:E5:2F:57:F1:32:48:85:B4 Certificate issuer: /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3 Certificate serial: 4E047AF19245FA2829224E686664C9D1276CAC4D Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/b1121dfe-8b77-4852-8504-3b11c27ee5f3.roa Signing time: Mon 31 Mar 2025 16:11:02 +0000 ROA not before: Mon 31 Mar 2025 16:11:02 +0000 ROA not after: Mon 05 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 50.112.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:04:7a:f1:92:45:fa:28:29:22:4e:68:66:64:c9:d1:27:6c:ac:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3 Validity Not Before: Mar 31 16:11:02 2025 GMT Not After : May 5 23:59:59 2025 GMT Subject: CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e0:23:73:ef:6e:34:a5:4c:b0:2e:8b:aa:95: 79:78:8d:4d:2d:97:41:89:8b:fb:d3:c4:8b:f0:16: 4e:fd:dd:f1:67:be:83:ed:ba:71:ce:65:d5:a9:ee: cc:1e:e9:19:34:d7:9e:73:ca:20:1b:3e:ca:26:6f: 2d:b0:fe:0a:60:3f:84:1c:90:f4:14:14:4f:ea:d8: d3:60:d3:46:30:68:a0:d7:d7:38:97:e2:bd:97:f7: 5c:e7:d1:c5:4a:7f:36:20:2a:9d:50:2e:05:74:77: dd:c3:f4:0d:bf:1b:fc:bd:74:b1:aa:c5:35:8c:8f: 7a:64:b2:3e:55:5a:93:c9:a0:5c:9c:5b:3b:e0:75: 9a:63:91:82:8b:17:e5:7a:af:e5:d6:0c:52:d8:5d: f9:bd:76:02:2c:bb:ed:7e:91:f1:0e:9a:67:9c:aa: 5f:52:40:53:69:ea:b7:67:4e:8d:cb:3d:f3:91:f0: db:84:ae:ca:dc:fe:70:7c:4b:84:df:da:23:fe:80: 2e:1c:95:c5:75:4a:4c:84:4b:64:85:dc:0a:60:a5: d4:8e:4d:58:f2:2c:60:ff:40:6f:8b:76:07:47:cb: b7:10:de:bb:bd:4f:25:13:a1:7c:84:a7:1a:bb:26: c0:0a:59:0c:84:5a:ce:ad:bc:1c:da:61:3f:44:60: 22:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:19:10:8B:7B:0F:1C:86:FB:63:61:2E:E5:2F:57:F1:32:48:85:B4 X509v3 Authority Key Identifier: keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/b1121dfe-8b77-4852-8504-3b11c27ee5f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.112.92.0/22 Signature Algorithm: sha256WithRSAEncryption 9a:9c:1c:ef:da:c8:6c:77:1b:88:03:e3:0f:ac:d4:55:4f:73: 6e:72:5e:5f:78:ab:08:7c:5f:14:c8:83:f4:4d:a1:5d:a9:a2: ff:3a:32:a4:64:59:85:6a:cf:13:5b:57:11:d7:be:eb:fb:f5: 7e:cc:fb:70:31:dc:39:4b:ef:18:24:01:42:aa:6c:5d:b6:ef: 70:96:6b:4c:95:5a:bc:55:7d:50:e7:2a:3c:24:2a:3f:1a:92: b3:9a:93:d2:6d:ad:dc:81:c3:11:06:ca:c3:f0:f9:38:39:90: 1e:68:79:21:9f:64:70:e2:eb:79:e4:80:c0:15:92:37:18:86: 40:05:52:a1:b8:d5:69:0c:00:08:25:86:85:3e:00:fb:ee:c6: c5:0b:8c:fb:ff:3a:9e:7d:4d:19:4f:89:94:f6:e9:da:31:85: de:3b:6d:63:2d:b0:c0:4d:db:75:3d:92:7d:06:62:7f:11:f2: 9b:2e:c9:7b:0c:aa:19:18:ff:b0:87:df:1d:d1:cb:c0:42:43: de:d8:f7:c6:3c:df:2f:69:4a:c3:13:50:cf:f6:5b:4b:c3:d6: 7f:6b:b4:2a:9a:c6:29:7f:17:e4:a1:75:fd:31:6d:71:14:c0: f3:12:81:eb:82:fa:e3:c7:a3:eb:c6:f0:9f:c8:29:16:5b:d1: 4b:5f:76:27 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTgR68ZJF+igpIk5oZmTJ0SdsrE0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTE1ZDhhYTEwZDYyZGJkZDM0ODMyNjg3NmJhNTY3NTNj Yjk5YjQ2NGNjNDU1MzI0YjMwHhcNMjUwMzMxMTYxMTAyWhcNMjUwNTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AxMTE0MjJhYjhhMGE0MGU5NjM0Y2E2Yzg2ZWIzNDhmNmU5 NjczZThmNzUyNTgxOTdhYWI1ZTU4MzZlNjVlNzBkMS0wKwYDVQQDEyRkZGZiYzk3 Yy03YmVkLTQwZGYtOTVjYS1lNjY0YjI5ZDdiMjcwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDF4CNz7240pUywLouqlXl4jU0tl0GJi/vTxIvwFk793fFn voPtunHOZdWp7swe6Rk0155zyiAbPsomby2w/gpgP4QckPQUFE/q2NNg00YwaKDX 1ziX4r2X91zn0cVKfzYgKp1QLgV0d93D9A2/G/y9dLGqxTWMj3pksj5VWpPJoFyc WzvgdZpjkYKLF+V6r+XWDFLYXfm9dgIsu+1+kfEOmmecql9SQFNp6rdnTo3LPfOR 8NuErsrc/nB8S4Tf2iP+gC4clcV1SkyES2SF3ApgpdSOTVjyLGD/QG+LdgdHy7cQ 3ru9TyUToXyEpxq7JsAKWQyEWs6tvBzaYT9EYCKnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQULxkQi3sPHIb7Y2Eu5S9X8TJIhbQwHwYDVR0jBBgwFoAUkS3GDddkKYK8 rn+B/jxMEnKAIh8wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83MTg4YWMyNC0w OWNjLTRmMjAtOWRiZC1jZDkwMDVkMjc5N2UvYTE1ZDhhYTEwZDYyZGJkZDM0ODMy Njg3NmJhNTY3NTNjYjk5YjQ2NGNjNDU1MzI0YjMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNjAyYTI2ZTUtNGE5ZS00ZTVlLTg5ZjAtZWY4 OTE0OTBkOWM5L2IxMTIxZGZlLThiNzctNDg1Mi04NTA0LTNiMTFjMjdlZTVmMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzYwMmEyNmU1LTRhOWUtNGU1ZS04OWYw LWVmODkxNDkwZDljOS9ZdHZkTklNbWgydWxaMVBMbWJSa3pFVlRKTE0uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIycFwwDQYJKoZIhvcNAQELBQADggEBAJqcHO/ayGx3G4gD4w+s1FVPc25y Xl94qwh8XxTIg/RNoV2pov86MqRkWYVqzxNbVxHXvuv79X7M+3Ax3DlL7xgkAUKq bF2273CWa0yVWrxVfVDnKjwkKj8akrOak9JtrdyBwxEGysPw+Tg5kB5oeSGfZHDi 63nkgMAVkjcYhkAFUqG41WkMAAglhoU+APvuxsULjPv/Op59TRlPiZT26doxhd47 bWMtsMBN23U9kn0GYn8R8psuyXsMqhkY/7CH3x3Ry8BCQ97Y98Y83y9pSsMTUM/2 W0vD1n9rtCqaxil/F+Shdf0xbXEUwPMSgeuC+uPHo+vG8J/IKRZb0Utfdic= -----END CERTIFICATE-----Generated at Sat Apr 5 11:15:33 2025 by rpki-client